yz-executor.0'. 02:11:06 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r4) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) [ 2620.293255] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2620.310719] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:06 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="800000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:06 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x18}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfbd, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x80000001}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1f}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xf1, &(0x7f0000000140)=""/241, 0x40f00, 0x11, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x2, 0x8262}, 0x10, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffff9e5}, [@generic={0x2, 0xb, 0x0, 0x101}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000400)='syzkaller\x00', 0x10001, 0xa8, &(0x7f0000000440)=""/168, 0x41100, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000500)={0x40000008, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r3, r2, r3, 0x1, r2, r3, r2]}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map=r2, r4, 0x1c, 0x4, r5}, 0x14) 02:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_setup(0x3e, &(0x7f00000000c0)=0x0) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x2, r0, &(0x7f00000006c0)="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", 0x1000, 0x6, 0x0, 0x1, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x9, r3, &(0x7f0000000180)="bd9b800f66448ffd81c3da3ce01dcf9017ae38265d7da24d7be10f067c5234cf9a2989f35a7a3958112fc2e011246f54a037c0ecef906d1aa401a3feab0c86b0a8600bc5433f9e209303d845ca5d69b064c708290a875da33683cc048559384afba51df9d7513e01cac4a7937f6621b4767148947446b334cf11a9167fb3fc77191014f73c5b73f5c68befc7e96325b1d18b4b2ebf0225594b59299e5d6f222501384e829b4eb5e91a26bcdfa43837bb6bd066de57daf0a51169699832a62b", 0xbf, 0x1, 0x0, 0x1, r4}]) r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r7, 0x54a1) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) io_cancel(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x1f, 0xffffffffffffffff, &(0x7f00000002c0)="5fa827564e28f47ae14835c51c3198eabe44be1c598f0a4bdb6e22e67d412260c74147c512a37a03809c5e07a1599a060cdc23a8fd1e9a0169726c947acbf9f6d9350384115a74833326015aabe7cc80e29bbb175380ca4b03f9dce01ceb0a7638775df1be0ce6b33548ea7a9d38dd1f952655d60e35afe1b732de67cc6a8045858d9a6b57bc67d2030e9e42200ae7fe447a2bf21e45f26fe46e594180e8c061d1dbed1fbf432c1d075c8be99abe70faf542fda0ce92fb39", 0xb8, 0x3f, 0x0, 0x2}, &(0x7f00000003c0)) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f00000000c0)=0x8f66) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x3f, 0x80, 0x8, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) [ 2620.381972] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2620.400990] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="800000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:06 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x18}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfbd, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x80000001}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1f}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xf1, &(0x7f0000000140)=""/241, 0x40f00, 0x11, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x2, 0x8262}, 0x10, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffff9e5}, [@generic={0x2, 0xb, 0x0, 0x101}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000400)='syzkaller\x00', 0x10001, 0xa8, &(0x7f0000000440)=""/168, 0x41100, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000500)={0x40000008, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r3, r2, r3, 0x1, r2, r3, r2]}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map=r2, r4, 0x1c, 0x4, r5}, 0x14) [ 2620.471089] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="800000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) [ 2620.514493] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25060000000800050001000000440001800600"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:06 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000000)) 02:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}}, 0x80) 02:11:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x18}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfbd, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x80000001}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1f}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xf1, &(0x7f0000000140)=""/241, 0x40f00, 0x11, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x2, 0x8262}, 0x10, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffff9e5}, [@generic={0x2, 0xb, 0x0, 0x101}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000400)='syzkaller\x00', 0x10001, 0xa8, &(0x7f0000000440)=""/168, 0x41100, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000500)={0x40000008, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r3, r2, r3, 0x1, r2, r3, r2]}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map=r2, r4, 0x1c, 0x4, r5}, 0x14) 02:11:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}}, 0x0) 02:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25060000000800050001000000440001800600"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) [ 2620.641499] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2620.669522] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25060000000800050001000000440001800600"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:07 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4040012, 0xffffffffffffffff, 0xa000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 02:11:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8280, 0x0) 02:11:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8280, 0x0) 02:11:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) timerfd_create(0x8, 0x80000) 02:11:07 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:07 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4040012, 0xffffffffffffffff, 0xa000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 02:11:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:07 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) 02:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x3e, &(0x7f00000000c0)=0x0) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000001340)={{0x2, 0x1, 0x7, 0x1, 0xb57}, 0x4, 0x4, 0x1000}) io_submit(r1, 0x4, &(0x7f0000001300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xfc8a, r0, &(0x7f0000000000)="dcae65c5cfc14e4362dbdb118f2b3a118da6796bcb464b78964d705a4a82b82738ea16a3f9fa0d4f9a5607b91dbf4c142d0d59333ac3a419d87970c58f8f1ee917bfe92aeae7143c327a7eb824419183c2f472895c3a02e88e67b406431b66b6497517b8c6336e21c18bb769eb68f9b799ce082aba735ad0d2b78db8c02c1be018176d9fffaaad9b2005cfd115e58e362bcfbd72c653d39576893fa6edfee450246c1ea548be759f4475421c18bf383451a7907a64974705e4ce2f4ea46a7be2aa7bb75e54a98c61509ede851fcbe21d13baeb20cdf2d9271a7982b672fd353a7d9d74cfa51bef", 0xe7, 0x5, 0x0, 0x0, r2}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000140)="b8cc99b842f9e2bca5a90b407c871ab314f8d86009230532500d54496733d7f10c4d91a3687910e7126c4eacf3ecfc51826a9db43ce7f97450bfae9ecfa9a4f0362ecce62c61aafd48d7edefeff73131f2c2dc441780bc1162cbc7ee646f4e78e990a0ba840ade5b09cbf79d77fba936dc8c34cdddd2f17d77a975f9b3a9859c448c41c2b5de6c107fef201945b7ebf4c15f5aaad05ffa3b00766b20592de16816375635733793fcdd7ef7939858a031e0ee2fd40a39a684f583e125a5e0cfe644808071d5dea091dd175be5cea62f9d97db4daf3dd437f951748a25a8233b8a7dc90e0baf21f14768acf6be99bf115445b9bcb654deff1d6f6e8a0fc1a8c94f4c6aeac381be1a5ffe1158942b3b813f1bf88569509880268f063a38e645f0062f5b3660831632442a096c6259ccb5980caddf94b93be8328e47a2addf07abe59ec0299e5cd8061c788293598296c99e37394cd29ce86e57e2353198b53d6c529555becc1a436c6f742ef58e1544f99bb9f299b28a24ffeb13ad96d86cb57cf3d02ef1f787f80201051b1e77661889372551fb2a76309c427e7a6ec9d785ad66b2be2a4756cb790002c34e384b53663d6c06ff6f9e32152474d7adf7c0502dea278197a7e4bbf44396bd31e2f3222e6c0fbcc4b1c407b91eb1b9c1f77bd3e623ba8dd69208d1d1770747cff371e75cfacde2c74d23743f1d6ce8dc9c314635749de7df81c05dd432fb3b0e2bcca86a86ac675de8f8e69f8531520faa6872c3e02020edf5c9be9526d9deaaefc18ab956072c857e10e93f3f64a422a8baf2160a4fd242959904a6157cb59c7e7bcc3e3173e46bcc8ac46353698016385d91bb826bd1f28fcb7fa41401ed76ae20d0f0804b6db6c8f02076bd7dc8775dc2ed3506e84a95022b9a0b1158625a8ac46807ff5e6ee32edf816d52c1b3b9ee200b09bf66f137278c212ee51a6b6a5dc009b6a0298f0341c813dddbccc9b1b3a89acb50cd0cc0847a7d8d1ff06c7424f3698709765c4f747ad5396bed0bb6e58c79be72f9517f79903017380dd1d307af67c8a7831537a7f2020dd1ed73682821524f733224183b85b6711d9b637b74f5d2771563cdbbeaba66e2c9b6dd60b30c9b8fae062cd833c698787d9c8c38dd50980f5abb6ed02bca01b8e79b63035312fc1436201637349f0131a7ec5a63bc68cb475bc30c8897749922158406c45d27441c8a9c5da7ec8aa4246264c1154173ded1d67bf03a42274ca5341a3b265cf310d61fdb81ce39de2264a0c6e92bd129778542b3c7df4e3d14cd9959fa0f39916f4ea5c0870d3f07e59de5d5550d3b85eaa941f9b2c4d40ffb79101b4b04209a2d5c4bf6e85b1d8534835109c158c7f7a235854267be4ba87969a1cc8744e1da705d57386853d76d7cd63e870b831cfd15b0e3c4f47bf6a92d7395b37c9aab8c5cce7b66ad5c8e736c030f943cabb37c8790bc793293b66d9bdbe6f4485a3bc522bc9f97fa749fa6afaa7887e8bf54d53a089e6bcbdd9c3a7fb62a375e83b3b136bbcae89101d8fd9b78c02f6a57743b6ef6e218e7645aa9df1e9d8fc8f794029e40e442a28e49f548cc1e519232910691cac8f2fa45a0d32a2955b4746b7db337bef1f769e60401bd737e12c52ae7e7ad67de4b61ffdf231d62c845e992e5c44082d514f55d7953e329494ff5798a06cfa1c18a2b5397046a380666eb8d6acd406c1512eb418f53b40f7afe91f925f08aada7b9acb04c3dfcf1001a811e1bb42da81ed0d869eae5b38bc10327110949e16fbbc61b973358dacf98f240faa32707d516d5fc1b0817d7128d011dd95bb442fcf70a69ef24a15147cfd946ef534e48d85dc83ab60e34fabacb52696d4ea54c2c33fbe76eee75df1b97843dcd4ccd94ad01efea446dcd52b8c4fb0a65331a79dd3fdf1f39f3db0a6d6633979378c78be129063123e9101afcba000b3dec6679b3a3b1fe8c48afd71282fbb1463e2d9540d1f5cb2e0c394ca8c6e1ec51bc16c3927960c794b005b9a40ee215183de3fce487f583959fe054c54f23a8a5fbb10b9c45e29c8cd11276f9ae501352a0cf235a3e1f3218dd3c28cd9dc77b2d00489f17e7054c2d69dcf9e829b524eeed36c7aa892987e68f6fa19cb8e9455348933a6f5be5af27a7ffb24de4bc1260a27997873043d35b9e18f5bfa4edff7c7f8ed148cec999d02b0391e82ed9063e7488108df3e06686755925a25190320de7f584cd1bc487855f879d9b8753964a47be03a4659c4fbedb6b4c1ea2a3085acb617d7871f66be0ed9a41e76b4096b6f18fe8f543ec3badad5fde1a02a2de4b0f0057475b5b9ae79084ec00f1035b47030f23194b9d269e32f85a50996bbb051b783534ab9cd367698bef76df2465a002f2d18d7a0b61a0914c7d7ad479398a54acdadffd6f59dd3f7ffff255181b3ca799f1f0dfe870e5811ade954a4082a5593299ec4c3864d2eb08667e811133f9e03707910e51eb512e274f78fbeee00cd69a9da5f5eb296709add26ae1a17c2b1788150f835142287b8b29fc9cd9369d66721a58115b976b5f0951fc26907b694ac0fae65aba0a2824df120ce6bfd22b2efe36b8479f90b3c4714a25bdd3af4dc2149da29df42e726a12135f9eae649f94292ebe6a80338216b53be410e29dab82d237944d6d1274f8c5adcfe9891af26a348ce000addc604ffea7adf34892329958d8b5109512a81b8b3fb8535a70a9ec4f3c5614320b15131213f1d5d73807d2b025372496e14135bb44b472ea8a98bb7cd0106c9945547c9cb9e4ad6b0db151df8e04e52e9242ee5a7bb9f3605608a3214c95a2de74b995592d6190fc86c0d2ef726be11867710b38b02c606e63ef0fa4ca81f1d6e59c56e8cb5d5a10071ef0d27f259a7980c9475e73218e8a4677dc23255bf220de143bf284d74db02cd66c89cc5977447374a788d6eec3a1bd7bb2e9d7e2eca7e874051dc83cc20baec061f6a9c0e1ce852022660e030f0227f7e0fd83f9884d1bd6711d60f81bb10e07182bb05e023ddcd29a0c75dfd20f5f1d39541a065de63e3e778aaedba8efc78e7a7bc27fc0663351b974a1f93e255679281e25f47a981a7130b926c60be9a5b768f0f4a1f263f0e7806030b695dd3203695028972e8f77cfdb77a3aff408a07b28a47114fda847f2b45ab6bb878cb61cb2a827e95f801523c7da5b6cbd4fa75918c73a9832c87ca7b2f0a9c7cc4c01a23907241d08b47fd0fdfbae8f51c50f66e2e131448c527777e8d462a0d7949a5ccacbb17c95f456c0484751c83aaac6ee10ce1304436206602e1987ce18cf55860806751991dc165f7c0d065800f79b9eb3b97be633d8f8179b5496c32ba218845bff9c9fab0a358fcef4d1efa48c2e3e80f60c074acb7697619a1afcd2514e75793384c2b999a83cdceb089b704d79a9dd343b74c0680f621d8a96949b7b1bf68db133091f5119f8c2049a5ecced72198dc6c0c3e8a80a85844318c575708939e096af5e2226e5079cbb4441993389b4d6a0e475044003709489468c390efa0aafb48471c1da0997f15c08a90419bf4f758b5e377e712831ae0693aec72df994a8541d4fca3ede90b9c5e27e9e0553d4525e3f48b4e9f5b58b41af2079db5ecae2b2f29eded2a7f313a2b8100be446ec3b58cf97aa2836451ac301442890b26a105d64b5e2b81c9cb95b7a18ca9f9027767a725731f84e22982c3a66c663e6ab427e3a6cbc19744eff67b2f0d432c00856da2436182cd37dee41165f7aeb030a62a551fe2728dfb189e57267acfe28bbff468cfc062d0e50c4b3dacc3d2ec92b93b517271ba9dc1480e6c658a04a3b7ded367115d7a4723c5ed007a960f3e5531611bf4911047e7ca2e43b33778477a26591f4b19cfef98014129b1751f851c309f0a7425c437e7bfa4265ef7c019c7586713445d8f52bc20b925546cf5a92e76e9a7fd8d099e359ebd5cd9e976de461849cf610b2bb255ef0ea7c775cd109bc257bf66dd82bb8d12c2ff1a3291957866e54c6f04725c45b4eca5e3f9cc101f89562422f17c04bfe207530be93d0e9ca314af5967e5f60ce8c63224764cc41c92f9a987a0bb1c94b1d46bc8c2cd6c9c88d74c2c7be34905d23620789856f8e8bd30856ba2b6eec1cc43f09500940d914d975aa94612d880dca11b48a37018530c2755f1ed81d8d8b5ecb0bdac4d9cc7de40e9b4b0013c0786916aaf1fbb8ce967c89d51c200d3440302fc0ac358e32654922180a14879be017bde00d85c6faf1d5e953ad4a453ad56c1dad0c65caa22ef7446468aa6ca59c0590d7016a98f82927ba7b5396f2edeec7a6f02133427320ae2e5e6880db1e679c039a430e21a7c5f733fb193798c3c21a352b15abe586df5d0af1fbaedc9b4d5b73bc2ab22424073bf3c687ca50bcb5b7567462595c117683f39ac0a140f2f905b323f7eb8d64921f4f99c0d55cef1a946ee2c14db8a194286ee24c640166558ccd6735678ba0ac7b8013a0996627a4ffdb72126ecb5bcae3a39f01e261b307dfc58432e0bcabe9713d2b8c4d7dc9426945297f29c729fbab34cc9117273f25b89831d23eab840ffb1f7b58647562bfdf1b077e24bbc12570a1c0ed49f48b2282468f3b973999940a9a213f33f33825c68a248d0cad81f93762e65adb5895ff8846e9eb3a2ff536e40f6c801187802683cce9774ba615e55f98cf53f8082e4cbfce505115189589316e776f6cff57c14cd83712c786c30c56ebe497173019d8d5b64c7c0dfca88fcf044c4d3e2c579690c062392c4e9aaa7970389f7cf613c8480d9c43bceb437f1103cb6a598499ddced251bb65d0eee92f16604c7cfbbbe00410e63e925675c70f1edcbb781dd393847e71914fbf120e0141705ac65ec1756e5d1b0fd46fc4f02c25d2b7c12d60d47c0f831802ca86dd3467d4a9ecad4b56a58c8d8e4c6b91589644afd842e0725d6b74245ea807731183bee73a8cf5d28522e7a58cedb346952dc75beb5c351050628b97997c714d730ab52f836dbc0103377a155c8f92de436e9681be7768e4f3ca9321adc406acda457f5a6c94d1ffea3d2dbde430193c926e35b5f0602d495f7c807a85e0477edfac49788cf608df6f7e2ce6bdd8c17799f6aa992fdc520585f582c2b147b02ba0d3346cf7b9e4c95d2668c2ccd12478c165f4c4ce916ae5da6f382ed085300bf2ae6f6b4c4578eb35e1691660dc0c96e51c2a2f97e540bed615302591241836d2d100198a97146b2e0640a923b574c64e01c7c93bab831479cce2c0746be5e548e3c7e673f7b4276587a0076fa5665ca62cce28aa06dbc7e0c4884eda46ee00bac7799113daa935ff2ad3aa8ce948b4ef91965e81a0b499d26194fa1358487d2a38cdc83e4d103cf015e6bd7755275bbfb135417c0037fe6b4960fa3e24b88e8a773b2799e5b78d9c8cfc665f584815a8fac0d7bfe1f791df0645abe29ff23fad332e22fee4ec4fcba50bbb12bf7adc897ace89ab7f2f2ea5f9a2baf26b59bbaefcdc05748872518dcbdf6dfce03ce60faf40b57e7e3a0a4c2910e00d73e709d85a3447bdd7bfb6a5a9bf8944e91bba3c6026dfd74b9d39370e197cdde6a019edd101c146c7fe18938c61ad338dcca806d71e4e58b7efaafbef6879d572501e40be3a664631be4c5c8668267d60af65f74bae3140f79091f638d95c6d3f934f8bbc8c1aa4a6c1bbccf0aac6e130bbb510d9a3340931ad3cba7d9b64fa4cfc57b53102f124e0622a08307da4ce831d38aa500a858a6bade4b9ff99ffbf41dc048f2686df2e29", 0x1000, 0x5, 0x0, 0x1}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x101, r0, &(0x7f0000001180)="b3c6abd29895e6876d758f197e34f53cb2573da437830ceee63ea951f768803265200eff4985499d2a457d9b7ddd6c661c21ed8c31038d172c8e0aac4a4f7e254879e7f41027b079780d1025a8ea211e332524456a8b67fb6786d8b2d6e02b0cb764f4d6549f5d3910976a319e99cc830d164f13f4e3b86d7c3a441508", 0x7d, 0x40, 0x0, 0x3, r3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0xc835815d726bbd78, 0xfc00, r4, &(0x7f0000001240)="16d8460198ad09db07fe9e6b8b0714c8809c1523bd21f04b8c0c80c6feb9a54b6a3b03d8627bff07caf96f2b329ba00dee83caaed78c549c56efb4b3a85b9d667ca0700d2a419fd8", 0x48, 0x15c, 0x0, 0x3}]) 02:11:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) timerfd_create(0x8, 0x80000) 02:11:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) 02:11:07 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:07 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 5: ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, 0x0, 0x0) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @empty}, 0xc) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) pipe2(&(0x7f0000000180), 0x80) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x3f, 0x80, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0xfffffffd, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:11:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) 02:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x0, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:07 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="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", 0x1000) getgroups(0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0xee00]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 02:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:07 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="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", 0x1000) getgroups(0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0xee00]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 