endmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:18 executing program 0: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x7, 0x7, 0x80, {{0x8, 0x4, 0x1, 0x7, 0x20, 0x64, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @empty, {[@timestamp_addr={0x44, 0xc, 0x7f, 0x1, 0x2, [{@loopback, 0x80000000}]}]}}}}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x7, 0x7, 0x80, {{0x8, 0x4, 0x1, 0x7, 0x20, 0x64, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @empty, {[@timestamp_addr={0x44, 0xc, 0x7f, 0x1, 0x2, [{@loopback, 0x80000000}]}]}}}}}) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) 06:10:18 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x90000, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:18 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 14) 06:10:18 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x0, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:18 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:18 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x90000, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:18 executing program 0: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x7, 0x7, 0x80, {{0x8, 0x4, 0x1, 0x7, 0x20, 0x64, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @empty, {[@timestamp_addr={0x44, 0xc, 0x7f, 0x1, 0x2, [{@loopback, 0x80000000}]}]}}}}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x7, 0x7, 0x80, {{0x8, 0x4, 0x1, 0x7, 0x20, 0x64, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @empty, {[@timestamp_addr={0x44, 0xc, 0x7f, 0x1, 0x2, [{@loopback, 0x80000000}]}]}}}}}) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) 06:10:18 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2350.644625][T18077] FAULT_INJECTION: forcing a failure. [ 2350.644625][T18077] name failslab, interval 1, probability 0, space 0, times 0 [ 2350.663364][T18077] CPU: 0 PID: 18077 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2350.673605][T18077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2350.683651][T18077] Call Trace: [ 2350.686939][T18077] dump_stack+0x18e/0x1d5 06:10:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x380b423a) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) [ 2350.691262][T18077] should_fail+0x604/0x770 [ 2350.695658][T18077] ? mempool_init_node+0x1f6/0x500 [ 2350.700754][T18077] should_failslab+0x5/0x20 [ 2350.705256][T18077] kmem_cache_alloc+0x24/0x210 [ 2350.710040][T18077] ? mempool_free+0x380/0x380 [ 2350.714694][T18077] mempool_init_node+0x1f6/0x500 [ 2350.719606][T18077] ? mempool_free+0x380/0x380 [ 2350.724259][T18077] ? mempool_alloc_slab+0x20/0x20 [ 2350.729272][T18077] mempool_init+0x35/0x50 [ 2350.733603][T18077] bioset_init+0x41a/0x620 [ 2350.738018][T18077] blk_alloc_queue_node+0xc4/0x580 [ 2350.743129][T18077] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2350.748499][T18077] blk_mq_init_queue+0x33/0xa0 [ 2350.753236][T18077] loop_add+0x256/0x710 [ 2350.757376][T18077] ? radix_tree_lookup+0x17a/0x1d0 [ 2350.762518][T18077] loop_control_ioctl+0x465/0x600 [ 2350.767668][T18077] ? loop_remove+0xa0/0xa0 [ 2350.772150][T18077] do_vfs_ioctl+0x6d1/0x15b0 [ 2350.776728][T18077] __x64_sys_ioctl+0xd4/0x110 [ 2350.781392][T18077] do_syscall_64+0xcb/0x1c0 [ 2350.785875][T18077] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2350.791832][T18077] RIP: 0033:0x7efdb617c209 [ 2350.796217][T18077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2350.815799][T18077] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2350.824335][T18077] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2350.832380][T18077] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 06:10:18 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) pselect6(0x40, &(0x7f00000001c0)={0x7fffffff, 0x0, 0x9, 0x4, 0x5, 0x8000}, &(0x7f0000000200)={0x5, 0xea, 0x6, 0x5, 0x1, 0x80, 0x8, 0x6}, &(0x7f0000000240)={0x2, 0x8, 0x95, 0x6, 0x7fffffff, 0x600, 0x1000, 0x642d}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x9]}, 0x8}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x12, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) 06:10:18 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:18 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:18 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 15) 06:10:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x380b423a) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x380b423a) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) 06:10:18 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x90000, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2350.840370][T18077] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2350.848392][T18077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2350.856338][T18077] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:18 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:18 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2350.900523][T18121] FAULT_INJECTION: forcing a failure. [ 2350.900523][T18121] name failslab, interval 1, probability 0, space 0, times 0 [ 2350.914910][T18121] CPU: 0 PID: 18121 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2350.925233][T18121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2350.935273][T18121] Call Trace: [ 2350.938570][T18121] dump_stack+0x18e/0x1d5 [ 2350.942881][T18121] should_fail+0x604/0x770 [ 2350.947277][T18121] ? mempool_init_node+0x131/0x500 [ 2350.952390][T18121] should_failslab+0x5/0x20 [ 2350.956963][T18121] __kmalloc+0x51/0x2b0 [ 2350.961102][T18121] ? kmem_cache_alloc+0xd0/0x210 [ 2350.966034][T18121] mempool_init_node+0x131/0x500 [ 2350.970952][T18121] ? mempool_free+0x380/0x380 [ 2350.975599][T18121] ? mempool_alloc_slab+0x20/0x20 [ 2350.980596][T18121] mempool_init+0x35/0x50 [ 2350.984898][T18121] bioset_init+0x4ec/0x620 [ 2350.989287][T18121] blk_alloc_queue_node+0xc4/0x580 [ 2350.994519][T18121] ? blk_mq_alloc_tag_set+0x68b/0x890 06:10:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x380b423a) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x380b423a) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) [ 2350.999969][T18121] blk_mq_init_queue+0x33/0xa0 [ 2351.004719][T18121] loop_add+0x256/0x710 [ 2351.008949][T18121] ? radix_tree_lookup+0x17a/0x1d0 [ 2351.014048][T18121] loop_control_ioctl+0x465/0x600 [ 2351.019054][T18121] ? loop_remove+0xa0/0xa0 [ 2351.023445][T18121] do_vfs_ioctl+0x6d1/0x15b0 [ 2351.028025][T18121] __x64_sys_ioctl+0xd4/0x110 [ 2351.032697][T18121] do_syscall_64+0xcb/0x1c0 [ 2351.037190][T18121] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2351.043165][T18121] RIP: 0033:0x7efdb617c209 [ 2351.047561][T18121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2351.067142][T18121] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2351.075790][T18121] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2351.084000][T18121] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2351.093043][T18121] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:18 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:18 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x22, 0x1, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xfd, 0x0, 0x8, 0x10, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x1, 0x1c1, 0x2}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 06:10:18 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 16) [ 2351.101089][T18121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2351.109069][T18121] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2351.154819][T18154] FAULT_INJECTION: forcing a failure. [ 2351.154819][T18154] name failslab, interval 1, probability 0, space 0, times 0 [ 2351.167502][T18154] CPU: 0 PID: 18154 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2351.177741][T18154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2351.187774][T18154] Call Trace: [ 2351.191056][T18154] dump_stack+0x18e/0x1d5 [ 2351.195362][T18154] should_fail+0x604/0x770 [ 2351.199756][T18154] ? mempool_init_node+0x1f6/0x500 [ 2351.204834][T18154] should_failslab+0x5/0x20 [ 2351.209307][T18154] kmem_cache_alloc+0x24/0x210 [ 2351.214037][T18154] ? mempool_free+0x380/0x380 [ 2351.218684][T18154] mempool_init_node+0x1f6/0x500 [ 2351.223677][T18154] ? mempool_free+0x380/0x380 [ 2351.228378][T18154] ? mempool_alloc_slab+0x20/0x20 [ 2351.233370][T18154] mempool_init+0x35/0x50 [ 2351.237684][T18154] bioset_init+0x4ec/0x620 [ 2351.242073][T18154] blk_alloc_queue_node+0xc4/0x580 [ 2351.247152][T18154] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2351.252491][T18154] blk_mq_init_queue+0x33/0xa0 [ 2351.257224][T18154] loop_add+0x256/0x710 [ 2351.261348][T18154] ? radix_tree_lookup+0x17a/0x1d0 [ 2351.266428][T18154] loop_control_ioctl+0x465/0x600 [ 2351.271518][T18154] ? loop_remove+0xa0/0xa0 [ 2351.275996][T18154] do_vfs_ioctl+0x6d1/0x15b0 [ 2351.280559][T18154] __x64_sys_ioctl+0xd4/0x110 [ 2351.285205][T18154] do_syscall_64+0xcb/0x1c0 [ 2351.289698][T18154] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2351.295707][T18154] RIP: 0033:0x7efdb617c209 [ 2351.300117][T18154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2351.319700][T18154] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2351.328083][T18154] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2351.336633][T18154] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2351.344583][T18154] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2351.352526][T18154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2351.360820][T18154] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:19 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x22, 0x1, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xfd, 0x0, 0x8, 0x10, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x1, 0x1c1, 0x2}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair(0x22, 0x1, 0x1, &(0x7f0000000040)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xfd, 0x0, 0x8, 0x10, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x1, 0x1c1, 0x2}}) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) 06:10:19 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:19 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:19 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3e4b5c390d8a25ec3acfa80fccc0614a7c4789ae63ca8ac6fa39c500f24396b7252dca53b2f24d5f78899e5363c081bb8234ed6f18e9dc72880f17b869cda1a0de", @ANYRES16=0x0, @ANYBLOB="0000000000000000000012000000"], 0x14}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0xc080}, 0x8800) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socketpair(0x25, 0x80000, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x10, 0x80, 0x9fc, 0x7, {{0x3d, 0x4, 0x3, 0x4, 0xf4, 0x67, 0x0, 0x4, 0x4, 0x0, @remote, @local, {[@rr={0x7, 0x1f, 0x8b, [@broadcast, @private=0xa010100, @local, @multicast2, @empty, @rand_addr=0x64010102, @remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x30, 0x1, [{0x5, 0x8, "0044ad2801fe"}, {0x2, 0x10, "5c80af35caa07f30ae6fe3121e8c"}, {0x0, 0xc, "0e41f13b5b710077fcc4"}, {0x6, 0x6, "94606657"}]}, @timestamp_addr={0x44, 0x44, 0x61, 0x1, 0xf, [{@multicast2, 0x1}, {@remote, 0x101}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@multicast1, 0x5}, {@empty, 0x4}, {@local, 0x4d}, {@private=0xa010101, 0x400}]}, @ssrr={0x89, 0x13, 0xe0, [@rand_addr=0x64010100, @remote, @local, @loopback]}, @timestamp={0x44, 0x1c, 0x7a, 0x0, 0x3, [0x6, 0x6, 0x4, 0x2, 0xfffffe01, 0x98]}, @lsrr={0x83, 0x17, 0x11, [@multicast2, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r7}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r6, 0x4, 0x1, 0x0, 0xffff, 0xb, @local, @remote, 0x7800, 0x80, 0x46ac, 0xf2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000240), 0x41000, 0x9, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xb, 0x0, 0x100000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r4, 0x2f, 0x3, 0x5, 0xb2c, 0x10, @mcast1, @local, 0x700, 0x7, 0x97, 0xc75a}}) 06:10:19 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 17) 06:10:19 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r1}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xb, 0x1, 0x7) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000069bd7400fbdbdf25010000000400a9002500030000000000080008000a01010014000900fe800000000000000000001e6000002714000900000000000000000000000000000000013e0002e29d0e000000000000ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r1, 0x29, 0x6, 0x0, 0x4, 0x46, @local, @remote, 0x8, 0x40, 0x3ce9, 0x2}}) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="7905f8c2be746fe8cbfc0d833c8c239d3db868544e8c3036c8d24f3ef1f072d00000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) getpid() ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='afs_make_vl_call\x00', r3}, 0x10) 06:10:19 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x22, 0x1, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xfd, 0x0, 0x8, 0x10, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x1, 0x1c1, 0x2}}) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 06:10:19 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) [ 2351.731728][T18162] FAULT_INJECTION: forcing a failure. [ 2351.731728][T18162] name failslab, interval 1, probability 0, space 0, times 0 [ 2351.744429][T18162] CPU: 1 PID: 18162 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2351.754658][T18162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2351.764699][T18162] Call Trace: [ 2351.767968][T18162] dump_stack+0x18e/0x1d5 [ 2351.772274][T18162] should_fail+0x604/0x770 [ 2351.776666][T18162] ? mempool_init_node+0x1f6/0x500 [ 2351.781752][T18162] should_failslab+0x5/0x20 [ 2351.786240][T18162] kmem_cache_alloc+0x24/0x210 [ 2351.790988][T18162] ? mempool_free+0x380/0x380 [ 2351.795645][T18162] mempool_init_node+0x1f6/0x500 [ 2351.800563][T18162] ? mempool_free+0x380/0x380 [ 2351.805213][T18162] ? mempool_alloc_slab+0x20/0x20 [ 2351.810207][T18162] mempool_init+0x35/0x50 [ 2351.814515][T18162] bioset_init+0x4ec/0x620 [ 2351.818906][T18162] blk_alloc_queue_node+0xc4/0x580 [ 2351.823994][T18162] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2351.829367][T18162] blk_mq_init_queue+0x33/0xa0 [ 2351.834107][T18162] loop_add+0x256/0x710 [ 2351.838368][T18162] ? radix_tree_lookup+0x17a/0x1d0 [ 2351.843473][T18162] loop_control_ioctl+0x465/0x600 [ 2351.848569][T18162] ? loop_remove+0xa0/0xa0 [ 2351.852964][T18162] do_vfs_ioctl+0x6d1/0x15b0 [ 2351.857530][T18162] __x64_sys_ioctl+0xd4/0x110 [ 2351.862186][T18162] do_syscall_64+0xcb/0x1c0 [ 2351.866665][T18162] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2351.872534][T18162] RIP: 0033:0x7efdb617c209 [ 2351.876921][T18162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2351.896504][T18162] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2351.904893][T18162] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2351.912856][T18162] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2351.920806][T18162] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:19 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x0, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:19 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) pselect6(0x40, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) (async) r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r1}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket(0xb, 0x1, 0x7) (async) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000069bd7400fbdbdf25010000000400a9002500030000000000080008000a01010014000900fe800000000000000000001e6000002714000900000000000000000000000000000000013e0002e29d0e000000000000ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r1, 0x29, 0x6, 0x0, 0x4, 0x46, @local, @remote, 0x8, 0x40, 0x3ce9, 0x2}}) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="7905f8c2be746fe8cbfc0d833c8c239d3db868544e8c3036c8d24f3ef1f072d00000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) getpid() (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='afs_make_vl_call\x00', r3}, 0x10) 06:10:19 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) (async) 06:10:19 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 18) 06:10:19 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:19 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x0, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:19 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3e4b5c390d8a25ec3acfa80fccc0614a7c4789ae63ca8ac6fa39c500f24396b7252dca53b2f24d5f78899e5363c081bb8234ed6f18e9dc72880f17b869cda1a0de", @ANYRES16=0x0, @ANYBLOB="0000000000000000000012000000"], 0x14}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0xc080}, 0x8800) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socketpair(0x25, 0x80000, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x10, 0x80, 0x9fc, 0x7, {{0x3d, 0x4, 0x3, 0x4, 0xf4, 0x67, 0x0, 0x4, 0x4, 0x0, @remote, @local, {[@rr={0x7, 0x1f, 0x8b, [@broadcast, @private=0xa010100, @local, @multicast2, @empty, @rand_addr=0x64010102, @remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x30, 0x1, [{0x5, 0x8, "0044ad2801fe"}, {0x2, 0x10, "5c80af35caa07f30ae6fe3121e8c"}, {0x0, 0xc, "0e41f13b5b710077fcc4"}, {0x6, 0x6, "94606657"}]}, @timestamp_addr={0x44, 0x44, 0x61, 0x1, 0xf, [{@multicast2, 0x1}, {@remote, 0x101}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@multicast1, 0x5}, {@empty, 0x4}, {@local, 0x4d}, {@private=0xa010101, 0x400}]}, @ssrr={0x89, 0x13, 0xe0, [@rand_addr=0x64010100, @remote, @local, @loopback]}, @timestamp={0x44, 0x1c, 0x7a, 0x0, 0x3, [0x6, 0x6, 0x4, 0x2, 0xfffffe01, 0x98]}, @lsrr={0x83, 0x17, 0x11, [@multicast2, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r7}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r6, 0x4, 0x1, 0x0, 0xffff, 0xb, @local, @remote, 0x7800, 0x80, 0x46ac, 0xf2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000240), 0x41000, 0x9, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xb, 0x0, 0x100000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r4, 0x2f, 0x3, 0x5, 0xb2c, 0x10, @mcast1, @local, 0x700, 0x7, 0x97, 0xc75a}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3e4b5c390d8a25ec3acfa80fccc0614a7c4789ae63ca8ac6fa39c500f24396b7252dca53b2f24d5f78899e5363c081bb8234ed6f18e9dc72880f17b869cda1a0de", @ANYRES16=0x0, @ANYBLOB="0000000000000000000012000000"], 0x14}}, 0x0) (async) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0xc080}, 0x8800) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) socketpair(0x25, 0x80000, 0x4, &(0x7f0000000040)) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x10, 0x80, 0x9fc, 0x7, {{0x3d, 0x4, 0x3, 0x4, 0xf4, 0x67, 0x0, 0x4, 0x4, 0x0, @remote, @local, {[@rr={0x7, 0x1f, 0x8b, [@broadcast, @private=0xa010100, @local, @multicast2, @empty, @rand_addr=0x64010102, @remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x30, 0x1, [{0x5, 0x8, "0044ad2801fe"}, {0x2, 0x10, "5c80af35caa07f30ae6fe3121e8c"}, {0x0, 0xc, "0e41f13b5b710077fcc4"}, {0x6, 0x6, "94606657"}]}, @timestamp_addr={0x44, 0x44, 0x61, 0x1, 0xf, [{@multicast2, 0x1}, {@remote, 0x101}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@multicast1, 0x5}, {@empty, 0x4}, {@local, 0x4d}, {@private=0xa010101, 0x400}]}, @ssrr={0x89, 0x13, 0xe0, [@rand_addr=0x64010100, @remote, @local, @loopback]}, @timestamp={0x44, 0x1c, 0x7a, 0x0, 0x3, [0x6, 0x6, 0x4, 0x2, 0xfffffe01, 0x98]}, @lsrr={0x83, 0x17, 0x11, [@multicast2, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) socket(0x11, 0xa, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r7}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r6, 0x4, 0x1, 0x0, 0xffff, 0xb, @local, @remote, 0x7800, 0x80, 0x46ac, 0xf2}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000240), 0x41000, 0x9, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xb, 0x0, 0x100000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff]}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r4, 0x2f, 0x3, 0x5, 0xb2c, 0x10, @mcast1, @local, 0x700, 0x7, 0x97, 0xc75a}}) (async) 06:10:19 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r1}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xb, 0x1, 0x7) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000069bd7400fbdbdf25010000000400a9002500030000000000080008000a01010014000900fe800000000000000000001e6000002714000900000000000000000000000000000000013e0002e29d0e000000000000ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r1, 0x29, 0x6, 0x0, 0x4, 0x46, @local, @remote, 0x8, 0x40, 0x3ce9, 0x2}}) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="7905f8c2be746fe8cbfc0d833c8c239d3db868544e8c3036c8d24f3ef1f072d00000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) getpid() ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='afs_make_vl_call\x00', r3}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) pselect6(0x40, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) (async) socket(0x11, 0xa, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r1}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket(0xb, 0x1, 0x7) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000069bd7400fbdbdf25010000000400a9002500030000000000080008000a01010014000900fe800000000000000000001e6000002714000900000000000000000000000000000000013e0002e29d0e000000000000ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r1, 0x29, 0x6, 0x0, 0x4, 0x46, @local, @remote, 0x8, 0x40, 0x3ce9, 0x2}}) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="7905f8c2be746fe8cbfc0d833c8c239d3db868544e8c3036c8d24f3ef1f072d00000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) getpid() (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='afs_make_vl_call\x00', r3}, 0x10) (async) 06:10:19 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x0, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2351.928751][T18162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2351.936692][T18162] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2351.984249][T18189] FAULT_INJECTION: forcing a failure. [ 2351.984249][T18189] name failslab, interval 1, probability 0, space 0, times 0 [ 2351.997575][T18189] CPU: 0 PID: 18189 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2352.007804][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2352.017844][T18189] Call Trace: [ 2352.021130][T18189] dump_stack+0x18e/0x1d5 [ 2352.025445][T18189] should_fail+0x604/0x770 [ 2352.029833][T18189] ? mempool_init+0x35/0x50 [ 2352.034306][T18189] ? bdi_alloc_node+0x69/0xd0 [ 2352.038955][T18189] should_failslab+0x5/0x20 [ 2352.043439][T18189] kmem_cache_alloc_trace+0x28/0x240 [ 2352.048695][T18189] bdi_alloc_node+0x69/0xd0 [ 2352.053169][T18189] blk_alloc_queue_node+0x10b/0x580 [ 2352.058345][T18189] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2352.063687][T18189] blk_mq_init_queue+0x33/0xa0 [ 2352.068424][T18189] loop_add+0x256/0x710 [ 2352.072552][T18189] ? radix_tree_lookup+0x17a/0x1d0 [ 2352.077636][T18189] loop_control_ioctl+0x465/0x600 [ 2352.082632][T18189] ? loop_remove+0xa0/0xa0 [ 2352.087123][T18189] do_vfs_ioctl+0x6d1/0x15b0 [ 2352.091796][T18189] __x64_sys_ioctl+0xd4/0x110 [ 2352.096557][T18189] do_syscall_64+0xcb/0x1c0 [ 2352.101034][T18189] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2352.106896][T18189] RIP: 0033:0x7efdb617c209 [ 2352.111293][T18189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 06:10:19 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) (async) 06:10:19 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x0, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:19 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3e4b5c390d8a25ec3acfa80fccc0614a7c4789ae63ca8ac6fa39c500f24396b7252dca53b2f24d5f78899e5363c081bb8234ed6f18e9dc72880f17b869cda1a0de", @ANYRES16=0x0, @ANYBLOB="0000000000000000000012000000"], 0x14}}, 0x0) (async) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0xc080}, 0x8800) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) socketpair(0x25, 0x80000, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x10, 0x80, 0x9fc, 0x7, {{0x3d, 0x4, 0x3, 0x4, 0xf4, 0x67, 0x0, 0x4, 0x4, 0x0, @remote, @local, {[@rr={0x7, 0x1f, 0x8b, [@broadcast, @private=0xa010100, @local, @multicast2, @empty, @rand_addr=0x64010102, @remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x30, 0x1, [{0x5, 0x8, "0044ad2801fe"}, {0x2, 0x10, "5c80af35caa07f30ae6fe3121e8c"}, {0x0, 0xc, "0e41f13b5b710077fcc4"}, {0x6, 0x6, "94606657"}]}, @timestamp_addr={0x44, 0x44, 0x61, 0x1, 0xf, [{@multicast2, 0x1}, {@remote, 0x101}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@multicast1, 0x5}, {@empty, 0x4}, {@local, 0x4d}, {@private=0xa010101, 0x400}]}, @ssrr={0x89, 0x13, 0xe0, [@rand_addr=0x64010100, @remote, @local, @loopback]}, @timestamp={0x44, 0x1c, 0x7a, 0x0, 0x3, [0x6, 0x6, 0x4, 0x2, 0xfffffe01, 0x98]}, @lsrr={0x83, 0x17, 0x11, [@multicast2, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) (rerun: 64) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r7}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r6, 0x4, 0x1, 0x0, 0xffff, 0xb, @local, @remote, 0x7800, 0x80, 0x46ac, 0xf2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000240), 0x41000, 0x9, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xb, 0x0, 0x100000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff]}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r4, 0x2f, 0x3, 0x5, 0xb2c, 0x10, @mcast1, @local, 0x700, 0x7, 0x97, 0xc75a}}) 06:10:19 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:19 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1011004}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1403bb0483974d5eef56ecf199bb8af3416861f766e2d698b4369f9ef42d5ec066ef52441e302bfa43a0d56eecce9d0d08559f522dc9d737013fc055b3200"/77, @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf25040000004c000180080003000008000008000300020000002c000280080003008100000008000200ff00000008000300fcffffff080004000700000008000400000200000c00028008000200ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, 0x0, 0x611, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:10:19 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 19) [ 2352.130868][T18189] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2352.139256][T18189] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2352.147218][T18189] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2352.155166][T18189] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2352.163113][T18189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2352.171239][T18189] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:19 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x0, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:19 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2200c1, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:19 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 06:10:19 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2200c1, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2200c1, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) 06:10:19 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (rerun: 32) 06:10:19 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x0, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:19 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2200c1, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2352.258603][T18263] FAULT_INJECTION: forcing a failure. [ 2352.258603][T18263] name failslab, interval 1, probability 0, space 0, times 0 [ 2352.272263][T18263] CPU: 1 PID: 18263 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2352.283362][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2352.293418][T18263] Call Trace: [ 2352.296715][T18263] dump_stack+0x18e/0x1d5 [ 2352.301061][T18263] should_fail+0x604/0x770 06:10:19 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB="c11c83de11e58349779cc211824f5b219762aa3ae7b025874d1d8a657beccfbfcce296bd38f408bdf146802b9c6d4eadab23515e9777ded3ad0843faa4e4035be7fa8629216b87bd7aa7613186d4c73a612befbb055b30f528621846fe693043880e188dcc636dfbace2aae812fa0dddf4717dd42556488f040877e276863e81561c544221acd46d434093643efe88a6"], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8a201, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) [ 2352.305472][T18263] ? bdi_init+0x196/0x940 [ 2352.309801][T18263] should_failslab+0x5/0x20 [ 2352.314320][T18263] kmem_cache_alloc_trace+0x28/0x240 [ 2352.319601][T18263] bdi_init+0x196/0x940 [ 2352.323751][T18263] ? bdi_alloc_node+0x69/0xd0 [ 2352.328422][T18263] bdi_alloc_node+0x79/0xd0 [ 2352.332913][T18263] blk_alloc_queue_node+0x10b/0x580 [ 2352.338100][T18263] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2352.343472][T18263] blk_mq_init_queue+0x33/0xa0 [ 2352.348223][T18263] loop_add+0x256/0x710 [ 2352.352353][T18263] ? radix_tree_lookup+0x17a/0x1d0 [ 2352.357442][T18263] loop_control_ioctl+0x465/0x600 [ 2352.362438][T18263] ? loop_remove+0xa0/0xa0 [ 2352.366826][T18263] do_vfs_ioctl+0x6d1/0x15b0 [ 2352.371389][T18263] __x64_sys_ioctl+0xd4/0x110 [ 2352.376040][T18263] do_syscall_64+0xcb/0x1c0 [ 2352.380600][T18263] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2352.386548][T18263] RIP: 0033:0x7efdb617c209 [ 2352.391899][T18263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2352.411486][T18263] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2352.419873][T18263] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2352.427834][T18263] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2352.435791][T18263] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2352.443742][T18263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:19 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1011004}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1403bb0483974d5eef56ecf199bb8af3416861f766e2d698b4369f9ef42d5ec066ef52441e302bfa43a0d56eecce9d0d08559f522dc9d737013fc055b3200"/77, @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf25040000004c000180080003000008000008000300020000002c000280080003008100000008000200ff00000008000300fcffffff080004000700000008000400000200000c00028008000200ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, 0x0, 0x611, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1011004}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1403bb0483974d5eef56ecf199bb8af3416861f766e2d698b4369f9ef42d5ec066ef52441e302bfa43a0d56eecce9d0d08559f522dc9d737013fc055b3200"/77, @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf25040000004c000180080003000008000008000300020000002c000280080003008100000008000200ff00000008000300fcffffff080004000700000008000400000200000c00028008000200ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, 0x0, 0x611, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) (async) 06:10:19 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:19 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 20) 06:10:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) 06:10:19 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB="c11c83de11e58349779cc211824f5b219762aa3ae7b025874d1d8a657beccfbfcce296bd38f408bdf146802b9c6d4eadab23515e9777ded3ad0843faa4e4035be7fa8629216b87bd7aa7613186d4c73a612befbb055b30f528621846fe693043880e188dcc636dfbace2aae812fa0dddf4717dd42556488f040877e276863e81561c544221acd46d434093643efe88a6"], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8a201, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) 06:10:19 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:19 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB="c11c83de11e58349779cc211824f5b219762aa3ae7b025874d1d8a657beccfbfcce296bd38f408bdf146802b9c6d4eadab23515e9777ded3ad0843faa4e4035be7fa8629216b87bd7aa7613186d4c73a612befbb055b30f528621846fe693043880e188dcc636dfbace2aae812fa0dddf4717dd42556488f040877e276863e81561c544221acd46d434093643efe88a6"], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8a201, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) [ 2352.451870][T18263] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:19 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:19 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040004) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) [ 2352.498610][T18305] FAULT_INJECTION: forcing a failure. [ 2352.498610][T18305] name failslab, interval 1, probability 0, space 0, times 0 [ 2352.515508][T18305] CPU: 1 PID: 18305 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2352.525745][T18305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2352.535814][T18305] Call Trace: [ 2352.539108][T18305] dump_stack+0x18e/0x1d5 [ 2352.543437][T18305] should_fail+0x604/0x770 [ 2352.548200][T18305] ? blk_alloc_queue_stats+0x48/0x100 [ 2352.553569][T18305] should_failslab+0x5/0x20 [ 2352.558069][T18305] kmem_cache_alloc_trace+0x28/0x240 [ 2352.563420][T18305] blk_alloc_queue_stats+0x48/0x100 [ 2352.568606][T18305] blk_alloc_queue_node+0x150/0x580 [ 2352.573891][T18305] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2352.579239][T18305] blk_mq_init_queue+0x33/0xa0 [ 2352.583987][T18305] loop_add+0x256/0x710 [ 2352.588130][T18305] ? radix_tree_lookup+0x17a/0x1d0 [ 2352.593238][T18305] loop_control_ioctl+0x465/0x600 [ 2352.598245][T18305] ? loop_remove+0xa0/0xa0 [ 2352.602738][T18305] do_vfs_ioctl+0x6d1/0x15b0 [ 2352.607307][T18305] __x64_sys_ioctl+0xd4/0x110 [ 2352.611958][T18305] do_syscall_64+0xcb/0x1c0 [ 2352.616442][T18305] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2352.622350][T18305] RIP: 0033:0x7efdb617c209 [ 2352.626734][T18305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 06:10:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:20 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 21) 06:10:20 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2352.646333][T18305] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2352.654720][T18305] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2352.662673][T18305] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2352.670628][T18305] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2352.678572][T18305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2352.686513][T18305] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1011004}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1403bb0483974d5eef56ecf199bb8af3416861f766e2d698b4369f9ef42d5ec066ef52441e302bfa43a0d56eecce9d0d08559f522dc9d737013fc055b3200"/77, @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf25040000004c000180080003000008000008000300020000002c000280080003008100000008000200ff00000008000300fcffffff080004000700000008000400000200000c00028008000200ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, 0x0, 0x611, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1011004}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1403bb0483974d5eef56ecf199bb8af3416861f766e2d698b4369f9ef42d5ec066ef52441e302bfa43a0d56eecce9d0d08559f522dc9d737013fc055b3200"/77, @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf25040000004c000180080003000008000008000300020000002c000280080003008100000008000200ff00000008000300fcffffff080004000700000008000400000200000c00028008000200ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, 0x0, 0x611, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) (async) 06:10:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:20 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) [ 2352.724890][T18332] FAULT_INJECTION: forcing a failure. [ 2352.724890][T18332] name failslab, interval 1, probability 0, space 0, times 0 [ 2352.738700][T18332] CPU: 0 PID: 18332 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2352.748941][T18332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2352.758972][T18332] Call Trace: [ 2352.762254][T18332] dump_stack+0x18e/0x1d5 [ 2352.766558][T18332] should_fail+0x604/0x770 [ 2352.770947][T18332] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 2352.776287][T18332] ? blk_stat_alloc_callback+0x5c/0x210 [ 2352.782462][T18332] should_failslab+0x5/0x20 [ 2352.786951][T18332] kmem_cache_alloc_trace+0x28/0x240 [ 2352.792218][T18332] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 2352.797572][T18332] ? blk_mq_free_tag_set+0x480/0x480 [ 2352.802842][T18332] blk_stat_alloc_callback+0x5c/0x210 [ 2352.808208][T18332] blk_mq_init_allocated_queue+0x86/0x16c0 [ 2352.814008][T18332] ? blk_alloc_queue_node+0x4e7/0x580 [ 2352.819398][T18332] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2352.824747][T18332] blk_mq_init_queue+0x48/0xa0 [ 2352.829754][T18332] loop_add+0x256/0x710 [ 2352.833898][T18332] ? radix_tree_lookup+0x17a/0x1d0 [ 2352.838996][T18332] loop_control_ioctl+0x465/0x600 [ 2352.844064][T18332] ? loop_remove+0xa0/0xa0 [ 2352.848474][T18332] do_vfs_ioctl+0x6d1/0x15b0 [ 2352.853074][T18332] __x64_sys_ioctl+0xd4/0x110 [ 2352.857848][T18332] do_syscall_64+0xcb/0x1c0 [ 2352.862342][T18332] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2352.868241][T18332] RIP: 0033:0x7efdb617c209 [ 2352.872637][T18332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2352.892409][T18332] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2352.900827][T18332] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2352.908775][T18332] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2352.916734][T18332] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:20 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040004) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) (async) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040004) (async) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) (async) 06:10:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:20 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:20 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 22) [ 2352.924686][T18332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2352.932979][T18332] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040400}, 0x8c2) r1 = socket(0x21, 0x5, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x7, 0x8, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, 0x20, 0x700, 0x229, 0x9}}) 