02:11:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 02:11:07 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="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", 0x1000) getgroups(0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0xee00]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 02:11:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x7fffffff, 0x9, {{0x32, 0x4, 0x1, 0x1f, 0xc8, 0x67, 0x0, 0x80, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x63, 0x2, [{0x1, 0x11, "f283dc49c2677d5c74732ff8ddca48"}, {0x7, 0x3, "d4"}, {0x6, 0x9, "42df8ffe9f7cc8"}, {0x6, 0xc, "1ba0fb91b9609143653e"}, {0x5, 0x5, 'Q0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x7fffffff, 0x9, {{0x32, 0x4, 0x1, 0x1f, 0xc8, 0x67, 0x0, 0x80, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x63, 0x2, [{0x1, 0x11, "f283dc49c2677d5c74732ff8ddca48"}, {0x7, 0x3, "d4"}, {0x6, 0x9, "42df8ffe9f7cc8"}, {0x6, 0xc, "1ba0fb91b9609143653e"}, {0x5, 0x5, 'Q0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x50, r1, 0x7000) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x566, 0x200002) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x2, 0x80000) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:08 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:08 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x4, 0xe10, [0x200006c0, 0x0, 0x0, 0x2000084e, 0x20000aaa], 0x0, &(0x7f0000000040), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x0, 0x2, 'veth1_to_team\x00', 'macvlan0\x00', 'pim6reg0\x00', 'team0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xbe, 0x10e, 0x15e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x515a}}}], [@common=@log={'log\x00', 0x28, {{0x3, "3d6a697acf97c6d4081536aa67e99c5683f8c7d6f695f64945b75337eb8b"}}}], @common=@log={'log\x00', 0x28, {{0xe7, "1df753e22e221b2d2265754d4fe08fdf493e6bbf2fa72713f925d798993c", 0x4}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x9, 0x28, 0x88ca, 'ipvlan0\x00', 'veth0_virt_wifi\x00', 'pim6reg0\x00', 'macvlan0\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@broadcast, 0x10}}}}, {0x3, 0x4, 0x9300, 'virt_wifi0\x00', 'geneve1\x00', 'ip6tnl0\x00', 'ip6gretap0\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff], 0xde, 0x14e, 0x186, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7fff}}}, @connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{}, {0x3}], 0x0, 0xff41b58a7acd4961}}}], [@snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0x7fffffffffffffff, 0x1, [{0x5, 0x50, 0x6004, 'lo\x00', 'veth0_vlan\x00', 'lo\x00', 'pimreg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x956, 0x98e, 0x9c6, [@among={{'among\x00', 0x0, 0x880}, {{@zero, @offset, 0x1, {[0x7f, 0x8, 0x9, 0x1, 0x7ff, 0x7, 0x1ff, 0x800, 0x6, 0x5, 0x8, 0x40, 0x8001, 0x7, 0xfff, 0x1, 0xda, 0x7f, 0x101, 0x4, 0x7, 0x4, 0x1, 0xc2, 0x6, 0x1, 0x8, 0x7, 0x80000001, 0x30, 0x8, 0x9, 0x400, 0x8, 0x1, 0x4, 0x0, 0x775dd08e, 0xffffffe0, 0x200, 0x101, 0x9, 0x81, 0x2, 0x7f, 0x8, 0x10000, 0x4ff, 0x9, 0x6, 0x8000, 0x3f, 0xb305, 0x7, 0x2, 0x0, 0x5, 0x7fff, 0x8001, 0x8, 0x3468e69a, 0x1, 0x4, 0x212d, 0xc0, 0x6f, 0x0, 0xffffffff, 0x7fffffff, 0x5, 0x7ff, 0x36, 0x3, 0x2, 0x2, 0x80, 0x5, 0x5, 0x7, 0x10001, 0x0, 0xf49, 0x1, 0x8, 0xfffffff9, 0x9, 0x2, 0x0, 0x80, 0x81, 0x4, 0x6, 0x1, 0x6, 0x8001, 0x400, 0x7, 0x9, 0x1, 0x1, 0x6, 0x8, 0x8, 0xf8000000, 0x200, 0x2, 0x5, 0xfff, 0x85e, 0x2, 0x9, 0x10000, 0x4, 0x7, 0xd0e, 0xc9, 0x82e, 0x3ff, 0x6, 0x85, 0x46a6471c, 0x7, 0x2, 0x400, 0x2, 0x1, 0x3, 0x1, 0x1ff, 0x6, 0x7, 0x8, 0x0, 0x3, 0x400, 0x1, 0x7, 0x4, 0x0, 0x5, 0x3f, 0x5, 0x4, 0x5, 0x3, 0x1, 0x9, 0x80, 0x5, 0xffff, 0x3ab1, 0x1, 0x9, 0xbe, 0x4, 0x36c8, 0x3e, 0x3, 0x94, 0x0, 0x0, 0x9, 0xffffffc0, 0x1, 0x9, 0xffff, 0xdb, 0x3, 0x7fffffff, 0x1, 0x80000001, 0x8001, 0x0, 0x3, 0x80, 0x5, 0x4, 0x400, 0x9, 0x8, 0x9, 0x2, 0x179, 0x401, 0x1f, 0x92, 0xc797, 0x195, 0x0, 0x8, 0x5, 0x5, 0x4, 0x3ff, 0x7, 0x3, 0xb5c, 0x8efd, 0x2, 0xffffffff, 0x14000000, 0x101, 0xffffffe1, 0x6, 0x7ff, 0x9, 0x942f, 0x400, 0x7, 0x80, 0x9, 0x8000, 0x9, 0x8, 0x6, 0x1, 0x7fffffff, 0x8, 0xfffffffa, 0x4, 0x401, 0x0, 0x8, 0x5, 0xffffff65, 0x4ae0, 0x40, 0x8, 0x9, 0x2, 0x5a08cd94, 0x3f, 0x4516, 0x502a, 0xffffffff, 0x2, 0x7ff, 0x7ff, 0x6ebc, 0x5, 0x4, 0x200, 0x12a, 0x9, 0xffffffc0, 0x1b27, 0xfffffffb, 0x0, 0x8, 0x4, 0x20, 0x8, 0x3a5, 0x80000001, 0x80000000, 0x3, 0x5b37], 0x7, [{[0x4, 0x3], @multicast2}, {[0x81, 0xac5a], @remote}, {[0x0, 0xff], @multicast1}, {[0x7, 0x30000000], @loopback}, {[0xf448, 0x2], @rand_addr=0x64010100}, {[0x3f, 0x3], @broadcast}, {[0x400, 0x17], @broadcast}]}, {[0x9, 0x6, 0xa856, 0x0, 0x3, 0x800, 0x3f, 0xa3, 0x8, 0x4, 0xffffffff, 0x3, 0x1f, 0x6, 0x40, 0x3f, 0x3ff, 0x7a06e865, 0x6, 0x8, 0x2, 0x5, 0x401, 0x80000000, 0xfff, 0x3, 0x2, 0xfff, 0x800, 0x8, 0x4, 0x8001, 0x401, 0x9a, 0xff, 0x513, 0x401, 0x6, 0x1, 0x6, 0x3ff, 0xc1d5, 0xffff, 0x3, 0xa06e, 0x5, 0xb32, 0x7, 0x7ff, 0x5, 0x7, 0x2, 0x200, 0xc7, 0x3, 0x7f, 0x800, 0x2, 0x2, 0x9, 0x133f, 0x2, 0x800, 0x5, 0x5, 0xffffffff, 0x0, 0x81, 0x81, 0x7f, 0x710, 0x6, 0x4, 0x7, 0x3f, 0x10000, 0x9, 0x5, 0x3, 0x33, 0xb7, 0x2, 0x4, 0x3, 0x4, 0xffffff1a, 0x6, 0x80, 0x823, 0x0, 0x8000, 0x6, 0x0, 0x4, 0xffff, 0x1, 0x7, 0x0, 0x20, 0x2, 0x9, 0x1000, 0x5, 0x2, 0x5, 0x2, 0x3ff, 0x6, 0x5, 0x6, 0x80000001, 0x3, 0xff, 0x743, 0x100, 0x5, 0x7, 0x1, 0x0, 0x9, 0x8, 0x3, 0x1, 0x0, 0x5, 0x80000000, 0x10000, 0xffff, 0x1, 0x0, 0x2, 0x401, 0x6139, 0x3, 0xff, 0x5, 0x200, 0x5, 0x5, 0x1, 0x3ff, 0x5, 0xfffeffff, 0xdc0, 0x5d5abce0, 0x2, 0x8, 0x1, 0x0, 0x5b, 0x6, 0x662c, 0x8c9f, 0x2, 0x80, 0x80, 0x0, 0x8, 0x0, 0x1000, 0xffff, 0xffffffff, 0x6, 0x2, 0x5, 0x7, 0x200, 0x6, 0x53b7, 0x8af, 0x0, 0x106, 0x10001, 0x7f, 0x9, 0x7, 0xfffffff7, 0x0, 0x4, 0x1, 0x100, 0x7, 0x2, 0x4, 0x9, 0x7, 0x7, 0x0, 0xd2d, 0xffffffff, 0x6, 0x4, 0x2, 0x200, 0x2, 0x4, 0x7c, 0x6580, 0x7, 0x0, 0xe8ad, 0x0, 0x0, 0x4, 0xb2, 0xa22, 0x5, 0xf2, 0xece, 0x7fff, 0x4, 0x7, 0x6, 0x6, 0x34, 0x9, 0x9, 0x6, 0x7, 0x4, 0x5, 0x10000, 0x1, 0xa, 0x2d57, 0x3, 0x1, 0xfff, 0x1, 0x993, 0x7, 0x4, 0x1, 0x3, 0x3ff, 0x7, 0x200, 0x5, 0x9, 0x63a7, 0xff, 0x1ff, 0x10001, 0x6, 0x8, 0x1, 0x9, 0x5216, 0x4d6e5594, 0x1, 0x7ff, 0x1, 0x4, 0x1ff, 0x6, 0x80000001, 0x200], 0x1, [{[0x6, 0x5], @loopback}]}}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x0, 0x100, 0x0, 0x20, {0xd6}}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0xe88) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x284040) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x4, 0x50, 0xffffffffffffffff, 0x83000000) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7fffffffffffffff, 0x200000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:08 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:08 executing program 3: ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff, r3}) 02:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:08 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) sendmsg$AUDIT_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20004048) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x10001, 0x100000001, 0x626, 0x6, 0x1ff, 0x9]}, &(0x7f0000000000)=0x78) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002b3b62571edbdf25250000000c002dfb0100aaaa73aaaaaaaaaa08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e34000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 02:11:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x284040) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x4, 0x50, 0xffffffffffffffff, 0x83000000) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7fffffffffffffff, 0x200000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:08 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:08 executing program 3: ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:08 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) sendmsg$AUDIT_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20004048) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x10001, 0x100000001, 0x626, 0x6, 0x1ff, 0x9]}, &(0x7f0000000000)=0x78) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002b3b62571edbdf25250000000c002dfb0100aaaa73aaaaaaaaaa08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e34000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 02:11:08 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) pipe2(&(0x7f0000000080), 0x4000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x305200, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:08 executing program 4: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="800000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:08 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) sendmsg$AUDIT_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20004048) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x10001, 0x100000001, 0x626, 0x6, 0x1ff, 0x9]}, &(0x7f0000000000)=0x78) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002b3b62571edbdf25250000000c002dfb0100aaaa73aaaaaaaaaa08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e34000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 02:11:08 executing program 3: ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:11:08 executing program 4: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:08 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) sendmsg$AUDIT_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20004048) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x10001, 0x100000001, 0x626, 0x6, 0x1ff, 0x9]}, &(0x7f0000000000)=0x78) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) 02:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="800000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:08 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc0) 02:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="800000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:08 executing program 4: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:11:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc0) 02:11:08 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) sendmsg$AUDIT_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20004048) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x10001, 0x100000001, 0x626, 0x6, 0x1ff, 0x9]}, &(0x7f0000000000)=0x78) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5) 02:11:08 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}}, 0x80) 02:11:08 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc0) 02:11:08 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) sendmsg$AUDIT_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20004048) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x10001, 0x100000001, 0x626, 0x6, 0x1ff, 0x9]}, &(0x7f0000000000)=0x78) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:11:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}}, 0x0) 02:11:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:11:08 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:08 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:08 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) sendmsg$AUDIT_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20004048) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x10001, 0x100000001, 0x626, 0x6, 0x1ff, 0x9]}, &(0x7f0000000000)=0x78) 02:11:08 executing program 0: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) sendmsg$AUDIT_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20004048) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x10001, 0x100000001, 0x626, 0x6, 0x1ff, 0x9]}, &(0x7f0000000000)=0x78) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5) 02:11:08 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="800000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2506000000080005000100000044000180060001"], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 02:11:08 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:08 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) sendmsg$AUDIT_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20004048) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) 02:11:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc0) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0xc7, 0x42202) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r1, 0x2000) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x311403, 0x0) read$fb(r2, &(0x7f0000000080)=""/91, 0x5b) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x2, 0x7, 0x7fff, 0x6e41e8a2, 0x56, 0x7fffffff, 0x3, 0xfffffffe}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:09 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f00000001c0), 0x4080) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) 02:11:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:09 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0xa0, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x1}, @release={0x40046306, 0x3}, @exit_looper, @release={0x40046306, 0x3}, @increfs_done={0x40106308, 0x1}, @request_death, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x100b, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/233, 0xe9, 0x1, 0x3c}, @flat=@weak_binder={0x77622a85, 0x1103, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0xe6, 0x0, &(0x7f0000000340)="9091da4e6b46c5e8a9afc4c0b2b7e3090b082ffaa4d744ef2c4ee6005034f79afa5b05e1196826ab4d1fde6e2dc701371aa3324f7863a4ea5767023fa764cd282695acf90226a72fed255debec065190c0920052e4d07fb8f65ae3cef9a93ff1371dc02948727073d550b1bf81d5c19b23f6a4c1869eca696b3aa3c2acf57996859de51da3666d2d3dcf1cd0dc984aa00d2c69096f1097a0b86e837e8a4c5843f01f800615569f94c77e96b88ebbdf9f1d7d91f3cee23e4fa9a295a9ec3b157657702d8a1963a0d17ac4a8a861a2ac8c897a8fc5fae79e79ba0f27af15978575bcc1121090a7"}) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:11:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:09 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f0000000300)) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) 02:11:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000280)) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) 02:11:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c5b, 0x0) 02:11:09 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) 02:11:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0xa0, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x1}, @release={0x40046306, 0x3}, @exit_looper, @release={0x40046306, 0x3}, @increfs_done={0x40106308, 0x1}, @request_death, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x100b, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/233, 0xe9, 0x1, 0x3c}, @flat=@weak_binder={0x77622a85, 0x1103, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0xe6, 0x0, &(0x7f0000000340)="9091da4e6b46c5e8a9afc4c0b2b7e3090b082ffaa4d744ef2c4ee6005034f79afa5b05e1196826ab4d1fde6e2dc701371aa3324f7863a4ea5767023fa764cd282695acf90226a72fed255debec065190c0920052e4d07fb8f65ae3cef9a93ff1371dc02948727073d550b1bf81d5c19b23f6a4c1869eca696b3aa3c2acf57996859de51da3666d2d3dcf1cd0dc984aa00d2c69096f1097a0b86e837e8a4c5843f01f800615569f94c77e96b88ebbdf9f1d7d91f3cee23e4fa9a295a9ec3b157657702d8a1963a0d17ac4a8a861a2ac8c897a8fc5fae79e79ba0f27af15978575bcc1121090a7"}) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:11:09 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:09 executing program 5: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:09 executing program 0: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 5: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0xa0, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x1}, @release={0x40046306, 0x3}, @exit_looper, @release={0x40046306, 0x3}, @increfs_done={0x40106308, 0x1}, @request_death, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x100b, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/233, 0xe9, 0x1, 0x3c}, @flat=@weak_binder={0x77622a85, 0x1103, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0xe6, 0x0, &(0x7f0000000340)="9091da4e6b46c5e8a9afc4c0b2b7e3090b082ffaa4d744ef2c4ee6005034f79afa5b05e1196826ab4d1fde6e2dc701371aa3324f7863a4ea5767023fa764cd282695acf90226a72fed255debec065190c0920052e4d07fb8f65ae3cef9a93ff1371dc02948727073d550b1bf81d5c19b23f6a4c1869eca696b3aa3c2acf57996859de51da3666d2d3dcf1cd0dc984aa00d2c69096f1097a0b86e837e8a4c5843f01f800615569f94c77e96b88ebbdf9f1d7d91f3cee23e4fa9a295a9ec3b157657702d8a1963a0d17ac4a8a861a2ac8c897a8fc5fae79e79ba0f27af15978575bcc1121090a7"}) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:11:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:09 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:09 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 5: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 1: timerfd_create(0x9, 0x0) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:09 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:09 executing program 1: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:09 executing program 2: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) timerfd_create(0x6, 0x800) r2 = timerfd_create(0x9, 0x80000) timerfd_settime(r2, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) 02:11:09 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:09 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:09 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x74, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x22}, @fda={0x66646185, 0x3, 0x2, 0xb}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x40}, @increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r2}, @acquire], 0x16, 0x0, &(0x7f0000000280)="306668118e984b881c9ee665f748da794d706c4770f3"}) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000000c0)={{0xffffffffffffffff, 0x3, 0x6, 0x0, 0x4c65c730}, 0x6, 0xfffffffffffffff7}) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3ff}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) 02:11:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:09 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:09 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:10 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) 02:11:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x80000000000005, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x1000, 0x0, 0x2, 0x400, 0x2, 0x5f]}, &(0x7f0000000000)=0x78) 02:11:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r1 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x5411, &(0x7f0000000000)={'wlan1\x00'}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:10 executing program 5: socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) 02:11:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x80000000000005, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x1000, 0x0, 0x2, 0x400, 0x2, 0x5f]}, &(0x7f0000000000)=0x78) 02:11:10 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:10 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) 02:11:10 executing program 5: socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 5: socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:10 executing program 2: socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x138, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xea}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcb5}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x45}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x207}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4841}, 0x24044080) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x38, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xd1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r1, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x2e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004}, 0x802) 02:11:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x1f, r0, &(0x7f0000000000)="69c4aaa0a7b0b485415c4313756c305084cd91dc178f", 0x16, 0x5, 0x0, 0x0, r5}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x9, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000180)=0xffffffffffffffff) 02:11:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x1f, r0, &(0x7f0000000000)="69c4aaa0a7b0b485415c4313756c305084cd91dc178f", 0x16, 0x5, 0x0, 0x0, r5}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x9, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000180)=0xffffffffffffffff) 02:11:10 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x804) 02:11:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) pipe2(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000a40)=@broute={'broute\x00', 0x20, 0x3, 0x382, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000640), &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x50, 0x22eb, 'veth0_vlan\x00', 'bond0\x00', 'veth0_to_team\x00', 'ip6erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, [0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x1, "a05121249b0ffcc0c1dff3a7a774a83fab5321cfc29ad2eb484ee0e44d94", 0xb}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x8, 0x4b, 'vlan0\x00', 'veth0_to_bond\x00', 'hsr0\x00', 'ipvlan1\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x7fff, {0xad}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x0, 0x20, 0x1, 'ipvlan0\x00', 'ipvlan1\x00', 'bridge0\x00', 'vlan0\x00', @link_local, [0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xae, 0x116, 0x146, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x7936, 0x3, 0x2, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffc}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3ff}}}}]}]}, 0x3fa) 02:11:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x42, 0x80, 0x6, 0x0, 0x80000001, 0x81041, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x800, 0x7, 0x0, 0x9, 0x7fff, 0x40080, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f00000000c0)}, 0x10) 02:11:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c3d, 0x0) 02:11:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x804) 02:11:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) pipe2(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000a40)=@broute={'broute\x00', 0x20, 0x3, 0x382, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000640), &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x50, 0x22eb, 'veth0_vlan\x00', 'bond0\x00', 'veth0_to_team\x00', 'ip6erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, [0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x1, "a05121249b0ffcc0c1dff3a7a774a83fab5321cfc29ad2eb484ee0e44d94", 0xb}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x8, 0x4b, 'vlan0\x00', 'veth0_to_bond\x00', 'hsr0\x00', 'ipvlan1\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x7fff, {0xad}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x0, 0x20, 0x1, 'ipvlan0\x00', 'ipvlan1\x00', 'bridge0\x00', 'vlan0\x00', @link_local, [0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xae, 0x116, 0x146, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x7936, 0x3, 0x2, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffc}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3ff}}}}]}]}, 0x3fa) 02:11:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x804) 02:11:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r2) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:10 executing program 2: r0 = timerfd_create(0x9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) pipe2(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000a40)=@broute={'broute\x00', 0x20, 0x3, 0x382, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000640), &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x50, 0x22eb, 'veth0_vlan\x00', 'bond0\x00', 'veth0_to_team\x00', 'ip6erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, [0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x1, "a05121249b0ffcc0c1dff3a7a774a83fab5321cfc29ad2eb484ee0e44d94", 0xb}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x8, 0x4b, 'vlan0\x00', 'veth0_to_bond\x00', 'hsr0\x00', 'ipvlan1\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x7fff, {0xad}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x0, 0x20, 0x1, 'ipvlan0\x00', 'ipvlan1\x00', 'bridge0\x00', 'vlan0\x00', @link_local, [0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xae, 0x116, 0x146, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x7936, 0x3, 0x2, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffc}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3ff}}}}]}]}, 0x3fa) 02:11:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x804) 02:11:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) pipe2(&(0x7f0000000ac0), 0x880) 02:11:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 4: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:10 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x7f38, 0x1, 0x1796}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0xfffffffd, 0x1, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={0xffffffffffffffff, r2, 0x4}, 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x3, 0x0) io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x81, r5, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x2, r3}, &(0x7f0000000340)) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000180)={0x3c00, 0xa0, 0xf00, 0x360, 0x0, 0xbffe, 0xf, 0x1, {0x5, 0x7}, {0x3, 0xffffff81}, {0xffffe224, 0x4, 0x101}, {0xae2b, 0x1}, 0x3, 0x100, 0x3d5, 0x101, 0x1, 0x2, 0x4, 0x2, 0xb1d, 0x4, 0x8, 0xffff, 0x9, 0x0, 0x0, 0x8}) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) 02:11:10 executing program 4: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 4: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 2: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) 02:11:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x804) 02:11:11 executing program 4: r0 = socket$inet6(0xa, 0x0, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={0xffffffffffffffff, r2, 0x4}, 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x3, 0x0) io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x81, r5, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x2, r3}, &(0x7f0000000340)) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000180)={0x3c00, 0xa0, 0xf00, 0x360, 0x0, 0xbffe, 0xf, 0x1, {0x5, 0x7}, {0x3, 0xffffff81}, {0xffffe224, 0x4, 0x101}, {0xae2b, 0x1}, 0x3, 0x100, 0x3d5, 0x101, 0x1, 0x2, 0x4, 0x2, 0xb1d, 0x4, 0x8, 0xffff, 0x9, 0x0, 0x0, 0x8}) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) 02:11:11 executing program 2: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:11 executing program 4: r0 = socket$inet6(0xa, 0x0, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:11 executing program 2: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) 02:11:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={0xffffffffffffffff, r2, 0x4}, 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x3, 0x0) io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x81, r5, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x2, r3}, &(0x7f0000000340)) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000180)={0x3c00, 0xa0, 0xf00, 0x360, 0x0, 0xbffe, 0xf, 0x1, {0x5, 0x7}, {0x3, 0xffffff81}, {0xffffe224, 0x4, 0x101}, {0xae2b, 0x1}, 0x3, 0x100, 0x3d5, 0x101, 0x1, 0x2, 0x4, 0x2, 0xb1d, 0x4, 0x8, 0xffff, 0x9, 0x0, 0x0, 0x8}) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) 02:11:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) pipe2(&(0x7f0000000100), 0x80) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x4, r0}, 0x10) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) 02:11:11 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x44) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000200)) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x13, 0xffffffffffffffff, 0xf000) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) 02:11:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:11 executing program 4: r0 = socket$inet6(0xa, 0x0, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x44) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000200)) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x13, 0xffffffffffffffff, 0xf000) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) 02:11:11 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 02:11:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 02:11:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x44) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000200)) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x13, 0xffffffffffffffff, 0xf000) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) 02:11:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:11 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x44) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000200)) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x13, 0xffffffffffffffff, 0xf000) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) 02:11:11 executing program 2: socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 02:11:11 executing program 0: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{r3, r4+60000000}, {r1, r2+60000000}}, 0x0) 02:11:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:11 executing program 2: socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r6, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf1, 0x25}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0xc, 0x4, "d2c6c6e071479bd7"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x11, 0x4, "a9e9498a2b7d455eba4efc0f1a"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a8de7fce2b"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "0061c0ccc358fb96e22f4fd4"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)={'nat\x00', 0x0, [0x1f, 0x6, 0x6, 0x7f, 0x1]}, &(0x7f0000000540)=0x54) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x7, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:11:11 executing program 2: socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xd0ee}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x723a}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40100) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x3b, 0x20, 0xff, 0x0, 0x0, 0x100, 0x22, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000140), 0x4}, 0xc486, 0x3, 0x0, 0x7, 0x7, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x5e}, 0xffffffffffffffff, 0x8, r3, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000100)) 02:11:11 executing program 4: socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x20, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x4}, 0x2800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x4, 0x0, 0x9, 0xf, 0x0, 0x68a1, 0x8a808, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x4, @perf_config_ext={0x6}, 0x800, 0x0, 0x80, 0x2, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x1, r2, 0x3) 02:11:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r6, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf1, 0x25}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0xc, 0x4, "d2c6c6e071479bd7"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x11, 0x4, "a9e9498a2b7d455eba4efc0f1a"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a8de7fce2b"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "0061c0ccc358fb96e22f4fd4"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)={'nat\x00', 0x0, [0x1f, 0x6, 0x6, 0x7f, 0x1]}, &(0x7f0000000540)=0x54) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x7, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:11:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 02:11:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x804) 02:11:11 executing program 4: socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x20, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x4}, 0x2800, 0x8000, 0x0, 0x9, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x4, 0x0, 0x9, 0xf, 0x0, 0x68a1, 0x8a808, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x4, @perf_config_ext={0x6}, 0x800, 0x0, 0x80, 0x2, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x1, r2, 0x3) 02:11:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x804) 02:11:11 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000000, 0x30, r0, 0x83000000) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 02:11:11 executing program 4: socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000000), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x804) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 02:11:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r6, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf1, 0x25}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0xc, 0x4, "d2c6c6e071479bd7"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x11, 0x4, "a9e9498a2b7d455eba4efc0f1a"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a8de7fce2b"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "0061c0ccc358fb96e22f4fd4"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)={'nat\x00', 0x0, [0x1f, 0x6, 0x6, 0x7f, 0x1]}, &(0x7f0000000540)=0x54) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x7, 0x7fff, 0x0, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:11:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x48) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=r0, 0xffffffffffffffff, 0x3, 0x6, r1}, 0x14) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f00000000c0)=0x8) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, &(0x7f00000002c0), {[{{@ipv6={@local, @mcast1, [0xffffff00, 0xff, 0x0, 0xffffffff], [0xff000000, 0xff000000, 0xff000000], 'macvlan1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x5f, 0x7f, 0x8}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@mh={{0x28}, {"fc90"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x20, "e68c644dfbf805f0aa1d77cdb00b50b230159b04b31060705ba7b7a08fd6"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000280)={0x0, &(0x7f0000000200)="22b39883a4991a987fb3dc2f8afc7de08a33a8ca82c23abb74dd9f32420b1d1c92eb60c01dbfcdc921051732a1ae9e8b9d1928a185e72cc35d5ee9556cd1c3061049ce0b1565f32be850fb50b8bf2f0e55f9adb6168582709c35cf3c0a7fae33563d117edaf1d363a800b558c2ed7452fab2", 0x72}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r7, 0x54a1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x9, &(0x7f00000006c0)=@raw=[@alu={0x4, 0x1, 0x0, 0x4, 0xb, 0x1, 0xfffffffffffffff0}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000640)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x3, 0x7, 0x100000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r0, r6, r7]}, 0x80) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 02:11:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 02:11:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9ec8"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 02:11:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8880}, 0x804) 