06:10:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r3, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r3, @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040400}, 0x8c2) r1 = socket(0x21, 0x5, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x7, 0x8, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, 0x20, 0x700, 0x229, 0x9}}) 06:10:20 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0200, 0x0) (async) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (rerun: 32) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) (async) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) (rerun: 32) [ 2353.004818][T18355] FAULT_INJECTION: forcing a failure. [ 2353.004818][T18355] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.018728][T18355] CPU: 0 PID: 18355 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2353.028963][T18355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2353.038996][T18355] Call Trace: [ 2353.042275][T18355] dump_stack+0x18e/0x1d5 [ 2353.046588][T18355] should_fail+0x604/0x770 [ 2353.050976][T18355] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 2353.056314][T18355] ? blk_stat_alloc_callback+0x5c/0x210 [ 2353.061826][T18355] should_failslab+0x5/0x20 [ 2353.066299][T18355] kmem_cache_alloc_trace+0x28/0x240 [ 2353.071742][T18355] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 2353.077093][T18355] ? blk_mq_free_tag_set+0x480/0x480 [ 2353.082366][T18355] blk_stat_alloc_callback+0x5c/0x210 [ 2353.087709][T18355] blk_mq_init_allocated_queue+0x86/0x16c0 [ 2353.093509][T18355] ? blk_alloc_queue_node+0x4e7/0x580 [ 2353.098857][T18355] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2353.104200][T18355] blk_mq_init_queue+0x48/0xa0 [ 2353.108943][T18355] loop_add+0x256/0x710 [ 2353.113075][T18355] ? radix_tree_lookup+0x17a/0x1d0 [ 2353.118168][T18355] loop_control_ioctl+0x465/0x600 [ 2353.123169][T18355] ? loop_remove+0xa0/0xa0 [ 2353.127555][T18355] do_vfs_ioctl+0x6d1/0x15b0 [ 2353.132115][T18355] __x64_sys_ioctl+0xd4/0x110 [ 2353.136779][T18355] do_syscall_64+0xcb/0x1c0 [ 2353.141520][T18355] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2353.147406][T18355] RIP: 0033:0x7efdb617c209 [ 2353.151793][T18355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2353.171384][T18355] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2353.179788][T18355] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2353.187817][T18355] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2353.195763][T18355] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r3, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r3, @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:20 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040004) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) (async) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040004) (async) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) (async) 06:10:20 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 23) 06:10:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040400}, 0x8c2) r1 = socket(0x21, 0x5, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x7, 0x8, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, 0x20, 0x700, 0x229, 0x9}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040400}, 0x8c2) (async) socket(0x21, 0x5, 0x3) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x7, 0x8, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, 0x20, 0x700, 0x229, 0x9}}) (async) 06:10:20 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0200, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) (async) [ 2353.203706][T18355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2353.211715][T18355] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2353.254108][T18398] FAULT_INJECTION: forcing a failure. [ 2353.254108][T18398] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.270138][T18398] CPU: 0 PID: 18398 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2353.280384][T18398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2353.290419][T18398] Call Trace: [ 2353.293713][T18398] dump_stack+0x18e/0x1d5 [ 2353.298033][T18398] should_fail+0x604/0x770 [ 2353.302427][T18398] ? blk_mq_init_allocated_queue+0xef/0x16c0 [ 2353.308391][T18398] should_failslab+0x5/0x20 [ 2353.312879][T18398] kmem_cache_alloc_trace+0x28/0x240 [ 2353.318263][T18398] blk_mq_init_allocated_queue+0xef/0x16c0 [ 2353.324256][T18398] ? blk_alloc_queue_node+0x4e7/0x580 [ 2353.329709][T18398] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2353.335058][T18398] blk_mq_init_queue+0x48/0xa0 [ 2353.339802][T18398] loop_add+0x256/0x710 [ 2353.343968][T18398] ? radix_tree_lookup+0x17a/0x1d0 [ 2353.349064][T18398] loop_control_ioctl+0x465/0x600 06:10:20 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r3, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r3, @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) [ 2353.354062][T18398] ? loop_remove+0xa0/0xa0 [ 2353.358468][T18398] do_vfs_ioctl+0x6d1/0x15b0 [ 2353.363039][T18398] __x64_sys_ioctl+0xd4/0x110 [ 2353.367694][T18398] do_syscall_64+0xcb/0x1c0 [ 2353.372182][T18398] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2353.378066][T18398] RIP: 0033:0x7efdb617c209 [ 2353.382457][T18398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 06:10:20 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 24) 06:10:20 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x68, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x28}, @IFA_LABEL={0x14, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delroute={0x6c, 0x19, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x14, 0x20, 0xfd, 0x2, 0xfd, 0x2, 0x1800}, [@RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_PRIORITY={0x8, 0x6, 0x20}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010100}, @RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_NH_ID={0x8, 0x1e, 0xffff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_IIF={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x20044020) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x80000) 06:10:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) 06:10:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) 06:10:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:20 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2353.402044][T18398] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2353.410523][T18398] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2353.418559][T18398] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2353.426504][T18398] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2353.434446][T18398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2353.442391][T18398] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2353.509172][T18438] FAULT_INJECTION: forcing a failure. [ 2353.509172][T18438] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.523386][T18438] CPU: 1 PID: 18438 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2353.533623][T18438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2353.543670][T18438] Call Trace: [ 2353.546960][T18438] dump_stack+0x18e/0x1d5 [ 2353.551265][T18438] should_fail+0x604/0x770 [ 2353.555651][T18438] ? kobject_init+0x7d/0x1d0 [ 2353.560214][T18438] ? blk_mq_init_allocated_queue+0x427/0x16c0 [ 2353.566250][T18438] should_failslab+0x5/0x20 [ 2353.570725][T18438] __kmalloc+0x51/0x2b0 [ 2353.574853][T18438] blk_mq_init_allocated_queue+0x427/0x16c0 [ 2353.580728][T18438] ? blk_alloc_queue_node+0x4e7/0x580 [ 2353.586078][T18438] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2353.591658][T18438] blk_mq_init_queue+0x48/0xa0 [ 2353.596873][T18438] loop_add+0x256/0x710 [ 2353.601536][T18438] ? radix_tree_lookup+0x17a/0x1d0 06:10:21 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 06:10:21 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 06:10:21 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:21 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 25) 06:10:21 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x68, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x28}, @IFA_LABEL={0x14, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delroute={0x6c, 0x19, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x14, 0x20, 0xfd, 0x2, 0xfd, 0x2, 0x1800}, [@RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_PRIORITY={0x8, 0x6, 0x20}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010100}, @RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_NH_ID={0x8, 0x1e, 0xffff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_IIF={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x20044020) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x80000) socket(0x11, 0xa, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x68, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x28}, @IFA_LABEL={0x14, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delroute={0x6c, 0x19, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x14, 0x20, 0xfd, 0x2, 0xfd, 0x2, 0x1800}, [@RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_PRIORITY={0x8, 0x6, 0x20}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010100}, @RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_NH_ID={0x8, 0x1e, 0xffff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_IIF={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x20044020) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x80000) (async) 06:10:21 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:21 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2353.606899][T18438] loop_control_ioctl+0x465/0x600 [ 2353.611916][T18438] ? loop_remove+0xa0/0xa0 [ 2353.616405][T18438] do_vfs_ioctl+0x6d1/0x15b0 [ 2353.621021][T18438] __x64_sys_ioctl+0xd4/0x110 [ 2353.625683][T18438] do_syscall_64+0xcb/0x1c0 [ 2353.630173][T18438] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2353.636209][T18438] RIP: 0033:0x7efdb617c209 [ 2353.640600][T18438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2353.660282][T18438] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2353.668676][T18438] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2353.676662][T18438] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2353.684613][T18438] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2353.692568][T18438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2353.700686][T18438] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:21 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) [ 2353.756883][T18467] FAULT_INJECTION: forcing a failure. [ 2353.756883][T18467] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.770520][T18467] CPU: 0 PID: 18467 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2353.780745][T18467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2353.790880][T18467] Call Trace: [ 2353.794151][T18467] dump_stack+0x18e/0x1d5 [ 2353.798737][T18467] should_fail+0x604/0x770 [ 2353.803164][T18467] ? blk_mq_realloc_hw_ctxs+0x3b9/0x1450 [ 2353.809310][T18467] should_failslab+0x5/0x20 [ 2353.813804][T18467] __kmalloc+0x51/0x2b0 [ 2353.817938][T18467] ? _raw_spin_lock+0x6c/0x170 [ 2353.822728][T18467] blk_mq_realloc_hw_ctxs+0x3b9/0x1450 [ 2353.828185][T18467] blk_mq_init_allocated_queue+0x4d6/0x16c0 [ 2353.834071][T18467] ? blk_alloc_queue_node+0x4e7/0x580 [ 2353.839419][T18467] blk_mq_init_queue+0x48/0xa0 [ 2353.844156][T18467] loop_add+0x256/0x710 [ 2353.848285][T18467] ? radix_tree_lookup+0x17a/0x1d0 [ 2353.853370][T18467] loop_control_ioctl+0x465/0x600 [ 2353.858368][T18467] ? loop_remove+0xa0/0xa0 [ 2353.862755][T18467] do_vfs_ioctl+0x6d1/0x15b0 [ 2353.867321][T18467] __x64_sys_ioctl+0xd4/0x110 [ 2353.871970][T18467] do_syscall_64+0xcb/0x1c0 [ 2353.876457][T18467] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2353.882334][T18467] RIP: 0033:0x7efdb617c209 [ 2353.886720][T18467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 06:10:21 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:21 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 26) 06:10:21 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 06:10:21 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:21 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x68, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x28}, @IFA_LABEL={0x14, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delroute={0x6c, 0x19, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x14, 0x20, 0xfd, 0x2, 0xfd, 0x2, 0x1800}, [@RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_PRIORITY={0x8, 0x6, 0x20}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010100}, @RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_NH_ID={0x8, 0x1e, 0xffff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_IIF={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x20044020) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x80000) [ 2353.906305][T18467] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2353.914699][T18467] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2353.922652][T18467] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2353.930602][T18467] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2353.938718][T18467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2353.946660][T18467] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:21 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:21 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:21 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1011004}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1403bb0483974d5eef56ecf199bb8af3416861f766e2d698b4369f9ef42d5ec066ef52441e302bfa43a0d56eecce9d0d08559f522dc9d737013fc055b3200"/77, @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf25040000004c000180080003000008000008000300020000002c000280080003008100000008000200ff00000008000300fcffffff080004000700000008000400000200000c00028008000200ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, 0x0, 0x611, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) [ 2353.996917][T18493] FAULT_INJECTION: forcing a failure. [ 2353.996917][T18493] name failslab, interval 1, probability 0, space 0, times 0 [ 2354.013661][T18493] CPU: 1 PID: 18493 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2354.023900][T18493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2354.034140][T18493] Call Trace: [ 2354.037523][T18493] dump_stack+0x18e/0x1d5 [ 2354.041937][T18493] should_fail+0x604/0x770 06:10:21 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1011004}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1403bb0483974d5eef56ecf199bb8af3416861f766e2d698b4369f9ef42d5ec066ef52441e302bfa43a0d56eecce9d0d08559f522dc9d737013fc055b3200"/77, @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf25040000004c000180080003000008000008000300020000002c000280080003008100000008000200ff00000008000300fcffffff080004000700000008000400000200000c00028008000200ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, 0x0, 0x611, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) [ 2354.046349][T18493] ? blk_mq_realloc_hw_ctxs+0x68a/0x1450 [ 2354.051962][T18493] should_failslab+0x5/0x20 [ 2354.056455][T18493] __kmalloc+0x51/0x2b0 [ 2354.060587][T18493] ? init_timer_key+0x23/0x1c0 [ 2354.065334][T18493] blk_mq_realloc_hw_ctxs+0x68a/0x1450 [ 2354.070791][T18493] blk_mq_init_allocated_queue+0x4d6/0x16c0 [ 2354.076673][T18493] ? blk_alloc_queue_node+0x4e7/0x580 [ 2354.082038][T18493] blk_mq_init_queue+0x48/0xa0 [ 2354.086791][T18493] loop_add+0x256/0x710 [ 2354.090925][T18493] ? radix_tree_lookup+0x17a/0x1d0 06:10:21 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1011004}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1403bb0483974d5eef56ecf199bb8af3416861f766e2d698b4369f9ef42d5ec066ef52441e302bfa43a0d56eecce9d0d08559f522dc9d737013fc055b3200"/77, @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf25040000004c000180080003000008000008000300020000002c000280080003008100000008000200ff00000008000300fcffffff080004000700000008000400000200000c00028008000200ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, 0x0, 0x611, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) [ 2354.096081][T18493] loop_control_ioctl+0x465/0x600 [ 2354.101532][T18493] ? loop_remove+0xa0/0xa0 [ 2354.105935][T18493] do_vfs_ioctl+0x6d1/0x15b0 [ 2354.110501][T18493] __x64_sys_ioctl+0xd4/0x110 [ 2354.115160][T18493] do_syscall_64+0xcb/0x1c0 [ 2354.119639][T18493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2354.125501][T18493] RIP: 0033:0x7efdb617c209 06:10:21 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 27) 06:10:21 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2354.129889][T18493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2354.149480][T18493] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2354.157875][T18493] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2354.165825][T18493] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2354.173772][T18493] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2354.181715][T18493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2354.189696][T18493] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:21 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 06:10:21 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) 06:10:21 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x0, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:21 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1011004}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1403bb0483974d5eef56ecf199bb8af3416861f766e2d698b4369f9ef42d5ec066ef52441e302bfa43a0d56eecce9d0d08559f522dc9d737013fc055b3200"/77, @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf25040000004c000180080003000008000008000300020000002c000280080003008100000008000200ff00000008000300fcffffff080004000700000008000400000200000c00028008000200ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2354.217188][T18522] FAULT_INJECTION: forcing a failure. [ 2354.217188][T18522] name failslab, interval 1, probability 0, space 0, times 0 [ 2354.235460][T18522] CPU: 1 PID: 18522 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2354.245694][T18522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2354.255749][T18522] Call Trace: [ 2354.259037][T18522] dump_stack+0x18e/0x1d5 06:10:21 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1011004}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e1403bb0483974d5eef56ecf199bb8af3416861f766e2d698b4369f9ef42d5ec066ef52441e302bfa43a0d56eecce9d0d08559f522dc9d737013fc055b3200"/77, @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf25040000004c000180080003000008000008000300020000002c000280080003008100000008000200ff00000008000300fcffffff080004000700000008000400000200000c00028008000200ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) [ 2354.263527][T18522] should_fail+0x604/0x770 [ 2354.267925][T18522] ? sbitmap_init_node+0x14e/0x3a0 [ 2354.273013][T18522] should_failslab+0x5/0x20 [ 2354.277576][T18522] __kmalloc+0x51/0x2b0 [ 2354.281706][T18522] sbitmap_init_node+0x14e/0x3a0 [ 2354.286718][T18522] blk_mq_realloc_hw_ctxs+0x6f0/0x1450 [ 2354.292168][T18522] blk_mq_init_allocated_queue+0x4d6/0x16c0 [ 2354.292185][T18522] ? blk_alloc_queue_node+0x4e7/0x580 [ 2354.303405][T18522] blk_mq_init_queue+0x48/0xa0 [ 2354.308152][T18522] loop_add+0x256/0x710 [ 2354.312309][T18522] ? radix_tree_lookup+0x17a/0x1d0 [ 2354.317415][T18522] loop_control_ioctl+0x465/0x600 [ 2354.322602][T18522] ? loop_remove+0xa0/0xa0 [ 2354.327001][T18522] do_vfs_ioctl+0x6d1/0x15b0 [ 2354.331565][T18522] __x64_sys_ioctl+0xd4/0x110 [ 2354.336215][T18522] do_syscall_64+0xcb/0x1c0 [ 2354.340699][T18522] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2354.346572][T18522] RIP: 0033:0x7efdb617c209 06:10:21 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) [ 2354.350966][T18522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2354.370731][T18522] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2354.379153][T18522] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2354.387112][T18522] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2354.395060][T18522] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2354.403179][T18522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:21 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 28) 06:10:21 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) 06:10:21 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) 06:10:21 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x3c31, &(0x7f0000000080)={0x0, 0x3efb, 0x0, 0x3, 0x2a}) io_uring_setup(0x466c, &(0x7f0000000100)={0x0, 0xf58b, 0x2, 0x2, 0x71, 0x0, r1}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) 06:10:21 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x0, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2354.411134][T18522] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2354.451331][T18554] FAULT_INJECTION: forcing a failure. [ 2354.451331][T18554] name failslab, interval 1, probability 0, space 0, times 0 [ 2354.464303][T18554] CPU: 1 PID: 18554 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2354.474695][T18554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2354.484724][T18554] Call Trace: [ 2354.487992][T18554] dump_stack+0x18e/0x1d5 [ 2354.492295][T18554] should_fail+0x604/0x770 [ 2354.496705][T18554] ? sbitmap_init_node+0x14e/0x3a0 [ 2354.501788][T18554] should_failslab+0x5/0x20 [ 2354.506282][T18554] __kmalloc+0x51/0x2b0 [ 2354.506298][T18554] sbitmap_init_node+0x14e/0x3a0 [ 2354.515344][T18554] blk_mq_realloc_hw_ctxs+0x6f0/0x1450 [ 2354.520779][T18554] blk_mq_init_allocated_queue+0x4d6/0x16c0 [ 2354.526648][T18554] ? blk_alloc_queue_node+0x4e7/0x580 [ 2354.532000][T18554] blk_mq_init_queue+0x48/0xa0 [ 2354.536764][T18554] loop_add+0x256/0x710 [ 2354.540918][T18554] ? radix_tree_lookup+0x17a/0x1d0 [ 2354.546002][T18554] loop_control_ioctl+0x465/0x600 [ 2354.550998][T18554] ? loop_remove+0xa0/0xa0 [ 2354.555386][T18554] do_vfs_ioctl+0x6d1/0x15b0 [ 2354.559949][T18554] __x64_sys_ioctl+0xd4/0x110 [ 2354.564601][T18554] do_syscall_64+0xcb/0x1c0 [ 2354.569187][T18554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2354.575099][T18554] RIP: 0033:0x7efdb617c209 [ 2354.579487][T18554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 06:10:22 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) 06:10:22 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) 06:10:22 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x0, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:22 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = io_uring_setup(0x3c31, &(0x7f0000000080)={0x0, 0x3efb, 0x0, 0x3, 0x2a}) io_uring_setup(0x466c, &(0x7f0000000100)={0x0, 0xf58b, 0x2, 0x2, 0x71, 0x0, r1}) (async, rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (rerun: 64) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) 06:10:22 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 29) 06:10:22 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r4}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) [ 2354.599067][T18554] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2354.607459][T18554] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2354.615409][T18554] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2354.623364][T18554] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2354.631319][T18554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2354.639907][T18554] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2354.701400][T18583] FAULT_INJECTION: forcing a failure. [ 2354.701400][T18583] name failslab, interval 1, probability 0, space 0, times 0 [ 2354.714647][T18583] CPU: 1 PID: 18583 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2354.724876][T18583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2354.734912][T18583] Call Trace: [ 2354.738187][T18583] dump_stack+0x18e/0x1d5 [ 2354.742649][T18583] should_fail+0x604/0x770 [ 2354.747129][T18583] ? blk_alloc_flush_queue+0xd0/0x230 [ 2354.752490][T18583] should_failslab+0x5/0x20 [ 2354.756968][T18583] __kmalloc+0x51/0x2b0 [ 2354.761099][T18583] ? kmem_cache_alloc_trace+0xd8/0x240 [ 2354.766535][T18583] ? blk_alloc_flush_queue+0x70/0x230 [ 2354.771975][T18583] blk_alloc_flush_queue+0xd0/0x230 [ 2354.777147][T18583] blk_mq_realloc_hw_ctxs+0x8b5/0x1450 [ 2354.782578][T18583] blk_mq_init_allocated_queue+0x4d6/0x16c0 [ 2354.788453][T18583] ? blk_alloc_queue_node+0x4e7/0x580 [ 2354.793920][T18583] blk_mq_init_queue+0x48/0xa0 [ 2354.798664][T18583] loop_add+0x256/0x710 [ 2354.802955][T18583] ? radix_tree_lookup+0x17a/0x1d0 [ 2354.808062][T18583] loop_control_ioctl+0x465/0x600 [ 2354.813072][T18583] ? loop_remove+0xa0/0xa0 [ 2354.817481][T18583] do_vfs_ioctl+0x6d1/0x15b0 [ 2354.822056][T18583] __x64_sys_ioctl+0xd4/0x110 [ 2354.826709][T18583] do_syscall_64+0xcb/0x1c0 [ 2354.831190][T18583] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2354.837054][T18583] RIP: 0033:0x7efdb617c209 [ 2354.841439][T18583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2354.861015][T18583] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2354.869405][T18583] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2354.877363][T18583] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2354.885309][T18583] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2354.893291][T18583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2354.901237][T18583] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:22 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:22 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000040)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x401, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x2, 0x3, 0x5, 0xa, 0x6, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0xe8, &(0x7f0000000200)=""/232, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x5, 0x9, 0xe6c9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, r2, 0x1, r3, 0xffffffffffffffff, r4]}, 0x80) 06:10:22 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x3c31, &(0x7f0000000080)={0x0, 0x3efb, 0x0, 0x3, 0x2a}) io_uring_setup(0x466c, &(0x7f0000000100)={0x0, 0xf58b, 0x2, 0x2, 0x71, 0x0, r1}) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (rerun: 32) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) 06:10:22 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:22 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x0, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:22 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 30) 06:10:22 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:22 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x0, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2355.227515][T18592] FAULT_INJECTION: forcing a failure. [ 2355.227515][T18592] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.244918][T18592] CPU: 0 PID: 18592 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2355.255230][T18592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2355.267011][T18592] Call Trace: [ 2355.270286][T18592] dump_stack+0x18e/0x1d5 [ 2355.274591][T18592] should_fail+0x604/0x770 [ 2355.278987][T18592] ? __alloc_disk_node+0x72/0x380 [ 2355.283997][T18592] should_failslab+0x5/0x20 [ 2355.288488][T18592] kmem_cache_alloc_trace+0x28/0x240 [ 2355.293841][T18592] __alloc_disk_node+0x72/0x380 [ 2355.298667][T18592] loop_add+0x323/0x710 [ 2355.302801][T18592] loop_control_ioctl+0x465/0x600 [ 2355.307807][T18592] ? loop_remove+0xa0/0xa0 [ 2355.312194][T18592] do_vfs_ioctl+0x6d1/0x15b0 [ 2355.316777][T18592] __x64_sys_ioctl+0xd4/0x110 [ 2355.321444][T18592] do_syscall_64+0xcb/0x1c0 [ 2355.325928][T18592] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2355.331805][T18592] RIP: 0033:0x7efdb617c209 [ 2355.336207][T18592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2355.356560][T18592] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2355.364957][T18592] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 06:10:22 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:22 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 31) 06:10:22 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x0, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:22 executing program 3: syz_io_uring_setup(0x4286, &(0x7f0000000040)={0x0, 0x6dc, 0x25, 0x0, 0x2c2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r1 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x410080) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000180)) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r1, 0x18, {}, 0x2, 0xe}, 0x8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 06:10:22 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000040)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x401, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x2, 0x3, 0x5, 0xa, 0x6, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0xe8, &(0x7f0000000200)=""/232, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x5, 0x9, 0xe6c9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, r2, 0x1, r3, 0xffffffffffffffff, r4]}, 0x80) 06:10:22 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:22 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:22 executing program 3: syz_io_uring_setup(0x4286, &(0x7f0000000040)={0x0, 0x6dc, 0x25, 0x0, 0x2c2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x410080) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000180)) (async) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) (async) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r1, 0x18, {}, 0x2, 0xe}, 0x8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) [ 2355.372912][T18592] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2355.380957][T18592] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.388919][T18592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.396873][T18592] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:22 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x0, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:22 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:22 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x0, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2355.450686][T18621] FAULT_INJECTION: forcing a failure. [ 2355.450686][T18621] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.470572][T18621] CPU: 0 PID: 18621 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2355.481425][T18621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2355.491574][T18621] Call Trace: [ 2355.495136][T18621] dump_stack+0x18e/0x1d5 [ 2355.499445][T18621] should_fail+0x604/0x770 [ 2355.503981][T18621] ? find_next_bit+0xc6/0x110 [ 2355.508641][T18621] ? disk_expand_part_tbl+0x195/0x3b0 [ 2355.514111][T18621] should_failslab+0x5/0x20 [ 2355.518626][T18621] __kmalloc+0x51/0x2b0 [ 2355.522765][T18621] disk_expand_part_tbl+0x195/0x3b0 [ 2355.527937][T18621] __alloc_disk_node+0x10b/0x380 [ 2355.532846][T18621] loop_add+0x323/0x710 [ 2355.536980][T18621] loop_control_ioctl+0x465/0x600 [ 2355.541983][T18621] ? loop_remove+0xa0/0xa0 [ 2355.546458][T18621] do_vfs_ioctl+0x6d1/0x15b0 [ 2355.551308][T18621] __x64_sys_ioctl+0xd4/0x110 [ 2355.555960][T18621] do_syscall_64+0xcb/0x1c0 [ 2355.560456][T18621] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2355.566326][T18621] RIP: 0033:0x7efdb617c209 [ 2355.570729][T18621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2355.590318][T18621] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:10:23 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:23 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000040)) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x401, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x2, 0x3, 0x5, 0xa, 0x6, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0xe8, &(0x7f0000000200)=""/232, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x5, 0x9, 0xe6c9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, r2, 0x1, r3, 0xffffffffffffffff, r4]}, 0x80) 06:10:23 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 32) 06:10:23 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:23 executing program 3: syz_io_uring_setup(0x4286, &(0x7f0000000040)={0x0, 0x6dc, 0x25, 0x0, 0x2c2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r1 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x410080) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000180)) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r1, 0x18, {}, 0x2, 0xe}, 0x8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_io_uring_setup(0x4286, &(0x7f0000000040)={0x0, 0x6dc, 0x25, 0x0, 0x2c2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x410080) (async) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000180)) (async) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) (async) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r1, 0x18, {}, 0x2, 0xe}, 0x8) (async) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) 06:10:23 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x0, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:23 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) [ 2355.598705][T18621] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2355.606656][T18621] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2355.614607][T18621] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.622562][T18621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.630509][T18621] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:23 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:23 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2ae200, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:23 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x0, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:23 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) [ 2355.667697][T18646] FAULT_INJECTION: forcing a failure. [ 2355.667697][T18646] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.681508][T18646] CPU: 1 PID: 18646 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2355.691739][T18646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2355.701785][T18646] Call Trace: [ 2355.705076][T18646] dump_stack+0x18e/0x1d5 [ 2355.709402][T18646] should_fail+0x604/0x770 06:10:23 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2ae200, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2ae200, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) 06:10:23 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:23 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) [ 2355.713912][T18646] ? rand_initialize_disk+0x4b/0xb0 [ 2355.719098][T18646] should_failslab+0x5/0x20 [ 2355.723621][T18646] kmem_cache_alloc_trace+0x28/0x240 [ 2355.729000][T18646] rand_initialize_disk+0x4b/0xb0 [ 2355.734196][T18646] __alloc_disk_node+0x2cd/0x380 [ 2355.739138][T18646] loop_add+0x323/0x710 [ 2355.743293][T18646] loop_control_ioctl+0x465/0x600 [ 2355.748310][T18646] ? loop_remove+0xa0/0xa0 [ 2355.752725][T18646] do_vfs_ioctl+0x6d1/0x15b0 [ 2355.757313][T18646] __x64_sys_ioctl+0xd4/0x110 [ 2355.762344][T18646] do_syscall_64+0xcb/0x1c0 [ 2355.766845][T18646] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2355.772935][T18646] RIP: 0033:0x7efdb617c209 [ 2355.777410][T18646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2355.796988][T18646] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2355.805371][T18646] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 06:10:23 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 33) [ 2355.813319][T18646] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2355.821264][T18646] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.829219][T18646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.837178][T18646] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:23 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:23 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2ae200, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:23 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8001, @none}, 0xe) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:23 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x0, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:23 executing program 2: socketpair(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:23 executing program 2: socketpair(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) [ 2355.886966][T18692] FAULT_INJECTION: forcing a failure. [ 2355.886966][T18692] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.901342][T18692] CPU: 1 PID: 18692 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2355.911577][T18692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2355.921628][T18692] Call Trace: [ 2355.924920][T18692] dump_stack+0x18e/0x1d5 [ 2355.929248][T18692] should_fail+0x604/0x770 06:10:23 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:23 executing program 2: socketpair(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:23 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0, r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:23 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0, r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) [ 2355.933665][T18692] ? rand_initialize_disk+0x4b/0xb0 [ 2355.938856][T18692] should_failslab+0x5/0x20 [ 2355.943352][T18692] kmem_cache_alloc_trace+0x28/0x240 [ 2355.948634][T18692] rand_initialize_disk+0x4b/0xb0 [ 2355.953654][T18692] __alloc_disk_node+0x2cd/0x380 [ 2355.958588][T18692] loop_add+0x323/0x710 [ 2355.962742][T18692] loop_control_ioctl+0x465/0x600 [ 2355.967768][T18692] ? loop_remove+0xa0/0xa0 [ 2355.972178][T18692] do_vfs_ioctl+0x6d1/0x15b0 [ 2355.976786][T18692] __x64_sys_ioctl+0xd4/0x110 [ 2355.981451][T18692] do_syscall_64+0xcb/0x1c0 [ 2355.985937][T18692] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2355.991861][T18692] RIP: 0033:0x7efdb617c209 [ 