02:11:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x40049409, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0xc0045878, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4020940d, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x804) 02:11:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x5460, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4020940d, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0xc0045878, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x40049409, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5460, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4020940d, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0xc0045878, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x5450, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x40049409, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5452, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5460, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x40049409, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5451, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5452, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5460, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, r1) perf_event_open(&(0x7f0000000040)={0x5, 0x26, 0x3, 0x3f, 0x80, 0x6, 0x0, 0x80000001, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x800, 0x8000, 0x0, 0x9, 0x7fff, 0x80, 0x6, 0x0, 0x9, 0x0, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5451, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5452, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 3: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0xffc99a3b00000000, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:12 executing program 5: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x7, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5451, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (fail_nth: 1) 02:11:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 1) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (fail_nth: 1) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 02:11:12 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (fail_nth: 1) 02:11:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2626.371496] FAULT_INJECTION: forcing a failure. [ 2626.371496] name failslab, interval 1, probability 0, space 0, times 0 [ 2626.400288] CPU: 0 PID: 18321 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2626.408387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2626.418008] Call Trace: 02:11:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0xf0ff7f, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:12 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2626.420711] dump_stack+0x1fc/0x2ef [ 2626.424358] should_fail.cold+0xa/0xf [ 2626.428328] ? setup_fault_attr+0x200/0x200 [ 2626.432712] ? lock_acquire+0x170/0x3c0 [ 2626.436712] __should_failslab+0x115/0x180 [ 2626.440957] should_failslab+0x5/0x10 [ 2626.444778] kmem_cache_alloc_trace+0x284/0x380 [ 2626.449543] ? loop_queue_work+0x20c0/0x20c0 [ 2626.453980] loop_add+0x4e/0x8a0 [ 2626.457360] loop_control_ioctl+0x16c/0x480 [ 2626.461696] ? loop_lookup+0x1d0/0x1d0 [ 2626.465587] ? ksys_write+0x241/0x2a0 02:11:12 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:12 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x300, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2626.469398] ? loop_lookup+0x1d0/0x1d0 [ 2626.473298] do_vfs_ioctl+0xcdb/0x12e0 [ 2626.477202] ? lock_downgrade+0x720/0x720 [ 2626.481375] ? check_preemption_disabled+0x41/0x280 [ 2626.486393] ? ioctl_preallocate+0x200/0x200 [ 2626.490807] ? __fget+0x356/0x510 [ 2626.494360] ? do_dup2+0x450/0x450 [ 2626.497908] ? vfs_write+0x393/0x540 [ 2626.501637] ? fput+0x2b/0x190 [ 2626.504944] ksys_ioctl+0x9b/0xc0 [ 2626.508505] __x64_sys_ioctl+0x6f/0xb0 [ 2626.512504] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2626.517102] do_syscall_64+0xf9/0x620 02:11:12 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x1000000, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2626.520920] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2626.526128] RIP: 0033:0x7fc956aba5a9 [ 2626.529846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2626.548754] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2626.556473] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2626.563756] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 02:11:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 2) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:12 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3000000, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x7ffff000, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [0xffffffff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:12 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (fail_nth: 1) [ 2626.571898] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2626.579373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2626.586634] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:13 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3b9ac9ff, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2626.655137] FAULT_INJECTION: forcing a failure. [ 2626.655137] name failslab, interval 1, probability 0, space 0, times 0 [ 2626.669051] FAULT_INJECTION: forcing a failure. [ 2626.669051] name failslab, interval 1, probability 0, space 0, times 0 [ 2626.683770] CPU: 1 PID: 18353 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2626.691760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2626.701275] Call Trace: 02:11:13 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0xffc99a3b, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2626.703871] dump_stack+0x1fc/0x2ef [ 2626.707503] should_fail.cold+0xa/0xf [ 2626.711411] ? setup_fault_attr+0x200/0x200 [ 2626.715747] ? lock_acquire+0x170/0x3c0 [ 2626.719739] __should_failslab+0x115/0x180 [ 2626.724072] should_failslab+0x5/0x10 [ 2626.727971] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2626.733276] __kmalloc_node+0x38/0x70 [ 2626.737177] blk_mq_alloc_tag_set+0x330/0xa30 [ 2626.741680] loop_add+0x26d/0x8a0 [ 2626.745140] loop_control_ioctl+0x16c/0x480 [ 2626.749462] ? loop_lookup+0x1d0/0x1d0 02:11:13 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x225c17d03, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2626.753351] ? ksys_write+0x241/0x2a0 [ 2626.757156] ? loop_lookup+0x1d0/0x1d0 [ 2626.761049] do_vfs_ioctl+0xcdb/0x12e0 [ 2626.764956] ? lock_downgrade+0x720/0x720 [ 2626.770592] ? check_preemption_disabled+0x41/0x280 [ 2626.775630] ? ioctl_preallocate+0x200/0x200 [ 2626.780190] ? __fget+0x356/0x510 [ 2626.783645] ? do_dup2+0x450/0x450 [ 2626.787184] ? vfs_write+0x393/0x540 [ 2626.790908] ? fput+0x2b/0x190 [ 2626.794372] ksys_ioctl+0x9b/0xc0 [ 2626.797850] __x64_sys_ioctl+0x6f/0xb0 02:11:13 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x100000000000000, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:13 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x300000000000000, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2626.801739] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2626.806413] do_syscall_64+0xf9/0x620 [ 2626.810311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2626.815502] RIP: 0033:0x7fc956aba5a9 [ 2626.819216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2626.838206] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2626.845917] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2626.853187] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2626.860452] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2626.867741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2626.875099] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 [ 2626.882476] CPU: 0 PID: 18352 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2626.890371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2626.899819] Call Trace: [ 2626.902431] dump_stack+0x1fc/0x2ef [ 2626.906430] should_fail.cold+0xa/0xf [ 2626.910448] ? setup_fault_attr+0x200/0x200 [ 2626.914895] ? lock_acquire+0x170/0x3c0 [ 2626.920196] __should_failslab+0x115/0x180 [ 2626.924575] should_failslab+0x5/0x10 [ 2626.928492] kmem_cache_alloc+0x277/0x370 [ 2626.932670] ? sock_destroy_inode+0x60/0x60 [ 2626.937094] sock_alloc_inode+0x19/0x250 [ 2626.941267] ? sock_destroy_inode+0x60/0x60 [ 2626.944375] FAULT_INJECTION: forcing a failure. [ 2626.944375] name failslab, interval 1, probability 0, space 0, times 0 [ 2626.945597] alloc_inode+0x5d/0x180 [ 2626.945614] new_inode_pseudo+0x14/0xe0 [ 2626.945631] sock_alloc+0x3c/0x260 [ 2626.945652] __sock_create+0xba/0x740 [ 2626.972382] __sys_socket+0xef/0x200 [ 2626.977766] ? move_addr_to_kernel+0x70/0x70 [ 2626.982266] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2626.987638] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2626.992759] __x64_sys_socket+0x6f/0xb0 [ 2626.996734] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2627.001316] do_syscall_64+0xf9/0x620 [ 2627.005644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2627.010836] RIP: 0033:0x7fe65d695c27 [ 2627.014547] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2627.033966] RSP: 002b:00007fe65bc060d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 2627.041666] RAX: ffffffffffffffda RBX: 00007fe65d7b4f80 RCX: 00007fe65d695c27 02:11:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 3) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:13 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x37dc12502000000, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0xffffff7f, &(0x7f00000001c0)={0x0}}, 0x0) [ 2627.050937] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2627.058208] RBP: 00007fe65bc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2627.065820] R10: ffffffff81000000 R11: 0000000000000286 R12: 00000000ffffffff [ 2627.078489] R13: 00007ffcb56e7acf R14: 00007fe65bc07300 R15: 0000000000022000 [ 2627.085957] ? 0xffffffff81000000 [ 2627.089520] CPU: 1 PID: 18372 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2627.097602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2627.107140] Call Trace: [ 2627.109742] dump_stack+0x1fc/0x2ef [ 2627.110149] socket: no more sockets [ 2627.113551] should_fail.cold+0xa/0xf [ 2627.113568] ? setup_fault_attr+0x200/0x200 [ 2627.113581] ? lock_acquire+0x170/0x3c0 [ 2627.113600] __should_failslab+0x115/0x180 [ 2627.113617] should_failslab+0x5/0x10 [ 2627.138844] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2627.143957] __kmalloc_node+0x38/0x70 [ 2627.147765] blk_mq_alloc_tag_set+0x3c2/0xa30 [ 2627.152282] loop_add+0x26d/0x8a0 02:11:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [0xffffff00, 0xffffff00, 0xff], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) [ 2627.156097] loop_control_ioctl+0x16c/0x480 [ 2627.160427] ? loop_lookup+0x1d0/0x1d0 [ 2627.164330] ? ksys_write+0x241/0x2a0 [ 2627.168148] ? loop_lookup+0x1d0/0x1d0 [ 2627.172409] do_vfs_ioctl+0xcdb/0x12e0 [ 2627.176461] ? lock_downgrade+0x720/0x720 [ 2627.181840] ? check_preemption_disabled+0x41/0x280 [ 2627.186905] ? ioctl_preallocate+0x200/0x200 [ 2627.191442] ? __fget+0x356/0x510 [ 2627.195075] ? do_dup2+0x450/0x450 [ 2627.199191] ? vfs_write+0x393/0x540 [ 2627.203085] ? fput+0x2b/0x190 [ 2627.206360] ksys_ioctl+0x9b/0xc0 [ 2627.209806] __x64_sys_ioctl+0x6f/0xb0 [ 2627.213708] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2627.218387] do_syscall_64+0xf9/0x620 [ 2627.222360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2627.227656] RIP: 0033:0x7fc956aba5a9 [ 2627.231459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2627.250362] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 02:11:13 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (fail_nth: 2) 02:11:13 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0xffc99a3b00000000, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf0ff7f}}, 0x0) 02:11:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0xf0ff7f, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [0xffffff00, 0xffffff00], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 4) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) [ 2627.258057] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2627.265311] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2627.272565] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2627.279920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2627.287438] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [0xffffff00], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) [ 2627.356747] FAULT_INJECTION: forcing a failure. [ 2627.356747] name failslab, interval 1, probability 0, space 0, times 0 [ 2627.358046] FAULT_INJECTION: forcing a failure. [ 2627.358046] name failslab, interval 1, probability 0, space 0, times 0 02:11:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x7ffff000, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7ffff000}}, 0x0) 02:11:13 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) [ 2627.398757] CPU: 1 PID: 18389 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2627.406677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2627.416138] Call Trace: [ 2627.418740] dump_stack+0x1fc/0x2ef [ 2627.422483] should_fail.cold+0xa/0xf [ 2627.426292] ? setup_fault_attr+0x200/0x200 [ 2627.430622] __should_failslab+0x115/0x180 [ 2627.435294] should_failslab+0x5/0x10 [ 2627.439092] kmem_cache_alloc_trace+0x284/0x380 [ 2627.443760] ? kmem_cache_alloc+0x315/0x370 [ 2627.448180] sock_alloc_inode+0x5f/0x250 [ 2627.452245] ? sock_destroy_inode+0x60/0x60 [ 2627.456568] alloc_inode+0x5d/0x180 [ 2627.460195] new_inode_pseudo+0x14/0xe0 [ 2627.464178] sock_alloc+0x3c/0x260 [ 2627.467887] __sock_create+0xba/0x740 [ 2627.471960] __sys_socket+0xef/0x200 [ 2627.475863] ? move_addr_to_kernel+0x70/0x70 [ 2627.480281] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2627.485657] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2627.490700] __x64_sys_socket+0x6f/0xb0 [ 2627.494678] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2627.499362] do_syscall_64+0xf9/0x620 [ 2627.503254] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2627.508443] RIP: 0033:0x7fe65d695c27 [ 2627.512156] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2627.531244] RSP: 002b:00007fe65bc060d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 2627.538977] RAX: ffffffffffffffda RBX: 00007fe65d7b4f80 RCX: 00007fe65d695c27 [ 2627.546337] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2627.553606] RBP: 00007fe65bc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2627.560873] R10: ffffffff81000000 R11: 0000000000000286 R12: 00000000ffffffff [ 2627.569570] R13: 00007ffcb56e7acf R14: 00007fe65bc07300 R15: 0000000000022000 [ 2627.576935] ? 0xffffffff81000000 [ 2627.580389] CPU: 0 PID: 18390 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2627.588377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2627.597251] socket: no more sockets [ 2627.597733] Call Trace: [ 2627.603993] dump_stack+0x1fc/0x2ef [ 2627.607727] should_fail.cold+0xa/0xf [ 2627.611579] ? setup_fault_attr+0x200/0x200 [ 2627.616447] ? lock_acquire+0x170/0x3c0 [ 2627.620539] __should_failslab+0x115/0x180 [ 2627.624791] should_failslab+0x5/0x10 [ 2627.628779] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2627.633901] blk_mq_init_tags+0x6a/0x2b0 [ 2627.637993] blk_mq_alloc_rq_map+0x9d/0x230 [ 2627.642323] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2627.646825] blk_mq_alloc_tag_set+0x589/0xa30 [ 2627.651332] loop_add+0x26d/0x8a0 [ 2627.654799] loop_control_ioctl+0x16c/0x480 [ 2627.659226] ? loop_lookup+0x1d0/0x1d0 [ 2627.663128] ? ksys_write+0x241/0x2a0 [ 2627.666935] ? loop_lookup+0x1d0/0x1d0 [ 2627.670919] do_vfs_ioctl+0xcdb/0x12e0 [ 2627.674841] ? lock_downgrade+0x720/0x720 [ 2627.679090] ? check_preemption_disabled+0x41/0x280 [ 2627.684131] ? ioctl_preallocate+0x200/0x200 [ 2627.688656] ? __fget+0x356/0x510 [ 2627.692120] ? do_dup2+0x450/0x450 [ 2627.695663] ? vfs_write+0x393/0x540 [ 2627.699393] ? fput+0x2b/0x190 [ 2627.702601] ksys_ioctl+0x9b/0xc0 [ 2627.706079] __x64_sys_ioctl+0x6f/0xb0 [ 2627.710079] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2627.714766] do_syscall_64+0xf9/0x620 [ 2627.718843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2627.724303] RIP: 0033:0x7fc956aba5a9 [ 2627.728227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 02:11:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00', {}, {0xff}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:14 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (fail_nth: 3) 02:11:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0xffffff7f, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xffffff7f}}, 0x0) [ 2627.748660] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2627.756378] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2627.763659] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2627.770936] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2627.779080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2627.786377] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf0ff7f}}, 0x0) 02:11:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00', {}, {}, 0x88, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) [ 2627.822116] FAULT_INJECTION: forcing a failure. [ 2627.822116] name failslab, interval 1, probability 0, space 0, times 0 [ 2627.874687] CPU: 0 PID: 18409 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2627.882697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2627.892058] Call Trace: [ 2627.894662] dump_stack+0x1fc/0x2ef [ 2627.898315] should_fail.cold+0xa/0xf [ 2627.902136] ? setup_fault_attr+0x200/0x200 [ 2627.906470] ? lock_acquire+0x170/0x3c0 [ 2627.909390] blk-mq: reduced tag depth (128 -> 64) [ 2627.910457] __should_failslab+0x115/0x180 [ 2627.910477] should_failslab+0x5/0x10 [ 2627.910491] __kmalloc+0x2ab/0x3c0 [ 2627.910505] ? sk_prot_alloc+0x1e2/0x2d0 [ 2627.910520] sk_prot_alloc+0x1e2/0x2d0 [ 2627.935092] sk_alloc+0x36/0xec0 [ 2627.938474] __netlink_create+0x63/0x270 [ 2627.942547] netlink_create+0x3ad/0x5e0 [ 2627.946887] __sock_create+0x3d8/0x740 [ 2627.950790] __sys_socket+0xef/0x200 [ 2627.954512] ? move_addr_to_kernel+0x70/0x70 [ 2627.959103] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2627.964473] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2627.969500] __x64_sys_socket+0x6f/0xb0 [ 2627.973485] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2627.978164] do_syscall_64+0xf9/0x620 [ 2627.981976] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2627.987169] RIP: 0033:0x7fe65d695c27 [ 2627.990888] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2628.009980] RSP: 002b:00007fe65bc060d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 2628.017701] RAX: ffffffffffffffda RBX: 00007fe65d7b4f80 RCX: 00007fe65d695c27 02:11:14 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 5) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7ffffffff000}}, 0x0) 02:11:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7ffff000}}, 0x0) 02:11:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00', {}, {}, 0x0, 0x9, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:14 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) [ 2628.024988] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2628.032439] RBP: 00007fe65bc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2628.039715] R10: ffffffff81000000 R11: 0000000000000286 R12: 00000000ffffffff [ 2628.046992] R13: 00007ffcb56e7acf R14: 00007fe65bc07300 R15: 0000000000022000 [ 2628.054273] ? 0xffffffff81000000 02:11:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xffffff7f}}, 0x0) 02:11:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf0ff7f00000000}}, 0x0) 02:11:14 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (fail_nth: 4) 02:11:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00', {}, {}, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7ffffffff000}}, 0x0) 02:11:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf0ffffff7f0000}}, 0x0) [ 2628.165397] FAULT_INJECTION: forcing a failure. [ 2628.165397] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.198256] CPU: 1 PID: 18426 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2628.206257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2628.215795] Call Trace: [ 2628.218397] dump_stack+0x1fc/0x2ef [ 2628.222130] should_fail.cold+0xa/0xf [ 2628.225619] FAULT_INJECTION: forcing a failure. [ 2628.225619] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.225947] ? setup_fault_attr+0x200/0x200 [ 2628.241757] ? lock_acquire+0x170/0x3c0 [ 2628.245793] __should_failslab+0x115/0x180 [ 2628.250038] should_failslab+0x5/0x10 [ 2628.253840] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2628.258944] __kmalloc_node+0x38/0x70 [ 2628.262743] sbitmap_init_node+0x123/0x440 [ 2628.266986] sbitmap_queue_init_node+0x37/0x6c0 [ 2628.271740] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2628.276755] blk_mq_init_tags+0x10d/0x2b0 [ 2628.281001] blk_mq_alloc_rq_map+0x9d/0x230 [ 2628.285330] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2628.289818] blk_mq_alloc_tag_set+0x589/0xa30 [ 2628.294316] loop_add+0x26d/0x8a0 [ 2628.298552] loop_control_ioctl+0x16c/0x480 [ 2628.302954] ? loop_lookup+0x1d0/0x1d0 [ 2628.306841] ? ksys_write+0x241/0x2a0 [ 2628.310735] ? loop_lookup+0x1d0/0x1d0 [ 2628.314619] do_vfs_ioctl+0xcdb/0x12e0 [ 2628.318587] ? lock_downgrade+0x720/0x720 [ 2628.322732] ? check_preemption_disabled+0x41/0x280 [ 2628.327829] ? ioctl_preallocate+0x200/0x200 [ 2628.332236] ? __fget+0x356/0x510 [ 2628.335777] ? do_dup2+0x450/0x450 [ 2628.339306] ? vfs_write+0x393/0x540 [ 2628.343014] ? fput+0x2b/0x190 [ 2628.346206] ksys_ioctl+0x9b/0xc0 [ 2628.349668] __x64_sys_ioctl+0x6f/0xb0 [ 2628.353553] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2628.358131] do_syscall_64+0xf9/0x620 [ 2628.361933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2628.367204] RIP: 0033:0x7fc956aba5a9 [ 2628.371528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2628.391981] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2628.399885] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2628.407590] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2628.414937] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2628.422404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2628.429663] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 [ 2628.437325] CPU: 0 PID: 18448 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2628.445222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2628.454979] Call Trace: [ 2628.457584] dump_stack+0x1fc/0x2ef [ 2628.458541] blk-mq: reduced tag depth (128 -> 64) [ 2628.461218] should_fail.cold+0xa/0xf [ 2628.461238] ? setup_fault_attr+0x200/0x200 [ 2628.461254] ? lock_acquire+0x170/0x3c0 [ 2628.461272] __should_failslab+0x115/0x180 [ 2628.482955] should_failslab+0x5/0x10 [ 2628.486854] kmem_cache_alloc_trace+0x284/0x380 [ 2628.491542] apparmor_sk_alloc_security+0x5c/0xe0 [ 2628.496402] security_sk_alloc+0x50/0xb0 [ 2628.500483] sk_prot_alloc+0x200/0x2d0 [ 2628.504401] sk_alloc+0x36/0xec0 [ 2628.507876] __netlink_create+0x63/0x270 [ 2628.511955] netlink_create+0x3ad/0x5e0 [ 2628.515947] __sock_create+0x3d8/0x740 [ 2628.519847] __sys_socket+0xef/0x200 [ 2628.524192] ? move_addr_to_kernel+0x70/0x70 [ 2628.528876] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2628.534257] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2628.539294] __x64_sys_socket+0x6f/0xb0 [ 2628.543298] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2628.547893] do_syscall_64+0xf9/0x620 [ 2628.551800] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2628.557008] RIP: 0033:0x7fe65d695c27 02:11:14 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) timerfd_create(0x8, 0x0) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) 02:11:14 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 6) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf0ff7f00000000}}, 0x0) 02:11:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf0ffffff7f0000}}, 0x0) [ 2628.560727] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2628.579636] RSP: 002b:00007fe65bc060d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 2628.587356] RAX: ffffffffffffffda RBX: 00007fe65d7b4f80 RCX: 00007fe65d695c27 [ 2628.594722] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2628.602351] RBP: 00007fe65bc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2628.609733] R10: ffffffff81000000 R11: 0000000000000286 R12: 00000000ffffffff 02:11:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xffffff7f00000000}}, 0x0) 02:11:15 executing program 2: r0 = timerfd_create(0x8, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f00000000c0)="0c47db062ee4e31da24b71ca26cc7935103706ecf6b4281489671b5c97878672cfb88d84f78bf2f3a2053f19f5805e8884e2cdb97fa7e5ccffe32ad7279dd4aa66471810964dda2171f7689d09612d89015c7d38bb6ec794a40503c17425d0c6d1eb1d43a2ed26614746ddb7d868", 0x6e, 0x4881, &(0x7f0000000140)={0x2, 0x0, @loopback, 0x3}, 0x10) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000080)) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2628.617194] R13: 00007ffcb56e7acf R14: 00007fe65bc07300 R15: 0000000000022000 [ 2628.624605] ? 0xffffffff81000000 02:11:15 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (fail_nth: 5) 02:11:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xffffff7f00000000}}, 0x0) [ 2628.674898] FAULT_INJECTION: forcing a failure. [ 2628.674898] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.702897] CPU: 0 PID: 18470 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2628.710986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2628.720450] Call Trace: 02:11:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4=@rand_addr=0x64010100, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:15 executing program 2: r0 = timerfd_create(0x8, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f00000000c0)="0c47db062ee4e31da24b71ca26cc7935103706ecf6b4281489671b5c97878672cfb88d84f78bf2f3a2053f19f5805e8884e2cdb97fa7e5ccffe32ad7279dd4aa66471810964dda2171f7689d09612d89015c7d38bb6ec794a40503c17425d0c6d1eb1d43a2ed26614746ddb7d868", 0x6e, 0x4881, &(0x7f0000000140)={0x2, 0x0, @loopback, 0x3}, 0x10) (async) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000080)) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2628.723051] dump_stack+0x1fc/0x2ef [ 2628.726693] should_fail.cold+0xa/0xf [ 2628.730507] ? setup_fault_attr+0x200/0x200 [ 2628.734837] ? lock_acquire+0x170/0x3c0 [ 2628.738821] __should_failslab+0x115/0x180 [ 2628.743068] should_failslab+0x5/0x10 [ 2628.746882] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2628.752004] sbitmap_queue_init_node+0x240/0x6c0 [ 2628.756783] blk_mq_init_tags+0x10d/0x2b0 [ 2628.760947] blk_mq_alloc_rq_map+0x9d/0x230 [ 2628.765370] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2628.769878] blk_mq_alloc_tag_set+0x589/0xa30 02:11:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key=0x6197, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) [ 2628.774395] loop_add+0x26d/0x8a0 [ 2628.777868] loop_control_ioctl+0x16c/0x480 [ 2628.782201] ? loop_lookup+0x1d0/0x1d0 [ 2628.786102] ? ksys_write+0x241/0x2a0 [ 2628.789915] ? loop_lookup+0x1d0/0x1d0 [ 2628.793817] do_vfs_ioctl+0xcdb/0x12e0 [ 2628.797806] ? lock_downgrade+0x720/0x720 [ 2628.802071] ? check_preemption_disabled+0x41/0x280 [ 2628.807448] ? ioctl_preallocate+0x200/0x200 [ 2628.811891] ? __fget+0x356/0x510 [ 2628.815381] ? do_dup2+0x450/0x450 [ 2628.818935] ? vfs_write+0x393/0x540 [ 2628.822687] ? fput+0x2b/0x190 [ 2628.825891] ksys_ioctl+0x9b/0xc0 [ 2628.829357] __x64_sys_ioctl+0x6f/0xb0 [ 2628.833256] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2628.837844] do_syscall_64+0xf9/0x620 [ 2628.840563] FAULT_INJECTION: forcing a failure. [ 2628.840563] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.841652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2628.841665] RIP: 0033:0x7fc956aba5a9 [ 2628.841679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2628.841686] RSP: 002b:00007fc95500c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2628.888727] RAX: ffffffffffffffda RBX: 00007fc956bdb050 RCX: 00007fc956aba5a9 [ 2628.896019] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2628.903396] RBP: 00007fc95500c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2628.910774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2628.918043] R13: 00007ffe9b642c8f R14: 00007fc95500c300 R15: 0000000000022000 [ 2628.925440] CPU: 1 PID: 18490 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2628.927153] blk-mq: reduced tag depth (128 -> 64) [ 2628.933343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2628.933349] Call Trace: [ 2628.933372] dump_stack+0x1fc/0x2ef [ 2628.933390] should_fail.cold+0xa/0xf [ 2628.933407] ? setup_fault_attr+0x200/0x200 [ 2628.933424] ? lock_acquire+0x170/0x3c0 [ 2628.965855] __should_failslab+0x115/0x180 [ 2628.970113] should_failslab+0x5/0x10 [ 2628.973930] kmem_cache_alloc+0x277/0x370 [ 2628.978093] __d_alloc+0x2b/0xa10 [ 2628.981780] ? __alloc_fd+0x28d/0x570 [ 2628.985570] d_alloc_pseudo+0x19/0x70 [ 2628.989363] alloc_file_pseudo+0xc6/0x250 [ 2628.993522] ? alloc_file+0x4d0/0x4d0 [ 2628.997312] ? do_raw_spin_unlock+0x171/0x230 [ 2629.001793] ? _raw_spin_unlock+0x29/0x40 [ 2629.005922] ? __alloc_fd+0x28d/0x570 [ 2629.009709] sock_alloc_file+0x48/0x180 [ 2629.013666] __sys_socket+0x13d/0x200 [ 2629.017450] ? move_addr_to_kernel+0x70/0x70 [ 2629.021854] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2629.027298] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2629.032319] __x64_sys_socket+0x6f/0xb0 [ 2629.036433] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2629.041009] do_syscall_64+0xf9/0x620 [ 2629.044803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2629.049981] RIP: 0033:0x7fe65d695c27 [ 2629.053685] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 02:11:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 7) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:15 executing program 2: r0 = timerfd_create(0x8, 0x0) (async) sendto$l2tp(0xffffffffffffffff, &(0x7f00000000c0)="0c47db062ee4e31da24b71ca26cc7935103706ecf6b4281489671b5c97878672cfb88d84f78bf2f3a2053f19f5805e8884e2cdb97fa7e5ccffe32ad7279dd4aa66471810964dda2171f7689d09612d89015c7d38bb6ec794a40503c17425d0c6d1eb1d43a2ed26614746ddb7d868", 0x6e, 0x4881, &(0x7f0000000140)={0x2, 0x0, @loopback, 0x3}, 0x10) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000080)) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x8}, 0x0) [ 2629.073574] RSP: 002b:00007fe65bc060d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 2629.081363] RAX: ffffffffffffffda RBX: 00007fe65d7b4f80 RCX: 00007fe65d695c27 [ 2629.088620] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2629.095883] RBP: 00007fe65bc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2629.103143] R10: ffffffff81000000 R11: 0000000000000286 R12: 00000000ffffffff [ 2629.110403] R13: 00007ffcb56e7acf R14: 00007fe65bc07300 R15: 0000000000022000 [ 2629.117667] ? 0xffffffff81000000 02:11:15 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (fail_nth: 6) 02:11:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x8}, 0x0) 02:11:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x300}, 0x0) 02:11:15 executing program 2: r0 = timerfd_create(0x8, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)=0x1) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x300}, 0x0) 02:11:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xf0ff7f}, 0x0) [ 2629.233620] FAULT_INJECTION: forcing a failure. [ 2629.233620] name failslab, interval 1, probability 0, space 0, times 0 [ 2629.257436] FAULT_INJECTION: forcing a failure. [ 2629.257436] name failslab, interval 1, probability 0, space 0, times 0 [ 2629.283156] CPU: 1 PID: 18504 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2629.291065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2629.300425] Call Trace: [ 2629.303025] dump_stack+0x1fc/0x2ef [ 2629.306670] should_fail.cold+0xa/0xf [ 2629.310581] ? setup_fault_attr+0x200/0x200 [ 2629.314913] ? lock_acquire+0x170/0x3c0 [ 2629.318904] __should_failslab+0x115/0x180 [ 2629.323152] should_failslab+0x5/0x10 [ 2629.326961] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2629.332072] sbitmap_queue_init_node+0x240/0x6c0 [ 2629.336841] blk_mq_init_tags+0x16f/0x2b0 [ 2629.341003] blk_mq_alloc_rq_map+0x9d/0x230 [ 2629.345332] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2629.349832] blk_mq_alloc_tag_set+0x589/0xa30 [ 2629.354332] loop_add+0x26d/0x8a0 [ 2629.357781] loop_control_ioctl+0x16c/0x480 [ 2629.362094] ? loop_lookup+0x1d0/0x1d0 [ 2629.365976] ? ksys_write+0x241/0x2a0 [ 2629.369770] ? loop_lookup+0x1d0/0x1d0 [ 2629.373649] do_vfs_ioctl+0xcdb/0x12e0 [ 2629.377532] ? lock_downgrade+0x720/0x720 [ 2629.381676] ? check_preemption_disabled+0x41/0x280 [ 2629.386771] ? ioctl_preallocate+0x200/0x200 [ 2629.391265] ? __fget+0x356/0x510 [ 2629.394712] ? do_dup2+0x450/0x450 [ 2629.398247] ? vfs_write+0x393/0x540 [ 2629.401950] ? fput+0x2b/0x190 [ 2629.405140] ksys_ioctl+0x9b/0xc0 [ 2629.408586] __x64_sys_ioctl+0x6f/0xb0 [ 2629.412558] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2629.417130] do_syscall_64+0xf9/0x620 [ 2629.420930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2629.426124] RIP: 0033:0x7fc956aba5a9 [ 2629.429831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2629.448718] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2629.456419] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2629.463681] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2629.471200] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 02:11:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xf0ff7f}, 0x0) [ 2629.478548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2629.485992] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 [ 2629.493276] CPU: 0 PID: 18519 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2629.501437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2629.508210] blk-mq: reduced tag depth (128 -> 64) [ 2629.510798] Call Trace: [ 2629.510821] dump_stack+0x1fc/0x2ef [ 2629.510840] should_fail.cold+0xa/0xf [ 2629.510858] ? setup_fault_attr+0x200/0x200 [ 2629.531214] ? lock_acquire+0x170/0x3c0 [ 2629.535305] __should_failslab+0x115/0x180 [ 2629.539645] should_failslab+0x5/0x10 [ 2629.543454] kmem_cache_alloc+0x277/0x370 [ 2629.547624] __alloc_file+0x21/0x340 [ 2629.551356] alloc_empty_file+0x6d/0x170 [ 2629.555433] alloc_file+0x5e/0x4d0 [ 2629.559074] alloc_file_pseudo+0x165/0x250 [ 2629.563420] ? alloc_file+0x4d0/0x4d0 [ 2629.567330] ? do_raw_spin_unlock+0x171/0x230 [ 2629.571833] ? _raw_spin_unlock+0x29/0x40 [ 2629.576001] ? __alloc_fd+0x28d/0x570 [ 2629.579825] sock_alloc_file+0x48/0x180 [ 2629.583812] __sys_socket+0x13d/0x200 [ 2629.587625] ? move_addr_to_kernel+0x70/0x70 [ 2629.592048] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2629.598196] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2629.603287] __x64_sys_socket+0x6f/0xb0 [ 2629.607259] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2629.611835] do_syscall_64+0xf9/0x620 [ 2629.615632] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2629.621183] RIP: 0033:0x7fe65d695c27 [ 2629.624889] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2629.643954] RSP: 002b:00007fe65bc060d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 2629.651649] RAX: ffffffffffffffda RBX: 00007fe65d7b4f80 RCX: 00007fe65d695c27 [ 2629.658903] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2629.666173] RBP: 00007fe65bc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2629.673529] R10: ffffffff81000000 R11: 0000000000000286 R12: 00000000ffffffff 02:11:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 8) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x7ffff000}, 0x0) 02:11:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x7ffff000}, 0x0) 02:11:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:16 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (fail_nth: 7) 02:11:16 executing program 2: r0 = timerfd_create(0x8, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)=0x1) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_create(0x8, 0x0) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)=0x1) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) [ 2629.680812] R13: 00007ffcb56e7acf R14: 00007fe65bc07300 R15: 0000000000022000 [ 2629.688796] ? 