2355.996249][T18692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2356.016140][T18692] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2356.024662][T18692] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 06:10:23 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 34) [ 2356.032630][T18692] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2356.040714][T18692] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2356.048682][T18692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2356.056642][T18692] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:23 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:23 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0, r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:23 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8001, @none}, 0xe) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8001, @none}, 0xe) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) 06:10:23 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x0, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:23 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) [ 2356.121135][T18721] FAULT_INJECTION: forcing a failure. [ 2356.121135][T18721] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.137876][T18721] CPU: 0 PID: 18721 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2356.149628][T18721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2356.159686][T18721] Call Trace: [ 2356.162981][T18721] dump_stack+0x18e/0x1d5 06:10:23 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:23 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:23 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x0, 0x0, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) [ 2356.167311][T18721] should_fail+0x604/0x770 [ 2356.171731][T18721] ? sbitmap_queue_init_node+0x15e/0xf70 [ 2356.177368][T18721] should_failslab+0x5/0x20 [ 2356.181873][T18721] __kmalloc+0x51/0x2b0 [ 2356.186025][T18721] sbitmap_queue_init_node+0x15e/0xf70 [ 2356.191482][T18721] ? blk_mq_init_tags+0x74/0x290 [ 2356.196441][T18721] blk_mq_init_tags+0xef/0x290 [ 2356.201186][T18721] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2356.206300][T18721] blk_mq_init_sched+0x1f2/0xaf0 [ 2356.211253][T18721] elevator_init_mq+0x2cd/0x3f0 [ 2356.216220][T18721] __device_add_disk+0x87/0x1210 06:10:23 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8001, @none}, 0xe) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2356.221162][T18721] ? loop_add+0x3e0/0x710 [ 2356.225511][T18721] loop_add+0x554/0x710 [ 2356.229673][T18721] loop_control_ioctl+0x465/0x600 [ 2356.234837][T18721] ? loop_remove+0xa0/0xa0 [ 2356.239342][T18721] do_vfs_ioctl+0x6d1/0x15b0 [ 2356.243937][T18721] __x64_sys_ioctl+0xd4/0x110 [ 2356.248600][T18721] do_syscall_64+0xcb/0x1c0 [ 2356.253134][T18721] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2356.259549][T18721] RIP: 0033:0x7efdb617c209 [ 2356.263948][T18721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2356.283700][T18721] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2356.292110][T18721] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2356.300070][T18721] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2356.308037][T18721] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:23 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x0, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:23 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 35) [ 2356.316850][T18721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2356.324798][T18721] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2356.334204][T18721] "mq-deadline" elevator initialization failed, falling back to "none" [ 2356.368504][T18755] FAULT_INJECTION: forcing a failure. [ 2356.368504][T18755] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.383888][T18755] CPU: 0 PID: 18755 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2356.395196][T18755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2356.405246][T18755] Call Trace: [ 2356.408546][T18755] dump_stack+0x18e/0x1d5 [ 2356.412866][T18755] should_fail+0x604/0x770 [ 2356.417267][T18755] ? sbitmap_queue_init_node+0x69c/0xf70 [ 2356.422879][T18755] should_failslab+0x5/0x20 [ 2356.427373][T18755] kmem_cache_alloc_trace+0x28/0x240 [ 2356.432648][T18755] sbitmap_queue_init_node+0x69c/0xf70 [ 2356.438720][T18755] blk_mq_init_tags+0xef/0x290 [ 2356.443465][T18755] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2356.448585][T18755] blk_mq_init_sched+0x1f2/0xaf0 [ 2356.453875][T18755] elevator_init_mq+0x2cd/0x3f0 [ 2356.458863][T18755] __device_add_disk+0x87/0x1210 [ 2356.463870][T18755] ? loop_add+0x3e0/0x710 [ 2356.468274][T18755] loop_add+0x554/0x710 [ 2356.472428][T18755] loop_control_ioctl+0x465/0x600 [ 2356.477649][T18755] ? loop_remove+0xa0/0xa0 [ 2356.482332][T18755] do_vfs_ioctl+0x6d1/0x15b0 [ 2356.487033][T18755] __x64_sys_ioctl+0xd4/0x110 [ 2356.491706][T18755] do_syscall_64+0xcb/0x1c0 [ 2356.496216][T18755] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2356.502202][T18755] RIP: 0033:0x7efdb617c209 [ 2356.506630][T18755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2356.526530][T18755] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2356.535052][T18755] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2356.543530][T18755] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2356.552231][T18755] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2356.560722][T18755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:24 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:24 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x0, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:24 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41e602, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501140, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:24 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:24 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 36) 06:10:24 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x2, 0x2, 0x4, 0xff, 0xffff5e5b, 0x6}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:24 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 32) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x2, 0x2, 0x4, 0xff, 0xffff5e5b, 0x6}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 2356.568906][T18755] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2356.577776][T18755] "mq-deadline" elevator initialization failed, falling back to "none" 06:10:24 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41e602, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501140, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2356.624015][T18769] FAULT_INJECTION: forcing a failure. [ 2356.624015][T18769] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.641810][T18769] CPU: 1 PID: 18769 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2356.652220][T18769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2356.662362][T18769] Call Trace: [ 2356.665642][T18769] dump_stack+0x18e/0x1d5 [ 2356.669987][T18769] should_fail+0x604/0x770 [ 2356.674544][T18769] ? sbitmap_queue_init_node+0x69c/0xf70 [ 2356.680285][T18769] should_failslab+0x5/0x20 [ 2356.684784][T18769] kmem_cache_alloc_trace+0x28/0x240 [ 2356.690610][T18769] sbitmap_queue_init_node+0x69c/0xf70 [ 2356.696116][T18769] blk_mq_init_tags+0x153/0x290 [ 2356.700994][T18769] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2356.706116][T18769] blk_mq_init_sched+0x1f2/0xaf0 [ 2356.711284][T18769] elevator_init_mq+0x2cd/0x3f0 [ 2356.716246][T18769] __device_add_disk+0x87/0x1210 [ 2356.721865][T18769] ? loop_add+0x3e0/0x710 [ 2356.726179][T18769] loop_add+0x554/0x710 [ 2356.730324][T18769] loop_control_ioctl+0x465/0x600 [ 2356.735414][T18769] ? loop_remove+0xa0/0xa0 [ 2356.739810][T18769] do_vfs_ioctl+0x6d1/0x15b0 [ 2356.744481][T18769] __x64_sys_ioctl+0xd4/0x110 [ 2356.749171][T18769] do_syscall_64+0xcb/0x1c0 [ 2356.753664][T18769] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2356.759775][T18769] RIP: 0033:0x7efdb617c209 [ 2356.764300][T18769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2356.784687][T18769] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2356.793078][T18769] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2356.801028][T18769] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2356.809098][T18769] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2356.817145][T18769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2356.825276][T18769] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2356.836584][T18769] "mq-deadline" elevator initialization failed, falling back to "none" 06:10:24 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x0, 0x0, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:24 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x0, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:24 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 37) 06:10:24 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41e602, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501140, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41e602, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501140, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) 06:10:24 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x2, 0x2, 0x4, 0xff, 0xffff5e5b, 0x6}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x2, 0x2, 0x4, 0xff, 0xffff5e5b, 0x6}) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) 06:10:24 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:24 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x0, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:24 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:24 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xb40, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2357.047091][T18786] FAULT_INJECTION: forcing a failure. [ 2357.047091][T18786] name failslab, interval 1, probability 0, space 0, times 0 [ 2357.066186][T18786] CPU: 0 PID: 18786 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2357.076605][T18786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2357.087002][T18786] Call Trace: [ 2357.090377][T18786] dump_stack+0x18e/0x1d5 [ 2357.094808][T18786] should_fail+0x604/0x770 [ 2357.099206][T18786] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2357.104383][T18786] should_failslab+0x5/0x20 [ 2357.108989][T18786] __kmalloc+0x51/0x2b0 [ 2357.113293][T18786] blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2357.118414][T18786] blk_mq_init_sched+0x1f2/0xaf0 [ 2357.123431][T18786] elevator_init_mq+0x2cd/0x3f0 [ 2357.128618][T18786] __device_add_disk+0x87/0x1210 [ 2357.133544][T18786] ? loop_add+0x3e0/0x710 [ 2357.137855][T18786] loop_add+0x554/0x710 [ 2357.141999][T18786] loop_control_ioctl+0x465/0x600 [ 2357.147027][T18786] ? loop_remove+0xa0/0xa0 [ 2357.151478][T18786] do_vfs_ioctl+0x6d1/0x15b0 [ 2357.156140][T18786] __x64_sys_ioctl+0xd4/0x110 [ 2357.160794][T18786] do_syscall_64+0xcb/0x1c0 [ 2357.165438][T18786] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2357.171317][T18786] RIP: 0033:0x7efdb617c209 [ 2357.175801][T18786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2357.195565][T18786] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2357.204162][T18786] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2357.216855][T18786] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2357.224969][T18786] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2357.233057][T18786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:24 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x0, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:24 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x0, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:24 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 2357.241023][T18786] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2357.251464][T18786] "mq-deadline" elevator initialization failed, falling back to "none" 06:10:25 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x0, 0x0, &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:25 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 38) 06:10:25 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x0, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:25 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:25 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xb40, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:25 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) 06:10:25 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:25 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x0, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:25 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2357.889595][T18819] FAULT_INJECTION: forcing a failure. [ 2357.889595][T18819] name failslab, interval 1, probability 0, space 0, times 0 [ 2357.909336][T18819] CPU: 1 PID: 18819 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2357.919910][T18819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2357.930121][T18819] Call Trace: [ 2357.933402][T18819] dump_stack+0x18e/0x1d5 [ 2357.937827][T18819] should_fail+0x604/0x770 [ 2357.942465][T18819] ? blk_mq_alloc_rq_map+0xe9/0x1a0 [ 2357.947761][T18819] should_failslab+0x5/0x20 [ 2357.952250][T18819] __kmalloc+0x51/0x2b0 [ 2357.956618][T18819] blk_mq_alloc_rq_map+0xe9/0x1a0 [ 2357.962497][T18819] blk_mq_init_sched+0x1f2/0xaf0 [ 2357.967559][T18819] elevator_init_mq+0x2cd/0x3f0 [ 2357.973944][T18819] __device_add_disk+0x87/0x1210 [ 2357.978881][T18819] ? loop_add+0x3e0/0x710 [ 2357.983199][T18819] loop_add+0x554/0x710 [ 2357.987350][T18819] loop_control_ioctl+0x465/0x600 [ 2357.992619][T18819] ? loop_remove+0xa0/0xa0 [ 2357.997069][T18819] do_vfs_ioctl+0x6d1/0x15b0 [ 2358.001792][T18819] __x64_sys_ioctl+0xd4/0x110 [ 2358.006554][T18819] do_syscall_64+0xcb/0x1c0 [ 2358.011176][T18819] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2358.017048][T18819] RIP: 0033:0x7efdb617c209 [ 2358.021785][T18819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2358.041484][T18819] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2358.050292][T18819] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2358.058513][T18819] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2358.066471][T18819] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2358.075284][T18819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:25 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x0, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:25 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 39) 06:10:25 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2358.083332][T18819] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2358.093105][T18819] "mq-deadline" elevator initialization failed, falling back to "none" [ 2358.147026][T18847] FAULT_INJECTION: forcing a failure. [ 2358.147026][T18847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2358.163398][T18847] CPU: 1 PID: 18847 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2358.175557][T18847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2358.186496][T18847] Call Trace: [ 2358.189815][T18847] dump_stack+0x18e/0x1d5 [ 2358.194148][T18847] should_fail+0x604/0x770 [ 2358.198944][T18847] __alloc_pages_nodemask+0x12a/0x6f0 [ 2358.204308][T18847] blk_mq_alloc_rqs+0x252/0x6d0 [ 2358.209138][T18847] blk_mq_init_sched+0x256/0xaf0 [ 2358.214052][T18847] elevator_init_mq+0x2cd/0x3f0 [ 2358.218880][T18847] __device_add_disk+0x87/0x1210 [ 2358.224232][T18847] ? loop_add+0x3e0/0x710 [ 2358.228543][T18847] loop_add+0x554/0x710 [ 2358.232684][T18847] loop_control_ioctl+0x465/0x600 [ 2358.237708][T18847] ? loop_remove+0xa0/0xa0 [ 2358.242193][T18847] do_vfs_ioctl+0x6d1/0x15b0 [ 2358.246763][T18847] __x64_sys_ioctl+0xd4/0x110 [ 2358.251416][T18847] do_syscall_64+0xcb/0x1c0 [ 2358.255985][T18847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2358.261864][T18847] RIP: 0033:0x7efdb617c209 [ 2358.266254][T18847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2358.286101][T18847] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2358.294488][T18847] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2358.302431][T18847] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2358.310381][T18847] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2358.318342][T18847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2358.326468][T18847] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:26 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:26 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:26 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xb40, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:26 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x921882, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:26 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 40) 06:10:26 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2358.743182][T18856] FAULT_INJECTION: forcing a failure. [ 2358.743182][T18856] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2358.756619][T18856] CPU: 1 PID: 18856 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2358.766893][T18856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2358.776945][T18856] Call Trace: [ 2358.780349][T18856] dump_stack+0x18e/0x1d5 [ 2358.784721][T18856] should_fail+0x604/0x770 [ 2358.789135][T18856] __alloc_pages_nodemask+0x12a/0x6f0 [ 2358.794486][T18856] blk_mq_alloc_rqs+0x252/0x6d0 [ 2358.799521][T18856] blk_mq_init_sched+0x256/0xaf0 [ 2358.804469][T18856] elevator_init_mq+0x2cd/0x3f0 [ 2358.809440][T18856] __device_add_disk+0x87/0x1210 [ 2358.814469][T18856] ? loop_add+0x3e0/0x710 [ 2358.818782][T18856] loop_add+0x554/0x710 [ 2358.823916][T18856] loop_control_ioctl+0x465/0x600 [ 2358.829335][T18856] ? loop_remove+0xa0/0xa0 [ 2358.833737][T18856] do_vfs_ioctl+0x6d1/0x15b0 [ 2358.838436][T18856] __x64_sys_ioctl+0xd4/0x110 [ 2358.843426][T18856] do_syscall_64+0xcb/0x1c0 [ 2358.848163][T18856] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2358.854038][T18856] RIP: 0033:0x7efdb617c209 [ 2358.858744][T18856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2358.878958][T18856] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:10:26 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:26 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:26 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 41) 06:10:26 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2358.887476][T18856] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2358.895716][T18856] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2358.904381][T18856] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2358.912778][T18856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2358.920890][T18856] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:26 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x921882, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:26 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2358.957528][T18873] FAULT_INJECTION: forcing a failure. [ 2358.957528][T18873] name failslab, interval 1, probability 0, space 0, times 0 [ 2358.973145][T18873] CPU: 1 PID: 18873 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2358.983419][T18873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2358.993840][T18873] Call Trace: [ 2358.997259][T18873] dump_stack+0x18e/0x1d5 [ 2359.001579][T18873] should_fail+0x604/0x770 [ 2359.006029][T18873] ? lo_complete_rq+0x2a0/0x2a0 [ 2359.010875][T18873] ? elevator_alloc+0x4b/0xc0 [ 2359.015536][T18873] should_failslab+0x5/0x20 [ 2359.020027][T18873] kmem_cache_alloc_trace+0x28/0x240 [ 2359.025312][T18873] elevator_alloc+0x4b/0xc0 [ 2359.029807][T18873] dd_init_queue+0x1f/0x330 [ 2359.034420][T18873] blk_mq_init_sched+0x45c/0xaf0 [ 2359.039348][T18873] elevator_init_mq+0x2cd/0x3f0 [ 2359.044196][T18873] __device_add_disk+0x87/0x1210 [ 2359.049262][T18873] ? loop_add+0x3e0/0x710 [ 2359.053600][T18873] loop_add+0x554/0x710 [ 2359.057780][T18873] loop_control_ioctl+0x465/0x600 [ 2359.062877][T18873] ? loop_remove+0xa0/0xa0 [ 2359.067433][T18873] do_vfs_ioctl+0x6d1/0x15b0 [ 2359.072287][T18873] __x64_sys_ioctl+0xd4/0x110 [ 2359.076957][T18873] do_syscall_64+0xcb/0x1c0 [ 2359.081444][T18873] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2359.087493][T18873] RIP: 0033:0x7efdb617c209 [ 2359.091900][T18873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2359.111647][T18873] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2359.120039][T18873] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2359.128243][T18873] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2359.136592][T18873] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2359.144549][T18873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2359.152507][T18873] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2359.162293][T18873] "mq-deadline" elevator initialization failed, falling back to "none" 06:10:27 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:27 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x17}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000804) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x2f, 0x1f, 0xfe, 0x0, 0x11, @loopback, @private0, 0x40, 0x20, 0x3, 0x2}}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:27 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:27 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 42) 06:10:27 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:27 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x921882, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x921882, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) 06:10:27 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r1, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r3, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r1, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r3, @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2359.598745][T18885] FAULT_INJECTION: forcing a failure. [ 2359.598745][T18885] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.612510][T18885] CPU: 1 PID: 18885 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2359.623130][T18885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2359.633263][T18885] Call Trace: [ 2359.636706][T18885] dump_stack+0x18e/0x1d5 [ 2359.641620][T18885] should_fail+0x604/0x770 [ 2359.647845][T18885] ? dd_init_queue+0x69/0x330 [ 2359.653694][T18885] should_failslab+0x5/0x20 [ 2359.660992][T18885] kmem_cache_alloc_trace+0x28/0x240 [ 2359.666827][T18885] dd_init_queue+0x69/0x330 [ 2359.671431][T18885] blk_mq_init_sched+0x45c/0xaf0 [ 2359.676357][T18885] elevator_init_mq+0x2cd/0x3f0 [ 2359.681329][T18885] __device_add_disk+0x87/0x1210 [ 2359.686452][T18885] ? loop_add+0x3e0/0x710 [ 2359.690969][T18885] loop_add+0x554/0x710 [ 2359.695687][T18885] loop_control_ioctl+0x465/0x600 [ 2359.700833][T18885] ? loop_remove+0xa0/0xa0 [ 2359.705254][T18885] do_vfs_ioctl+0x6d1/0x15b0 [ 2359.709891][T18885] __x64_sys_ioctl+0xd4/0x110 [ 2359.714562][T18885] do_syscall_64+0xcb/0x1c0 [ 2359.719197][T18885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2359.725073][T18885] RIP: 0033:0x7efdb617c209 [ 2359.729474][T18885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2359.749711][T18885] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2359.758199][T18885] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2359.766458][T18885] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2359.774469][T18885] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2359.782549][T18885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2359.790500][T18885] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:27 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r1, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r3, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r1, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r3, @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:27 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 43) 06:10:27 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r1, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r3, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r1, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r3, @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:27 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:27 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2359.798818][T18885] "mq-deadline" elevator initialization failed, falling back to "none" [ 2359.866413][T18905] FAULT_INJECTION: forcing a failure. [ 2359.866413][T18905] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.888954][T18905] CPU: 1 PID: 18905 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2359.899789][T18905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2359.910395][T18905] Call Trace: [ 2359.913968][T18905] dump_stack+0x18e/0x1d5 [ 2359.918717][T18905] should_fail+0x604/0x770 [ 2359.923328][T18905] ? memset+0x1f/0x40 [ 2359.927662][T18905] ? device_create_vargs+0x7d/0x210 [ 2359.933683][T18905] should_failslab+0x5/0x20 [ 2359.938220][T18905] kmem_cache_alloc_trace+0x28/0x240 [ 2359.943583][T18905] device_create_vargs+0x7d/0x210 [ 2359.948835][T18905] device_create+0x86/0xb0 [ 2359.953863][T18905] bdi_register_va+0x89/0x5e0 [ 2359.958610][T18905] bdi_register+0x80/0xa0 [ 2359.963537][T18905] ? __device_add_disk+0x50a/0x1210 [ 2359.969085][T18905] bdi_register_owner+0x56/0xf0 [ 2359.974197][T18905] __device_add_disk+0x583/0x1210 [ 2359.979206][T18905] loop_add+0x554/0x710 [ 2359.983357][T18905] loop_control_ioctl+0x465/0x600 [ 2359.988678][T18905] ? loop_remove+0xa0/0xa0 [ 2359.993088][T18905] do_vfs_ioctl+0x6d1/0x15b0 [ 2359.997848][T18905] __x64_sys_ioctl+0xd4/0x110 [ 2360.002515][T18905] do_syscall_64+0xcb/0x1c0 [ 2360.007011][T18905] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2360.013070][T18905] RIP: 0033:0x7efdb617c209 [ 2360.017657][T18905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2360.037650][T18905] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2360.046394][T18905] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2360.054793][T18905] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2360.063044][T18905] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.071555][T18905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2360.079785][T18905] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2360.089318][T18905] ------------[ cut here ]------------ [ 2360.094900][T18905] WARNING: CPU: 1 PID: 18905 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2360.103986][T18905] Modules linked in: [ 2360.108092][T18905] CPU: 1 PID: 18905 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2360.118308][T18905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2360.128482][T18905] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2360.134280][T18905] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2360.153972][T18905] RSP: 0018:ffff8881e6717ce8 EFLAGS: 00010246 [ 2360.160030][T18905] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2360.168159][T18905] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2360.176529][T18905] RBP: ffff8881ef7b1a08 R08: ffffffff82114c4e R09: fffffbfff0b2c38b [ 2360.184770][T18905] R10: fffffbfff0b2c38b R11: 1ffffffff0b2c38a R12: dffffc0000000000 [ 2360.192816][T18905] R13: 1ffff1103e878c01 R14: 1ffff1103e878c9d R15: ffff8881f43c6000 [ 2360.200768][T18905] FS: 00007efdb52f2700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2360.209672][T18905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2360.216234][T18905] CR2: 00007ffe555e0ca8 CR3: 00000001e86bb000 CR4: 00000000003406e0 [ 2360.224566][T18905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2360.232586][T18905] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2360.240558][T18905] Call Trace: [ 2360.243837][T18905] loop_add+0x554/0x710 [ 2360.248105][T18905] loop_control_ioctl+0x465/0x600 [ 2360.253108][T18905] ? loop_remove+0xa0/0xa0 [ 2360.257504][T18905] do_vfs_ioctl+0x6d1/0x15b0 [ 2360.262078][T18905] __x64_sys_ioctl+0xd4/0x110 [ 2360.266837][T18905] do_syscall_64+0xcb/0x1c0 [ 2360.271320][T18905] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2360.277469][T18905] RIP: 0033:0x7efdb617c209 [ 2360.281888][T18905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2360.301906][T18905] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2360.310640][T18905] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2360.318676][T18905] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2360.326622][T18905] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.334664][T18905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2360.342644][T18905] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2360.350856][T18905] ---[ end trace 4781fc9bf8f706f8 ]--- 06:10:27 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0)={0x9}, 0x0, 0x0, 0x0) 06:10:27 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) socketpair(0x22, 0xe03e4f5355eea6f4, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x8, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) 06:10:27 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:27 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:27 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 44) 06:10:27 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) (rerun: 32) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x17}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000804) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x2f, 0x1f, 0xfe, 0x0, 0x11, @loopback, @private0, 0x40, 0x20, 0x3, 0x2}}) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:27 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:27 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:27 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) (async) socketpair(0x22, 0xe03e4f5355eea6f4, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x8, 0x8) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) [ 2360.468816][T18921] FAULT_INJECTION: forcing a failure. [ 2360.468816][T18921] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.482953][T18921] CPU: 0 PID: 18921 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2360.494579][T18921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2360.505090][T18921] Call Trace: [ 2360.508614][T18921] dump_stack+0x18e/0x1d5 [ 2360.513028][T18921] should_fail+0x604/0x770 [ 2360.517435][T18921] ? kobject_set_name_vargs+0x5d/0x110 [ 2360.522879][T18921] should_failslab+0x5/0x20 [ 2360.527363][T18921] __kmalloc_track_caller+0x4f/0x280 [ 2360.532823][T18921] kstrdup_const+0x51/0x90 [ 2360.537650][T18921] kobject_set_name_vargs+0x5d/0x110 [ 2360.543136][T18921] device_create_vargs+0x182/0x210 [ 2360.548313][T18921] device_create+0x86/0xb0 [ 2360.552759][T18921] bdi_register_va+0x89/0x5e0 [ 2360.557630][T18921] bdi_register+0x80/0xa0 [ 2360.562189][T18921] ? __device_add_disk+0x50a/0x1210 06:10:28 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2360.567742][T18921] bdi_register_owner+0x56/0xf0 [ 2360.572876][T18921] __device_add_disk+0x583/0x1210 [ 2360.578007][T18921] loop_add+0x554/0x710 [ 2360.583027][T18921] loop_control_ioctl+0x465/0x600 [ 2360.588599][T18921] ? loop_remove+0xa0/0xa0 [ 2360.593327][T18921] do_vfs_ioctl+0x6d1/0x15b0 [ 2360.598238][T18921] __x64_sys_ioctl+0xd4/0x110 [ 2360.602919][T18921] do_syscall_64+0xcb/0x1c0 [ 2360.609854][T18921] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2360.616517][T18921] RIP: 0033:0x7efdb617c209 [ 2360.621378][T18921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2360.645583][T18921] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2360.656617][T18921] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2360.666064][T18921] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2360.675303][T18921] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.684943][T18921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2360.694037][T18921] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2360.705755][T18921] ------------[ cut here ]------------ [ 2360.711464][T18921] WARNING: CPU: 1 PID: 18921 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2360.720603][T18921] Modules linked in: [ 2360.724729][T18921] CPU: 1 PID: 18921 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2360.736996][T18921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2360.747128][T18921] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2360.753214][T18921] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2360.773790][T18921] RSP: 0018:ffff8881e8a9fce8 EFLAGS: 00010246 [ 2360.780084][T18921] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2360.788127][T18921] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2360.797136][T18921] RBP: ffff8881f0405e88 R08: ffffffff82114c4e R09: ffffed103d153eda [ 2360.805303][T18921] R10: ffffed103d153eda R11: 1ffff1103d153ed9 R12: dffffc0000000000 [ 2360.813602][T18921] R13: 1ffff1103e1c2801 R14: 1ffff1103e1c289d R15: ffff8881f0e14000 [ 2360.821673][T18921] FS: 00007efdb52f2700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2360.830708][T18921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2360.837408][T18921] CR2: 0000001b2f321000 CR3: 00000001ed223000 CR4: 00000000003406e0 [ 2360.845459][T18921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2360.853550][T18921] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2360.861668][T18921] Call Trace: [ 2360.864949][T18921] loop_add+0x554/0x710 [ 2360.869695][T18921] loop_control_ioctl+0x465/0x600 [ 2360.876835][T18921] ? loop_remove+0xa0/0xa0 [ 2360.881243][T18921] do_vfs_ioctl+0x6d1/0x15b0 [ 2360.885903][T18921] __x64_sys_ioctl+0xd4/0x110 [ 2360.890730][T18921] do_syscall_64+0xcb/0x1c0 [ 2360.895218][T18921] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2360.901196][T18921] RIP: 0033:0x7efdb617c209 [ 2360.905597][T18921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2360.925180][T18921] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2360.933583][T18921] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2360.942000][T18921] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2360.950061][T18921] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.958670][T18921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:28 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:28 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 45) [ 2360.966884][T18921] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2360.976716][T18921] ---[ end trace 4781fc9bf8f706f9 ]--- [ 2361.025136][T18943] FAULT_INJECTION: forcing a failure. [ 2361.025136][T18943] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.039637][T18943] CPU: 1 PID: 18943 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2361.051953][T18943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2361.063107][T18943] Call Trace: [ 2361.069381][T18943] dump_stack+0x18e/0x1d5 [ 2361.073934][T18943] should_fail+0x604/0x770 [ 2361.078524][T18943] ? device_add+0xb6/0xbc0 [ 2361.083028][T18943] should_failslab+0x5/0x20 [ 2361.087517][T18943] kmem_cache_alloc_trace+0x28/0x240 [ 2361.092780][T18943] device_add+0xb6/0xbc0 [ 2361.097046][T18943] device_create_vargs+0x1b8/0x210 [ 2361.102365][T18943] device_create+0x86/0xb0 [ 2361.106779][T18943] bdi_register_va+0x89/0x5e0 [ 2361.111442][T18943] bdi_register+0x80/0xa0 [ 2361.116088][T18943] ? __device_add_disk+0x50a/0x1210 [ 2361.121636][T18943] bdi_register_owner+0x56/0xf0 [ 2361.126664][T18943] __device_add_disk+0x583/0x1210 [ 2361.131763][T18943] loop_add+0x554/0x710 [ 2361.135903][T18943] loop_control_ioctl+0x465/0x600 [ 2361.141063][T18943] ? loop_remove+0xa0/0xa0 [ 2361.145560][T18943] do_vfs_ioctl+0x6d1/0x15b0 [ 2361.150175][T18943] __x64_sys_ioctl+0xd4/0x110 [ 2361.154957][T18943] do_syscall_64+0xcb/0x1c0 [ 2361.159541][T18943] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2361.165980][T18943] RIP: 0033:0x7efdb617c209 06:10:28 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:28 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:28 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x17}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000804) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x2f, 0x1f, 0xfe, 0x0, 0x11, @loopback, @private0, 0x40, 0x20, 0x3, 0x2}}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:28 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) socketpair(0x22, 0xe03e4f5355eea6f4, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x8, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) (async) socketpair(0x22, 0xe03e4f5355eea6f4, 0x5, &(0x7f0000000040)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x8, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) (async) 06:10:28 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2361.170668][T18943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2361.191616][T18943] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2361.200137][T18943] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2361.208791][T18943] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 06:10:28 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 06:10:28 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x34140, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) [ 2361.217400][T18943] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.228447][T18943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2361.236601][T18943] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2361.247600][T18943] ------------[ cut here ]------------ [ 2361.253179][T18943] WARNING: CPU: 0 PID: 18943 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2361.262697][T18943] Modules linked in: [ 2361.266870][T18943] CPU: 0 PID: 18943 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2361.281560][T18943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2361.291762][T18943] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2361.297767][T18943] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2361.317844][T18943] RSP: 0018:ffff8881e9b5fce8 EFLAGS: 00010246 [ 2361.324664][T18943] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2361.332983][T18943] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2361.341623][T18943] RBP: ffff8881f0406fa8 R08: ffffffff82114c4e R09: ffffed103d36bee0 [ 2361.349844][T18943] R10: ffffed103d36bee0 R11: 1ffff1103d36bedf R12: dffffc0000000000 [ 2361.358406][T18943] R13: 1ffff11039f71601 R14: 1ffff11039f7169d R15: ffff8881cfb8b000 [ 2361.366674][T18943] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2361.376140][T18943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2361.383411][T18943] CR2: 00007f207fb2e058 CR3: 00000001ed223000 CR4: 00000000003406f0 [ 2361.391575][T18943] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2361.400058][T18943] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2361.408379][T18943] Call Trace: [ 2361.412051][T18943] loop_add+0x554/0x710 [ 2361.416442][T18943] loop_control_ioctl+0x465/0x600 [ 2361.421474][T18943] ? loop_remove+0xa0/0xa0 [ 2361.426276][T18943] do_vfs_ioctl+0x6d1/0x15b0 [ 2361.431603][T18943] __x64_sys_ioctl+0xd4/0x110 [ 2361.436386][T18943] do_syscall_64+0xcb/0x1c0 [ 2361.440998][T18943] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2361.447366][T18943] RIP: 0033:0x7efdb617c209 [ 2361.451983][T18943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2361.472363][T18943] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2361.481946][T18943] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2361.490456][T18943] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2361.498673][T18943] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.506944][T18943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2361.515074][T18943] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:28 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:28 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 46) 06:10:28 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x0, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:28 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x0, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2361.523039][T18943] ---[ end trace 4781fc9bf8f706fa ]--- 06:10:28 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2361.579231][T18981] FAULT_INJECTION: forcing a failure. [ 2361.579231][T18981] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.593092][T18981] CPU: 0 PID: 18981 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2361.605193][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2361.615247][T18981] Call Trace: [ 2361.618536][T18981] dump_stack+0x18e/0x1d5 [ 2361.623268][T18981] should_fail+0x604/0x770 [ 2361.627762][T18981] ? __kernfs_new_node+0x47/0x650 [ 2361.632882][T18981] should_failslab+0x5/0x20 [ 2361.637379][T18981] __kmalloc_track_caller+0x4f/0x280 [ 2361.642849][T18981] kstrdup_const+0x51/0x90 [ 2361.647289][T18981] __kernfs_new_node+0x47/0x650 [ 2361.652501][T18981] ? __kasan_kmalloc+0x1a5/0x1e0 [ 2361.657417][T18981] ? device_create+0x86/0xb0 [ 2361.661990][T18981] ? __kasan_kmalloc+0x131/0x1e0 [ 2361.666919][T18981] ? device_add+0xb6/0xbc0 [ 2361.671820][T18981] ? device_create_vargs+0x1b8/0x210 [ 2361.677377][T18981] ? device_create+0x86/0xb0 [ 2361.682510][T18981] ? bdi_register_va+0x89/0x5e0 [ 2361.688071][T18981] ? bdi_register+0x80/0xa0 [ 2361.692741][T18981] ? bdi_register_owner+0x56/0xf0 [ 2361.697776][T18981] ? __device_add_disk+0x583/0x1210 [ 2361.703177][T18981] ? loop_add+0x554/0x710 [ 2361.707613][T18981] ? loop_control_ioctl+0x465/0x600 [ 2361.713003][T18981] ? do_vfs_ioctl+0x6d1/0x15b0 [ 2361.718098][T18981] kernfs_create_dir_ns+0x90/0x220 [ 2361.724505][T18981] sysfs_create_dir_ns+0x14e/0x2f0 [ 2361.730011][T18981] kobject_add_internal+0x5b5/0xb20 [ 2361.738788][T18981] kobject_add+0x100/0x1a0 [ 2361.743397][T18981] device_add+0x3fc/0xbc0 [ 2361.748195][T18981] device_create_vargs+0x1b8/0x210 [ 2361.753836][T18981] device_create+0x86/0xb0 [ 2361.758409][T18981] bdi_register_va+0x89/0x5e0 [ 2361.763262][T18981] bdi_register+0x80/0xa0 [ 2361.767584][T18981] ? __device_add_disk+0x50a/0x1210 [ 2361.773311][T18981] bdi_register_owner+0x56/0xf0 [ 2361.778502][T18981] __device_add_disk+0x583/0x1210 [ 2361.783520][T18981] loop_add+0x554/0x710 [ 2361.788110][T18981] loop_control_ioctl+0x465/0x600 [ 2361.793254][T18981] ? loop_remove+0xa0/0xa0 [ 2361.797662][T18981] do_vfs_ioctl+0x6d1/0x15b0 [ 2361.802697][T18981] __x64_sys_ioctl+0xd4/0x110 [ 2361.807466][T18981] do_syscall_64+0xcb/0x1c0 [ 2361.812207][T18981] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2361.819138][T18981] RIP: 0033:0x7efdb617c209 [ 2361.823782][T18981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2361.844755][T18981] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2361.853636][T18981] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2361.861826][T18981] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2361.870007][T18981] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.878857][T18981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2361.887806][T18981] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2361.897734][T18981] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 2361.905534][T18981] ------------[ cut here ]------------ [ 2361.911212][T18981] WARNING: CPU: 0 PID: 18981 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2361.920407][T18981] Modules linked in: [ 2361.924574][T18981] CPU: 0 PID: 18981 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2361.936693][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2361.947673][T18981] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2361.954650][T18981] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2361.975787][T18981] RSP: 0018:ffff8881f01afce8 EFLAGS: 00010246 [ 2361.982241][T18981] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2361.990676][T18981] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2362.002722][T18981] RBP: ffff8881ef7b6718 R08: ffffffff82114c4e R09: 0000000000000010 [ 2362.012512][T18981] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2362.022641][T18981] R13: 1ffff1103c9d0a01 R14: 1ffff1103c9d0a9d R15: ffff8881e4e85000 [ 2362.031595][T18981] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2362.040648][T18981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2362.047515][T18981] CR2: 00007f45cd2f2058 CR3: 00000001ed6d2000 CR4: 00000000003406f0 [ 2362.057413][T18981] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2362.069561][T18981] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2362.078792][T18981] Call Trace: [ 2362.082521][T18981] loop_add+0x554/0x710 [ 2362.087725][T18981] loop_control_ioctl+0x465/0x600 [ 2362.092754][T18981] ? loop_remove+0xa0/0xa0 [ 2362.097332][T18981] do_vfs_ioctl+0x6d1/0x15b0 [ 2362.102245][T18981] __x64_sys_ioctl+0xd4/0x110 [ 2362.107448][T18981] do_syscall_64+0xcb/0x1c0 [ 2362.112715][T18981] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2362.119237][T18981] RIP: 0033:0x7efdb617c209 [ 2362.123909][T18981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2362.145508][T18981] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2362.155551][T18981] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2362.163524][T18981] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 06:10:29 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:29 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x34140, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x34140, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async) 06:10:29 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) 06:10:29 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x0, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:29 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 47) 06:10:29 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:29 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:29 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2362.173052][T18981] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2362.184505][T18981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2362.193522][T18981] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2362.201844][T18981] ---[ end trace 4781fc9bf8f706fb ]--- [ 2362.260364][T18998] FAULT_INJECTION: forcing a failure. [ 2362.260364][T18998] name failslab, interval 1, probability 0, space 0, times 0 [ 2362.273833][T18998] CPU: 0 PID: 18998 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2362.286660][T18998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2362.296808][T18998] Call Trace: [ 2362.300243][T18998] dump_stack+0x18e/0x1d5 [ 2362.305167][T18998] should_fail+0x604/0x770 06:10:29 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x34140, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x34140, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async) 06:10:29 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x0, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2362.309771][T18998] ? __kernfs_new_node+0x8b/0x650 [ 2362.315001][T18998] should_failslab+0x5/0x20 [ 2362.319514][T18998] kmem_cache_alloc+0x24/0x210 [ 2362.324295][T18998] __kernfs_new_node+0x8b/0x650 [ 2362.329238][T18998] ? __kasan_kmalloc+0x1a5/0x1e0 [ 2362.334169][T18998] ? device_create+0x86/0xb0 [ 2362.339607][T18998] ? __kasan_kmalloc+0x131/0x1e0 [ 2362.344871][T18998] ? device_add+0xb6/0xbc0 [ 2362.349276][T18998] ? device_create_vargs+0x1b8/0x210 [ 2362.354547][T18998] ? device_create+0x86/0xb0 06:10:29 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x1}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000004", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB="880b414ff7261eb7926b5fc8d508a71c2b518154040000004022cdd449f45c52408ea5e94adcafe58e"], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0x10000104) inotify_rm_watch(r5, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r3) [ 2362.359216][T18998] ? bdi_register_va+0x89/0x5e0 [ 2362.364340][T18998] ? bdi_register+0x80/0xa0 [ 2362.369189][T18998] ? bdi_register_owner+0x56/0xf0 [ 2362.374195][T18998] ? __device_add_disk+0x583/0x1210 [ 2362.379680][T18998] ? loop_add+0x554/0x710 [ 2362.384355][T18998] ? loop_control_ioctl+0x465/0x600 [ 2362.389778][T18998] ? do_vfs_ioctl+0x6d1/0x15b0 [ 2362.395165][T18998] kernfs_create_dir_ns+0x90/0x220 [ 2362.400651][T18998] sysfs_create_dir_ns+0x14e/0x2f0 [ 2362.406030][T18998] kobject_add_internal+0x5b5/0xb20 [ 2362.411224][T18998] kobject_add+0x100/0x1a0 [ 2362.415862][T18998] device_add+0x3fc/0xbc0 [ 2362.420482][T18998] device_create_vargs+0x1b8/0x210 [ 2362.425745][T18998] device_create+0x86/0xb0 [ 2362.430477][T18998] bdi_register_va+0x89/0x5e0 [ 2362.435847][T18998] bdi_register+0x80/0xa0 [ 2362.440266][T18998] ? __device_add_disk+0x50a/0x1210 [ 2362.445452][T18998] bdi_register_owner+0x56/0xf0 [ 2362.450314][T18998] __device_add_disk+0x583/0x1210 [ 2362.455525][T18998] loop_add+0x554/0x710 [ 2362.459943][T18998] loop_control_ioctl+0x465/0x600 [ 2362.465163][T18998] ? loop_remove+0xa0/0xa0 [ 2362.469772][T18998] do_vfs_ioctl+0x6d1/0x15b0 [ 2362.475010][T18998] __x64_sys_ioctl+0xd4/0x110 [ 2362.480212][T18998] do_syscall_64+0xcb/0x1c0 [ 2362.484921][T18998] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2362.491506][T18998] RIP: 0033:0x7efdb617c209 [ 2362.496173][T18998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2362.518205][T18998] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2362.529089][T18998] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2362.538203][T18998] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2362.547563][T18998] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2362.555992][T18998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2362.565126][T18998] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2362.574684][T18998] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 2362.582927][T18998] ------------[ cut here ]------------ [ 2362.588937][T18998] WARNING: CPU: 0 PID: 18998 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2362.598826][T18998] Modules linked in: [ 2362.602872][T18998] CPU: 0 PID: 18998 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2362.615206][T18998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2362.625887][T18998] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2362.632299][T18998] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2362.652186][T18998] RSP: 0018:ffff8881f26ffce8 EFLAGS: 00010246 [ 2362.658247][T18998] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2362.666901][T18998] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2362.675450][T18998] RBP: ffff8881ef7b44d8 R08: ffffffff82114c4e R09: 0000000000000010 [ 2362.683514][T18998] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2362.691604][T18998] R13: 1ffff1103e45c601 R14: 1ffff1103e45c69d R15: ffff8881f22e3000 [ 2362.699983][T18998] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2362.709414][T18998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2362.716102][T18998] CR2: 00007ffe555e0ca8 CR3: 00000001eb63b000 CR4: 00000000003406f0 [ 2362.724591][T18998] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2362.735693][T18998] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2362.743886][T18998] Call Trace: [ 2362.747263][T18998] loop_add+0x554/0x710 [ 2362.753858][T18998] loop_control_ioctl+0x465/0x600 [ 2362.760151][T18998] ? loop_remove+0xa0/0xa0 [ 2362.765792][T18998] do_vfs_ioctl+0x6d1/0x15b0 [ 2362.771161][T18998] __x64_sys_ioctl+0xd4/0x110 [ 2362.776060][T18998] do_syscall_64+0xcb/0x1c0 [ 2362.781484][T18998] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2362.787448][T18998] RIP: 0033:0x7efdb617c209 [ 2362.792208][T18998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2362.813089][T18998] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2362.821763][T18998] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2362.829822][T18998] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2362.838179][T18998] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2362.846243][T18998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:30 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2362.854950][T18998] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2362.863838][T18998] ---[ end trace 4781fc9bf8f706fc ]--- 06:10:30 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:30 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x0, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:30 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 48) 06:10:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x1}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000004", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB="880b414ff7261eb7926b5fc8d508a71c2b518154040000004022cdd449f45c52408ea5e94adcafe58e"], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0x10000104) inotify_rm_watch(r5, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x1}) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000004", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB="880b414ff7261eb7926b5fc8d508a71c2b518154040000004022cdd449f45c52408ea5e94adcafe58e"], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0x10000104) (async) inotify_rm_watch(r5, r6) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r3) (async) 06:10:30 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 06:10:30 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2363.079616][T19045] FAULT_INJECTION: forcing a failure. [ 2363.079616][T19045] name failslab, interval 1, probability 0, space 0, times 0 [ 2363.092719][T19045] CPU: 0 PID: 19045 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2363.104655][T19045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2363.115310][T19045] Call Trace: [ 2363.118684][T19045] dump_stack+0x18e/0x1d5 [ 2363.123102][T19045] should_fail+0x604/0x770 06:10:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x1}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000004", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB="880b414ff7261eb7926b5fc8d508a71c2b518154040000004022cdd449f45c52408ea5e94adcafe58e"], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async, rerun: 64) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (rerun: 64) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async, rerun: 64) r6 = inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0x10000104) (rerun: 64) inotify_rm_watch(r5, r6) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r3) (rerun: 64) 06:10:30 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 2363.127972][T19045] ? device_create_vargs+0x1b8/0x210 [ 2363.133258][T19045] ? radix_tree_node_alloc+0x18c/0x370 [ 2363.139086][T19045] should_failslab+0x5/0x20 [ 2363.143601][T19045] kmem_cache_alloc+0x24/0x210 [ 2363.148485][T19045] radix_tree_node_alloc+0x18c/0x370 [ 2363.153878][T19045] idr_get_free+0x299/0x840 [ 2363.158475][T19045] idr_alloc_cyclic+0x182/0x550 [ 2363.163453][T19045] __kernfs_new_node+0xde/0x650 [ 2363.168290][T19045] ? __kasan_kmalloc+0x1a5/0x1e0 [ 2363.173343][T19045] ? device_add+0xb6/0xbc0 [ 2363.177744][T19045] ? device_create_vargs+0x1b8/0x210 [ 2363.183006][T19045] ? device_create+0x86/0xb0 [ 2363.187663][T19045] ? bdi_register_va+0x89/0x5e0 [ 2363.192587][T19045] ? bdi_register+0x80/0xa0 [ 2363.197082][T19045] ? bdi_register_owner+0x56/0xf0 [ 2363.202105][T19045] ? __device_add_disk+0x583/0x1210 [ 2363.207510][T19045] ? loop_add+0x554/0x710 [ 2363.211830][T19045] ? loop_control_ioctl+0x465/0x600 [ 2363.217289][T19045] ? do_vfs_ioctl+0x6d1/0x15b0 [ 2363.222038][T19045] kernfs_create_dir_ns+0x90/0x220 [ 2363.227237][T19045] sysfs_create_dir_ns+0x14e/0x2f0 [ 2363.232715][T19045] kobject_add_internal+0x5b5/0xb20 [ 2363.237998][T19045] kobject_add+0x100/0x1a0 [ 2363.242430][T19045] device_add+0x3fc/0xbc0 [ 2363.246743][T19045] device_create_vargs+0x1b8/0x210 [ 2363.251930][T19045] device_create+0x86/0xb0 [ 2363.256354][T19045] bdi_register_va+0x89/0x5e0 [ 2363.262109][T19045] bdi_register+0x80/0xa0 [ 2363.266426][T19045] ? __device_add_disk+0x50a/0x1210 [ 2363.271870][T19045] bdi_register_owner+0x56/0xf0 [ 2363.277188][T19045] __device_add_disk+0x583/0x1210 [ 2363.282439][T19045] loop_add+0x554/0x710 [ 2363.286798][T19045] loop_control_ioctl+0x465/0x600 [ 2363.292079][T19045] ? loop_remove+0xa0/0xa0 [ 2363.296549][T19045] do_vfs_ioctl+0x6d1/0x15b0 [ 2363.301160][T19045] __x64_sys_ioctl+0xd4/0x110 [ 2363.305819][T19045] do_syscall_64+0xcb/0x1c0 [ 2363.310448][T19045] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2363.316336][T19045] RIP: 0033:0x7efdb617c209 [ 2363.320835][T19045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2363.340781][T19045] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2363.349174][T19045] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2363.357124][T19045] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2363.365256][T19045] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:30 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x0, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:30 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 49) 06:10:30 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0x0, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:30 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0x0, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2363.373317][T19045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2363.381394][T19045] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2363.437141][T19087] FAULT_INJECTION: forcing a failure. [ 2363.437141][T19087] name failslab, interval 1, probability 0, space 0, times 0 [ 2363.450134][T19087] CPU: 0 PID: 19087 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2363.461749][T19087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2363.472310][T19087] Call Trace: [ 2363.475708][T19087] dump_stack+0x18e/0x1d5 [ 2363.480049][T19087] should_fail+0x604/0x770 [ 2363.484557][T19087] ? mutex_lock+0x6c/0xc0 [ 2363.489009][T19087] ? __kernfs_new_node+0x8b/0x650 [ 2363.494139][T19087] should_failslab+0x5/0x20 [ 2363.501806][T19087] kmem_cache_alloc+0x24/0x210 [ 2363.506567][T19087] __kernfs_new_node+0x8b/0x650 [ 2363.511696][T19087] ? kernfs_add_one+0x4a3/0x5c0 [ 2363.516525][T19087] ? kernfs_create_dir_ns+0x1df/0x220 [ 2363.521971][T19087] kernfs_new_node+0x95/0x160 [ 2363.526981][T19087] __kernfs_create_file+0x45/0x260 [ 2363.532077][T19087] sysfs_add_file_mode_ns+0x292/0x340 [ 2363.537425][T19087] sysfs_create_file_ns+0x140/0x200 [ 2363.542878][T19087] device_add+0x4c3/0xbc0 [ 2363.547344][T19087] device_create_vargs+0x1b8/0x210 [ 2363.552469][T19087] device_create+0x86/0xb0 [ 2363.556907][T19087] bdi_register_va+0x89/0x5e0 [ 2363.561822][T19087] bdi_register+0x80/0xa0 [ 2363.566134][T19087] ? __device_add_disk+0x50a/0x1210 [ 2363.571671][T19087] bdi_register_owner+0x56/0xf0 [ 2363.576639][T19087] __device_add_disk+0x583/0x1210 [ 2363.581656][T19087] loop_add+0x554/0x710 [ 2363.585802][T19087] loop_control_ioctl+0x465/0x600 [ 2363.590817][T19087] ? loop_remove+0xa0/0xa0 [ 2363.595270][T19087] do_vfs_ioctl+0x6d1/0x15b0 [ 2363.599936][T19087] __x64_sys_ioctl+0xd4/0x110 [ 2363.604687][T19087] do_syscall_64+0xcb/0x1c0 [ 2363.609353][T19087] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2363.615233][T19087] RIP: 0033:0x7efdb617c209 [ 2363.619733][T19087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2363.640362][T19087] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2363.648840][T19087] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2363.656899][T19087] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2363.665158][T19087] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2363.673235][T19087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2363.681803][T19087] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2363.691716][T19087] ------------[ cut here ]------------ [ 2363.697176][T19087] WARNING: CPU: 0 PID: 19087 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2363.706358][T19087] Modules linked in: [ 2363.710421][T19087] CPU: 0 PID: 19087 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2363.722162][T19087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2363.732707][T19087] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2363.738554][T19087] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2363.760217][T19087] RSP: 0018:ffff8881ce44fce8 EFLAGS: 00010246 [ 2363.766588][T19087] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2363.774843][T19087] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2363.783198][T19087] RBP: ffff8881ef7b2b28 R08: ffffffff82114c4e R09: 0000000000000010 [ 2363.791376][T19087] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2363.799717][T19087] R13: 1ffff1103ca27e01 R14: 1ffff1103ca27e9d R15: ffff8881e513f000 [ 2363.808014][T19087] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2363.817364][T19087] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2363.823930][T19087] CR2: 00007ffe555e0ca8 CR3: 00000001eaf38000 CR4: 00000000003406f0 [ 2363.832247][T19087] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2363.841196][T19087] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2363.849837][T19087] Call Trace: [ 2363.853124][T19087] loop_add+0x554/0x710 [ 2363.857294][T19087] loop_control_ioctl+0x465/0x600 [ 2363.862311][T19087] ? loop_remove+0xa0/0xa0 [ 2363.866804][T19087] do_vfs_ioctl+0x6d1/0x15b0 [ 2363.871391][T19087] __x64_sys_ioctl+0xd4/0x110 [ 2363.876117][T19087] do_syscall_64+0xcb/0x1c0 [ 2363.880719][T19087] entry_SYSCALL_64_after_hwframe+0x44/0xa9 06:10:31 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0), 0x0, 0x0, 0x0) 06:10:31 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0x0, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:31 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa002, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) socketpair(0x22, 0x1, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x41f}, 0xe) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:31 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) 06:10:31 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2363.886874][T19087] RIP: 0033:0x7efdb617c209 [ 2363.892148][T19087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2363.911944][T19087] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2363.920349][T19087] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2363.928326][T19087] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 06:10:31 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 50) 06:10:31 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x0, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:31 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x0, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:31 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x0, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:31 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:31 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2363.936399][T19087] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2363.944382][T19087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2363.952368][T19087] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2363.960327][T19087] ---[ end trace 4781fc9bf8f706fd ]--- 06:10:31 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2364.033587][T19105] FAULT_INJECTION: forcing a failure. [ 2364.033587][T19105] name failslab, interval 1, probability 0, space 0, times 0 [ 2364.046517][T19105] CPU: 0 PID: 19105 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2364.058516][T19105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2364.069118][T19105] Call Trace: [ 2364.072506][T19105] dump_stack+0x18e/0x1d5 [ 2364.076826][T19105] should_fail+0x604/0x770 [ 2364.081290][T19105] ? __kernfs_new_node+0x8b/0x650 [ 2364.086295][T19105] should_failslab+0x5/0x20 [ 2364.090877][T19105] kmem_cache_alloc+0x24/0x210 [ 2364.095717][T19105] __kernfs_new_node+0x8b/0x650 [ 2364.100746][T19105] ? mutex_unlock+0x19/0x40 [ 2364.105367][T19105] ? kernfs_add_one+0x4a3/0x5c0 [ 2364.110336][T19105] kernfs_new_node+0x95/0x160 [ 2364.115243][T19105] kernfs_create_link+0x9c/0x1f0 [ 2364.120329][T19105] sysfs_do_create_link_sd+0x85/0x100 [ 2364.125757][T19105] device_add_class_symlinks+0xd6/0x2a0 [ 2364.131379][T19105] device_add+0x4e4/0xbc0 [ 2364.136097][T19105] device_create_vargs+0x1b8/0x210 [ 2364.141220][T19105] device_create+0x86/0xb0 [ 2364.145877][T19105] bdi_register_va+0x89/0x5e0 [ 2364.150543][T19105] bdi_register+0x80/0xa0 [ 2364.155115][T19105] ? __device_add_disk+0x50a/0x1210 [ 2364.160471][T19105] bdi_register_owner+0x56/0xf0 [ 2364.165324][T19105] __device_add_disk+0x583/0x1210 [ 2364.170498][T19105] loop_add+0x554/0x710 [ 2364.174647][T19105] loop_control_ioctl+0x465/0x600 [ 2364.179658][T19105] ? loop_remove+0xa0/0xa0 [ 2364.184061][T19105] do_vfs_ioctl+0x6d1/0x15b0 [ 2364.188694][T19105] __x64_sys_ioctl+0xd4/0x110 [ 2364.193364][T19105] do_syscall_64+0xcb/0x1c0 [ 2364.197847][T19105] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2364.203808][T19105] RIP: 0033:0x7efdb617c209 [ 2364.208200][T19105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2364.229448][T19105] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2364.237836][T19105] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2364.246162][T19105] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2364.254110][T19105] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2364.262328][T19105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2364.270377][T19105] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2364.279499][T19105] ------------[ cut here ]------------ [ 2364.285139][T19105] WARNING: CPU: 0 PID: 19105 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2364.294384][T19105] Modules linked in: [ 2364.298416][T19105] CPU: 0 PID: 19105 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2364.310015][T19105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2364.320247][T19105] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2364.326029][T19105] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2364.345631][T19105] RSP: 0018:ffff8881e5f3fce8 EFLAGS: 00010246 [ 2364.351677][T19105] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2364.359626][T19105] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2364.367578][T19105] RBP: ffff8881ef7b0058 R08: ffffffff82114c4e R09: 0000000000000010 [ 2364.375730][T19105] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2364.383684][T19105] R13: 1ffff11039fb7601 R14: 1ffff11039fb769d R15: ffff8881cfdbb000 [ 2364.391631][T19105] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2364.400534][T19105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2364.407180][T19105] CR2: 00007f207fb2e058 CR3: 00000001eaf38000 CR4: 00000000003406f0 [ 2364.415138][T19105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2364.423293][T19105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2364.431238][T19105] Call Trace: [ 2364.434509][T19105] loop_add+0x554/0x710 [ 2364.438802][T19105] loop_control_ioctl+0x465/0x600 [ 2364.443817][T19105] ? loop_remove+0xa0/0xa0 [ 2364.448391][T19105] do_vfs_ioctl+0x6d1/0x15b0 [ 2364.453134][T19105] __x64_sys_ioctl+0xd4/0x110 [ 2364.457799][T19105] do_syscall_64+0xcb/0x1c0 [ 2364.462411][T19105] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2364.468314][T19105] RIP: 0033:0x7efdb617c209 [ 2364.472790][T19105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2364.492368][T19105] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2364.501009][T19105] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2364.508969][T19105] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2364.516931][T19105] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2364.524882][T19105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2364.532956][T19105] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2364.540913][T19105] ---[ end trace 4781fc9bf8f706fe ]--- 06:10:32 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0), 0x0, 0x0, 0x0) 06:10:32 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa002, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) (async, rerun: 64) socketpair(0x22, 0x1, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 64) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x41f}, 0xe) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:32 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x0, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:32 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 51) 06:10:32 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:32 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:32 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x0, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2364.778175][T19130] FAULT_INJECTION: forcing a failure. [ 2364.778175][T19130] name failslab, interval 1, probability 0, space 0, times 0 [ 2364.791160][T19130] CPU: 0 PID: 19130 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2364.803112][T19130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2364.813412][T19130] Call Trace: [ 2364.816741][T19130] dump_stack+0x18e/0x1d5 [ 2364.821323][T19130] should_fail+0x604/0x770 [ 2364.825831][T19130] ? selinux_kernfs_init_security+0xea/0x630 [ 2364.831882][T19130] ? __kernfs_new_node+0x47/0x650 [ 2364.837051][T19130] should_failslab+0x5/0x20 [ 2364.841550][T19130] __kmalloc_track_caller+0x4f/0x280 [ 2364.846969][T19130] kstrdup_const+0x51/0x90 [ 2364.851374][T19130] __kernfs_new_node+0x47/0x650 [ 2364.856229][T19130] ? mutex_lock+0x6c/0xc0 [ 2364.862585][T19130] ? kernfs_activate+0x3fc/0x420 [ 2364.867600][T19130] kernfs_new_node+0x95/0x160 [ 2364.872359][T19130] kernfs_create_link+0x9c/0x1f0 [ 2364.877275][T19130] sysfs_do_create_link_sd+0x85/0x100 [ 2364.882716][T19130] device_add_class_symlinks+0x211/0x2a0 [ 2364.888467][T19130] device_add+0x4e4/0xbc0 [ 2364.892780][T19130] device_create_vargs+0x1b8/0x210 [ 2364.898151][T19130] device_create+0x86/0xb0 [ 2364.902565][T19130] bdi_register_va+0x89/0x5e0 [ 2364.907228][T19130] bdi_register+0x80/0xa0 [ 2364.911646][T19130] ? __device_add_disk+0x50a/0x1210 [ 2364.916855][T19130] bdi_register_owner+0x56/0xf0 [ 2364.921689][T19130] __device_add_disk+0x583/0x1210 [ 2364.926710][T19130] loop_add+0x554/0x710 [ 2364.931093][T19130] loop_control_ioctl+0x465/0x600 [ 2364.936128][T19130] ? loop_remove+0xa0/0xa0 [ 2364.940683][T19130] do_vfs_ioctl+0x6d1/0x15b0 [ 2364.945438][T19130] __x64_sys_ioctl+0xd4/0x110 [ 2364.950114][T19130] do_syscall_64+0xcb/0x1c0 [ 2364.954988][T19130] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2364.961145][T19130] RIP: 0033:0x7efdb617c209 [ 2364.965537][T19130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2364.985325][T19130] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2364.993812][T19130] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2365.001850][T19130] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2365.009864][T19130] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.017908][T19130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:32 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x0, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2365.026115][T19130] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2365.036254][T19130] ------------[ cut here ]------------ [ 2365.041732][T19130] WARNING: CPU: 0 PID: 19130 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2365.050901][T19130] Modules linked in: [ 2365.054780][T19130] CPU: 0 PID: 19130 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2365.066392][T19130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2365.076527][T19130] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2365.082323][T19130] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2365.102420][T19130] RSP: 0018:ffff8881cd357ce8 EFLAGS: 00010246 [ 2365.108535][T19130] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2365.116493][T19130] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2365.124698][T19130] RBP: ffff8881ef7b1178 R08: ffffffff82114c4e R09: 0000000000000010 [ 2365.132664][T19130] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2365.140723][T19130] R13: 1ffff1103c5fee01 R14: 1ffff1103c5fee9d R15: ffff8881e2ff7000 [ 2365.149027][T19130] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2365.158117][T19130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2365.164772][T19130] CR2: 00007efdb52f1ff8 CR3: 00000001e1e5c000 CR4: 00000000003406f0 [ 2365.172724][T19130] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2365.180953][T19130] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2365.188996][T19130] Call Trace: [ 2365.192355][T19130] loop_add+0x554/0x710 [ 2365.196510][T19130] loop_control_ioctl+0x465/0x600 [ 2365.201515][T19130] ? loop_remove+0xa0/0xa0 [ 2365.205921][T19130] do_vfs_ioctl+0x6d1/0x15b0 [ 2365.210494][T19130] __x64_sys_ioctl+0xd4/0x110 [ 2365.215276][T19130] do_syscall_64+0xcb/0x1c0 [ 2365.219766][T19130] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2365.225636][T19130] RIP: 0033:0x7efdb617c209 [ 2365.230036][T19130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2365.250033][T19130] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2365.258511][T19130] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2365.266553][T19130] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 06:10:32 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:32 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 52) 06:10:32 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:32 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2365.274513][T19130] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.282553][T19130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.290694][T19130] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2365.298789][T19130] ---[ end trace 4781fc9bf8f706ff ]--- [ 2365.347849][T19151] FAULT_INJECTION: forcing a failure. [ 2365.347849][T19151] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.365360][T19151] CPU: 1 PID: 19151 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2365.377172][T19151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2365.388703][T19151] Call Trace: [ 2365.391996][T19151] dump_stack+0x18e/0x1d5 [ 2365.396330][T19151] should_fail+0x604/0x770 [ 2365.401265][T19151] ? __kernfs_new_node+0x8b/0x650 [ 2365.406372][T19151] should_failslab+0x5/0x20 [ 2365.410868][T19151] kmem_cache_alloc+0x24/0x210 [ 2365.415723][T19151] __kernfs_new_node+0x8b/0x650 [ 2365.420552][T19151] ? mutex_lock+0x6c/0xc0 [ 2365.424851][T19151] ? kernfs_activate+0x3fc/0x420 [ 2365.429757][T19151] kernfs_new_node+0x95/0x160 [ 2365.434625][T19151] kernfs_create_link+0x9c/0x1f0 [ 2365.439756][T19151] sysfs_do_create_link_sd+0x85/0x100 [ 2365.445473][T19151] device_add_class_symlinks+0x211/0x2a0 [ 2365.451697][T19151] device_add+0x4e4/0xbc0 [ 2365.456023][T19151] device_create_vargs+0x1b8/0x210 [ 2365.461201][T19151] device_create+0x86/0xb0 [ 2365.465599][T19151] bdi_register_va+0x89/0x5e0 [ 2365.470427][T19151] bdi_register+0x80/0xa0 [ 2365.474885][T19151] ? __device_add_disk+0x50a/0x1210 [ 2365.480157][T19151] bdi_register_owner+0x56/0xf0 [ 2365.485224][T19151] __device_add_disk+0x583/0x1210 [ 2365.490232][T19151] loop_add+0x554/0x710 [ 2365.494633][T19151] loop_control_ioctl+0x465/0x600 [ 2365.499645][T19151] ? loop_remove+0xa0/0xa0 [ 2365.504061][T19151] do_vfs_ioctl+0x6d1/0x15b0 [ 2365.508902][T19151] __x64_sys_ioctl+0xd4/0x110 [ 2365.513566][T19151] do_syscall_64+0xcb/0x1c0 [ 2365.518050][T19151] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2365.524006][T19151] RIP: 