0xffffffff81000000 02:11:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0x0, 0xffffff00], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xffffff7f}, 0x0) 02:11:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xffffff7f}, 0x0) [ 2629.769546] FAULT_INJECTION: forcing a failure. [ 2629.769546] name failslab, interval 1, probability 0, space 0, times 0 [ 2629.789567] FAULT_INJECTION: forcing a failure. [ 2629.789567] name failslab, interval 1, probability 0, space 0, times 0 [ 2629.824246] CPU: 0 PID: 18542 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2629.832156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2629.841612] Call Trace: [ 2629.844213] dump_stack+0x1fc/0x2ef [ 2629.847850] should_fail.cold+0xa/0xf [ 2629.851660] ? setup_fault_attr+0x200/0x200 [ 2629.855979] ? __lockdep_init_map+0x100/0x5a0 [ 2629.860484] __should_failslab+0x115/0x180 [ 2629.864720] should_failslab+0x5/0x10 [ 2629.868523] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2629.873627] __kmalloc_node+0x38/0x70 [ 2629.877444] blk_mq_alloc_rq_map+0xdf/0x230 [ 2629.881766] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2629.886265] blk_mq_alloc_tag_set+0x589/0xa30 [ 2629.890781] loop_add+0x26d/0x8a0 [ 2629.894236] loop_control_ioctl+0x16c/0x480 [ 2629.898552] ? loop_lookup+0x1d0/0x1d0 [ 2629.902441] ? ksys_write+0x241/0x2a0 [ 2629.906240] ? loop_lookup+0x1d0/0x1d0 [ 2629.910121] do_vfs_ioctl+0xcdb/0x12e0 [ 2629.914006] ? lock_downgrade+0x720/0x720 [ 2629.918152] ? check_preemption_disabled+0x41/0x280 [ 2629.923170] ? ioctl_preallocate+0x200/0x200 [ 2629.928028] ? __fget+0x356/0x510 [ 2629.931481] ? do_dup2+0x450/0x450 [ 2629.935139] ? vfs_write+0x393/0x540 [ 2629.938850] ? fput+0x2b/0x190 [ 2629.942060] ksys_ioctl+0x9b/0xc0 [ 2629.945521] __x64_sys_ioctl+0x6f/0xb0 [ 2629.949408] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2629.953984] do_syscall_64+0xf9/0x620 [ 2629.957783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2629.963149] RIP: 0033:0x7fc956aba5a9 [ 2629.966867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2629.990112] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2629.997823] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2630.005093] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2630.012358] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 02:11:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x7ffffffff000}, 0x0) 02:11:16 executing program 2: r0 = timerfd_create(0x8, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)=0x1) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x7ffffffff000}, 0x0) [ 2630.019629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2630.026910] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 [ 2630.051038] CPU: 1 PID: 18547 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2630.059039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2630.068091] blk-mq: reduced tag depth (128 -> 64) [ 2630.068396] Call Trace: [ 2630.076086] dump_stack+0x1fc/0x2ef [ 2630.079733] should_fail.cold+0xa/0xf [ 2630.084415] ? setup_fault_attr+0x200/0x200 [ 2630.088745] ? lock_acquire+0x170/0x3c0 [ 2630.093004] __should_failslab+0x115/0x180 [ 2630.097255] should_failslab+0x5/0x10 [ 2630.101068] kmem_cache_alloc_trace+0x284/0x380 [ 2630.105754] apparmor_file_alloc_security+0x394/0xad0 [ 2630.110957] ? apparmor_file_receive+0x160/0x160 [ 2630.115727] ? __alloc_file+0x21/0x340 [ 2630.119627] security_file_alloc+0x40/0x90 [ 2630.123875] __alloc_file+0xd8/0x340 [ 2630.127608] alloc_empty_file+0x6d/0x170 [ 2630.131682] alloc_file+0x5e/0x4d0 [ 2630.135243] alloc_file_pseudo+0x165/0x250 [ 2630.139488] ? alloc_file+0x4d0/0x4d0 [ 2630.143296] ? do_raw_spin_unlock+0x171/0x230 [ 2630.147796] ? _raw_spin_unlock+0x29/0x40 [ 2630.151937] ? __alloc_fd+0x28d/0x570 [ 2630.155725] sock_alloc_file+0x48/0x180 [ 2630.159680] __sys_socket+0x13d/0x200 [ 2630.163464] ? move_addr_to_kernel+0x70/0x70 [ 2630.167860] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2630.173236] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2630.178244] __x64_sys_socket+0x6f/0xb0 [ 2630.182575] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2630.187154] do_syscall_64+0xf9/0x620 [ 2630.190948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2630.196127] RIP: 0033:0x7fe65d695c27 [ 2630.199834] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 02:11:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 9) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xf0ff7f00000000}, 0x0) 02:11:16 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xf0ff7f00000000}, 0x0) [ 2630.219334] RSP: 002b:00007fe65bc060d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 2630.227030] RAX: ffffffffffffffda RBX: 00007fe65d7b4f80 RCX: 00007fe65d695c27 [ 2630.234282] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2630.241621] RBP: 00007fe65bc071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2630.248877] R10: ffffffff81000000 R11: 0000000000000286 R12: 00000000ffffffff [ 2630.256127] R13: 00007ffcb56e7acf R14: 00007fe65bc07300 R15: 0000000000022000 [ 2630.263395] ? 0xffffffff81000000 02:11:16 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (fail_nth: 8) 02:11:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [0x0, 0x0, 0xffffff00], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:16 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_create(0x8, 0x0) (async) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) 02:11:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xf0ffffff7f0000}, 0x0) 02:11:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xf0ffffff7f0000}, 0x0) [ 2630.354707] FAULT_INJECTION: forcing a failure. [ 2630.354707] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.379185] CPU: 1 PID: 18580 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2630.387095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2630.396451] Call Trace: [ 2630.399052] dump_stack+0x1fc/0x2ef [ 2630.402706] should_fail.cold+0xa/0xf [ 2630.406521] ? setup_fault_attr+0x200/0x200 [ 2630.410856] ? __lockdep_init_map+0x100/0x5a0 [ 2630.411871] FAULT_INJECTION: forcing a failure. [ 2630.411871] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.415365] __should_failslab+0x115/0x180 [ 2630.415382] should_failslab+0x5/0x10 [ 2630.415395] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2630.415418] __kmalloc_node+0x38/0x70 [ 2630.415437] blk_mq_alloc_rq_map+0x120/0x230 [ 2630.448138] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2630.452625] blk_mq_alloc_tag_set+0x589/0xa30 [ 2630.457119] loop_add+0x26d/0x8a0 [ 2630.460570] loop_control_ioctl+0x16c/0x480 [ 2630.464879] ? loop_lookup+0x1d0/0x1d0 [ 2630.468758] ? ksys_write+0x241/0x2a0 [ 2630.472551] ? loop_lookup+0x1d0/0x1d0 [ 2630.476434] do_vfs_ioctl+0xcdb/0x12e0 [ 2630.480314] ? lock_downgrade+0x720/0x720 [ 2630.484451] ? check_preemption_disabled+0x41/0x280 [ 2630.489494] ? ioctl_preallocate+0x200/0x200 [ 2630.495023] ? __fget+0x356/0x510 [ 2630.498467] ? do_dup2+0x450/0x450 [ 2630.502021] ? vfs_write+0x393/0x540 [ 2630.505744] ? fput+0x2b/0x190 [ 2630.508932] ksys_ioctl+0x9b/0xc0 [ 2630.512378] __x64_sys_ioctl+0x6f/0xb0 [ 2630.516255] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2630.520826] do_syscall_64+0xf9/0x620 [ 2630.524622] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2630.529799] RIP: 0033:0x7fc956aba5a9 [ 2630.533510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 02:11:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00', {0xff}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) [ 2630.552831] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2630.560524] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2630.567780] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2630.575035] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2630.582289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2630.589553] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 [ 2630.596831] CPU: 0 PID: 18595 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2630.604746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2630.608690] blk-mq: reduced tag depth (128 -> 64) [ 2630.614185] Call Trace: [ 2630.614206] dump_stack+0x1fc/0x2ef [ 2630.614224] should_fail.cold+0xa/0xf [ 2630.614239] ? mark_held_locks+0xf0/0xf0 [ 2630.614253] ? setup_fault_attr+0x200/0x200 [ 2630.614268] ? __sigqueue_alloc+0x18a/0x4c0 [ 2630.642013] __should_failslab+0x115/0x180 [ 2630.646260] should_failslab+0x5/0x10 [ 2630.650063] kmem_cache_alloc+0x3f/0x370 02:11:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xffffff7f00000000}, 0x0) [ 2630.654132] __sigqueue_alloc+0x246/0x4c0 [ 2630.658301] __send_signal+0xec9/0x15c0 [ 2630.662286] force_sig_info+0x262/0x3b0 [ 2630.666284] force_sig_info_fault.constprop.0+0x1e6/0x320 [ 2630.671843] ? is_prefetch.part.0+0x410/0x410 [ 2630.676339] ? 0xffffffff81000000 [ 2630.679809] ? lock_downgrade+0x720/0x720 [ 2630.684317] ? __bad_area_nosemaphore+0x4f/0x400 [ 2630.689080] ? 0xffffffff81000000 [ 2630.692546] __bad_area_nosemaphore+0x2c1/0x400 [ 2630.697231] ? spurious_fault+0x4f1/0x840 [ 2630.701389] ? 0xffffffff81000000 02:11:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 02:11:17 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 10) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x7ffff000}, 0x0) [ 2630.704851] __do_page_fault+0x17b/0xd60 [ 2630.708923] ? error_entry+0x69/0xd0 [ 2630.712645] ? page_fault+0x8/0x30 [ 2630.716193] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2630.721227] ? spurious_fault+0x840/0x840 [ 2630.725410] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2630.730269] ? page_fault+0x8/0x30 [ 2630.733832] page_fault+0x1e/0x30 [ 2630.737285] RIP: 0033:0x7fe65d683b40 02:11:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 2630.741011] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 2630.759912] RSP: 002b:00007fe65bc06098 EFLAGS: 00010286 [ 2630.765280] RAX: ffffffff81000000 RBX: 00007fe65bc06154 RCX: 0000000000000000 [ 2630.772555] RDX: ffffffff81000000 RSI: ffffffff8100000f RDI: ffffffff81000000 [ 2630.779831] RBP: 00007fe65bc060f0 R08: 0000000000000000 R09: 0000000000000000 [ 2630.787109] R10: ffffffff81000000 R11: ffffffff8100000f R12: ffffffff81000000 [ 2630.794391] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000022000 [ 2630.801759] ? 0xffffffff81000000 02:11:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x7ffffffff000}, 0x0) 02:11:17 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (fail_nth: 9) 02:11:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00', {}, {}, 0x73, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:17 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xffffff7f00000000}, 0x0) 02:11:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xf0ff7f00000000}, 0x0) [ 2630.805233] ? startup_64+0xf/0x30 [ 2630.808799] ? 0xffffffff81000000 [ 2630.812256] ? 0xffffffff81000000 [ 2630.815968] ? 0xffffffff81000000 [ 2630.819423] ? startup_64+0xf/0x30 [ 2630.824527] ? 0xffffffff81000000 02:11:17 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) r6 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r6, 0x0, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) io_submit(0x0, 0x5, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0xff, r0, &(0x7f0000000080)="b3c575a6f2489fa07397413a599d5dc15feb2a90c58faf7fa2c73d01f35c7646024062105ff12f45b1147981f80ccdf3f21210a34d250e67cba89b65a3ffce84119e433ad9ecf8144834f277c4f7d5d370df41534712f7ad5d7fa593390186c268b2e807e421219637db067450b3fdf9659d93802b0aa2001e5f745e4d6887993741be4389e5080a56ea591742a872a3b7744de5aa9cd298dd2c0542cd1763ac846c761e5e071b464a293d4d8a0daec245203510956d4ae0f36edf764aa07de04dd8f5c0a765d8612e8fe46ce1b492e59b", 0xd1, 0x8e48, 0x0, 0x3, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x78d6, r0, &(0x7f0000000240)='j', 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xfff, r3, &(0x7f00000002c0)="ad0f6d4c587ed287ffd23350456f38d740fe71e72f68a2949d1b1bdc61", 0x1d, 0x4, 0x0, 0x3, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x3ff, r0, &(0x7f0000000380)="8548d56c5938eeb5ff2b4475419b9cbb24e17b4f85e29f52fe8fc66f58c72c5c200846df8eb266a793aee25de5f5f5cf60bdf902af9e23373f2959022e022dc7d3bc9aea8395a97a6e509faf19be49897cf1e81aebd93cd4de06c1408093ad8a9cab31bd7026f1b81d0744f2499fc673589d7f5e4e5c2475e4e7211390014e5a13a0ff5bed668fab3bd4c65602a6b8326a8137f58adbfe1b839c9bb22a88fc6da8c58008c53b256de019275775702a587c9558428fed1adedb034d625a2b8f3aa7a9c37f", 0xc4, 0x3, 0x0, 0x0, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x8001, r6, &(0x7f00000004c0)="52d569b273ccc0608f82d31a085612c48f93471ad9e466d5ff4ad7dbf6067fc4075147dbd0e7cf26c0409d5efc24303835d031ff2722fb119352abe8021db1b5df894a92eecc6bc46403271dc9dde54741d9f4fec8ab", 0x56, 0x1f, 0x0, 0x0, r7}]) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) 02:11:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) [ 2630.866821] FAULT_INJECTION: forcing a failure. [ 2630.866821] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2630.921380] CPU: 1 PID: 18619 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2630.929474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2630.934171] FAULT_INJECTION: forcing a failure. [ 2630.934171] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2630.938827] Call Trace: [ 2630.938850] dump_stack+0x1fc/0x2ef [ 2630.938871] should_fail.cold+0xa/0xf [ 2630.938888] ? setup_fault_attr+0x200/0x200 [ 2630.938913] __alloc_pages_nodemask+0x239/0x2890 [ 2630.969909] ? kasan_kmalloc+0x139/0x160 [ 2630.973967] ? __kmalloc_node+0x4c/0x70 [ 2630.977935] ? blk_mq_alloc_rq_map+0x120/0x230 [ 2630.982510] ? __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2630.987176] ? blk_mq_alloc_tag_set+0x589/0xa30 [ 2630.991860] ? loop_add+0x26d/0x8a0 [ 2630.995478] ? loop_control_ioctl+0x16c/0x480 [ 2630.999968] ? do_vfs_ioctl+0xcdb/0x12e0 [ 2631.004021] ? do_syscall_64+0xf9/0x620 [ 2631.007993] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2631.013353] ? should_fail+0x142/0x7b0 [ 2631.017235] ? fs_reclaim_release+0xd0/0x110 [ 2631.021646] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2631.026577] ? setup_fault_attr+0x200/0x200 [ 2631.030918] ? lock_acquire+0x170/0x3c0 [ 2631.034890] ? check_preemption_disabled+0x41/0x280 [ 2631.039905] ? should_fail+0x142/0x7b0 [ 2631.043789] ? setup_fault_attr+0x200/0x200 [ 2631.048100] ? __lockdep_init_map+0x100/0x5a0 [ 2631.052582] ? find_next_bit+0x105/0x130 [ 2631.056683] ? __cpu_to_node+0x7b/0xa0 [ 2631.060567] ? blk_mq_hw_queue_to_node+0xc1/0x100 [ 2631.065407] blk_mq_alloc_rqs+0x242/0x800 [ 2631.069556] ? blk_mq_alloc_rq_map+0xaa/0x230 [ 2631.074057] __blk_mq_alloc_rq_map+0x15b/0x3b0 [ 2631.078654] blk_mq_alloc_tag_set+0x589/0xa30 [ 2631.083166] loop_add+0x26d/0x8a0 [ 2631.086629] loop_control_ioctl+0x16c/0x480 [ 2631.090948] ? loop_lookup+0x1d0/0x1d0 [ 2631.094833] ? ksys_write+0x241/0x2a0 [ 2631.098623] ? loop_lookup+0x1d0/0x1d0 [ 2631.102511] do_vfs_ioctl+0xcdb/0x12e0 [ 2631.106393] ? lock_downgrade+0x720/0x720 [ 2631.110541] ? check_preemption_disabled+0x41/0x280 [ 2631.115554] ? ioctl_preallocate+0x200/0x200 [ 2631.119957] ? __fget+0x356/0x510 [ 2631.123404] ? do_dup2+0x450/0x450 [ 2631.126941] ? vfs_write+0x393/0x540 [ 2631.130657] ? fput+0x2b/0x190 [ 2631.133847] ksys_ioctl+0x9b/0xc0 [ 2631.137292] __x64_sys_ioctl+0x6f/0xb0 [ 2631.141173] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2631.145918] do_syscall_64+0xf9/0x620 [ 2631.149714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2631.154889] RIP: 0033:0x7fc956aba5a9 [ 