0033:0x7efdb617c209 [ 2365.528419][T19151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2365.548414][T19151] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2365.557297][T19151] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2365.565431][T19151] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2365.573555][T19151] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.581511][T19151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.589479][T19151] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2365.599895][T19151] ------------[ cut here ]------------ [ 2365.605601][T19151] WARNING: CPU: 1 PID: 19151 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2365.615189][T19151] Modules linked in: [ 2365.619289][T19151] CPU: 1 PID: 19151 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2365.631293][T19151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2365.641430][T19151] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2365.647220][T19151] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2365.670023][T19151] RSP: 0018:ffff8881ea26fce8 EFLAGS: 00010246 [ 2365.676080][T19151] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2365.689392][T19151] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2365.697813][T19151] RBP: ffff8881ef7b6fa8 R08: ffffffff82114c4e R09: 0000000000000010 [ 2365.708871][T19151] R10: ffffffff84400000 R11: 1ffff1103edeb100 R12: dffffc0000000000 [ 2365.717205][T19151] R13: 1ffff110398f4001 R14: 1ffff110398f409d R15: ffff8881cc7a0000 [ 2365.725177][T19151] FS: 00007efdb52f2700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2365.734192][T19151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2365.740750][T19151] CR2: 00007ffd37c39ff8 CR3: 00000001d25ee000 CR4: 00000000003406e0 [ 2365.749142][T19151] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2365.757335][T19151] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2365.765368][T19151] Call Trace: [ 2365.768945][T19151] loop_add+0x554/0x710 [ 2365.773123][T19151] loop_control_ioctl+0x465/0x600 [ 2365.778144][T19151] ? loop_remove+0xa0/0xa0 [ 2365.783849][T19151] do_vfs_ioctl+0x6d1/0x15b0 [ 2365.788530][T19151] __x64_sys_ioctl+0xd4/0x110 [ 2365.793477][T19151] do_syscall_64+0xcb/0x1c0 [ 2365.797967][T19151] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2365.803836][T19151] RIP: 0033:0x7efdb617c209 [ 2365.808344][T19151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2365.827939][T19151] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2365.836326][T19151] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 06:10:33 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, &(0x7f00000003c0), 0x0, 0x0, 0x0) 06:10:33 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x0, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:33 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa002, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) (async, rerun: 32) socketpair(0x22, 0x1, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x41f}, 0xe) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:33 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa0800, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x602040, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:33 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 53) 06:10:33 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x0, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:33 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x0, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa0800, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x602040, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa0800, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x602040, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) 06:10:33 executing program 3: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="d9d002196036ed44ea5dafbff4e32d07149613437f4c3126745584a13307c8be0196b19b542164b80dd685f29effb250c1c1ce34528df8e0bf9df1cfb90f5ae560db63b24ed71bca1555db51ee5b745dff9e3315231e5a7eb9901a76281318c53b533ae4b4a8549430193c3d9b628aa252dab0ccbccd026f3256f73a489c95e33dd26288cc5191d21ecd11aacc5857f18f83572f67e8a496ada9cd5c7385acf6eef89ce7d8ed127fe089f94802daec309f17a0d4d8", 0xb5, 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="0f0ea5d35a8b1f92ec3eaffbcc0e4663e37fcc9c47f37bf9a2aadc33bd416f076765aec729f89a2ac923b89b1d5b5ffde79c733db70854740ae3a012fb03d80764e001d0bb748f6b003dbbc8f4ccc09ea483f6a90ea855bba23b194df6036fac9d11c4790748117cf998c04c199a09637c195be256ba3c827f61949b4a2c7457ac122a4744951b076e2d910786b4bfacc8ba7b5d26ae4bd7d0c65c1d2ac843dca6fd95bce442d4f71db7bbf2e6faabd7ff42a2d30dde9b335cac298f98f66b3af882ee78d842d1b33b387179807299a72e4da2d76ec30fd6754a07780b714a069b7940dc981103f0", 0xe8, 0xfffffffffffffffa) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:33 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:33 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2365.844313][T19151] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2365.852267][T19151] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.860280][T19151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.868248][T19151] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2365.876204][T19151] ---[ end trace 4781fc9bf8f70700 ]--- [ 2365.939207][T19171] FAULT_INJECTION: forcing a failure. [ 2365.939207][T19171] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.953004][T19171] CPU: 0 PID: 19171 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2365.964652][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2365.975557][T19171] Call Trace: [ 2365.978836][T19171] dump_stack+0x18e/0x1d5 [ 2365.983357][T19171] should_fail+0x604/0x770 [ 2365.987830][T19171] ? __kernfs_new_node+0x8b/0x650 [ 2365.993126][T19171] should_failslab+0x5/0x20 [ 2365.997640][T19171] kmem_cache_alloc+0x24/0x210 [ 2366.002560][T19171] __kernfs_new_node+0x8b/0x650 [ 2366.007400][T19171] ? mutex_unlock+0x19/0x40 [ 2366.012025][T19171] ? kernfs_xattr_get+0x81/0x90 [ 2366.016877][T19171] ? selinux_kernfs_init_security+0xea/0x630 [ 2366.022836][T19171] kernfs_new_node+0x95/0x160 [ 2366.027585][T19171] __kernfs_create_file+0x45/0x260 [ 2366.032866][T19171] sysfs_add_file_mode_ns+0x292/0x340 [ 2366.038246][T19171] internal_create_group+0x4a4/0xe00 [ 2366.043535][T19171] sysfs_create_groups+0x5d/0x130 [ 2366.048638][T19171] device_add_attrs+0x87/0x370 [ 2366.053603][T19171] device_add+0x505/0xbc0 [ 2366.058191][T19171] device_create_vargs+0x1b8/0x210 [ 2366.063461][T19171] device_create+0x86/0xb0 [ 2366.068060][T19171] bdi_register_va+0x89/0x5e0 [ 2366.072718][T19171] bdi_register+0x80/0xa0 [ 2366.077252][T19171] ? __device_add_disk+0x50a/0x1210 [ 2366.082433][T19171] bdi_register_owner+0x56/0xf0 [ 2366.087360][T19171] __device_add_disk+0x583/0x1210 [ 2366.092368][T19171] loop_add+0x554/0x710 [ 2366.096535][T19171] loop_control_ioctl+0x465/0x600 [ 2366.101641][T19171] ? loop_remove+0xa0/0xa0 [ 2366.106046][T19171] do_vfs_ioctl+0x6d1/0x15b0 [ 2366.110797][T19171] __x64_sys_ioctl+0xd4/0x110 [ 2366.115651][T19171] do_syscall_64+0xcb/0x1c0 [ 2366.120271][T19171] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2366.126180][T19171] RIP: 0033:0x7efdb617c209 [ 2366.130666][T19171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2366.150255][T19171] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2366.158648][T19171] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2366.166595][T19171] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2366.174550][T19171] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.182760][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2366.190882][T19171] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2366.202261][T19171] ------------[ cut here ]------------ [ 2366.207848][T19171] WARNING: CPU: 0 PID: 19171 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2366.217130][T19171] Modules linked in: [ 2366.221144][T19171] CPU: 0 PID: 19171 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2366.232965][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2366.243184][T19171] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2366.249061][T19171] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2366.268849][T19171] RSP: 0018:ffff8881e11c7ce8 EFLAGS: 00010246 [ 2366.274990][T19171] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2366.282946][T19171] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2366.290904][T19171] RBP: ffff8881ef7b5e88 R08: ffffffff82114c4e R09: 0000000000000010 [ 2366.298867][T19171] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2366.306898][T19171] R13: 1ffff1103c45f401 R14: 1ffff1103c45f49d R15: ffff8881e22fa000 [ 2366.314856][T19171] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2366.323768][T19171] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2366.330535][T19171] CR2: 00007f1a6406e718 CR3: 00000001e5d34000 CR4: 00000000003406f0 [ 2366.338524][T19171] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2366.346757][T19171] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2366.354719][T19171] Call Trace: [ 2366.357996][T19171] loop_add+0x554/0x710 [ 2366.362332][T19171] loop_control_ioctl+0x465/0x600 [ 2366.367345][T19171] ? loop_remove+0xa0/0xa0 [ 2366.371751][T19171] do_vfs_ioctl+0x6d1/0x15b0 [ 2366.376364][T19171] __x64_sys_ioctl+0xd4/0x110 [ 2366.381019][T19171] do_syscall_64+0xcb/0x1c0 [ 2366.385504][T19171] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2366.391771][T19171] RIP: 0033:0x7efdb617c209 [ 2366.396513][T19171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2366.416287][T19171] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2366.424765][T19171] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2366.432966][T19171] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2366.442074][T19171] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.450205][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2366.458270][T19171] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2366.466582][T19171] ---[ end trace 4781fc9bf8f70701 ]--- 06:10:34 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:34 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa0800, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x602040, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) (async, rerun: 32) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:34 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 54) 06:10:34 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:34 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:34 executing program 3: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="d9d002196036ed44ea5dafbff4e32d07149613437f4c3126745584a13307c8be0196b19b542164b80dd685f29effb250c1c1ce34528df8e0bf9df1cfb90f5ae560db63b24ed71bca1555db51ee5b745dff9e3315231e5a7eb9901a76281318c53b533ae4b4a8549430193c3d9b628aa252dab0ccbccd026f3256f73a489c95e33dd26288cc5191d21ecd11aacc5857f18f83572f67e8a496ada9cd5c7385acf6eef89ce7d8ed127fe089f94802daec309f17a0d4d8", 0xb5, 0xffffffffffffffff) (async) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="0f0ea5d35a8b1f92ec3eaffbcc0e4663e37fcc9c47f37bf9a2aadc33bd416f076765aec729f89a2ac923b89b1d5b5ffde79c733db70854740ae3a012fb03d80764e001d0bb748f6b003dbbc8f4ccc09ea483f6a90ea855bba23b194df6036fac9d11c4790748117cf998c04c199a09637c195be256ba3c827f61949b4a2c7457ac122a4744951b076e2d910786b4bfacc8ba7b5d26ae4bd7d0c65c1d2ac843dca6fd95bce442d4f71db7bbf2e6faabd7ff42a2d30dde9b335cac298f98f66b3af882ee78d842d1b33b387179807299a72e4da2d76ec30fd6754a07780b714a069b7940dc981103f0", 0xe8, 0xfffffffffffffffa) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:34 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:34 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2366.756466][T19204] FAULT_INJECTION: forcing a failure. [ 2366.756466][T19204] name failslab, interval 1, probability 0, space 0, times 0 [ 2366.779413][T19204] CPU: 1 PID: 19204 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2366.791396][T19204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2366.802044][T19204] Call Trace: [ 2366.805426][T19204] dump_stack+0x18e/0x1d5 [ 2366.809833][T19204] should_fail+0x604/0x770 [ 2366.814315][T19204] ? __kernfs_new_node+0x8b/0x650 [ 2366.819426][T19204] should_failslab+0x5/0x20 [ 2366.825298][T19204] kmem_cache_alloc+0x24/0x210 [ 2366.830039][T19204] __kernfs_new_node+0x8b/0x650 [ 2366.834875][T19204] ? mutex_lock+0x6c/0xc0 [ 2366.839193][T19204] ? kernfs_activate+0x3fc/0x420 [ 2366.844130][T19204] kernfs_new_node+0x95/0x160 [ 2366.848924][T19204] __kernfs_create_file+0x45/0x260 [ 2366.854214][T19204] sysfs_add_file_mode_ns+0x292/0x340 [ 2366.859760][T19204] internal_create_group+0x4a4/0xe00 [ 2366.865400][T19204] sysfs_create_groups+0x5d/0x130 [ 2366.870613][T19204] device_add_attrs+0x87/0x370 [ 2366.875554][T19204] device_add+0x505/0xbc0 [ 2366.879919][T19204] device_create_vargs+0x1b8/0x210 [ 2366.885151][T19204] device_create+0x86/0xb0 [ 2366.889577][T19204] bdi_register_va+0x89/0x5e0 [ 2366.894250][T19204] bdi_register+0x80/0xa0 [ 2366.898569][T19204] ? __device_add_disk+0x50a/0x1210 [ 2366.903748][T19204] bdi_register_owner+0x56/0xf0 [ 2366.908957][T19204] __device_add_disk+0x583/0x1210 [ 2366.914175][T19204] loop_add+0x554/0x710 [ 2366.918849][T19204] loop_control_ioctl+0x465/0x600 [ 2366.923859][T19204] ? loop_remove+0xa0/0xa0 [ 2366.928429][T19204] do_vfs_ioctl+0x6d1/0x15b0 [ 2366.933014][T19204] __x64_sys_ioctl+0xd4/0x110 [ 2366.937686][T19204] do_syscall_64+0xcb/0x1c0 [ 2366.942340][T19204] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2366.948232][T19204] RIP: 0033:0x7efdb617c209 [ 2366.952628][T19204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2366.973124][T19204] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2366.981940][T19204] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2366.990265][T19204] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2366.998312][T19204] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:34 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:34 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2367.006265][T19204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2367.014701][T19204] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2367.027511][T19204] ------------[ cut here ]------------ [ 2367.033394][T19204] WARNING: CPU: 0 PID: 19204 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2367.042660][T19204] Modules linked in: [ 2367.046722][T19204] CPU: 0 PID: 19204 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2367.058509][T19204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2367.068568][T19204] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2367.074963][T19204] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2367.094780][T19204] RSP: 0018:ffff8881cc13fce8 EFLAGS: 00010246 [ 2367.100824][T19204] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2367.109039][T19204] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2367.118019][T19204] RBP: ffff8881f0402b28 R08: ffffffff82114c4e R09: 0000000000000010 [ 2367.126088][T19204] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2367.134047][T19204] R13: 1ffff1103a280401 R14: 1ffff1103a28049d R15: ffff8881d1402000 [ 2367.142428][T19204] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2367.151622][T19204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2367.158185][T19204] CR2: 0000001b2f321000 CR3: 00000001e818b000 CR4: 00000000003406f0 [ 2367.167266][T19204] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2367.175316][T19204] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2367.183359][T19204] Call Trace: [ 2367.186752][T19204] loop_add+0x554/0x710 [ 2367.190992][T19204] loop_control_ioctl+0x465/0x600 [ 2367.196128][T19204] ? loop_remove+0xa0/0xa0 [ 2367.200615][T19204] do_vfs_ioctl+0x6d1/0x15b0 [ 2367.205207][T19204] __x64_sys_ioctl+0xd4/0x110 [ 2367.209968][T19204] do_syscall_64+0xcb/0x1c0 [ 2367.214811][T19204] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2367.220685][T19204] RIP: 0033:0x7efdb617c209 [ 2367.225100][T19204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2367.245234][T19204] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:10:34 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:34 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 55) [ 2367.253849][T19204] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2367.262365][T19204] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2367.270410][T19204] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2367.278701][T19204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2367.286833][T19204] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2367.294795][T19204] ---[ end trace 4781fc9bf8f70702 ]--- 06:10:34 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:34 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0x0, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:34 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) 06:10:34 executing program 3: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="d9d002196036ed44ea5dafbff4e32d07149613437f4c3126745584a13307c8be0196b19b542164b80dd685f29effb250c1c1ce34528df8e0bf9df1cfb90f5ae560db63b24ed71bca1555db51ee5b745dff9e3315231e5a7eb9901a76281318c53b533ae4b4a8549430193c3d9b628aa252dab0ccbccd026f3256f73a489c95e33dd26288cc5191d21ecd11aacc5857f18f83572f67e8a496ada9cd5c7385acf6eef89ce7d8ed127fe089f94802daec309f17a0d4d8", 0xb5, 0xffffffffffffffff) (async) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="0f0ea5d35a8b1f92ec3eaffbcc0e4663e37fcc9c47f37bf9a2aadc33bd416f076765aec729f89a2ac923b89b1d5b5ffde79c733db70854740ae3a012fb03d80764e001d0bb748f6b003dbbc8f4ccc09ea483f6a90ea855bba23b194df6036fac9d11c4790748117cf998c04c199a09637c195be256ba3c827f61949b4a2c7457ac122a4744951b076e2d910786b4bfacc8ba7b5d26ae4bd7d0c65c1d2ac843dca6fd95bce442d4f71db7bbf2e6faabd7ff42a2d30dde9b335cac298f98f66b3af882ee78d842d1b33b387179807299a72e4da2d76ec30fd6754a07780b714a069b7940dc981103f0", 0xe8, 0xfffffffffffffffa) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:34 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2367.331215][T19233] FAULT_INJECTION: forcing a failure. [ 2367.331215][T19233] name failslab, interval 1, probability 0, space 0, times 0 [ 2367.344734][T19233] CPU: 0 PID: 19233 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2367.356464][T19233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2367.366498][T19233] Call Trace: [ 2367.369791][T19233] dump_stack+0x18e/0x1d5 [ 2367.374124][T19233] should_fail+0x604/0x770 [ 2367.378611][T19233] ? __kernfs_new_node+0x8b/0x650 [ 2367.383618][T19233] should_failslab+0x5/0x20 [ 2367.388096][T19233] kmem_cache_alloc+0x24/0x210 [ 2367.392958][T19233] __kernfs_new_node+0x8b/0x650 [ 2367.397817][T19233] ? mutex_lock+0x6c/0xc0 [ 2367.416205][T19233] ? kernfs_activate+0x3fc/0x420 [ 2367.421166][T19233] kernfs_new_node+0x95/0x160 [ 2367.425828][T19233] __kernfs_create_file+0x45/0x260 [ 2367.430929][T19233] sysfs_add_file_mode_ns+0x292/0x340 [ 2367.436464][T19233] internal_create_group+0x4a4/0xe00 [ 2367.441813][T19233] sysfs_create_groups+0x5d/0x130 [ 2367.446834][T19233] device_add_attrs+0x87/0x370 [ 2367.451889][T19233] device_add+0x505/0xbc0 [ 2367.456353][T19233] device_create_vargs+0x1b8/0x210 [ 2367.461677][T19233] device_create+0x86/0xb0 [ 2367.466207][T19233] bdi_register_va+0x89/0x5e0 [ 2367.470869][T19233] bdi_register+0x80/0xa0 [ 2367.475177][T19233] ? __device_add_disk+0x50a/0x1210 [ 2367.480670][T19233] bdi_register_owner+0x56/0xf0 [ 2367.485769][T19233] __device_add_disk+0x583/0x1210 [ 2367.490789][T19233] loop_add+0x554/0x710 [ 2367.494931][T19233] loop_control_ioctl+0x465/0x600 [ 2367.499940][T19233] ? loop_remove+0xa0/0xa0 [ 2367.504452][T19233] do_vfs_ioctl+0x6d1/0x15b0 [ 2367.509245][T19233] __x64_sys_ioctl+0xd4/0x110 [ 2367.513910][T19233] do_syscall_64+0xcb/0x1c0 [ 2367.518413][T19233] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2367.524290][T19233] RIP: 0033:0x7efdb617c209 [ 2367.528780][T19233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2367.548372][T19233] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2367.556777][T19233] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2367.564736][T19233] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2367.572709][T19233] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:35 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0x0, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2367.580744][T19233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2367.588966][T19233] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2367.597688][T19233] ------------[ cut here ]------------ [ 2367.603169][T19233] WARNING: CPU: 0 PID: 19233 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2367.612415][T19233] Modules linked in: [ 2367.616290][T19233] CPU: 0 PID: 19233 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2367.628041][T19233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2367.638097][T19233] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2367.643982][T19233] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2367.663740][T19233] RSP: 0018:ffff8881e301fce8 EFLAGS: 00010246 [ 2367.669981][T19233] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2367.677951][T19233] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2367.686011][T19233] RBP: ffff8881f0401178 R08: ffffffff82114c4e R09: 0000000000000010 [ 2367.694100][T19233] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2367.702089][T19233] R13: 1ffff1103a078c01 R14: 1ffff1103a078c9d R15: ffff8881d03c6000 [ 2367.710405][T19233] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2367.719404][T19233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2367.725982][T19233] CR2: 00007ffe555e0ca8 CR3: 00000001e61e4000 CR4: 00000000003406f0 [ 2367.734026][T19233] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2367.742268][T19233] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2367.750249][T19233] Call Trace: [ 2367.753532][T19233] loop_add+0x554/0x710 [ 2367.757670][T19233] loop_control_ioctl+0x465/0x600 [ 2367.762692][T19233] ? loop_remove+0xa0/0xa0 [ 2367.767106][T19233] do_vfs_ioctl+0x6d1/0x15b0 [ 2367.771697][T19233] __x64_sys_ioctl+0xd4/0x110 [ 2367.776364][T19233] do_syscall_64+0xcb/0x1c0 [ 2367.780861][T19233] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2367.786833][T19233] RIP: 0033:0x7efdb617c209 [ 2367.791246][T19233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2367.810906][T19233] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2367.819422][T19233] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 06:10:35 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0x0, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:35 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:35 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 56) 06:10:35 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:35 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:35 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:35 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 2367.827592][T19233] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2367.835901][T19233] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2367.844009][T19233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2367.851963][T19233] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2367.859923][T19233] ---[ end trace 4781fc9bf8f70703 ]--- 06:10:35 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @dead_binder_done, @release={0x40046306, 0x2}, @decrefs={0x40046307, 0x3}, @increfs_done, @register_looper, @exit_looper, @request_death], 0x71, 0x0, &(0x7f00000000c0)="caf2774da88192fa4f1efac7efe594e33cacd52dd7b9fd4f29b11a428fb6a23a984670ee331a740398b28c36e92c33b1a4bc48fe9320e7eaadf0b2182a1c1a9179dfe55c6f60aa1574021b531a5e18499db61e4e6d8e3a1b10900c1828c5acde4d831d6df8c4ea84631ab720df4791512b"}) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000026005f09"], 0x1c}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 06:10:35 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2367.923885][T19263] FAULT_INJECTION: forcing a failure. [ 2367.923885][T19263] name failslab, interval 1, probability 0, space 0, times 0 [ 2367.938290][T19263] CPU: 1 PID: 19263 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2367.949999][T19263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2367.960038][T19263] Call Trace: [ 2367.963319][T19263] dump_stack+0x18e/0x1d5 [ 2367.967662][T19263] should_fail+0x604/0x770 [ 2367.972072][T19263] ? __kernfs_new_node+0x8b/0x650 [ 2367.977234][T19263] should_failslab+0x5/0x20 [ 2367.981843][T19263] kmem_cache_alloc+0x24/0x210 [ 2367.986603][T19263] __kernfs_new_node+0x8b/0x650 [ 2367.991567][T19263] ? mutex_lock+0x6c/0xc0 [ 2367.995904][T19263] ? kernfs_activate+0x3fc/0x420 [ 2368.000925][T19263] kernfs_new_node+0x95/0x160 [ 2368.005864][T19263] __kernfs_create_file+0x45/0x260 [ 2368.010986][T19263] sysfs_add_file_mode_ns+0x292/0x340 [ 2368.016733][T19263] internal_create_group+0x4a4/0xe00 [ 2368.022261][T19263] sysfs_create_groups+0x5d/0x130 [ 2368.027405][T19263] device_add_attrs+0x87/0x370 [ 2368.032356][T19263] device_add+0x505/0xbc0 [ 2368.036666][T19263] device_create_vargs+0x1b8/0x210 [ 2368.041858][T19263] device_create+0x86/0xb0 [ 2368.046270][T19263] bdi_register_va+0x89/0x5e0 [ 2368.050930][T19263] bdi_register+0x80/0xa0 [ 2368.055347][T19263] ? __device_add_disk+0x50a/0x1210 [ 2368.060536][T19263] bdi_register_owner+0x56/0xf0 [ 2368.065461][T19263] __device_add_disk+0x583/0x1210 [ 2368.070563][T19263] loop_add+0x554/0x710 06:10:35 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2368.074703][T19263] loop_control_ioctl+0x465/0x600 [ 2368.079704][T19263] ? loop_remove+0xa0/0xa0 [ 2368.084116][T19263] do_vfs_ioctl+0x6d1/0x15b0 [ 2368.088696][T19263] __x64_sys_ioctl+0xd4/0x110 [ 2368.093459][T19263] do_syscall_64+0xcb/0x1c0 [ 2368.098070][T19263] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2368.103986][T19263] RIP: 0033:0x7efdb617c209 [ 2368.108504][T19263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2368.128625][T19263] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2368.137394][T19263] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2368.145490][T19263] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2368.153456][T19263] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2368.161564][T19263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2368.169953][T19263] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2368.180653][T19263] ------------[ cut here ]------------ [ 2368.186242][T19263] WARNING: CPU: 1 PID: 19263 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2368.195474][T19263] Modules linked in: [ 2368.199360][T19263] CPU: 1 PID: 19263 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2368.211145][T19263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2368.221199][T19263] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2368.227113][T19263] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2368.247189][T19263] RSP: 0018:ffff8881ec727ce8 EFLAGS: 00010246 [ 2368.253247][T19263] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2368.261199][T19263] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2368.269153][T19263] RBP: ffff8881f0403c48 R08: ffffffff82114c4e R09: 0000000000000010 [ 2368.277275][T19263] R10: ffffffff84400000 R11: 1ffff1103edeb100 R12: dffffc0000000000 [ 2368.285432][T19263] R13: 1ffff1103dd23e01 R14: 1ffff1103dd23e9d R15: ffff8881ee91f000 [ 2368.293696][T19263] FS: 00007efdb52f2700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2368.302608][T19263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2368.309187][T19263] CR2: 00007f45cd321028 CR3: 00000001e193c000 CR4: 00000000003406e0 [ 2368.317146][T19263] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2368.325395][T19263] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2368.333969][T19263] Call Trace: [ 2368.337267][T19263] loop_add+0x554/0x710 [ 2368.341424][T19263] loop_control_ioctl+0x465/0x600 [ 2368.346429][T19263] ? loop_remove+0xa0/0xa0 [ 2368.350942][T19263] do_vfs_ioctl+0x6d1/0x15b0 [ 2368.355611][T19263] __x64_sys_ioctl+0xd4/0x110 [ 2368.360276][T19263] do_syscall_64+0xcb/0x1c0 [ 2368.364771][T19263] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2368.370893][T19263] RIP: 0033:0x7efdb617c209 [ 2368.375286][T19263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2368.395131][T19263] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2368.403521][T19263] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2368.411480][T19263] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 06:10:35 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:35 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 57) 06:10:35 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:35 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2368.419839][T19263] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2368.428723][T19263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2368.436833][T19263] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2368.445154][T19263] ---[ end trace 4781fc9bf8f70704 ]--- 06:10:35 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:35 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @dead_binder_done, @release={0x40046306, 0x2}, @decrefs={0x40046307, 0x3}, @increfs_done, @register_looper, @exit_looper, @request_death], 0x71, 0x0, &(0x7f00000000c0)="caf2774da88192fa4f1efac7efe594e33cacd52dd7b9fd4f29b11a428fb6a23a984670ee331a740398b28c36e92c33b1a4bc48fe9320e7eaadf0b2182a1c1a9179dfe55c6f60aa1574021b531a5e18499db61e4e6d8e3a1b10900c1828c5acde4d831d6df8c4ea84631ab720df4791512b"}) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000026005f09"], 0x1c}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @dead_binder_done, @release={0x40046306, 0x2}, @decrefs={0x40046307, 0x3}, @increfs_done, @register_looper, @exit_looper, @request_death], 0x71, 0x0, &(0x7f00000000c0)="caf2774da88192fa4f1efac7efe594e33cacd52dd7b9fd4f29b11a428fb6a23a984670ee331a740398b28c36e92c33b1a4bc48fe9320e7eaadf0b2182a1c1a9179dfe55c6f60aa1574021b531a5e18499db61e4e6d8e3a1b10900c1828c5acde4d831d6df8c4ea84631ab720df4791512b"}) (async) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000026005f09"], 0x1c}}, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) [ 2368.497321][T19290] FAULT_INJECTION: forcing a failure. [ 2368.497321][T19290] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.522864][T19290] CPU: 1 PID: 19290 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2368.534670][T19290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2368.545306][T19290] Call Trace: [ 2368.548585][T19290] dump_stack+0x18e/0x1d5 [ 2368.553245][T19290] should_fail+0x604/0x770 [ 2368.557737][T19290] ? __kernfs_new_node+0x8b/0x650 [ 2368.562761][T19290] should_failslab+0x5/0x20 [ 2368.567279][T19290] kmem_cache_alloc+0x24/0x210 [ 2368.572297][T19290] __kernfs_new_node+0x8b/0x650 [ 2368.577316][T19290] ? mutex_lock+0x6c/0xc0 [ 2368.581629][T19290] ? kernfs_activate+0x3fc/0x420 [ 2368.586564][T19290] kernfs_new_node+0x95/0x160 [ 2368.591400][T19290] __kernfs_create_file+0x45/0x260 [ 2368.596727][T19290] sysfs_add_file_mode_ns+0x292/0x340 [ 2368.602278][T19290] internal_create_group+0x4a4/0xe00 [ 2368.607549][T19290] sysfs_create_groups+0x5d/0x130 [ 2368.612568][T19290] device_add_attrs+0x87/0x370 [ 2368.617311][T19290] device_add+0x505/0xbc0 [ 2368.621613][T19290] device_create_vargs+0x1b8/0x210 [ 2368.626702][T19290] device_create+0x86/0xb0 [ 2368.631182][T19290] bdi_register_va+0x89/0x5e0 [ 2368.635874][T19290] bdi_register+0x80/0xa0 [ 2368.640339][T19290] ? __device_add_disk+0x50a/0x1210 [ 2368.645510][T19290] bdi_register_owner+0x56/0xf0 [ 2368.654190][T19290] __device_add_disk+0x583/0x1210 [ 2368.659240][T19290] loop_add+0x554/0x710 [ 2368.663408][T19290] loop_control_ioctl+0x465/0x600 [ 2368.668607][T19290] ? loop_remove+0xa0/0xa0 [ 2368.673011][T19290] do_vfs_ioctl+0x6d1/0x15b0 [ 2368.677597][T19290] __x64_sys_ioctl+0xd4/0x110 [ 2368.682556][T19290] do_syscall_64+0xcb/0x1c0 [ 2368.687307][T19290] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2368.693187][T19290] RIP: 0033:0x7efdb617c209 06:10:36 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:36 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:36 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 06:10:36 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:36 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @dead_binder_done, @release={0x40046306, 0x2}, @decrefs={0x40046307, 0x3}, @increfs_done, @register_looper, @exit_looper, @request_death], 0x71, 0x0, &(0x7f00000000c0)="caf2774da88192fa4f1efac7efe594e33cacd52dd7b9fd4f29b11a428fb6a23a984670ee331a740398b28c36e92c33b1a4bc48fe9320e7eaadf0b2182a1c1a9179dfe55c6f60aa1574021b531a5e18499db61e4e6d8e3a1b10900c1828c5acde4d831d6df8c4ea84631ab720df4791512b"}) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000026005f09"], 0x1c}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @dead_binder_done, @release={0x40046306, 0x2}, @decrefs={0x40046307, 0x3}, @increfs_done, @register_looper, @exit_looper, @request_death], 0x71, 0x0, &(0x7f00000000c0)="caf2774da88192fa4f1efac7efe594e33cacd52dd7b9fd4f29b11a428fb6a23a984670ee331a740398b28c36e92c33b1a4bc48fe9320e7eaadf0b2182a1c1a9179dfe55c6f60aa1574021b531a5e18499db61e4e6d8e3a1b10900c1828c5acde4d831d6df8c4ea84631ab720df4791512b"}) (async) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000026005f09"], 0x1c}}, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) [ 2368.697577][T19290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2368.718052][T19290] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2368.726630][T19290] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2368.734807][T19290] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2368.743069][T19290] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2368.751779][T19290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2368.759972][T19290] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2368.771639][T19290] ------------[ cut here ]------------ [ 2368.777128][T19290] WARNING: CPU: 0 PID: 19290 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2368.786403][T19290] Modules linked in: [ 2368.790309][T19290] CPU: 0 PID: 19290 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2368.802025][T19290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2368.812941][T19290] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2368.818726][T19290] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2368.839668][T19290] RSP: 0018:ffff8881e12a7ce8 EFLAGS: 00010246 [ 2368.845713][T19290] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2368.853838][T19290] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2368.862237][T19290] RBP: ffff8881f04055f8 R08: ffffffff82114c4e R09: 0000000000000010 [ 2368.870923][T19290] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2368.879770][T19290] R13: 1ffff1103a3d5201 R14: 1ffff1103a3d529d R15: ffff8881d1ea9000 [ 2368.888035][T19290] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2368.897303][T19290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2368.903870][T19290] CR2: 00007ffcfe7a1fb8 CR3: 00000001e193c000 CR4: 00000000003406f0 [ 2368.912282][T19290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2368.920420][T19290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2368.928849][T19290] Call Trace: [ 2368.932145][T19290] loop_add+0x554/0x710 [ 2368.936372][T19290] loop_control_ioctl+0x465/0x600 [ 2368.941608][T19290] ? loop_remove+0xa0/0xa0 06:10:36 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x523502, 0x0) 06:10:36 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2368.946110][T19290] do_vfs_ioctl+0x6d1/0x15b0 [ 2368.950711][T19290] __x64_sys_ioctl+0xd4/0x110 [ 2368.955646][T19290] do_syscall_64+0xcb/0x1c0 [ 2368.960315][T19290] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2368.966329][T19290] RIP: 0033:0x7efdb617c209 [ 2368.970728][T19290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2368.990310][T19290] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:10:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 58) 06:10:36 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2368.998876][T19290] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2369.006925][T19290] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2369.015024][T19290] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2369.022979][T19290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2369.031183][T19290] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2369.039143][T19290] ---[ end trace 4781fc9bf8f70705 ]--- 06:10:36 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:36 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:36 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2369.110531][T19332] FAULT_INJECTION: forcing a failure. [ 2369.110531][T19332] name failslab, interval 1, probability 0, space 0, times 0 [ 2369.125152][T19332] CPU: 1 PID: 19332 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2369.136961][T19332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2369.147286][T19332] Call Trace: [ 2369.150580][T19332] dump_stack+0x18e/0x1d5 [ 2369.155281][T19332] should_fail+0x604/0x770 [ 2369.159739][T19332] ? __kernfs_new_node+0x8b/0x650 [ 2369.164753][T19332] should_failslab+0x5/0x20 [ 2369.169269][T19332] kmem_cache_alloc+0x24/0x210 [ 2369.174019][T19332] __kernfs_new_node+0x8b/0x650 [ 2369.178875][T19332] ? mutex_unlock+0x19/0x40 [ 2369.183384][T19332] ? kernfs_add_one+0x4a3/0x5c0 [ 2369.188330][T19332] kernfs_create_dir_ns+0x90/0x220 [ 2369.193600][T19332] internal_create_group+0x227/0xe00 [ 2369.198957][T19332] dpm_sysfs_add+0x59/0x260 [ 2369.203451][T19332] device_add+0x547/0xbc0 [ 2369.207771][T19332] device_create_vargs+0x1b8/0x210 [ 2369.212876][T19332] device_create+0x86/0xb0 [ 2369.217368][T19332] bdi_register_va+0x89/0x5e0 [ 2369.222396][T19332] bdi_register+0x80/0xa0 [ 2369.226815][T19332] ? __device_add_disk+0x50a/0x1210 [ 2369.232091][T19332] bdi_register_owner+0x56/0xf0 [ 2369.236990][T19332] __device_add_disk+0x583/0x1210 [ 2369.242106][T19332] loop_add+0x554/0x710 [ 2369.246265][T19332] loop_control_ioctl+0x465/0x600 [ 2369.251370][T19332] ? loop_remove+0xa0/0xa0 [ 2369.255765][T19332] do_vfs_ioctl+0x6d1/0x15b0 [ 2369.260330][T19332] __x64_sys_ioctl+0xd4/0x110 [ 2369.264985][T19332] do_syscall_64+0xcb/0x1c0 [ 2369.269465][T19332] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2369.275339][T19332] RIP: 0033:0x7efdb617c209 [ 2369.279735][T19332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2369.299316][T19332] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:10:36 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2369.307798][T19332] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2369.315850][T19332] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2369.324018][T19332] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2369.331997][T19332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2369.340068][T19332] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2369.349975][T19332] ------------[ cut here ]------------ [ 2369.355539][T19332] WARNING: CPU: 1 PID: 19332 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2369.364721][T19332] Modules linked in: [ 2369.368644][T19332] CPU: 1 PID: 19332 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2369.380259][T19332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2369.390545][T19332] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2369.396340][T19332] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2369.416190][T19332] RSP: 0018:ffff8881ec727ce8 EFLAGS: 00010246 [ 2369.422412][T19332] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2369.430648][T19332] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2369.438866][T19332] RBP: ffff8881ef7b3c48 R08: ffffffff82114c4e R09: 0000000000000010 [ 2369.446996][T19332] R10: ffffffff84400000 R11: 1ffff1103edeb100 R12: dffffc0000000000 [ 2369.455041][T19332] R13: 1ffff1103c628c01 R14: 1ffff1103c628c9d R15: ffff8881e3146000 [ 2369.463229][T19332] FS: 00007efdb52f2700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2369.472135][T19332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2369.478701][T19332] CR2: 0000001b2ec21000 CR3: 00000001ef0ea000 CR4: 00000000003406e0 [ 2369.486649][T19332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2369.494595][T19332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2369.502625][T19332] Call Trace: [ 2369.507201][T19332] loop_add+0x554/0x710 [ 2369.511332][T19332] loop_control_ioctl+0x465/0x600 [ 2369.516328][T19332] ? loop_remove+0xa0/0xa0 [ 2369.520803][T19332] do_vfs_ioctl+0x6d1/0x15b0 [ 2369.525395][T19332] __x64_sys_ioctl+0xd4/0x110 [ 2369.530248][T19332] do_syscall_64+0xcb/0x1c0 [ 2369.535022][T19332] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2369.540887][T19332] RIP: 0033:0x7efdb617c209 [ 2369.545275][T19332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2369.564855][T19332] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2369.573245][T19332] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2369.581389][T19332] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2369.589428][T19332] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2369.597732][T19332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:37 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:37 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:37 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 06:10:37 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x523502, 0x0) 06:10:37 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:37 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 59) 06:10:37 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r5 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:37 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2369.606069][T19332] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2369.614208][T19332] ---[ end trace 4781fc9bf8f70706 ]--- 06:10:37 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) 06:10:37 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:37 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) [ 2369.666314][T19357] FAULT_INJECTION: forcing a failure. [ 2369.666314][T19357] name failslab, interval 1, probability 0, space 0, times 0 [ 2369.686701][T19357] CPU: 1 PID: 19357 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2369.698344][T19357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2369.708690][T19357] Call Trace: [ 2369.712065][T19357] dump_stack+0x18e/0x1d5 [ 2369.716389][T19357] should_fail+0x604/0x770 [ 2369.720967][T19357] ? __kernfs_new_node+0x8b/0x650 [ 2369.726104][T19357] should_failslab+0x5/0x20 [ 2369.730610][T19357] kmem_cache_alloc+0x24/0x210 [ 2369.735384][T19357] __kernfs_new_node+0x8b/0x650 [ 2369.740217][T19357] ? mutex_unlock+0x19/0x40 [ 2369.744703][T19357] ? kernfs_add_one+0x4a3/0x5c0 [ 2369.749539][T19357] kernfs_new_node+0x95/0x160 [ 2369.754360][T19357] __kernfs_create_file+0x45/0x260 [ 2369.759473][T19357] sysfs_add_file_mode_ns+0x292/0x340 [ 2369.764834][T19357] sysfs_create_file_ns+0x140/0x200 [ 2369.771077][T19357] device_add_attrs+0x2be/0x370 [ 2369.777239][T19357] device_add+0x505/0xbc0 [ 2369.781556][T19357] device_create_vargs+0x1b8/0x210 [ 2369.786676][T19357] device_create+0x86/0xb0 [ 2369.791165][T19357] bdi_register_va+0x89/0x5e0 [ 2369.795823][T19357] bdi_register+0x80/0xa0 [ 2369.800291][T19357] ? __device_add_disk+0x50a/0x1210 [ 2369.805736][T19357] bdi_register_owner+0x56/0xf0 [ 2369.810577][T19357] __device_add_disk+0x583/0x1210 [ 2369.815873][T19357] loop_add+0x554/0x710 [ 2369.820171][T19357] loop_control_ioctl+0x465/0x600 [ 2369.825194][T19357] ? loop_remove+0xa0/0xa0 [ 2369.829697][T19357] do_vfs_ioctl+0x6d1/0x15b0 [ 2369.834283][T19357] __x64_sys_ioctl+0xd4/0x110 [ 2369.839049][T19357] do_syscall_64+0xcb/0x1c0 [ 2369.843539][T19357] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2369.849429][T19357] RIP: 0033:0x7efdb617c209 [ 2369.853910][T19357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2369.873864][T19357] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2369.882350][T19357] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2369.890345][T19357] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2369.898383][T19357] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2369.907342][T19357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:37 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2369.915538][T19357] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2369.926286][T19357] ------------[ cut here ]------------ [ 2369.931762][T19357] WARNING: CPU: 1 PID: 19357 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2369.940853][T19357] Modules linked in: [ 2369.944758][T19357] CPU: 1 PID: 19357 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2369.956353][T19357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2369.966485][T19357] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2369.972530][T19357] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2369.994749][T19357] RSP: 0018:ffff8881cd367ce8 EFLAGS: 00010246 [ 2370.001608][T19357] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2370.009655][T19357] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2370.017607][T19357] RBP: ffff8881ef7b2298 R08: ffffffff82114c4e R09: 0000000000000010 [ 2370.025642][T19357] R10: ffffffff84400000 R11: 1ffff1103edeb100 R12: dffffc0000000000 [ 2370.033595][T19357] R13: 1ffff1103e6bae01 R14: 1ffff1103e6bae9d R15: ffff8881f35d7000 [ 2370.041660][T19357] FS: 00007efdb52f2700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2370.050715][T19357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2370.058414][T19357] CR2: 00007fa6dd821718 CR3: 00000001e1439000 CR4: 00000000003406e0 [ 2370.067829][T19357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2370.076053][T19357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2370.084001][T19357] Call Trace: [ 2370.087637][T19357] loop_add+0x554/0x710 [ 2370.091817][T19357] loop_control_ioctl+0x465/0x600 [ 2370.097003][T19357] ? loop_remove+0xa0/0xa0 [ 2370.101410][T19357] do_vfs_ioctl+0x6d1/0x15b0 [ 2370.106264][T19357] __x64_sys_ioctl+0xd4/0x110 [ 2370.110947][T19357] do_syscall_64+0xcb/0x1c0 [ 2370.115435][T19357] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2370.121305][T19357] RIP: 0033:0x7efdb617c209 [ 2370.125794][T19357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2370.145487][T19357] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2370.153940][T19357] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 06:10:37 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 60) 06:10:37 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:37 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2370.161997][T19357] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2370.169956][T19357] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.178182][T19357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2370.187652][T19357] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2370.196190][T19357] ---[ end trace 4781fc9bf8f70707 ]--- 06:10:37 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x523502, 0x0) 06:10:37 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:37 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 2370.236428][T19385] FAULT_INJECTION: forcing a failure. [ 2370.236428][T19385] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.254461][T19385] CPU: 1 PID: 19385 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2370.266344][T19385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2370.276606][T19385] Call Trace: [ 2370.279881][T19385] dump_stack+0x18e/0x1d5 [ 2370.284211][T19385] should_fail+0x604/0x770 [ 2370.288692][T19385] ? __kernfs_new_node+0x8b/0x650 [ 2370.293794][T19385] should_failslab+0x5/0x20 [ 2370.298278][T19385] kmem_cache_alloc+0x24/0x210 [ 2370.303039][T19385] __kernfs_new_node+0x8b/0x650 [ 2370.307895][T19385] ? mutex_lock+0x6c/0xc0 [ 2370.312212][T19385] ? kernfs_activate+0x3fc/0x420 [ 2370.317165][T19385] kernfs_new_node+0x95/0x160 [ 2370.321841][T19385] __kernfs_create_file+0x45/0x260 [ 2370.326951][T19385] sysfs_add_file_mode_ns+0x292/0x340 [ 2370.332496][T19385] sysfs_merge_group+0x199/0x350 [ 2370.337488][T19385] dpm_sysfs_add+0xc0/0x260 [ 2370.341999][T19385] device_add+0x547/0xbc0 [ 2370.346312][T19385] device_create_vargs+0x1b8/0x210 [ 2370.351405][T19385] device_create+0x86/0xb0 [ 2370.355815][T19385] bdi_register_va+0x89/0x5e0 [ 2370.360484][T19385] bdi_register+0x80/0xa0 [ 2370.364801][T19385] ? __device_add_disk+0x50a/0x1210 [ 2370.370079][T19385] bdi_register_owner+0x56/0xf0 [ 2370.374923][T19385] __device_add_disk+0x583/0x1210 [ 2370.380079][T19385] loop_add+0x554/0x710 [ 2370.384300][T19385] loop_control_ioctl+0x465/0x600 [ 2370.389299][T19385] ? loop_remove+0xa0/0xa0 [ 2370.393784][T19385] do_vfs_ioctl+0x6d1/0x15b0 [ 2370.398360][T19385] __x64_sys_ioctl+0xd4/0x110 [ 2370.403136][T19385] do_syscall_64+0xcb/0x1c0 [ 2370.407632][T19385] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2370.413507][T19385] RIP: 0033:0x7efdb617c209 [ 2370.417985][T19385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2370.437912][T19385] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2370.446560][T19385] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2370.454505][T19385] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2370.462551][T19385] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.471303][T19385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2370.479300][T19385] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:37 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:37 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) [ 2370.490114][T19385] ------------[ cut here ]------------ [ 2370.495805][T19385] WARNING: CPU: 1 PID: 19385 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2370.506040][T19385] Modules linked in: [ 2370.509938][T19385] CPU: 1 PID: 19385 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2370.521633][T19385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2370.531801][T19385] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2370.537617][T19385] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2370.557307][T19385] RSP: 0018:ffff8881e48afce8 EFLAGS: 00010246 [ 2370.563362][T19385] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2370.571603][T19385] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2370.579555][T19385] RBP: ffff8881f04008e8 R08: ffffffff82114c4e R09: 0000000000000010 [ 2370.587508][T19385] R10: ffffffff84400000 R11: 1ffff1103edeb100 R12: dffffc0000000000 [ 2370.595455][T19385] R13: 1ffff1103ce5d401 R14: 1ffff1103ce5d49d R15: ffff8881e72ea000 [ 2370.603410][T19385] FS: 00007efdb52f2700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2370.612512][T19385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2370.619521][T19385] CR2: 00007f56079b3000 CR3: 00000001eec3a000 CR4: 00000000003406e0 [ 2370.627614][T19385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2370.635676][T19385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2370.643818][T19385] Call Trace: [ 2370.647104][T19385] loop_add+0x554/0x710 [ 2370.651243][T19385] loop_control_ioctl+0x465/0x600 [ 2370.656368][T19385] ? loop_remove+0xa0/0xa0 [ 2370.660937][T19385] do_vfs_ioctl+0x6d1/0x15b0 [ 2370.665519][T19385] __x64_sys_ioctl+0xd4/0x110 [ 2370.670184][T19385] do_syscall_64+0xcb/0x1c0 [ 2370.675214][T19385] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2370.681082][T19385] RIP: 0033:0x7efdb617c209 [ 2370.685471][T19385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2370.705499][T19385] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2370.713981][T19385] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2370.721930][T19385] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2370.729892][T19385] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:38 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:38 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 61) 06:10:38 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:38 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:38 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2370.737933][T19385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2370.745884][T19385] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2370.754189][T19385] ---[ end trace 4781fc9bf8f70708 ]--- 06:10:38 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:38 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:38 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000040)=""/154) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) inotify_init1(0x80800) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x141400) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x20, 0x20, 0x7fffffff, 0x4, {{0x27, 0x4, 0x1, 0x3, 0x9c, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x32, 0x3, [{0x0, 0x9, "060f1ab555c5a4"}, {0x5, 0x7, "85d76939dc"}, {0x2, 0xa, "d0d6e2093c117900"}, {0x5, 0x12, "20877131fb55b008293ab5dcb2d75565"}]}, @timestamp={0x44, 0x1c, 0x17, 0x0, 0x3, [0xffff0001, 0x1, 0x80000000, 0x0, 0x9086, 0x7fff]}, @generic={0x86, 0x2}, @timestamp_prespec={0x44, 0x14, 0x9a, 0x3, 0xa, [{@empty, 0x7fff}, {@multicast1, 0x10001}]}, @rr={0x7, 0x1f, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x42}]}, @noop, @end]}}}}}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x4) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)}) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000200)=""/34, 0x22}) [ 2370.821499][T19412] FAULT_INJECTION: forcing a failure. [ 2370.821499][T19412] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.835236][T19412] CPU: 0 PID: 19412 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2370.846975][T19412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2370.857010][T19412] Call Trace: [ 2370.860453][T19412] dump_stack+0x18e/0x1d5 [ 2370.864819][T19412] should_fail+0x604/0x770 [ 2370.869253][T19412] ? __kernfs_new_node+0x8b/0x650 [ 2370.874276][T19412] should_failslab+0x5/0x20 [ 2370.878770][T19412] kmem_cache_alloc+0x24/0x210 [ 2370.883525][T19412] __kernfs_new_node+0x8b/0x650 [ 2370.888478][T19412] ? mutex_lock+0x6c/0xc0 [ 2370.892829][T19412] ? kernfs_activate+0x3fc/0x420 [ 2370.897940][T19412] kernfs_new_node+0x95/0x160 [ 2370.902655][T19412] __kernfs_create_file+0x45/0x260 [ 2370.907749][T19412] sysfs_add_file_mode_ns+0x292/0x340 [ 2370.913127][T19412] sysfs_merge_group+0x199/0x350 [ 2370.918059][T19412] dpm_sysfs_add+0xc0/0x260 [ 2370.922548][T19412] device_add+0x547/0xbc0 [ 2370.926862][T19412] device_create_vargs+0x1b8/0x210 [ 2370.932096][T19412] device_create+0x86/0xb0 [ 2370.937452][T19412] bdi_register_va+0x89/0x5e0 [ 2370.942115][T19412] bdi_register+0x80/0xa0 [ 2370.946425][T19412] ? __device_add_disk+0x50a/0x1210 [ 2370.951608][T19412] bdi_register_owner+0x56/0xf0 [ 2370.956516][T19412] __device_add_disk+0x583/0x1210 [ 2370.961531][T19412] loop_add+0x554/0x710 [ 2370.965673][T19412] loop_control_ioctl+0x465/0x600 [ 2370.970686][T19412] ? loop_remove+0xa0/0xa0 [ 2370.975080][T19412] do_vfs_ioctl+0x6d1/0x15b0 [ 2370.979673][T19412] __x64_sys_ioctl+0xd4/0x110 [ 2370.984356][T19412] do_syscall_64+0xcb/0x1c0 [ 2370.989374][T19412] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2370.995243][T19412] RIP: 0033:0x7efdb617c209 [ 2370.999806][T19412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2371.019387][T19412] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2371.027889][T19412] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2371.035858][T19412] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2371.043903][T19412] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2371.052033][T19412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.059987][T19412] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2371.069879][T19412] ------------[ cut here ]------------ [ 2371.075468][T19412] WARNING: CPU: 0 PID: 19412 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2371.085960][T19412] Modules linked in: [ 2371.089963][T19412] CPU: 0 PID: 19412 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2371.101708][T19412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2371.111759][T19412] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2371.117632][T19412] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2371.137430][T19412] RSP: 0018:ffff8881e2d67ce8 EFLAGS: 00010246 [ 2371.143477][T19412] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2371.151525][T19412] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2371.159479][T19412] RBP: ffff8881ef7b55f8 R08: ffffffff82114c4e R09: 0000000000000010 [ 2371.167433][T19412] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2371.175387][T19412] R13: 1ffff1103d139a01 R14: 1ffff1103d139a9d R15: ffff8881e89cd000 [ 2371.183341][T19412] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2371.192254][T19412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2371.198823][T19412] CR2: 00007ffcfe7a32f8 CR3: 00000001eec3a000 CR4: 00000000003406f0 [ 2371.206777][T19412] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2371.214822][T19412] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2371.222898][T19412] Call Trace: [ 2371.226186][T19412] loop_add+0x554/0x710 [ 2371.230329][T19412] loop_control_ioctl+0x465/0x600 [ 2371.235332][T19412] ? loop_remove+0xa0/0xa0 [ 2371.239739][T19412] do_vfs_ioctl+0x6d1/0x15b0 [ 2371.244316][T19412] __x64_sys_ioctl+0xd4/0x110 [ 2371.249032][T19412] do_syscall_64+0xcb/0x1c0 [ 2371.253914][T19412] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2371.260015][T19412] RIP: 0033:0x7efdb617c209 [ 2371.264408][T19412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2371.284311][T19412] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2371.292804][T19412] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2371.300827][T19412] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2371.308882][T19412] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:38 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:38 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:38 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 62) 06:10:38 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) [ 2371.316931][T19412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.324970][T19412] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2371.333115][T19412] ---[ end trace 4781fc9bf8f70709 ]--- 06:10:38 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:38 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:38 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async, rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 32) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async, rerun: 32) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async, rerun: 32) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:38 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000040)=""/154) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async, rerun: 64) inotify_init1(0x80800) (async, rerun: 64) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x141400) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x20, 0x20, 0x7fffffff, 0x4, {{0x27, 0x4, 0x1, 0x3, 0x9c, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x32, 0x3, [{0x0, 0x9, "060f1ab555c5a4"}, {0x5, 0x7, "85d76939dc"}, {0x2, 0xa, "d0d6e2093c117900"}, {0x5, 0x12, "20877131fb55b008293ab5dcb2d75565"}]}, @timestamp={0x44, 0x1c, 0x17, 0x0, 0x3, [0xffff0001, 0x1, 0x80000000, 0x0, 0x9086, 0x7fff]}, @generic={0x86, 0x2}, @timestamp_prespec={0x44, 0x14, 0x9a, 0x3, 0xa, [{@empty, 0x7fff}, {@multicast1, 0x10001}]}, @rr={0x7, 0x1f, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x42}]}, @noop, @end]}}}}}) (rerun: 64) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x4) (async) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async, rerun: 64) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async, rerun: 64) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)}) (async) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000200)=""/34, 0x22}) [ 2371.391884][T19433] FAULT_INJECTION: forcing a failure. [ 2371.391884][T19433] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.409724][T19433] CPU: 0 PID: 19433 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2371.421645][T19433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2371.431799][T19433] Call Trace: [ 2371.435073][T19433] dump_stack+0x18e/0x1d5 [ 2371.439385][T19433] should_fail+0x604/0x770 [ 2371.443788][T19433] ? __kernfs_new_node+0x8b/0x650 [ 2371.448826][T19433] should_failslab+0x5/0x20 [ 2371.453333][T19433] kmem_cache_alloc+0x24/0x210 [ 2371.458086][T19433] __kernfs_new_node+0x8b/0x650 [ 2371.462915][T19433] ? mutex_lock+0x6c/0xc0 [ 2371.467454][T19433] ? kernfs_activate+0x3fc/0x420 [ 2371.472386][T19433] kernfs_new_node+0x95/0x160 [ 2371.477050][T19433] __kernfs_create_file+0x45/0x260 [ 2371.482331][T19433] sysfs_add_file_mode_ns+0x292/0x340 [ 2371.487696][T19433] sysfs_merge_group+0x199/0x350 [ 2371.492624][T19433] dpm_sysfs_add+0xc0/0x260 [ 2371.497128][T19433] device_add+0x547/0xbc0 [ 2371.501463][T19433] device_create_vargs+0x1b8/0x210 [ 2371.506580][T19433] device_create+0x86/0xb0 [ 2371.510980][T19433] bdi_register_va+0x89/0x5e0 [ 2371.515732][T19433] bdi_register+0x80/0xa0 [ 2371.520050][T19433] ? __device_add_disk+0x50a/0x1210 [ 2371.525353][T19433] bdi_register_owner+0x56/0xf0 [ 2371.530195][T19433] __device_add_disk+0x583/0x1210 [ 2371.535211][T19433] loop_add+0x554/0x710 [ 2371.539359][T19433] loop_control_ioctl+0x465/0x600 [ 2371.544371][T19433] ? loop_remove+0xa0/0xa0 [ 2371.548821][T19433] do_vfs_ioctl+0x6d1/0x15b0 [ 2371.553580][T19433] __x64_sys_ioctl+0xd4/0x110 [ 2371.558243][T19433] do_syscall_64+0xcb/0x1c0 [ 2371.562751][T19433] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2371.568759][T19433] RIP: 0033:0x7efdb617c209 [ 2371.573162][T19433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2371.592748][T19433] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2371.601773][T19433] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2371.609813][T19433] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2371.617765][T19433] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2371.625721][T19433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.633684][T19433] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:39 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2371.643153][T19433] ------------[ cut here ]------------ [ 2371.648813][T19433] WARNING: CPU: 0 PID: 19433 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2371.657984][T19433] Modules linked in: [ 2371.661868][T19433] CPU: 0 PID: 19433 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2371.673797][T19433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2371.684907][T19433] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2371.690695][T19433] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2371.710988][T19433] RSP: 0018:ffff8881ea687ce8 EFLAGS: 00010246 [ 2371.717037][T19433] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2371.725082][T19433] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2371.733039][T19433] RBP: ffff8881ef7b08e8 R08: ffffffff82114c4e R09: 0000000000000010 [ 2371.741097][T19433] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2371.749087][T19433] R13: 1ffff1103da6f401 R14: 1ffff1103da6f49d R15: ffff8881ed37a000 [ 2371.757068][T19433] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2371.765983][T19433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2371.772643][T19433] CR2: 00007f45cc342718 CR3: 00000001e80b7000 CR4: 00000000003406f0 [ 2371.781042][T19433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2371.789796][T19433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2371.798393][T19433] Call Trace: [ 2371.801675][T19433] loop_add+0x554/0x710 [ 2371.805814][T19433] loop_control_ioctl+0x465/0x600 [ 2371.810819][T19433] ? loop_remove+0xa0/0xa0 [ 2371.815220][T19433] do_vfs_ioctl+0x6d1/0x15b0 [ 2371.819813][T19433] __x64_sys_ioctl+0xd4/0x110 [ 2371.824487][T19433] do_syscall_64+0xcb/0x1c0 [ 2371.828994][T19433] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2371.834948][T19433] RIP: 0033:0x7efdb617c209 [ 2371.839336][T19433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2371.859302][T19433] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2371.867694][T19433] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2371.875786][T19433] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2371.883741][T19433] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:39 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7c, 0x3, 0xf, [{@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:39 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 63) 06:10:39 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:39 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:39 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2371.891812][T19433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.899861][T19433] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2371.907877][T19433] ---[ end trace 4781fc9bf8f7070a ]--- 06:10:39 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2371.969007][T19462] FAULT_INJECTION: forcing a failure. [ 2371.969007][T19462] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.989120][T19462] CPU: 0 PID: 19462 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2372.000755][T19462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2372.011023][T19462] Call Trace: [ 2372.014296][T19462] dump_stack+0x18e/0x1d5 [ 2372.018761][T19462] should_fail+0x604/0x770 [ 2372.024202][T19462] ? __kernfs_new_node+0x8b/0x650 [ 2372.029202][T19462] should_failslab+0x5/0x20 [ 2372.033700][T19462] kmem_cache_alloc+0x24/0x210 [ 2372.038448][T19462] __kernfs_new_node+0x8b/0x650 [ 2372.043284][T19462] ? mutex_lock+0x6c/0xc0 [ 2372.047605][T19462] ? kernfs_activate+0x3fc/0x420 [ 2372.052525][T19462] kernfs_new_node+0x95/0x160 [ 2372.057280][T19462] __kernfs_create_file+0x45/0x260 [ 2372.062369][T19462] sysfs_add_file_mode_ns+0x292/0x340 [ 2372.067718][T19462] sysfs_merge_group+0x199/0x350 [ 2372.072758][T19462] dpm_sysfs_add+0xc0/0x260 [ 2372.077427][T19462] device_add+0x547/0xbc0 [ 2372.081733][T19462] device_create_vargs+0x1b8/0x210 [ 2372.086907][T19462] device_create+0x86/0xb0 [ 2372.091306][T19462] bdi_register_va+0x89/0x5e0 [ 2372.095977][T19462] bdi_register+0x80/0xa0 [ 2372.100316][T19462] ? __device_add_disk+0x50a/0x1210 [ 2372.105508][T19462] bdi_register_owner+0x56/0xf0 [ 2372.110343][T19462] __device_add_disk+0x583/0x1210 [ 2372.115446][T19462] loop_add+0x554/0x710 [ 2372.119577][T19462] loop_control_ioctl+0x465/0x600 [ 2372.124590][T19462] ? loop_remove+0xa0/0xa0 [ 2372.129076][T19462] do_vfs_ioctl+0x6d1/0x15b0 [ 2372.133761][T19462] __x64_sys_ioctl+0xd4/0x110 [ 2372.138504][T19462] do_syscall_64+0xcb/0x1c0 [ 2372.142982][T19462] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2372.148934][T19462] RIP: 0033:0x7efdb617c209 [ 2372.153470][T19462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2372.173308][T19462] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2372.181690][T19462] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2372.189635][T19462] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2372.197597][T19462] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2372.205557][T19462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:39 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x220040, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) [ 2372.213612][T19462] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2372.223285][T19462] ------------[ cut here ]------------ [ 2372.229119][T19462] WARNING: CPU: 0 PID: 19462 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2372.238194][T19462] Modules linked in: [ 2372.242070][T19462] CPU: 0 PID: 19462 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2372.253849][T19462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2372.263935][T19462] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2372.269728][T19462] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2372.289486][T19462] RSP: 0018:ffff8881ea687ce8 EFLAGS: 00010246 [ 2372.295546][T19462] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2372.303588][T19462] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2372.311547][T19462] RBP: ffff8881ef374d68 R08: ffffffff82114c4e R09: 0000000000000010 [ 2372.319588][T19462] R10: ffffffff84400000 R11: 1ffff1103edcb100 R12: dffffc0000000000 [ 2372.327551][T19462] R13: 1ffff11039c89801 R14: 1ffff11039c8989d R15: ffff8881ce44c000 [ 2372.335589][T19462] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2372.344510][T19462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2372.351073][T19462] CR2: 00007ffe555e0ca8 CR3: 00000001f37c7000 CR4: 00000000003406f0 [ 2372.359023][T19462] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2372.366986][T19462] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2372.374964][T19462] Call Trace: [ 2372.378276][T19462] loop_add+0x554/0x710 [ 2372.382800][T19462] loop_control_ioctl+0x465/0x600 [ 2372.387931][T19462] ? loop_remove+0xa0/0xa0 [ 2372.392352][T19462] do_vfs_ioctl+0x6d1/0x15b0 [ 2372.396943][T19462] __x64_sys_ioctl+0xd4/0x110 [ 2372.401601][T19462] do_syscall_64+0xcb/0x1c0 [ 2372.406097][T19462] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2372.412141][T19462] RIP: 0033:0x7efdb617c209 [ 2372.418257][T19462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2372.438966][T19462] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2372.447578][T19462] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2372.455737][T19462] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2372.463870][T19462] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2372.471973][T19462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2372.480026][T19462] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2372.488297][T19462] ---[ end trace 4781fc9bf8f7070b ]--- 06:10:39 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, 0x0, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:39 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000040)=""/154) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) inotify_init1(0x80800) (async) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x141400) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x20, 0x20, 0x7fffffff, 0x4, {{0x27, 0x4, 0x1, 0x3, 0x9c, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x32, 0x3, [{0x0, 0x9, "060f1ab555c5a4"}, {0x5, 0x7, "85d76939dc"}, {0x2, 0xa, "d0d6e2093c117900"}, {0x5, 0x12, "20877131fb55b008293ab5dcb2d75565"}]}, @timestamp={0x44, 0x1c, 0x17, 0x0, 0x3, [0xffff0001, 0x1, 0x80000000, 0x0, 0x9086, 0x7fff]}, @generic={0x86, 0x2}, @timestamp_prespec={0x44, 0x14, 0x9a, 0x3, 0xa, [{@empty, 0x7fff}, {@multicast1, 0x10001}]}, @rr={0x7, 0x1f, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x42}]}, @noop, @end]}}}}}) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x4) (async) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)}) (async) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000200)=""/34, 0x22}) 06:10:39 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:39 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 64) 06:10:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x220040, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x220040, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) 06:10:39 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, 0x0, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:40 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2372.555519][T19485] FAULT_INJECTION: forcing a failure. [ 2372.555519][T19485] name failslab, interval 1, probability 0, space 0, times 0 [ 2372.569146][T19485] CPU: 1 PID: 19485 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2372.580867][T19485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2372.591177][T19485] Call Trace: [ 2372.594449][T19485] dump_stack+0x18e/0x1d5 [ 2372.598761][T19485] should_fail+0x604/0x770 [ 2372.603162][T19485] ? __kernfs_new_node+0x8b/0x650 [ 2372.608168][T19485] should_failslab+0x5/0x20 [ 2372.612663][T19485] kmem_cache_alloc+0x24/0x210 [ 2372.617407][T19485] __kernfs_new_node+0x8b/0x650 [ 2372.622363][T19485] ? mutex_lock+0x6c/0xc0 [ 2372.626690][T19485] ? kernfs_activate+0x3fc/0x420 [ 2372.631606][T19485] kernfs_new_node+0x95/0x160 [ 2372.636269][T19485] __kernfs_create_file+0x45/0x260 [ 2372.642071][T19485] sysfs_add_file_mode_ns+0x292/0x340 [ 2372.647431][T19485] sysfs_merge_group+0x199/0x350 06:10:40 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x220040, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x220040, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) [ 2372.653231][T19485] dpm_sysfs_add+0xc0/0x260 [ 2372.657808][T19485] device_add+0x547/0xbc0 [ 2372.662222][T19485] device_create_vargs+0x1b8/0x210 [ 2372.667454][T19485] device_create+0x86/0xb0 [ 2372.671971][T19485] bdi_register_va+0x89/0x5e0 [ 2372.676742][T19485] bdi_register+0x80/0xa0 [ 2372.681062][T19485] ? __device_add_disk+0x50a/0x1210 [ 2372.686623][T19485] bdi_register_owner+0x56/0xf0 [ 2372.691641][T19485] __device_add_disk+0x583/0x1210 [ 2372.696741][T19485] loop_add+0x554/0x710 [ 2372.700896][T19485] loop_control_ioctl+0x465/0x600 [ 2372.706005][T19485] ? loop_remove+0xa0/0xa0 [ 2372.710412][T19485] do_vfs_ioctl+0x6d1/0x15b0 [ 2372.715114][T19485] __x64_sys_ioctl+0xd4/0x110 [ 2372.719815][T19485] do_syscall_64+0xcb/0x1c0 [ 2372.724564][T19485] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2372.730449][T19485] RIP: 0033:0x7efdb617c209 [ 2372.734879][T19485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 06:10:40 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0xe}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 2372.754483][T19485] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2372.762869][T19485] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2372.771180][T19485] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2372.779544][T19485] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2372.788285][T19485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2372.796332][T19485] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:40 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2372.806013][T19485] ------------[ cut here ]------------ [ 2372.811493][T19485] WARNING: CPU: 1 PID: 19485 at block/genhd.c:742 __device_add_disk+0xe8c/0x1210 [ 2372.820755][T19485] Modules linked in: [ 2372.824727][T19485] CPU: 1 PID: 19485 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2372.836609][T19485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2372.846749][T19485] RIP: 0010:__device_add_disk+0xe8c/0x1210 [ 2372.852628][T19485] Code: ff e8 38 f8 4e ff 0f 0b e9 98 fe ff ff e8 2c f8 4e ff 0f 0b e9 a5 f2 ff ff e8 20 f8 4e ff 0f 0b e9 5e f8 ff ff e8 14 f8 4e ff <0f> 0b e9 08 f7 ff ff e8 08 f8 4e ff e9 92 fd ff ff 48 8d 4c 24 44 [ 2372.872563][T19485] RSP: 0018:ffff8881cf67fce8 EFLAGS: 00010246 [ 2372.878614][T19485] RAX: ffffffff8211554c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2372.887020][T19485] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2372.895111][T19485] RBP: ffff8881f04033b8 R08: ffffffff82114c4e R09: 0000000000000010 [ 2372.903192][T19485] R10: ffffffff84400000 R11: 1ffff1103edeb100 R12: dffffc0000000000 [ 2372.911257][T19485] R13: 1ffff1103a2b2001 R14: 1ffff1103a2b209d R15: ffff8881d1590000 [ 2372.919317][T19485] FS: 00007efdb52f2700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2372.928312][T19485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2372.934872][T19485] CR2: 00007efdb52f1ff8 CR3: 00000001e0621000 CR4: 00000000003406e0 [ 2372.942912][T19485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2372.950868][T19485] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2372.959460][T19485] Call Trace: [ 2372.962767][T19485] loop_add+0x554/0x710 [ 2372.966975][T19485] loop_control_ioctl+0x465/0x600 [ 2372.972067][T19485] ? loop_remove+0xa0/0xa0 [ 2372.976470][T19485] do_vfs_ioctl+0x6d1/0x15b0 [ 2372.981056][T19485] __x64_sys_ioctl+0xd4/0x110 [ 2372.985844][T19485] do_syscall_64+0xcb/0x1c0 [ 2372.990331][T19485] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2372.996384][T19485] RIP: 0033:0x7efdb617c209 [ 2373.000776][T19485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2373.020462][T19485] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2373.029119][T19485] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2373.037076][T19485] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2373.045354][T19485] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 06:10:40 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:40 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:40 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 65) [ 2373.053743][T19485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2373.062850][T19485] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2373.071021][T19485] ---[ end trace 4781fc9bf8f7070c ]--- 06:10:40 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0xe}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0xe}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) 06:10:40 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2373.125217][T19534] FAULT_INJECTION: forcing a failure. [ 2373.125217][T19534] name failslab, interval 1, probability 0, space 0, times 0 [ 2373.141124][T19534] CPU: 0 PID: 19534 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2373.152876][T19534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2373.163184][T19534] Call Trace: [ 2373.166642][T19534] dump_stack+0x18e/0x1d5 [ 2373.170992][T19534] should_fail+0x604/0x770 06:10:40 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) [ 2373.176403][T19534] ? kobject_get_path+0xbb/0x1a0 [ 2373.181359][T19534] should_failslab+0x5/0x20 [ 2373.185874][T19534] __kmalloc+0x51/0x2b0 [ 2373.190022][T19534] kobject_get_path+0xbb/0x1a0 [ 2373.199382][T19534] kobject_uevent_env+0x284/0x700 [ 2373.204402][T19534] device_add+0x7a7/0xbc0 [ 2373.208788][T19534] device_create_vargs+0x1b8/0x210 [ 2373.214037][T19534] device_create+0x86/0xb0 [ 2373.218437][T19534] bdi_register_va+0x89/0x5e0 06:10:40 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0xe}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0xe}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) [ 2373.223757][T19534] bdi_register+0x80/0xa0 [ 2373.228083][T19534] ? __device_add_disk+0x50a/0x1210 [ 2373.233415][T19534] bdi_register_owner+0x56/0xf0 [ 2373.238255][T19534] __device_add_disk+0x583/0x1210 [ 2373.243274][T19534] loop_add+0x554/0x710 [ 2373.247429][T19534] loop_control_ioctl+0x465/0x600 [ 2373.252476][T19534] ? loop_remove+0xa0/0xa0 [ 2373.256875][T19534] do_vfs_ioctl+0x6d1/0x15b0 [ 2373.261615][T19534] __x64_sys_ioctl+0xd4/0x110 [ 2373.266554][T19534] do_syscall_64+0xcb/0x1c0 [ 2373.271148][T19534] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2373.277032][T19534] RIP: 0033:0x7efdb617c209 [ 2373.281439][T19534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2373.301508][T19534] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2373.309917][T19534] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2373.317869][T19534] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2373.325817][T19534] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2373.334006][T19534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2373.341979][T19534] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:40 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, 0x0, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:40 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:40 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x0, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:40 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 66) 06:10:40 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) [ 2373.424496][T19570] FAULT_INJECTION: forcing a failure. [ 2373.424496][T19570] name failslab, interval 1, probability 0, space 0, times 0 [ 2373.437533][T19570] CPU: 1 PID: 19570 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2373.449921][T19570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2373.460428][T19570] Call Trace: [ 2373.463793][T19570] dump_stack+0x18e/0x1d5 [ 2373.468112][T19570] should_fail+0x604/0x770 [ 2373.472550][T19570] ? kobject_get_path+0xbb/0x1a0 [ 2373.477558][T19570] should_failslab+0x5/0x20 [ 2373.482143][T19570] __kmalloc+0x51/0x2b0 [ 2373.486293][T19570] kobject_get_path+0xbb/0x1a0 [ 2373.491037][T19570] kobject_uevent_env+0x284/0x700 [ 2373.496056][T19570] device_add+0x7a7/0xbc0 [ 2373.500461][T19570] device_create_vargs+0x1b8/0x210 [ 2373.505748][T19570] device_create+0x86/0xb0 [ 2373.510241][T19570] bdi_register_va+0x89/0x5e0 [ 2373.514909][T19570] bdi_register+0x80/0xa0 [ 2373.519414][T19570] ? __device_add_disk+0x50a/0x1210 [ 2373.524691][T19570] bdi_register_owner+0x56/0xf0 [ 2373.529631][T19570] __device_add_disk+0x583/0x1210 [ 2373.534928][T19570] loop_add+0x554/0x710 [ 2373.539288][T19570] loop_control_ioctl+0x465/0x600 [ 2373.544302][T19570] ? loop_remove+0xa0/0xa0 [ 2373.548702][T19570] do_vfs_ioctl+0x6d1/0x15b0 [ 2373.553330][T19570] __x64_sys_ioctl+0xd4/0x110 [ 2373.557986][T19570] do_syscall_64+0xcb/0x1c0 [ 2373.562467][T19570] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2373.568431][T19570] RIP: 0033:0x7efdb617c209 [ 2373.572837][T19570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2373.593027][T19570] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2373.601520][T19570] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2373.610006][T19570] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2373.618027][T19570] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2373.626068][T19570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2373.634112][T19570] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:41 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:41 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8000) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) 06:10:41 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 06:10:41 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x0, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:41 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 67) 06:10:41 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x74, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LABEL={0x14, 0x3, 'wg0\x00'}, @IFA_LABEL={0x14, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:41 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x0, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:41 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0x2}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2373.952839][T19586] FAULT_INJECTION: forcing a failure. [ 2373.952839][T19586] name failslab, interval 1, probability 0, space 0, times 0 [ 2373.966817][T19586] CPU: 0 PID: 19586 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2373.978805][T19586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2373.988977][T19586] Call Trace: [ 2373.992268][T19586] dump_stack+0x18e/0x1d5 [ 2373.996624][T19586] should_fail+0x604/0x770 [ 2374.001195][T19586] ? alloc_uevent_skb+0x73/0x220 [ 2374.006377][T19586] should_failslab+0x5/0x20 [ 2374.010862][T19586] __kmalloc_track_caller+0x4f/0x280 [ 2374.016291][T19586] ? kmem_cache_alloc+0xd0/0x210 [ 2374.021218][T19586] ? alloc_uevent_skb+0x73/0x220 [ 2374.026403][T19586] __alloc_skb+0xb5/0x4d0 [ 2374.030811][T19586] alloc_uevent_skb+0x73/0x220 [ 2374.035717][T19586] kobject_uevent_net_broadcast+0x343/0x550 [ 2374.041648][T19586] kobject_uevent_env+0x552/0x700 [ 2374.046678][T19586] device_add+0x7a7/0xbc0 [ 2374.050989][T19586] device_create_vargs+0x1b8/0x210 [ 2374.056094][T19586] device_create+0x86/0xb0 [ 2374.060510][T19586] bdi_register_va+0x89/0x5e0 [ 2374.065168][T19586] bdi_register+0x80/0xa0 [ 2374.069482][T19586] ? __device_add_disk+0x50a/0x1210 [ 2374.074691][T19586] bdi_register_owner+0x56/0xf0 [ 2374.079521][T19586] __device_add_disk+0x583/0x1210 [ 2374.084615][T19586] loop_add+0x554/0x710 [ 2374.088857][T19586] loop_control_ioctl+0x465/0x600 [ 2374.093864][T19586] ? loop_remove+0xa0/0xa0 [ 2374.098381][T19586] do_vfs_ioctl+0x6d1/0x15b0 [ 2374.102997][T19586] __x64_sys_ioctl+0xd4/0x110 [ 2374.107652][T19586] do_syscall_64+0xcb/0x1c0 [ 2374.112136][T19586] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2374.118012][T19586] RIP: 0033:0x7efdb617c209 [ 2374.122401][T19586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2374.142246][T19586] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:10:41 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8000) (async, rerun: 32) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:41 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0x2}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:41 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 68) 06:10:41 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0x2}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2374.150636][T19586] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2374.158599][T19586] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2374.166647][T19586] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2374.174599][T19586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2374.182556][T19586] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2374.226919][T19610] FAULT_INJECTION: forcing a failure. [ 2374.226919][T19610] name failslab, interval 1, probability 0, space 0, times 0 [ 2374.239832][T19610] CPU: 0 PID: 19610 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2374.251538][T19610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2374.261637][T19610] Call Trace: [ 2374.264988][T19610] dump_stack+0x18e/0x1d5 [ 2374.269486][T19610] should_fail+0x604/0x770 [ 2374.273978][T19610] ? kobject_get_path+0xbb/0x1a0 [ 2374.278904][T19610] should_failslab+0x5/0x20 [ 2374.283404][T19610] __kmalloc+0x51/0x2b0 [ 2374.287817][T19610] kobject_get_path+0xbb/0x1a0 [ 2374.292561][T19610] kobject_uevent_env+0x284/0x700 [ 2374.297588][T19610] device_add+0x7a7/0xbc0 [ 2374.301930][T19610] device_create_vargs+0x1b8/0x210 [ 2374.307115][T19610] device_create+0x86/0xb0 [ 2374.311610][T19610] bdi_register_va+0x89/0x5e0 [ 2374.316273][T19610] bdi_register+0x80/0xa0 [ 2374.320594][T19610] ? __device_add_disk+0x50a/0x1210 [ 2374.325903][T19610] bdi_register_owner+0x56/0xf0 [ 2374.330770][T19610] __device_add_disk+0x583/0x1210 [ 2374.335796][T19610] loop_add+0x554/0x710 [ 2374.340043][T19610] loop_control_ioctl+0x465/0x600 [ 2374.345050][T19610] ? loop_remove+0xa0/0xa0 [ 2374.349748][T19610] do_vfs_ioctl+0x6d1/0x15b0 [ 2374.354414][T19610] __x64_sys_ioctl+0xd4/0x110 [ 2374.359072][T19610] do_syscall_64+0xcb/0x1c0 [ 2374.363650][T19610] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2374.369786][T19610] RIP: 0033:0x7efdb617c209 [ 2374.374183][T19610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2374.393773][T19610] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2374.402454][T19610] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2374.410596][T19610] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2374.418673][T19610] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2374.426884][T19610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2374.434941][T19610] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:42 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x164, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1eb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x95b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x24, 0x3, "1617bef467e4e4c772f282593c4dad0aaef7c29ce50f4db48c9d5b5c19a6b8e7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb3}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) 06:10:42 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0x7, "813ea68188"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:42 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x74, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LABEL={0x14, 0x3, 'wg0\x00'}, @IFA_LABEL={0x14, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:42 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x3c042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140400c7", @ANYRES16=0x0, @ANYBLOB="0000000000000000000012000000"], 0x14}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f275b2891eeb"}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048001}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001e001f56a43a344a1cdcba50e0922d040000000000000000800200"/40], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x0, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x700, 0x40, 0xbf4, 0x3}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x2000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r6}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r5, 0x4, 0x1, 0x0, 0xffff, 0xb, @local, @remote, 0x7800, 0x80, 0x46ac, 0xf2}}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x431000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="85200000010000009500000000000000ffff000000000000000018240000000000000000", @ANYRES32, @ANYBLOB="0000000034090000183a00000300000000000000000000006175e0ff100000003173f0ff000000005522500004000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0xdc, &(0x7f00000004c0)=""/220, 0x40f00, 0x1b, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r7]}, 0x80) 06:10:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 69) 06:10:42 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0x7, "813ea68188"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:42 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x164, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1eb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x95b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x24, 0x3, "1617bef467e4e4c772f282593c4dad0aaef7c29ce50f4db48c9d5b5c19a6b8e7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb3}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x164, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1eb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x95b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x24, 0x3, "1617bef467e4e4c772f282593c4dad0aaef7c29ce50f4db48c9d5b5c19a6b8e7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb3}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) (async) [ 2374.798644][T19618] selinux_nlmsg_perm: 28 callbacks suppressed [ 2374.798654][T19618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19618 comm=syz-executor.3 [ 2374.820534][T19618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19618 comm=syz-executor.3 [ 2374.841720][T19623] FAULT_INJECTION: forcing a failure. 06:10:42 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0x7, "813ea68188"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2374.841720][T19623] name failslab, interval 1, probability 0, space 0, times 0 [ 2374.861453][T19623] CPU: 1 PID: 19623 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2374.873405][T19623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2374.883566][T19623] Call Trace: [ 2374.886848][T19623] dump_stack+0x18e/0x1d5 [ 2374.891179][T19623] should_fail+0x604/0x770 06:10:42 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x164, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1eb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x95b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x24, 0x3, "1617bef467e4e4c772f282593c4dad0aaef7c29ce50f4db48c9d5b5c19a6b8e7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb3}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) [ 2374.895667][T19623] ? __d_alloc+0x2a/0x6a0 [ 2374.899978][T19623] should_failslab+0x5/0x20 [ 2374.904563][T19623] kmem_cache_alloc+0x24/0x210 [ 2374.909616][T19623] __d_alloc+0x2a/0x6a0 [ 2374.914793][T19623] d_alloc_parallel+0x7d/0x1210 [ 2374.919641][T19623] ? avc_has_perm_noaudit+0x2b0/0x370 [ 2374.925016][T19623] ? __d_lookup+0x4d9/0x540 [ 2374.929529][T19623] __lookup_slow+0xfa/0x3c0 [ 2374.934132][T19623] lookup_one_len+0x3db/0x5d0 [ 2374.938890][T19623] start_creating+0xec/0x270 [ 2374.943465][T19623] debugfs_create_dir+0x24/0x380 [ 2374.948402][T19623] bdi_register_va+0x232/0x5e0 [ 2374.953153][T19623] bdi_register+0x80/0xa0 [ 2374.957548][T19623] ? __device_add_disk+0x50a/0x1210 [ 2374.962720][T19623] bdi_register_owner+0x56/0xf0 [ 2374.967564][T19623] __device_add_disk+0x583/0x1210 [ 2374.972844][T19623] loop_add+0x554/0x710 [ 2374.977000][T19623] loop_control_ioctl+0x465/0x600 [ 2374.982017][T19623] ? loop_remove+0xa0/0xa0 [ 2374.986421][T19623] do_vfs_ioctl+0x6d1/0x15b0 [ 2374.991000][T19623] __x64_sys_ioctl+0xd4/0x110 [ 2374.995746][T19623] do_syscall_64+0xcb/0x1c0 [ 2375.000244][T19623] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2375.006122][T19623] RIP: 0033:0x7efdb617c209 [ 2375.010511][T19623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2375.030191][T19623] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2375.038590][T19623] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 06:10:42 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x74, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LABEL={0x14, 0x3, 'wg0\x00'}, @IFA_LABEL={0x14, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:42 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x3c042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140400c7", @ANYRES16=0x0, @ANYBLOB="0000000000000000000012000000"], 0x14}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f275b2891eeb"}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048001}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001e001f56a43a344a1cdcba50e0922d040000000000000000800200"/40], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x0, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x700, 0x40, 0xbf4, 0x3}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x2000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r6}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r5, 0x4, 0x1, 0x0, 0xffff, 0xb, @local, @remote, 0x7800, 0x80, 0x46ac, 0xf2}}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x431000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="85200000010000009500000000000000ffff000000000000000018240000000000000000", @ANYRES32, @ANYBLOB="0000000034090000183a00000300000000000000000000006175e0ff100000003173f0ff000000005522500004000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0xdc, &(0x7f00000004c0)=""/220, 0x40f00, 0x1b, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r7]}, 0x80) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x3c042, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140400c7", @ANYRES16=0x0, @ANYBLOB="0000000000000000000012000000"], 0x14}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f275b2891eeb"}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048001}, 0x800) (async) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001e001f56a43a344a1cdcba50e0922d040000000000000000800200"/40], 0x1c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x0, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x700, 0x40, 0xbf4, 0x3}}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r1) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x2000) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) socket(0x11, 0xa, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r6}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r5, 0x4, 0x1, 0x0, 0xffff, 0xb, @local, @remote, 0x7800, 0x80, 0x46ac, 0xf2}}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x431000, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="85200000010000009500000000000000ffff000000000000000018240000000000000000", @ANYRES32, @ANYBLOB="0000000034090000183a00000300000000000000000000006175e0ff100000003173f0ff000000005522500004000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0xdc, &(0x7f00000004c0)=""/220, 0x40f00, 0x1b, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r7]}, 0x80) (async) 06:10:42 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0x9, "813ea681880312"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 70) 06:10:42 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x400081) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0xc, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 06:10:42 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2375.046558][T19623] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2375.054512][T19623] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2375.062552][T19623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2375.070736][T19623] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:42 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0x9, "813ea681880312"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:42 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x400081) (async, rerun: 32) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (rerun: 32) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0xc, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) (async, rerun: 64) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) [ 2375.129273][T19667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19667 comm=syz-executor.3 [ 2375.147258][T19669] FAULT_INJECTION: forcing a failure. [ 2375.147258][T19669] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.156414][T19667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19667 comm=syz-executor.3 [ 2375.164430][T19669] CPU: 0 PID: 19669 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2375.184911][T19669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2375.196507][T19669] Call Trace: [ 2375.199906][T19669] dump_stack+0x18e/0x1d5 [ 2375.204248][T19669] should_fail+0x604/0x770 [ 2375.208653][T19669] ? skb_clone+0x1b7/0x380 [ 2375.213056][T19669] should_failslab+0x5/0x20 [ 2375.217808][T19669] kmem_cache_alloc+0x24/0x210 [ 2375.222720][T19669] skb_clone+0x1b7/0x380 [ 2375.226960][T19669] ? netlink_broadcast_filtered+0x5bd/0x1110 [ 2375.233074][T19669] netlink_broadcast_filtered+0x5cb/0x1110 [ 2375.238995][T19669] netlink_broadcast+0x35/0x50 [ 2375.243955][T19669] kobject_uevent_net_broadcast+0x374/0x550 [ 2375.249986][T19669] kobject_uevent_env+0x552/0x700 [ 2375.255205][T19669] device_add+0x7a7/0xbc0 [ 2375.259535][T19669] device_create_vargs+0x1b8/0x210 [ 2375.264945][T19669] device_create+0x86/0xb0 [ 2375.269696][T19669] bdi_register_va+0x89/0x5e0 [ 2375.274366][T19669] bdi_register+0x80/0xa0 [ 2375.278687][T19669] ? __device_add_disk+0x50a/0x1210 [ 2375.283963][T19669] bdi_register_owner+0x56/0xf0 [ 2375.288977][T19669] __device_add_disk+0x583/0x1210 [ 2375.293986][T19669] loop_add+0x554/0x710 [ 2375.298141][T19669] loop_control_ioctl+0x465/0x600 [ 2375.303164][T19669] ? loop_remove+0xa0/0xa0 [ 2375.307740][T19669] do_vfs_ioctl+0x6d1/0x15b0 [ 2375.312319][T19669] __x64_sys_ioctl+0xd4/0x110 [ 2375.316999][T19669] do_syscall_64+0xcb/0x1c0 [ 2375.321491][T19669] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2375.328220][T19669] RIP: 0033:0x7efdb617c209 [ 2375.332616][T19669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2375.352811][T19669] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2375.361204][T19669] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2375.369350][T19669] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 06:10:42 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x3c042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140400c7", @ANYRES16=0x0, @ANYBLOB="0000000000000000000012000000"], 0x14}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f275b2891eeb"}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048001}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001e001f56a43a344a1cdcba50e0922d040000000000000000800200"/40], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x0, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x700, 0x40, 0xbf4, 0x3}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x2000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r6}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r5, 0x4, 0x1, 0x0, 0xffff, 0xb, @local, @remote, 0x7800, 0x80, 0x46ac, 0xf2}}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x431000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="85200000010000009500000000000000ffff000000000000000018240000000000000000", @ANYRES32, @ANYBLOB="0000000034090000183a00000300000000000000000000006175e0ff100000003173f0ff000000005522500004000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0xdc, &(0x7f00000004c0)=""/220, 0x40f00, 0x1b, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r7]}, 0x80) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x3c042, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140400c7", @ANYRES16=0x0, @ANYBLOB="0000000000000000000012000000"], 0x14}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f275b2891eeb"}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048001}, 0x800) (async) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001e001f56a43a344a1cdcba50e0922d040000000000000000800200"/40], 0x1c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x0, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x700, 0x40, 0xbf4, 0x3}}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r1) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x2000) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) socket(0x11, 0xa, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r6}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r5, 0x4, 0x1, 0x0, 0xffff, 0xb, @local, @remote, 0x7800, 0x80, 0x46ac, 0xf2}}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x431000, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="85200000010000009500000000000000ffff000000000000000018240000000000000000", @ANYRES32, @ANYBLOB="0000000034090000183a00000300000000000000000000006175e0ff100000003173f0ff000000005522500004000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0xdc, &(0x7f00000004c0)=""/220, 0x40f00, 0x1b, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r7]}, 0x80) (async) 06:10:42 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0x9, "813ea681880312"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2375.377407][T19669] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2375.385459][T19669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2375.393498][T19669] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:42 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 2: socketpair(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 71) 06:10:42 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xa, "813ea681880312a3"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:42 executing program 2: socketpair(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xa, "813ea681880312a3"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2375.428039][T19705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19705 comm=syz-executor.3 [ 2375.454684][T19705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19705 comm=syz-executor.3 06:10:42 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:42 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x400081) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0xc, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x400081) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0xc, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) (async) 06:10:42 executing program 2: socketpair(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:42 executing program 3: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000080), 0x10, 0xc0000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5, 0x400000) [ 2375.490159][T19714] FAULT_INJECTION: forcing a failure. [ 2375.490159][T19714] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.514976][T19714] CPU: 0 PID: 19714 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2375.526791][T19714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2375.537041][T19714] Call Trace: [ 2375.540349][T19714] dump_stack+0x18e/0x1d5 [ 2375.544864][T19714] should_fail+0x604/0x770 [ 2375.549376][T19714] ? __d_alloc+0x2a/0x6a0 [ 2375.553731][T19714] should_failslab+0x5/0x20 [ 2375.558243][T19714] kmem_cache_alloc+0x24/0x210 [ 2375.563004][T19714] __d_alloc+0x2a/0x6a0 [ 2375.567327][T19714] d_alloc_parallel+0x7d/0x1210 [ 2375.572188][T19714] ? avc_has_perm_noaudit+0x2b0/0x370 [ 2375.577653][T19714] ? __d_lookup+0x4d9/0x540 [ 2375.582159][T19714] __lookup_slow+0xfa/0x3c0 [ 2375.586810][T19714] lookup_one_len+0x3db/0x5d0 [ 2375.591535][T19714] start_creating+0xec/0x270 [ 2375.596229][T19714] debugfs_create_dir+0x24/0x380 [ 2375.601331][T19714] bdi_register_va+0x232/0x5e0 [ 2375.606111][T19714] bdi_register+0x80/0xa0 [ 2375.610483][T19714] ? __device_add_disk+0x50a/0x1210 [ 2375.615790][T19714] bdi_register_owner+0x56/0xf0 [ 2375.620642][T19714] __device_add_disk+0x583/0x1210 [ 2375.625841][T19714] loop_add+0x554/0x710 [ 2375.630193][T19714] loop_control_ioctl+0x465/0x600 [ 2375.635306][T19714] ? loop_remove+0xa0/0xa0 [ 2375.639870][T19714] do_vfs_ioctl+0x6d1/0x15b0 [ 2375.644506][T19714] __x64_sys_ioctl+0xd4/0x110 [ 2375.649188][T19714] do_syscall_64+0xcb/0x1c0 [ 2375.653822][T19714] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2375.659729][T19714] RIP: 0033:0x7efdb617c209 [ 2375.664242][T19714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 06:10:43 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xa, "813ea681880312a3"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:43 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = getpid() r3 = getpgrp(0xffffffffffffffff) r4 = getpgrp(0x0) r5 = getpgrp(0x0) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3c}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) syz_clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x37}, &(0x7f0000000140)=""/151, 0x97, &(0x7f0000000200)=""/84, &(0x7f0000000280)=[r2, r3, 0xffffffffffffffff, r4, r5], 0x5, {r6}}, 0x58) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 06:10:43 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:43 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0, r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:43 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 72) [ 2375.684301][T19714] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2375.692802][T19714] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2375.700785][T19714] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2375.708754][T19714] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2375.716808][T19714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2375.724866][T19714] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:43 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:43 executing program 3: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000080), 0x10, 0xc0000) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5, 0x400000) 06:10:43 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2375.799660][T19765] FAULT_INJECTION: forcing a failure. [ 2375.799660][T19765] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.833412][T19765] CPU: 1 PID: 19765 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2375.845314][T19765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2375.855377][T19765] Call Trace: [ 2375.858675][T19765] dump_stack+0x18e/0x1d5 [ 2375.863016][T19765] should_fail+0x604/0x770 [ 2375.867434][T19765] ? new_inode_pseudo+0x78/0x210 [ 2375.872377][T19765] should_failslab+0x5/0x20 [ 2375.876881][T19765] kmem_cache_alloc+0x24/0x210 [ 2375.881639][T19765] new_inode_pseudo+0x78/0x210 [ 2375.886397][T19765] new_inode+0x25/0x1d0 [ 2375.890549][T19765] ? start_creating+0x183/0x270 [ 2375.895566][T19765] debugfs_create_dir+0x66/0x380 [ 2375.900501][T19765] bdi_register_va+0x232/0x5e0 [ 2375.905317][T19765] bdi_register+0x80/0xa0 [ 2375.909730][T19765] ? __device_add_disk+0x50a/0x1210 [ 2375.915189][T19765] bdi_register_owner+0x56/0xf0 [ 2375.920043][T19765] __device_add_disk+0x583/0x1210 [ 2375.925251][T19765] loop_add+0x554/0x710 [ 2375.929462][T19765] loop_control_ioctl+0x465/0x600 [ 2375.934529][T19765] ? loop_remove+0xa0/0xa0 [ 2375.940708][T19765] do_vfs_ioctl+0x6d1/0x15b0 [ 2375.945308][T19765] __x64_sys_ioctl+0xd4/0x110 [ 2375.950023][T19765] do_syscall_64+0xcb/0x1c0 [ 2375.955968][T19765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2375.961947][T19765] RIP: 0033:0x7efdb617c209 [ 2375.966449][T19765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2375.986575][T19765] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2375.995680][T19765] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2376.003837][T19765] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2376.011806][T19765] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2376.019772][T19765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.027808][T19765] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2376.043937][T19765] debugfs: out of free dentries, can not create directory '7:0' 06:10:43 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xfffffffffffffc80, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x0, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x40, 0x50, 0x0, r5}, [@IFA_FLAGS={0x0, 0x8, 0x1}, @IFA_CACHEINFO={0x0, 0x6, {0x4, 0x9, 0x4}}, @IFA_BROADCAST={0x0, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x3}, @IFA_LABEL={0x0, 0x3, 'wg0\x00'}, @IFA_LABEL={0x0, 0x3, 'hsr0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:43 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x0, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:43 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 73) 06:10:43 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = getpid() (async) r3 = getpgrp(0xffffffffffffffff) (async) r4 = getpgrp(0x0) (async) r5 = getpgrp(0x0) (async) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3c}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) syz_clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x37}, &(0x7f0000000140)=""/151, 0x97, &(0x7f0000000200)=""/84, &(0x7f0000000280)=[r2, r3, 0xffffffffffffffff, r4, r5], 0x5, {r6}}, 0x58) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 06:10:43 executing program 3: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000080), 0x10, 0xc0000) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5, 0x400000) 06:10:43 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = getpid() r3 = getpgrp(0xffffffffffffffff) r4 = getpgrp(0x0) r5 = getpgrp(0x0) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3c}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) syz_clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x37}, &(0x7f0000000140)=""/151, 0x97, &(0x7f0000000200)=""/84, &(0x7f0000000280)=[r2, r3, 0xffffffffffffffff, r4, r5], 0x5, {r6}}, 0x58) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) getpid() (async) getpgrp(0xffffffffffffffff) (async) getpgrp(0x0) (async) getpgrp(0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3c}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) syz_clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x37}, &(0x7f0000000140)=""/151, 0x97, &(0x7f0000000200)=""/84, &(0x7f0000000280)=[r2, r3, 0xffffffffffffffff, r4, r5], 0x5, {r6}}, 0x58) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (async) 06:10:43 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x0, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2376.140493][T19791] FAULT_INJECTION: forcing a failure. [ 2376.140493][T19791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2376.168599][T19791] CPU: 0 PID: 19791 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2376.180518][T19791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2376.191258][T19791] Call Trace: [ 2376.194558][T19791] dump_stack+0x18e/0x1d5 [ 2376.198888][T19791] should_fail+0x604/0x770 [ 2376.203307][T19791] __alloc_pages_nodemask+0x12a/0x6f0 [ 2376.208686][T19791] __get_free_pages+0xa/0x30 [ 2376.213276][T19791] selinux_genfs_get_sid+0x55/0x250 [ 2376.218476][T19791] inode_doinit_with_dentry+0x8ca/0xf30 [ 2376.224032][T19791] security_d_instantiate+0xa5/0x100 [ 2376.229456][T19791] d_instantiate+0x51/0x90 [ 2376.233869][T19791] debugfs_create_dir+0x1a1/0x380 [ 2376.238982][T19791] bdi_register_va+0x232/0x5e0 [ 2376.244435][T19791] bdi_register+0x80/0xa0 [ 2376.248865][T19791] ? __device_add_disk+0x50a/0x1210 [ 2376.254060][T19791] bdi_register_owner+0x56/0xf0 [ 2376.258907][T19791] __device_add_disk+0x583/0x1210 [ 2376.264032][T19791] loop_add+0x554/0x710 [ 2376.268188][T19791] loop_control_ioctl+0x465/0x600 [ 2376.273300][T19791] ? loop_remove+0xa0/0xa0 [ 2376.277755][T19791] do_vfs_ioctl+0x6d1/0x15b0 [ 2376.282470][T19791] __x64_sys_ioctl+0xd4/0x110 [ 2376.287148][T19791] do_syscall_64+0xcb/0x1c0 [ 2376.291652][T19791] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2376.297630][T19791] RIP: 0033:0x7efdb617c209 [ 2376.302042][T19791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2376.321738][T19791] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2376.330243][T19791] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2376.338211][T19791] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2376.346266][T19791] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2376.354235][T19791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.362207][T19791] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:44 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0, r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:44 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 74) 06:10:44 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x0, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:44 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 06:10:44 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x12040, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x7c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x608040, 0x0) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005050000000000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008004136ed4aa73170504806", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) 06:10:44 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:44 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 06:10:44 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x7, 0x9c, [@local]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:44 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x7, 0x9c, [@local]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2376.662015][T19822] FAULT_INJECTION: forcing a failure. [ 2376.662015][T19822] name failslab, interval 1, probability 0, space 0, times 0 [ 2376.678854][T19822] CPU: 0 PID: 19822 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2376.690581][T19822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2376.700632][T19822] Call Trace: [ 2376.704101][T19822] dump_stack+0x18e/0x1d5 [ 2376.708452][T19822] should_fail+0x604/0x770 [ 2376.713053][T19822] ? __d_alloc+0x2a/0x6a0 [ 2376.717448][T19822] should_failslab+0x5/0x20 [ 2376.721950][T19822] kmem_cache_alloc+0x24/0x210 [ 2376.726710][T19822] __d_alloc+0x2a/0x6a0 [ 2376.730902][T19822] ? save_stack+0x17b/0x1e0 [ 2376.735495][T19822] ? free_pcp_prepare+0x1a4/0x290 [ 2376.740532][T19822] d_alloc_parallel+0x7d/0x1210 [ 2376.745457][T19822] ? bdi_register+0x80/0xa0 [ 2376.750050][T19822] ? avc_has_perm_noaudit+0x2b0/0x370 [ 2376.755422][T19822] ? __d_lookup+0x4d9/0x540 [ 2376.759919][T19822] ? selinux_inode_permission+0x326/0x5b0 [ 2376.765637][T19822] __lookup_slow+0xfa/0x3c0 [ 2376.770137][T19822] lookup_one_len+0x3db/0x5d0 [ 2376.774820][T19822] start_creating+0xec/0x270 [ 2376.779450][T19822] __debugfs_create_file+0x74/0x400 [ 2376.784653][T19822] ? debugfs_create_dir+0x2e6/0x380 [ 2376.789858][T19822] bdi_register_va+0x274/0x5e0 [ 2376.794652][T19822] bdi_register+0x80/0xa0 [ 2376.798990][T19822] ? __device_add_disk+0x50a/0x1210 [ 2376.804192][T19822] bdi_register_owner+0x56/0xf0 [ 2376.809220][T19822] __device_add_disk+0x583/0x1210 [ 2376.814336][T19822] loop_add+0x554/0x710 [ 2376.818548][T19822] loop_control_ioctl+0x465/0x600 [ 2376.823578][T19822] ? loop_remove+0xa0/0xa0 [ 2376.827993][T19822] do_vfs_ioctl+0x6d1/0x15b0 [ 2376.832579][T19822] __x64_sys_ioctl+0xd4/0x110 [ 2376.837290][T19822] do_syscall_64+0xcb/0x1c0 [ 2376.841884][T19822] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2376.847772][T19822] RIP: 0033:0x7efdb617c209 [ 2376.852184][T19822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2376.872072][T19822] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2376.880482][T19822] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2376.888543][T19822] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2376.896685][T19822] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2376.904748][T19822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:10:44 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x7, 0x9c, [@local]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:44 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 75) [ 2376.913067][T19822] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:44 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:44 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2377.008753][T19842] FAULT_INJECTION: forcing a failure. [ 2377.008753][T19842] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.035674][T19842] CPU: 1 PID: 19842 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2377.047330][T19842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2377.057729][T19842] Call Trace: [ 2377.061465][T19842] dump_stack+0x18e/0x1d5 [ 2377.066678][T19842] should_fail+0x604/0x770 [ 2377.071112][T19842] ? __d_alloc+0x2a/0x6a0 [ 2377.075496][T19842] should_failslab+0x5/0x20 [ 2377.080082][T19842] kmem_cache_alloc+0x24/0x210 [ 2377.084841][T19842] __d_alloc+0x2a/0x6a0 [ 2377.089100][T19842] ? save_stack+0x17b/0x1e0 [ 2377.093595][T19842] ? free_pcp_prepare+0x1a4/0x290 [ 2377.098792][T19842] d_alloc_parallel+0x7d/0x1210 [ 2377.103636][T19842] ? bdi_register+0x80/0xa0 [ 2377.108133][T19842] ? avc_has_perm_noaudit+0x2b0/0x370 [ 2377.113529][T19842] ? __d_lookup+0x4d9/0x540 [ 2377.118040][T19842] ? selinux_inode_permission+0x326/0x5b0 [ 2377.123939][T19842] __lookup_slow+0xfa/0x3c0 [ 2377.128628][T19842] lookup_one_len+0x3db/0x5d0 [ 2377.133301][T19842] start_creating+0xec/0x270 [ 2377.137889][T19842] __debugfs_create_file+0x74/0x400 [ 2377.143078][T19842] ? debugfs_create_dir+0x2e6/0x380 [ 2377.148271][T19842] bdi_register_va+0x274/0x5e0 [ 2377.153118][T19842] bdi_register+0x80/0xa0 [ 2377.157454][T19842] ? __device_add_disk+0x50a/0x1210 [ 2377.162738][T19842] bdi_register_owner+0x56/0xf0 [ 2377.167795][T19842] __device_add_disk+0x583/0x1210 [ 2377.172818][T19842] loop_add+0x554/0x710 [ 2377.176995][T19842] loop_control_ioctl+0x465/0x600 [ 2377.182029][T19842] ? loop_remove+0xa0/0xa0 [ 2377.186640][T19842] do_vfs_ioctl+0x6d1/0x15b0 [ 2377.191241][T19842] __x64_sys_ioctl+0xd4/0x110 [ 2377.195915][T19842] do_syscall_64+0xcb/0x1c0 [ 2377.200410][T19842] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2377.206305][T19842] RIP: 0033:0x7efdb617c209 [ 2377.210714][T19842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2377.230502][T19842] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2377.238908][T19842] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2377.246885][T19842] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2377.254860][T19842] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.262912][T19842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2377.270968][T19842] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:44 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0, r0) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:44 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) 06:10:44 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x12040, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x7c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x608040, 0x0) (async) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005050000000000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008004136ed4aa73170504806", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) 06:10:44 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:44 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:44 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 76) 06:10:44 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x7, 0x9c, [@private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:44 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x7, 0x9c, [@private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2377.501228][T19858] FAULT_INJECTION: forcing a failure. [ 2377.501228][T19858] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.518109][T19858] CPU: 1 PID: 19858 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2377.529849][T19858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2377.539903][T19858] Call Trace: [ 2377.543199][T19858] dump_stack+0x18e/0x1d5 [ 2377.547640][T19858] should_fail+0x604/0x770 [ 2377.552062][T19858] ? security_inode_alloc+0x24/0x130 [ 2377.557344][T19858] should_failslab+0x5/0x20 [ 2377.562112][T19858] kmem_cache_alloc+0x24/0x210 [ 2377.567062][T19858] security_inode_alloc+0x24/0x130 [ 2377.572580][T19858] inode_init_always+0x387/0x810 [ 2377.577705][T19858] new_inode_pseudo+0x8f/0x210 [ 2377.582763][T19858] new_inode+0x25/0x1d0 [ 2377.587008][T19858] ? start_creating+0x183/0x270 [ 2377.591856][T19858] __debugfs_create_file+0xb6/0x400 [ 2377.597061][T19858] ? debugfs_create_dir+0x2e6/0x380 [ 2377.602433][T19858] bdi_register_va+0x274/0x5e0 [ 2377.607199][T19858] bdi_register+0x80/0xa0 [ 2377.611528][T19858] ? __device_add_disk+0x50a/0x1210 [ 2377.616820][T19858] bdi_register_owner+0x56/0xf0 [ 2377.621687][T19858] __device_add_disk+0x583/0x1210 [ 2377.626899][T19858] loop_add+0x554/0x710 [ 2377.631103][T19858] loop_control_ioctl+0x465/0x600 [ 2377.636151][T19858] ? loop_remove+0xa0/0xa0 [ 2377.640843][T19858] do_vfs_ioctl+0x6d1/0x15b0 [ 2377.645528][T19858] __x64_sys_ioctl+0xd4/0x110 [ 2377.650219][T19858] do_syscall_64+0xcb/0x1c0 [ 2377.654736][T19858] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2377.660626][T19858] RIP: 0033:0x7efdb617c209 [ 2377.665070][T19858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2377.684759][T19858] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2377.693169][T19858] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 06:10:45 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x7, 0x9c, [@private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:45 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x12040, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x7c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x608040, 0x0) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005050000000000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008004136ed4aa73170504806", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x12040, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x7c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x608040, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005050000000000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008004136ed4aa73170504806", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) (async) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) (async) 06:10:45 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 77) [ 2377.701147][T19858] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2377.709818][T19858] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.718916][T19858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2377.727067][T19858] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2377.739734][T19858] debugfs: out of free dentries, can not create file 'stats' 06:10:45 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2377.814792][T19882] FAULT_INJECTION: forcing a failure. [ 2377.814792][T19882] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.827737][T19882] CPU: 0 PID: 19882 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2377.839360][T19882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2377.849418][T19882] Call Trace: [ 2377.852715][T19882] dump_stack+0x18e/0x1d5 [ 2377.857052][T19882] should_fail+0x604/0x770 [ 2377.861469][T19882] ? security_inode_alloc+0x24/0x130 [ 2377.866745][T19882] should_failslab+0x5/0x20 [ 2377.871248][T19882] kmem_cache_alloc+0x24/0x210 [ 2377.876006][T19882] security_inode_alloc+0x24/0x130 [ 2377.881112][T19882] inode_init_always+0x387/0x810 [ 2377.886226][T19882] new_inode_pseudo+0x8f/0x210 [ 2377.890985][T19882] new_inode+0x25/0x1d0 [ 2377.895240][T19882] ? start_creating+0x183/0x270 [ 2377.900084][T19882] __debugfs_create_file+0xb6/0x400 [ 2377.905279][T19882] ? debugfs_create_dir+0x2e6/0x380 [ 2377.910474][T19882] bdi_register_va+0x274/0x5e0 [ 2377.915259][T19882] bdi_register+0x80/0xa0 [ 2377.919596][T19882] ? __device_add_disk+0x50a/0x1210 [ 2377.924795][T19882] bdi_register_owner+0x56/0xf0 [ 2377.929737][T19882] __device_add_disk+0x583/0x1210 [ 2377.934760][T19882] loop_add+0x554/0x710 [ 2377.938912][T19882] loop_control_ioctl+0x465/0x600 [ 2377.943935][T19882] ? loop_remove+0xa0/0xa0 [ 2377.948613][T19882] do_vfs_ioctl+0x6d1/0x15b0 [ 2377.953199][T19882] __x64_sys_ioctl+0xd4/0x110 [ 2377.957960][T19882] do_syscall_64+0xcb/0x1c0 [ 2377.962465][T19882] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2377.968534][T19882] RIP: 0033:0x7efdb617c209 [ 2377.972999][T19882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2377.992691][T19882] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2378.001108][T19882] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2378.009195][T19882] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2378.017174][T19882] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2378.025402][T19882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2378.033367][T19882] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2378.045444][T19882] debugfs: out of free dentries, can not create file 'stats' 06:10:45 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:45 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:45 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:10:45 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x29, 0x2, 0x1f, 0x6b, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x9, 0x8001}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000049fb744d38d14d55", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2501000000040005000500030000000000080008000a01010014000900fe8000000000000000000000000000271400090000000000000000000000000000000001050002000200000008000600ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff, 0x1}) r6 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r7, 0x29, 0x9, 0xe0, 0x401, 0x18, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:10:45 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:10:45 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 78) 06:10:45 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:45 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:45 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) 06:10:45 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) [ 2378.362785][T19917] FAULT_INJECTION: forcing a failure. [ 2378.362785][T19917] name failslab, interval 1, probability 0, space 0, times 0 [ 2378.379795][T19917] CPU: 0 PID: 19917 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2378.391431][T19917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2378.401485][T19917] Call Trace: [ 2378.404785][T19917] dump_stack+0x18e/0x1d5 [ 2378.409126][T19917] should_fail+0x604/0x770 [ 2378.413629][T19917] ? kobject_set_name_vargs+0x5d/0x110 [ 2378.419178][T19917] should_failslab+0x5/0x20 [ 2378.423686][T19917] __kmalloc_track_caller+0x4f/0x280 [ 2378.428986][T19917] kstrdup_const+0x51/0x90 [ 2378.433510][T19917] kobject_set_name_vargs+0x5d/0x110 [ 2378.438810][T19917] dev_set_name+0x80/0xa0 [ 2378.443409][T19917] ? kobj_map+0x61f/0x650 [ 2378.447876][T19917] __device_add_disk+0x675/0x1210 [ 2378.452909][T19917] loop_add+0x554/0x710 [ 2378.457065][T19917] loop_control_ioctl+0x465/0x600 [ 2378.462114][T19917] ? loop_remove+0xa0/0xa0 [ 2378.466542][T19917] do_vfs_ioctl+0x6d1/0x15b0 [ 2378.471249][T19917] __x64_sys_ioctl+0xd4/0x110 [ 2378.475931][T19917] do_syscall_64+0xcb/0x1c0 [ 2378.480438][T19917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2378.486336][T19917] RIP: 0033:0x7efdb617c209 [ 2378.490743][T19917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2378.510717][T19917] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2378.519133][T19917] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2378.527103][T19917] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2378.535073][T19917] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2378.543215][T19917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2378.551188][T19917] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 06:10:46 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x7, 0x4c, 0x9, 0x5e, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, 0x10, 0x707, 0xffffffff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x4, 0x6, 0x63, @remote, @mcast2, 0x700, 0x7, 0x8, 0x1}}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7800, 0x20, 0x7, 0xf2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x9c, [@local, @private=0xa010102]}, @generic={0x82, 0xb, "813ea681880312a3d5"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xf, [{@multicast2, 0x3fff800}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x80}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0xc010) [ 2378.560267][T19917] kobject_add_internal failed for queue (error: -2 parent: (null)) [ 2378.573366][T19917] ------------[ cut here ]------------ [ 2378.578859][T19917] WARNING: CPU: 0 PID: 19917 at fs/sysfs/file.c:328 sysfs_create_files+0x1a5/0x370 [ 2378.588130][T19917] Modules linked in: [ 2378.592024][T19917] CPU: 0 PID: 19917 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2378.603636][T19917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2378.613709][T19917] RIP: 0010:sysfs_create_files+0x1a5/0x370 [ 2378.619608][T19917] Code: 89 ff 4c 89 ee 31 d2 41 89 e8 6a 00 e8 34 f9 ff ff 48 83 c4 08 41 89 c7 eb 18 66 66 2e 0f 1f 84 00 00 00 00 00 e8 6b 6b af ff <0f> 0b 41 bf ea ff ff ff 41 8d 6c 24 01 48 63 c5 48 8b 4c 24 08 48 [ 2378.639399][T19917] RSP: 0018:ffff8881c8637c68 EFLAGS: 00010246 [ 2378.645606][T19917] RAX: ffffffff81b0e259 RBX: ffff8881d42f50a0 RCX: 0000000000040000 [ 2378.653895][T19917] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2378.661969][T19917] RBP: ffff8881d42f5070 R08: ffffffff82181ed4 R09: ffffed10390c6f8b [ 2378.669958][T19917] R10: ffffed10390c6f8b R11: 1ffff110390c6f8a R12: 0000000000000000 [ 2378.677926][T19917] R13: ffffffff84bd5560 R14: dffffc0000000000 R15: ffff8881d42f5000 [ 2378.685900][T19917] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2378.694835][T19917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2378.701427][T19917] CR2: 0000000000000000 CR3: 00000001f38d4000 CR4: 00000000003406f0 [ 2378.711664][T19917] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2378.719644][T19917] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2378.727759][T19917] Call Trace: [ 2378.731067][T19917] __device_add_disk+0xd16/0x1210 [ 2378.736105][T19917] loop_add+0x554/0x710 [ 2378.740305][T19917] loop_control_ioctl+0x465/0x600 [ 2378.745337][T19917] ? loop_remove+0xa0/0xa0 [ 2378.749749][T19917] do_vfs_ioctl+0x6d1/0x15b0 [ 2378.754546][T19917] __x64_sys_ioctl+0xd4/0x110 [ 2378.759307][T19917] do_syscall_64+0xcb/0x1c0 [ 2378.763895][T19917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2378.770054][T19917] RIP: 0033:0x7efdb617c209 [ 2378.774472][T19917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2378.794357][T19917] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2378.802791][T19917] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2378.810765][T19917] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2378.819863][T19917] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2378.828206][T19917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2378.836271][T19917] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2378.844383][T19917] ---[ end trace 4781fc9bf8f7070d ]--- [ 2378.851699][T19917] ------------[ cut here ]------------ [ 2378.857243][T19917] kernfs: can not remove 'events', no directory [ 2378.864020][T19917] WARNING: CPU: 0 PID: 19917 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 2378.874675][T19917] Modules linked in: [ 2378.878569][T19917] CPU: 0 PID: 19917 Comm: syz-executor.5 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2378.890188][T19917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2378.900538][T19917] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2378.906954][T19917] Code: 48 89 c3 e8 c1 c6 af ff 48 89 df e8 69 f0 ff ff 31 db eb 29 e8 b0 c6 af ff 48 c7 c7 40 f8 a7 84 4c 89 fe 31 c0 e8 af f0 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 91 c6 af ff bb fe ff ff ff 48 c7 c7 [ 2378.926874][T19917] RSP: 0018:ffff8881c8637c48 EFLAGS: 00010246 [ 2378.932942][T19917] RAX: 4845f31b1e8f1700 RBX: 0000000000000000 RCX: 0000000000040000 [ 2378.940921][T19917] RDX: ffffc90000747000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2378.948987][T19917] RBP: ffffffff84bd5560 R08: ffffffff814a940a R09: ffffed103edc52b2 [ 2378.957041][T19917] R10: ffffed103edc52b2 R11: 1ffff1103edc52b1 R12: ffffffff85a449e0 [ 2378.965016][T19917] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff84bd5620 [ 2378.972980][T19917] FS: 00007efdb52f2700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2378.981988][T19917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2378.988562][T19917] CR2: 00007f56075b0090 CR3: 00000001f38d4000 CR4: 00000000003406f0 [ 2378.996528][T19917] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2379.004493][T19917] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2379.012457][T19917] Call Trace: [ 2379.015749][T19917] sysfs_create_files+0x31a/0x370 [ 2379.020783][T19917] __device_add_disk+0xd16/0x1210 [ 2379.025805][T19917] loop_add+0x554/0x710 [ 2379.029960][T19917] loop_control_ioctl+0x465/0x600 [ 2379.035064][T19917] ? loop_remove+0xa0/0xa0 [ 2379.039481][T19917] do_vfs_ioctl+0x6d1/0x15b0 [ 2379.044263][T19917] __x64_sys_ioctl+0xd4/0x110 [ 2379.048942][T19917] do_syscall_64+0xcb/0x1c0 [ 2379.053614][T19917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2379.059589][T19917] RIP: 0033:0x7efdb617c209 [ 2379.064022][T19917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2379.083846][T19917] RSP: 002b:00007efdb52f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2379.093148][T19917] RAX: ffffffffffffffda RBX: 00007efdb628ef60 RCX: 00007efdb617c209 [ 2379.101213][T19917] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2379.109186][T19917] RBP: 00007efdb52f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2379.117158][T19917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2379.125328][T19917] R13: 00007ffcecd4524f R14: 00007efdb52f2300 R15: 0000000000022000 [ 2379.133302][T19917] ---[ end trace 4781fc9bf8f7070e ]--- [ 2379.138949][T19917] loop0: failed to create sysfs files for events [ 2379.145841][T19916] ------------[ cut here ]------------ [ 2379.154294][T19916] kernfs: can not remove 'events', no directory 06:10:46 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x10}, 0x0, 0x0, 0x0, 0x0) 06:10:46 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) [ 2379.164400][T19916] WARNING: CPU: 0 PID: 19916 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 2379.174212][T19916] Modules linked in: [ 2379.178231][T19916] CPU: 0 PID: 19916 Comm: syz-executor.1 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2379.189875][T19916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2379.200851][T19916] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2379.206995][T19916] Code: 48 89 c3 e8 c1 c6 af ff 48 89 df e8 69 f0 ff ff 31 db eb 29 e8 b0 c6 af ff 48 c7 c7 40 f8 a7 84 4c 89 fe 31 c0 e8 af f0 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 91 c6 af ff bb fe ff ff ff 48 c7 c7 [ 2379.226768][T19916] RSP: 0018:ffff8881e5e07cd0 EFLAGS: 00010246 [ 2379.232831][T19916] RAX: 261ef2cff9439900 RBX: 0000000000000000 RCX: 0000000000040000 [ 2379.241146][T19916] RDX: ffffc90000144000 RSI: 00000000000124b9 RDI: 00000000000124ba [ 2379.249121][T19916] RBP: ffffffff85a449e0 R08: ffffffff814a940a R09: ffffed103cbc0f59 [ 2379.257099][T19916] R10: ffffed103cbc0f59 R11: 1ffff1103cbc0f58 R12: 0000000000000000 [ 2379.265063][T19916] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84bd5620 [ 2379.273032][T19916] FS: 00007fa6dd842700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2379.282042][T19916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2379.288706][T19916] CR2: 0000001b2ee21000 CR3: 00000001ee450000 CR4: 00000000003406f0 [ 2379.296681][T19916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2379.304750][T19916] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2379.312988][T19916] Call Trace: [ 2379.316411][T19916] sysfs_remove_files+0x99/0xf0 [ 2379.322242][T19916] del_gendisk+0x241/0xb60 [ 2379.326675][T19916] loop_remove+0x42/0xa0 [ 2379.330921][T19916] loop_control_ioctl+0x547/0x600 [ 2379.336035][T19916] ? loop_remove+0xa0/0xa0 [ 2379.340671][T19916] do_vfs_ioctl+0x6d1/0x15b0 [ 2379.345620][T19916] __x64_sys_ioctl+0xd4/0x110 [ 2379.350560][T19916] do_syscall_64+0xcb/0x1c0 [ 2379.355092][T19916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2379.361375][T19916] RIP: 0033:0x7fa6de6cc209 [ 2379.365797][T19916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2379.387001][T19916] RSP: 002b:00007fa6dd842168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2379.395411][T19916] RAX: ffffffffffffffda RBX: 00007fa6de7def60 RCX: 00007fa6de6cc209 [ 2379.403646][T19916] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 06:10:46 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) (fail_nth: 79) 06:10:46 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) [ 2379.411620][T19916] RBP: 00007fa6de726161 R08: 0000000000000000 R09: 0000000000000000 [ 2379.420172][T19916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2379.428147][T19916] R13: 00007ffd37c3b10f R14: 00007fa6dd842300 R15: 0000000000022000 [ 2379.436131][T19916] ---[ end trace 4781fc9bf8f7070f ]--- [ 2379.542240][T19916] ------------[ cut here ]------------ [ 2379.548178][T19916] kernfs: can not remove 'events_async', no directory [ 2379.555544][T19916] WARNING: CPU: 1 PID: 19916 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 2379.565329][T19916] Modules linked in: [ 2379.569253][T19916] CPU: 1 PID: 19916 Comm: syz-executor.1 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2379.581919][T19916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2379.592593][T19916] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2379.598924][T19916] Code: 48 89 c3 e8 c1 c6 af ff 48 89 df e8 69 f0 ff ff 31 db eb 29 e8 b0 c6 af ff 48 c7 c7 40 f8 a7 84 4c 89 fe 31 c0 e8 af f0 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 91 c6 af ff bb fe ff ff ff 48 c7 c7 [ 2379.619736][T19916] RSP: 0018:ffff8881e5e07cd0 EFLAGS: 00010246 [ 2379.626512][T19916] RAX: 261ef2cff9439900 RBX: 0000000000000000 RCX: 0000000000040000 [ 2379.634655][T19916] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2379.642930][T19916] RBP: ffffffff85a449e0 R08: ffffffff814a940a R09: ffffed103ede52b2 [ 2379.651181][T19916] R10: ffffed103ede52b2 R11: 1ffff1103ede52b1 R12: 0000000000000000 [ 2379.659251][T19916] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84bd56c0 [ 2379.667310][T19916] FS: 00007fa6dd842700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2379.676233][T19916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2379.682815][T19916] CR2: 00007f45cc363718 CR3: 00000001ee450000 CR4: 00000000003406e0 [ 2379.690962][T19916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2379.698938][T19916] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2379.706910][T19916] Call Trace: [ 2379.710207][T19916] sysfs_remove_files+0x99/0xf0 [ 2379.715156][T19916] del_gendisk+0x241/0xb60 [ 2379.719590][T19916] loop_remove+0x42/0xa0 [ 2379.723834][T19916] loop_control_ioctl+0x547/0x600 [ 2379.728857][T19916] ? loop_remove+0xa0/0xa0 [ 2379.733444][T19916] do_vfs_ioctl+0x6d1/0x15b0 [ 2379.738209][T19916] __x64_sys_ioctl+0xd4/0x110 [ 2379.742888][T19916] do_syscall_64+0xcb/0x1c0 [ 2379.747717][T19916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2379.753632][T19916] RIP: 0033:0x7fa6de6cc209 [ 2379.758139][T19916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2379.778129][T19916] RSP: 002b:00007fa6dd842168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2379.788226][T19916] RAX: ffffffffffffffda RBX: 00007fa6de7def60 RCX: 00007fa6de6cc209 [ 2379.796481][T19916] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2379.804763][T19916] RBP: 00007fa6de726161 R08: 0000000000000000 R09: 0000000000000000 [ 2379.812751][T19916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2379.820901][T19916] R13: 00007ffd37c3b10f R14: 00007fa6dd842300 R15: 0000000000022000 [ 2379.829323][T19916] ---[ end trace 4781fc9bf8f70710 ]--- [ 2379.838686][T19916] ------------[ cut here ]------------ [ 2379.845600][T19916] kernfs: can not remove 'events_poll_msecs', no directory [ 2379.853273][T19916] WARNING: CPU: 1 PID: 19916 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 2379.863360][T19916] Modules linked in: [ 2379.867342][T19916] CPU: 1 PID: 19916 Comm: syz-executor.1 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2379.879124][T19916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2379.889561][T19916] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2379.895715][T19916] Code: 48 89 c3 e8 c1 c6 af ff 48 89 df e8 69 f0 ff ff 31 db eb 29 e8 b0 c6 af ff 48 c7 c7 40 f8 a7 84 4c 89 fe 31 c0 e8 af f0 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 91 c6 af ff bb fe ff ff ff 48 c7 c7 [ 2379.915753][T19916] RSP: 0018:ffff8881e5e07cd0 EFLAGS: 00010246 [ 2379.922011][T19916] RAX: 261ef2cff9439900 RBX: 0000000000000000 RCX: 0000000000040000 [ 2379.929992][T19916] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2379.938156][T19916] RBP: ffffffff85a449e0 R08: ffffffff814a940a R09: ffffed103edeaa08 [ 2379.946524][T19916] R10: ffffed103edeaa08 R11: 1ffff1103edeaa07 R12: 0000000000000000 [ 2379.955432][T19916] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84bd56e0 [ 2379.963642][T19916] FS: 00007fa6dd842700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2379.973403][T19916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2379.980162][T19916] CR2: 00007f45cc2bddc0 CR3: 00000001ee450000 CR4: 00000000003406e0 [ 2379.988585][T19916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2379.996625][T19916] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2380.004610][T19916] Call Trace: [ 2380.007914][T19916] sysfs_remove_files+0x99/0xf0 [ 2380.012775][T19916] del_gendisk+0x241/0xb60 [ 2380.017541][T19916] loop_remove+0x42/0xa0 [ 2380.021788][T19916] loop_control_ioctl+0x547/0x600 [ 2380.026818][T19916] ? loop_remove+0xa0/0xa0 [ 2380.031460][T19916] do_vfs_ioctl+0x6d1/0x15b0 [ 2380.036238][T19916] __x64_sys_ioctl+0xd4/0x110 [ 2380.040919][T19916] do_syscall_64+0xcb/0x1c0 [ 2380.045896][T19916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2380.052056][T19916] RIP: 0033:0x7fa6de6cc209 [ 2380.056467][T19916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2380.076327][T19916] RSP: 002b:00007fa6dd842168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2380.084766][T19916] RAX: ffffffffffffffda RBX: 00007fa6de7def60 RCX: 00007fa6de6cc209 [ 2380.093188][T19916] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2380.101301][T19916] RBP: 00007fa6de726161 R08: 0000000000000000 R09: 0000000000000000 [ 2380.109639][T19916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2380.117872][T19916] R13: 00007ffd37c3b10f R14: 00007fa6dd842300 R15: 0000000000022000 [ 2380.125949][T19916] ---[ end trace 4781fc9bf8f70711 ]--- [ 2380.137175][T19916] ------------[ cut here ]------------ [ 2380.142876][T19916] kernfs: can not remove 'bdi', no directory [ 2380.149683][T19916] WARNING: CPU: 1 PID: 19916 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 2380.161061][T19916] Modules linked in: [ 2380.165683][T19916] CPU: 1 PID: 19916 Comm: syz-executor.1 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2380.178079][T19916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2380.188495][T19916] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2380.195096][T19916] Code: 48 89 c3 e8 c1 c6 af ff 48 89 df e8 69 f0 ff ff 31 db eb 29 e8 b0 c6 af ff 48 c7 c7 40 f8 a7 84 4c 89 fe 31 c0 e8 af f0 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 91 c6 af ff bb fe ff ff ff 48 c7 c7 [ 2380.215160][T19916] RSP: 0018:ffff8881e5e07d10 EFLAGS: 00010246 [ 2380.221660][T19916] RAX: 261ef2cff9439900 RBX: 0000000000000000 RCX: 0000000000040000 [ 2380.229979][T19916] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2380.238502][T19916] RBP: 0000000000000000 R08: ffffffff814a940a R09: ffffed103edeaa08 [ 2380.247168][T19916] R10: ffffed103edeaa08 R11: 1ffff1103edeaa07 R12: 1ffff1103a85ea00 [ 2380.255771][T19916] R13: ffff8881d42f54e8 R14: 0000000000000000 R15: ffffffff84bd5180 [ 2380.263952][T19916] FS: 00007fa6dd842700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2380.273325][T19916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2380.280203][T19916] CR2: 00007ffe45c4bfb8 CR3: 00000001ee450000 CR4: 00000000003406e0 [ 2380.288340][T19916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2380.296419][T19916] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2380.304479][T19916] Call Trace: [ 2380.308046][T19916] del_gendisk+0x533/0xb60 [ 2380.312477][T19916] loop_remove+0x42/0xa0 [ 2380.316728][T19916] loop_control_ioctl+0x547/0x600 [ 2380.321752][T19916] ? loop_remove+0xa0/0xa0 [ 2380.326435][T19916] do_vfs_ioctl+0x6d1/0x15b0 [ 2380.331120][T19916] __x64_sys_ioctl+0xd4/0x110 [ 2380.335806][T19916] do_syscall_64+0xcb/0x1c0 [ 2380.340479][T19916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2380.346365][T19916] RIP: 0033:0x7fa6de6cc209 [ 2380.350956][T19916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2380.370665][T19916] RSP: 002b:00007fa6dd842168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2380.379164][T19916] RAX: ffffffffffffffda RBX: 00007fa6de7def60 RCX: 00007fa6de6cc209 [ 2380.387487][T19916] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2380.395632][T19916] RBP: 00007fa6de726161 R08: 0000000000000000 R09: 0000000000000000 [ 2380.403692][T19916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2380.411922][T19916] R13: 00007ffd37c3b10f R14: 00007fa6dd842300 R15: 0000000000022000 [ 2380.420172][T19916] ---[ end trace 4781fc9bf8f70712 ]--- [ 2380.435340][T19916] kasan: CONFIG_KASAN_INLINE enabled [ 2380.440912][T19916] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2380.449806][T19916] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2380.456761][T19916] CPU: 1 PID: 19916 Comm: syz-executor.1 Tainted: G W 5.4.190-syzkaller-00009-g397b3ca493cb #0 [ 2380.468646][T19916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2380.479260][T19916] RIP: 0010:strlen+0x2a/0x60 [ 2380.483842][T19916] Code: 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 90 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 2380.503875][T19916] RSP: 0018:ffff8881e5e07c70 EFLAGS: 00010246 [ 2380.509930][T19916] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 2380.518091][T19916] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000000000 [ 2380.526318][T19916] RBP: 0000000000000000 R08: ffffffff81b05b29 R09: ffffed103cbc0f9b [ 2380.534928][T19916] R10: ffffed103cbc0f9b R11: 1ffff1103cbc0f9a R12: ffffffffffffffff [ 2380.543297][T19916] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 2380.551633][T19916] FS: 00007fa6dd842700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2380.560824][T19916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2380.567838][T19916] CR2: 00007efdb6260058 CR3: 00000001ee450000 CR4: 00000000003406e0 [ 2380.576462][T19916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2380.585074][T19916] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2380.593042][T19916] Call Trace: [ 2380.597378][T19916] kernfs_name_hash+0x1e/0x220 [ 2380.602513][T19916] kernfs_find_ns+0x6b/0x260 [ 2380.607858][T19916] kernfs_remove_by_name_ns+0x32/0x90 [ 2380.613433][T19916] del_gendisk+0x92d/0xb60 [ 2380.617949][T19916] loop_remove+0x42/0xa0 [ 2380.622308][T19916] loop_control_ioctl+0x547/0x600 [ 2380.627432][T19916] ? loop_remove+0xa0/0xa0 [ 2380.631907][T19916] do_vfs_ioctl+0x6d1/0x15b0 [ 2380.636511][T19916] __x64_sys_ioctl+0xd4/0x110 [ 2380.641725][T19916] do_syscall_64+0xcb/0x1c0 [ 2380.646324][T19916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2380.652622][T19916] RIP: 0033:0x7fa6de6cc209 [ 2380.657474][T19916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2380.677616][T19916] RSP: 002b:00007fa6dd842168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2380.687413][T19916] RAX: ffffffffffffffda RBX: 00007fa6de7def60 RCX: 00007fa6de6cc209 [ 2380.695483][T19916] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2380.703539][T19916] RBP: 00007fa6de726161 R08: 0000000000000000 R09: 0000000000000000 [ 2380.711514][T19916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2380.719731][T19916] R13: 00007ffd37c3b10f R14: 00007fa6dd842300 R15: 0000000000022000 [ 2380.728580][T19916] Modules linked in: [ 2380.735209][T19916] ---[ end trace 4781fc9bf8f70713 ]--- [ 2380.740871][T19916] RIP: 0010:strlen+0x2a/0x60 [ 2380.745600][T19916] Code: 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 90 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 2380.766253][T19916] RSP: 0018:ffff8881e5e07c70 EFLAGS: 00010246 [ 2380.772742][T19916] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 2380.781442][T19916] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000000000 [ 2380.789850][T19916] RBP: 0000000000000000 R08: ffffffff81b05b29 R09: ffffed103cbc0f9b [ 2380.798507][T19916] R10: ffffed103cbc0f9b R11: 1ffff1103cbc0f9a R12: ffffffffffffffff [ 2380.806789][T19916] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 2380.814891][T19916] FS: 00007fa6dd842700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2380.824561][T19916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2380.832005][T19916] CR2: 00007efdb6260058 CR3: 00000001ee450000 CR4: 00000000003406e0 [ 2380.841093][T19916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2380.850425][T19916] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2380.859359][T19916] Kernel panic - not syncing: Fatal exception [ 2380.866217][T19916] Kernel Offset: disabled [ 2380.871257][T19916] Rebooting in 86400 seconds..