2631.158593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2631.177485] RSP: 002b:00007fc95500c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2631.185182] RAX: ffffffffffffffda RBX: 00007fc956bdb050 RCX: 00007fc956aba5a9 [ 2631.192439] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2631.199699] RBP: 00007fc95500c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2631.206966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2631.214327] R13: 00007ffe9b642c8f R14: 00007fc95500c300 R15: 0000000000022000 02:11:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0xd3, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) [ 2631.222008] CPU: 0 PID: 18634 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2631.229901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2631.239260] Call Trace: [ 2631.241869] dump_stack+0x1fc/0x2ef [ 2631.245507] should_fail.cold+0xa/0xf [ 2631.249314] ? lock_acquire+0x170/0x3c0 [ 2631.253296] ? setup_fault_attr+0x200/0x200 [ 2631.257675] __alloc_pages_nodemask+0x239/0x2890 [ 2631.262441] ? __lock_acquire+0x6de/0x3ff0 [ 2631.266692] ? __lock_acquire+0x6de/0x3ff0 [ 2631.270937] ? static_obj+0x50/0x50 [ 2631.274577] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2631.279424] ? __lock_acquire+0x6de/0x3ff0 [ 2631.283693] ? get_reg+0x1f0/0x1f0 [ 2631.287236] ? get_reg+0x1f0/0x1f0 [ 2631.290986] alloc_pages_vma+0xf2/0x780 [ 2631.294969] do_anonymous_page+0x7c2/0x1be0 [ 2631.299302] ? __pte_alloc+0x340/0x340 [ 2631.303192] ? __save_stack_trace+0x72/0x190 [ 2631.307611] ? mark_held_locks+0xf0/0xf0 [ 2631.311692] __handle_mm_fault+0x227a/0x41c0 [ 2631.316112] ? is_bpf_text_address+0xd5/0x1b0 [ 2631.320617] ? vm_insert_page+0x9c0/0x9c0 [ 2631.324803] ? check_preemption_disabled+0x41/0x280 [ 2631.329833] handle_mm_fault+0x436/0xb10 [ 2631.333910] __do_page_fault+0x68e/0xd60 [ 2631.337976] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2631.343001] ? spurious_fault+0x840/0x840 [ 2631.347145] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2631.352088] page_fault+0x1e/0x30 [ 2631.355622] RIP: 0010:__clear_user+0x40/0x70 [ 2631.360031] Code: b7 71 89 e8 52 38 99 f9 0f 01 cb 48 89 d8 48 c1 eb 03 48 89 ef 83 e0 07 48 89 d9 48 85 c9 74 19 66 2e 0f 1f 84 00 00 00 00 00 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2631.378915] RSP: 0000:ffff8880a3acfb20 EFLAGS: 00050202 [ 2631.384262] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 2631.391513] RDX: 00000000000006ab RSI: ffffffff87f1b25e RDI: 00007fe65bc05ec0 [ 2631.398856] RBP: 00007fe65bc05ec0 R08: ffffffff8cd254f0 R09: 0000000000000000 [ 2631.406115] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806dae4000 [ 2631.413371] R13: 1ffff11014759f68 R14: 0000000000000001 R15: 00007ffffffff000 [ 2631.420725] ? __clear_user+0x1e/0x70 [ 2631.424603] copy_fpstate_to_sigframe+0x1a1/0x6b0 [ 2631.429529] ? __fpu__restore_sig+0x1160/0x1160 [ 2631.434184] ? trace_hardirqs_off+0x64/0x200 [ 2631.438601] ? get_signal+0x193a/0x1f70 [ 2631.442556] ? check_preemption_disabled+0x41/0x280 [ 2631.447585] ? lock_downgrade+0x720/0x720 [ 2631.451723] ? _raw_spin_unlock_irq+0x24/0x80 [ 2631.456206] get_sigframe.constprop.0.isra.0+0x4a6/0x6a0 [ 2631.461730] ? get_signal+0x1978/0x1f70 [ 2631.465690] ? restore_sigcontext+0x800/0x800 [ 2631.470178] do_signal+0xa55/0x1670 [ 2631.473784] ? 0xffffffff81000000 [ 2631.477218] ? setup_sigcontext+0x820/0x820 [ 2631.481519] ? lock_downgrade+0x720/0x720 [ 2631.485658] ? 0xffffffff81000000 [ 2631.489099] ? __do_page_fault+0x180/0xd60 [ 2631.493314] ? exit_to_usermode_loop+0x36/0x2a0 [ 2631.497963] exit_to_usermode_loop+0x204/0x2a0 [ 2631.502524] prepare_exit_to_usermode+0x277/0x2d0 [ 2631.507437] ? page_fault+0x8/0x30 [ 2631.510957] retint_user+0x8/0x18 [ 2631.514393] RIP: 0033:0x7fe65d683b40 [ 2631.518090] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 2631.536977] RSP: 002b:00007fe65bc06098 EFLAGS: 00010286 [ 2631.542327] RAX: ffffffff81000000 RBX: 00007fe65bc06154 RCX: 0000000000000000 [ 2631.549577] RDX: ffffffff81000000 RSI: ffffffff8100000f RDI: ffffffff81000000 [ 2631.556827] RBP: 00007fe65bc060f0 R08: 0000000000000000 R09: 0000000000000000 [ 2631.564076] R10: ffffffff81000000 R11: ffffffff8100000f R12: ffffffff81000000 02:11:17 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 11) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x7ffff000}, 0x0) 02:11:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xf0ffffff7f0000}, 0x0) 02:11:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x4, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) [ 2631.571629] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000022000 [ 2631.578901] ? 0xffffffff81000000 [ 2631.582345] ? startup_64+0xf/0x30 [ 2631.585861] ? 0xffffffff81000000 [ 2631.589334] ? 0xffffffff81000000 [ 2631.592861] ? 0xffffffff81000000 [ 2631.596302] ? startup_64+0xf/0x30 [ 2631.599824] ? 0xffffffff81000000 [ 2631.707413] FAULT_INJECTION: forcing a failure. [ 2631.707413] name failslab, interval 1, probability 0, space 0, times 0 [ 2631.720030] CPU: 1 PID: 18657 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2631.727934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2631.737378] Call Trace: [ 2631.739976] dump_stack+0x1fc/0x2ef [ 2631.743617] should_fail.cold+0xa/0xf [ 2631.747426] ? setup_fault_attr+0x200/0x200 [ 2631.751756] ? lock_acquire+0x170/0x3c0 [ 2631.755746] __should_failslab+0x115/0x180 [ 2631.759990] should_failslab+0x5/0x10 [ 2631.763800] kmem_cache_alloc_node+0x245/0x3b0 [ 2631.768410] blk_alloc_queue_node+0x32/0xbf0 [ 2631.772857] blk_mq_init_queue+0x44/0xa0 [ 2631.777834] loop_add+0x2cb/0x8a0 [ 2631.781822] loop_control_ioctl+0x16c/0x480 [ 2631.786334] ? loop_lookup+0x1d0/0x1d0 [ 2631.790240] ? ksys_write+0x241/0x2a0 [ 2631.794164] ? loop_lookup+0x1d0/0x1d0 [ 2631.798066] do_vfs_ioctl+0xcdb/0x12e0 [ 2631.802051] ? lock_downgrade+0x720/0x720 02:11:18 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:18 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) r6 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r6, 0x0, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) io_submit(0x0, 0x5, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0xff, r0, &(0x7f0000000080)="b3c575a6f2489fa07397413a599d5dc15feb2a90c58faf7fa2c73d01f35c7646024062105ff12f45b1147981f80ccdf3f21210a34d250e67cba89b65a3ffce84119e433ad9ecf8144834f277c4f7d5d370df41534712f7ad5d7fa593390186c268b2e807e421219637db067450b3fdf9659d93802b0aa2001e5f745e4d6887993741be4389e5080a56ea591742a872a3b7744de5aa9cd298dd2c0542cd1763ac846c761e5e071b464a293d4d8a0daec245203510956d4ae0f36edf764aa07de04dd8f5c0a765d8612e8fe46ce1b492e59b", 0xd1, 0x8e48, 0x0, 0x3, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x78d6, r0, &(0x7f0000000240)='j', 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xfff, r3, &(0x7f00000002c0)="ad0f6d4c587ed287ffd23350456f38d740fe71e72f68a2949d1b1bdc61", 0x1d, 0x4, 0x0, 0x3, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x3ff, r0, &(0x7f0000000380)="8548d56c5938eeb5ff2b4475419b9cbb24e17b4f85e29f52fe8fc66f58c72c5c200846df8eb266a793aee25de5f5f5cf60bdf902af9e23373f2959022e022dc7d3bc9aea8395a97a6e509faf19be49897cf1e81aebd93cd4de06c1408093ad8a9cab31bd7026f1b81d0744f2499fc673589d7f5e4e5c2475e4e7211390014e5a13a0ff5bed668fab3bd4c65602a6b8326a8137f58adbfe1b839c9bb22a88fc6da8c58008c53b256de019275775702a587c9558428fed1adedb034d625a2b8f3aa7a9c37f", 0xc4, 0x3, 0x0, 0x0, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x8001, r6, &(0x7f00000004c0)="52d569b273ccc0608f82d31a085612c48f93471ad9e466d5ff4ad7dbf6067fc4075147dbd0e7cf26c0409d5efc24303835d031ff2722fb119352abe8021db1b5df894a92eecc6bc46403271dc9dde54741d9f4fec8ab", 0x56, 0x1f, 0x0, 0x0, r7}]) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) timerfd_create(0x8, 0x0) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) pipe2(&(0x7f00000001c0), 0x80080) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$l2tp(r3, 0x0, 0x0) (async) pipe2(&(0x7f0000000300), 0x800) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$l2tp(r6, 0x0, 0x0) (async) pipe2(&(0x7f0000000540), 0x800) (async) io_submit(0x0, 0x5, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0xff, r0, &(0x7f0000000080)="b3c575a6f2489fa07397413a599d5dc15feb2a90c58faf7fa2c73d01f35c7646024062105ff12f45b1147981f80ccdf3f21210a34d250e67cba89b65a3ffce84119e433ad9ecf8144834f277c4f7d5d370df41534712f7ad5d7fa593390186c268b2e807e421219637db067450b3fdf9659d93802b0aa2001e5f745e4d6887993741be4389e5080a56ea591742a872a3b7744de5aa9cd298dd2c0542cd1763ac846c761e5e071b464a293d4d8a0daec245203510956d4ae0f36edf764aa07de04dd8f5c0a765d8612e8fe46ce1b492e59b", 0xd1, 0x8e48, 0x0, 0x3, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x78d6, r0, &(0x7f0000000240)='j', 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xfff, r3, &(0x7f00000002c0)="ad0f6d4c587ed287ffd23350456f38d740fe71e72f68a2949d1b1bdc61", 0x1d, 0x4, 0x0, 0x3, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x3ff, r0, &(0x7f0000000380)="8548d56c5938eeb5ff2b4475419b9cbb24e17b4f85e29f52fe8fc66f58c72c5c200846df8eb266a793aee25de5f5f5cf60bdf902af9e23373f2959022e022dc7d3bc9aea8395a97a6e509faf19be49897cf1e81aebd93cd4de06c1408093ad8a9cab31bd7026f1b81d0744f2499fc673589d7f5e4e5c2475e4e7211390014e5a13a0ff5bed668fab3bd4c65602a6b8326a8137f58adbfe1b839c9bb22a88fc6da8c58008c53b256de019275775702a587c9558428fed1adedb034d625a2b8f3aa7a9c37f", 0xc4, 0x3, 0x0, 0x0, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x8001, r6, &(0x7f00000004c0)="52d569b273ccc0608f82d31a085612c48f93471ad9e466d5ff4ad7dbf6067fc4075147dbd0e7cf26c0409d5efc24303835d031ff2722fb119352abe8021db1b5df894a92eecc6bc46403271dc9dde54741d9f4fec8ab", 0x56, 0x1f, 0x0, 0x0, r7}]) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) (async) 02:11:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 02:11:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 02:11:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 02:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0xe0, r1, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcb98}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x372}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x300, 0x5, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8005}, 0x2c004) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r7, 0x5f780dd21f70e8a5, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000081}, 0x8810) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44055}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) [ 2631.806208] ? check_preemption_disabled+0x41/0x280 [ 2631.811235] ? ioctl_preallocate+0x200/0x200 [ 2631.815661] ? __fget+0x356/0x510 [ 2631.819127] ? do_dup2+0x450/0x450 [ 2631.822762] ? vfs_write+0x393/0x540 [ 2631.826491] ? fput+0x2b/0x190 [ 2631.829720] ksys_ioctl+0x9b/0xc0 [ 2631.833203] __x64_sys_ioctl+0x6f/0xb0 [ 2631.837099] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2631.841776] do_syscall_64+0xf9/0x620 [ 2631.845591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2631.850783] RIP: 0033:0x7fc956aba5a9 02:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r1 = syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0xe0, r1, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcb98}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x372}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x40010) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x300, 0x5, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8005}, 0x2c004) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r7, 0x5f780dd21f70e8a5, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000081}, 0x8810) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44055}, 0x0) (async, rerun: 64) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) [ 2631.854511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2631.873432] RSP: 002b:00007fc95500c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2631.881334] RAX: ffffffffffffffda RBX: 00007fc956bdb050 RCX: 00007fc956aba5a9 [ 2631.888791] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2631.896075] RBP: 00007fc95500c1d0 R08: 0000000000000000 R09: 0000000000000000 02:11:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}, @common=@dst={{0x48}, {0x0, 0x3, 0x1, [0x59, 0x7fff, 0xf5c, 0x0, 0x40, 0x7f, 0x3, 0x2, 0x9, 0x9, 0xcd6, 0x40, 0x400, 0x7, 0x8000, 0x20], 0xa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) [ 2631.903351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2631.910629] R13: 00007ffe9b642c8f R14: 00007fc95500c300 R15: 0000000000022000 02:11:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 12) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:18 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x800) (async, rerun: 32) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) r6 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r6, 0x0, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) io_submit(0x0, 0x5, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0xff, r0, &(0x7f0000000080)="b3c575a6f2489fa07397413a599d5dc15feb2a90c58faf7fa2c73d01f35c7646024062105ff12f45b1147981f80ccdf3f21210a34d250e67cba89b65a3ffce84119e433ad9ecf8144834f277c4f7d5d370df41534712f7ad5d7fa593390186c268b2e807e421219637db067450b3fdf9659d93802b0aa2001e5f745e4d6887993741be4389e5080a56ea591742a872a3b7744de5aa9cd298dd2c0542cd1763ac846c761e5e071b464a293d4d8a0daec245203510956d4ae0f36edf764aa07de04dd8f5c0a765d8612e8fe46ce1b492e59b", 0xd1, 0x8e48, 0x0, 0x3, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x78d6, r0, &(0x7f0000000240)='j', 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xfff, r3, &(0x7f00000002c0)="ad0f6d4c587ed287ffd23350456f38d740fe71e72f68a2949d1b1bdc61", 0x1d, 0x4, 0x0, 0x3, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x3ff, r0, &(0x7f0000000380)="8548d56c5938eeb5ff2b4475419b9cbb24e17b4f85e29f52fe8fc66f58c72c5c200846df8eb266a793aee25de5f5f5cf60bdf902af9e23373f2959022e022dc7d3bc9aea8395a97a6e509faf19be49897cf1e81aebd93cd4de06c1408093ad8a9cab31bd7026f1b81d0744f2499fc673589d7f5e4e5c2475e4e7211390014e5a13a0ff5bed668fab3bd4c65602a6b8326a8137f58adbfe1b839c9bb22a88fc6da8c58008c53b256de019275775702a587c9558428fed1adedb034d625a2b8f3aa7a9c37f", 0xc4, 0x3, 0x0, 0x0, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x8001, r6, &(0x7f00000004c0)="52d569b273ccc0608f82d31a085612c48f93471ad9e466d5ff4ad7dbf6067fc4075147dbd0e7cf26c0409d5efc24303835d031ff2722fb119352abe8021db1b5df894a92eecc6bc46403271dc9dde54741d9f4fec8ab", 0x56, 0x1f, 0x0, 0x0, r7}]) (async, rerun: 32) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async, rerun: 32) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) 02:11:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x7ffffffff000}, 0x0) 02:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async, rerun: 64) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0xe0, r1, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcb98}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x372}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x40010) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x300, 0x5, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8005}, 0x2c004) (async, rerun: 32) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async, rerun: 32) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r7, 0x5f780dd21f70e8a5, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000081}, 0x8810) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44055}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) 02:11:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4a0, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0xfff], 0x4, 0x2, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 02:11:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xf0ff7f00000000}, 0x0) 02:11:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xf0ff7f}, 0x0) 02:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}}, 0x10) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:18 executing program 2: r0 = timerfd_create(0x8, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) accept4$inet(r1, 0x0, &(0x7f0000000080), 0x80000) timerfd_create(0x9, 0xc0000) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2632.076642] FAULT_INJECTION: forcing a failure. [ 2632.076642] name failslab, interval 1, probability 0, space 0, times 0 [ 2632.115167] CPU: 1 PID: 18705 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 02:11:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id=0x68, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2632.123074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2632.132441] Call Trace: [ 2632.135046] dump_stack+0x1fc/0x2ef [ 2632.138691] should_fail.cold+0xa/0xf [ 2632.142504] ? setup_fault_attr+0x200/0x200 [ 2632.146839] ? lock_acquire+0x170/0x3c0 [ 2632.150831] __should_failslab+0x115/0x180 [ 2632.155074] should_failslab+0x5/0x10 [ 2632.158881] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2632.163995] __kmalloc_node+0x38/0x70 [ 2632.167800] ? mempool_free+0x370/0x370 [ 2632.171782] mempool_init_node+0x137/0x6c0 [ 2632.176033] ? mempool_alloc+0x350/0x350 [ 2632.180090] ? mempool_free+0x370/0x370 [ 2632.184069] mempool_init+0x38/0x50 [ 2632.187677] bioset_init+0x327/0x810 [ 2632.191390] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2632.196140] blk_alloc_queue_node+0x189/0xbf0 [ 2632.200628] blk_mq_init_queue+0x44/0xa0 [ 2632.204689] loop_add+0x2cb/0x8a0 [ 2632.208148] loop_control_ioctl+0x16c/0x480 [ 2632.212508] ? loop_lookup+0x1d0/0x1d0 [ 2632.216394] ? ksys_write+0x241/0x2a0 [ 2632.220184] ? loop_lookup+0x1d0/0x1d0 [ 2632.224069] do_vfs_ioctl+0xcdb/0x12e0 [ 2632.227963] ? lock_downgrade+0x720/0x720 [ 2632.232200] ? check_preemption_disabled+0x41/0x280 [ 2632.237222] ? ioctl_preallocate+0x200/0x200 [ 2632.241626] ? __fget+0x356/0x510 [ 2632.245070] ? do_dup2+0x450/0x450 [ 2632.248590] ? vfs_write+0x393/0x540 [ 2632.252290] ? fput+0x2b/0x190 [ 2632.255477] ksys_ioctl+0x9b/0xc0 [ 2632.258925] __x64_sys_ioctl+0x6f/0xb0 [ 2632.262806] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2632.267441] do_syscall_64+0xf9/0x620 [ 2632.271242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2632.276513] RIP: 0033:0x7fc956aba5a9 [ 2632.280297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2632.299281] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2632.310096] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2632.317358] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 02:11:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 13) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}}, 0x10) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:18 executing program 2: r0 = timerfd_create(0x8, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) accept4$inet(r1, 0x0, &(0x7f0000000080), 0x80000) (async) timerfd_create(0x9, 0xc0000) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xf0ffffff7f0000}, 0x0) 02:11:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x7ffff000}, 0x0) [ 2632.324735] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2632.332002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2632.339278] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key=0x7fb}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}}, 0x10) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:18 executing program 2: r0 = timerfd_create(0x8, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) accept4$inet(r1, 0x0, &(0x7f0000000080), 0x80000) (async) timerfd_create(0x9, 0xc0000) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (rerun: 32) 02:11:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 2632.412864] FAULT_INJECTION: forcing a failure. [ 2632.412864] name failslab, interval 1, probability 0, space 0, times 0 [ 2632.452951] CPU: 1 PID: 18734 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 02:11:18 executing program 0: r0 = socket$kcm(0x29, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0, r1}) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:18 executing program 0: r0 = socket$kcm(0x29, 0x0, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0, r1}) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) [ 2632.460863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2632.470229] Call Trace: [ 2632.472829] dump_stack+0x1fc/0x2ef [ 2632.476485] should_fail.cold+0xa/0xf [ 2632.480302] ? setup_fault_attr+0x200/0x200 [ 2632.484639] ? lock_acquire+0x170/0x3c0 [ 2632.488635] ? mempool_free+0x370/0x370 [ 2632.492624] ? mempool_free+0x370/0x370 [ 2632.496628] __should_failslab+0x115/0x180 [ 2632.500971] should_failslab+0x5/0x10 [ 2632.504871] kmem_cache_alloc+0x277/0x370 [ 2632.509039] ? mempool_alloc+0x350/0x350 [ 2632.513104] ? mempool_free+0x370/0x370 [ 2632.517084] mempool_init_node+0x2d0/0x6c0 [ 2632.521338] ? mempool_alloc+0x350/0x350 [ 2632.525401] ? mempool_free+0x370/0x370 [ 2632.529382] mempool_init+0x38/0x50 [ 2632.533021] bioset_init+0x327/0x810 [ 2632.536827] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2632.541591] blk_alloc_queue_node+0x189/0xbf0 [ 2632.546106] blk_mq_init_queue+0x44/0xa0 [ 2632.550170] loop_add+0x2cb/0x8a0 [ 2632.553632] loop_control_ioctl+0x16c/0x480 [ 2632.558034] ? loop_lookup+0x1d0/0x1d0 [ 2632.561918] ? ksys_write+0x241/0x2a0 [ 2632.565723] ? loop_lookup+0x1d0/0x1d0 [ 2632.569609] do_vfs_ioctl+0xcdb/0x12e0 [ 2632.573508] ? lock_downgrade+0x720/0x720 [ 2632.577697] ? check_preemption_disabled+0x41/0x280 [ 2632.582696] ? ioctl_preallocate+0x200/0x200 [ 2632.587091] ? __fget+0x356/0x510 [ 2632.590539] ? do_dup2+0x450/0x450 [ 2632.594065] ? vfs_write+0x393/0x540 [ 2632.597937] ? fput+0x2b/0x190 [ 2632.601115] ksys_ioctl+0x9b/0xc0 [ 2632.604553] __x64_sys_ioctl+0x6f/0xb0 [ 2632.608436] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2632.613014] do_syscall_64+0xf9/0x620 [ 2632.616812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2632.622006] RIP: 0033:0x7fc956aba5a9 [ 2632.625713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2632.644727] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2632.652444] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 02:11:19 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 14) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xf0ff7f) 02:11:19 executing program 0: r0 = socket$kcm(0x29, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0, r1}) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) socket$kcm(0x29, 0x0, 0x0) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0, r1}) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) 02:11:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 02:11:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2632.659703] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2632.666954] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2632.674219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2632.681478] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:19 executing program 2: r0 = timerfd_create(0x8, 0x0) r1 = timerfd_create(0x9, 0x100800) timerfd_gettime(r1, &(0x7f00000000c0)) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r2 = getegid() getgroups(0x2, &(0x7f0000000100)=[0x0, r2]) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000080)=0x9) 02:11:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) (fail_nth: 1) 02:11:19 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0, 0xffee}}, 0x44015) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008085}, 0x4044015) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2e, 0x6a}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x6008800}, 0x4048000) 02:11:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x7ffff000) 02:11:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xf0ff7f}, 0x0) [ 2632.777813] FAULT_INJECTION: forcing a failure. [ 2632.777813] name failslab, interval 1, probability 0, space 0, times 0 [ 2632.795169] FAULT_INJECTION: forcing a failure. [ 2632.795169] name failslab, interval 1, probability 0, space 0, times 0 [ 2632.817115] CPU: 1 PID: 18776 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 02:11:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xffffff7f) [ 2632.825030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2632.834388] Call Trace: [ 2632.836988] dump_stack+0x1fc/0x2ef [ 2632.840628] should_fail.cold+0xa/0xf [ 2632.844442] ? setup_fault_attr+0x200/0x200 [ 2632.848770] ? lock_acquire+0x170/0x3c0 [ 2632.852757] __should_failslab+0x115/0x180 [ 2632.857000] should_failslab+0x5/0x10 [ 2632.860811] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2632.865927] __kmalloc_node+0x38/0x70 [ 2632.869744] kvmalloc_node+0x61/0xf0 [ 2632.873904] xt_alloc_table_info+0x3c/0xa0 [ 2632.878149] do_ip6t_set_ctl+0x214/0x430 [ 2632.882388] ? compat_do_ip6t_set_ctl+0x150/0x150 [ 2632.887256] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2632.892541] nf_setsockopt+0x6f/0xc0 [ 2632.896258] ipv6_setsockopt+0x103/0x160 [ 2632.900324] rawv6_setsockopt+0x55/0x140 [ 2632.904391] __sys_setsockopt+0x14d/0x240 [ 2632.908544] ? kernel_accept+0x310/0x310 [ 2632.912603] ? fput+0x2b/0x190 [ 2632.915787] ? ksys_write+0x1c8/0x2a0 [ 2632.919585] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2632.924961] __x64_sys_setsockopt+0xba/0x150 [ 2632.929373] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2632.933948] do_syscall_64+0xf9/0x620 [ 2632.937749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2632.942931] RIP: 0033:0x7fc3a60905a9 [ 2632.946640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2632.965528] RSP: 002b:00007fc3a4603168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2632.973224] RAX: ffffffffffffffda RBX: 00007fc3a61b0f80 RCX: 00007fc3a60905a9 [ 2632.980494] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2632.987756] RBP: 00007fc3a46031d0 R08: 00000000000004d0 R09: 0000000000000000 [ 2632.995016] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 2633.002548] R13: 00007ffc604247cf R14: 00007fc3a4603300 R15: 0000000000022000 [ 2633.009833] CPU: 0 PID: 18771 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2633.017733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2633.027882] Call Trace: [ 2633.030666] dump_stack+0x1fc/0x2ef [ 2633.034330] should_fail.cold+0xa/0xf [ 2633.038146] ? setup_fault_attr+0x200/0x200 [ 2633.042483] ? lock_acquire+0x170/0x3c0 [ 2633.046479] __should_failslab+0x115/0x180 [ 2633.050826] should_failslab+0x5/0x10 [ 2633.054609] kmem_cache_alloc+0x277/0x370 [ 2633.058743] ? mempool_alloc+0x350/0x350 [ 2633.062790] mempool_init_node+0x2d0/0x6c0 [ 2633.067009] ? mempool_alloc+0x350/0x350 [ 2633.071138] ? mempool_free+0x370/0x370 [ 2633.075106] mempool_init+0x38/0x50 [ 2633.078839] bioset_init+0x327/0x810 [ 2633.082539] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2633.087281] blk_alloc_queue_node+0x189/0xbf0 [ 2633.091764] blk_mq_init_queue+0x44/0xa0 [ 2633.095808] loop_add+0x2cb/0x8a0 [ 2633.099345] loop_control_ioctl+0x16c/0x480 [ 2633.103650] ? loop_lookup+0x1d0/0x1d0 [ 2633.107522] ? ksys_write+0x241/0x2a0 [ 2633.111306] ? loop_lookup+0x1d0/0x1d0 [ 2633.115180] do_vfs_ioctl+0xcdb/0x12e0 [ 2633.119053] ? lock_downgrade+0x720/0x720 [ 2633.123199] ? check_preemption_disabled+0x41/0x280 [ 2633.128316] ? ioctl_preallocate+0x200/0x200 [ 2633.132710] ? __fget+0x356/0x510 [ 2633.136144] ? do_dup2+0x450/0x450 [ 2633.139680] ? vfs_write+0x393/0x540 [ 2633.143474] ? fput+0x2b/0x190 [ 2633.146667] ksys_ioctl+0x9b/0xc0 [ 2633.150105] __x64_sys_ioctl+0x6f/0xb0 [ 2633.153974] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2633.158539] do_syscall_64+0xf9/0x620 [ 2633.162333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2633.167692] RIP: 0033:0x7fc956aba5a9 [ 2633.171482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2633.190757] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2633.198494] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2633.205760] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2633.213103] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2633.220362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:11:19 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 15) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x7ffff000}, 0x0) 02:11:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x7ffffffff000) 02:11:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) (fail_nth: 2) 02:11:19 executing program 2: r0 = timerfd_create(0x8, 0x0) r1 = timerfd_create(0x9, 0x100800) timerfd_gettime(r1, &(0x7f00000000c0)) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r2 = getegid() getgroups(0x2, &(0x7f0000000100)=[0x0, r2]) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000080)=0x9) timerfd_create(0x8, 0x0) (async) timerfd_create(0x9, 0x100800) (async) timerfd_gettime(r1, &(0x7f00000000c0)) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x2, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) (async) getegid() (async) getgroups(0x2, &(0x7f0000000100)=[0x0, r2]) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) (async) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000080)=0x9) (async) 02:11:19 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0, 0xffee}}, 0x44015) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008085}, 0x4044015) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2e, 0x6a}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x6008800}, 0x4048000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0, 0xffee}}, 0x44015) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008085}, 0x4044015) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2e, 0x6a}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x6008800}, 0x4048000) (async) [ 2633.227794] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 02:11:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xf0ff7f00000000) [ 2633.289049] FAULT_INJECTION: forcing a failure. [ 2633.289049] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.304806] FAULT_INJECTION: forcing a failure. [ 2633.304806] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.309453] CPU: 1 PID: 18798 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2633.323914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2633.333286] Call Trace: 02:11:19 executing program 2: r0 = timerfd_create(0x8, 0x0) r1 = timerfd_create(0x9, 0x100800) timerfd_gettime(r1, &(0x7f00000000c0)) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r2 = getegid() getgroups(0x2, &(0x7f0000000100)=[0x0, r2]) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000080)=0x9) timerfd_create(0x8, 0x0) (async) timerfd_create(0x9, 0x100800) (async) timerfd_gettime(r1, &(0x7f00000000c0)) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x2, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) (async) getegid() (async) getgroups(0x2, &(0x7f0000000100)=[0x0, r2]) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) (async) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000080)=0x9) (async) 02:11:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xf0ffffff7f0000) [ 2633.335907] dump_stack+0x1fc/0x2ef [ 2633.339650] should_fail.cold+0xa/0xf [ 2633.343463] ? setup_fault_attr+0x200/0x200 [ 2633.348414] ? lock_acquire+0x170/0x3c0 [ 2633.352407] __should_failslab+0x115/0x180 [ 2633.356667] should_failslab+0x5/0x10 [ 2633.360482] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2633.365609] __kmalloc_node+0x38/0x70 [ 2633.369516] ? mempool_free+0x370/0x370 [ 2633.373593] mempool_init_node+0x137/0x6c0 [ 2633.377838] ? mempool_alloc+0x350/0x350 [ 2633.382074] ? mempool_free+0x370/0x370 [ 2633.386056] mempool_init+0x38/0x50 02:11:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xffffff7f00000000) [ 2633.389692] bioset_init+0x532/0x810 [ 2633.393515] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2633.398287] blk_alloc_queue_node+0x189/0xbf0 [ 2633.402888] blk_mq_init_queue+0x44/0xa0 [ 2633.407129] loop_add+0x2cb/0x8a0 [ 2633.410591] loop_control_ioctl+0x16c/0x480 [ 2633.414913] ? loop_lookup+0x1d0/0x1d0 [ 2633.418830] ? ksys_write+0x241/0x2a0 [ 2633.422642] ? loop_lookup+0x1d0/0x1d0 [ 2633.426539] do_vfs_ioctl+0xcdb/0x12e0 [ 2633.430426] ? lock_downgrade+0x720/0x720 [ 2633.434576] ? check_preemption_disabled+0x41/0x280 02:11:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000800) [ 2633.439601] ? ioctl_preallocate+0x200/0x200 [ 2633.444014] ? __fget+0x356/0x510 [ 2633.447469] ? do_dup2+0x450/0x450 [ 2633.451015] ? vfs_write+0x393/0x540 [ 2633.454734] ? fput+0x2b/0x190 [ 2633.457941] ksys_ioctl+0x9b/0xc0 [ 2633.461433] __x64_sys_ioctl+0x6f/0xb0 [ 2633.465322] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2633.469989] do_syscall_64+0xf9/0x620 [ 2633.473802] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2633.478987] RIP: 0033:0x7fc956aba5a9 [ 2633.482707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2633.501612] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2633.509317] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2633.516587] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2633.523944] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2633.531288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2633.538545] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 [ 2633.545824] CPU: 0 PID: 18800 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 2633.553711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2633.563064] Call Trace: [ 2633.565659] dump_stack+0x1fc/0x2ef [ 2633.569304] should_fail.cold+0xa/0xf [ 2633.573212] ? setup_fault_attr+0x200/0x200 [ 2633.577540] ? lock_acquire+0x170/0x3c0 [ 2633.581527] __should_failslab+0x115/0x180 [ 2633.585773] should_failslab+0x5/0x10 [ 2633.589589] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2633.594705] __kmalloc_node+0x38/0x70 [ 2633.598511] kvmalloc_node+0x61/0xf0 [ 2633.602231] xt_alloc_entry_offsets+0x3b/0x50 [ 2633.606827] translate_table+0x216/0x16a0 [ 2633.610972] ? __might_fault+0x11f/0x1d0 [ 2633.615163] ? lock_acquire+0x170/0x3c0 [ 2633.619128] ? __might_fault+0xef/0x1d0 [ 2633.623087] ? cleanup_entry+0x340/0x340 [ 2633.627140] ? __might_fault+0x192/0x1d0 [ 2633.631194] do_ip6t_set_ctl+0x29d/0x430 [ 2633.635251] ? compat_do_ip6t_set_ctl+0x150/0x150 [ 2633.640092] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2633.645355] nf_setsockopt+0x6f/0xc0 [ 2633.649069] ipv6_setsockopt+0x103/0x160 [ 2633.653138] rawv6_setsockopt+0x55/0x140 [ 2633.657194] __sys_setsockopt+0x14d/0x240 [ 2633.661323] ? kernel_accept+0x310/0x310 [ 2633.665436] ? fput+0x2b/0x190 [ 2633.668619] ? ksys_write+0x1c8/0x2a0 [ 2633.672510] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2633.677951] __x64_sys_setsockopt+0xba/0x150 [ 2633.682346] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2633.686968] do_syscall_64+0xf9/0x620 [ 2633.690761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2633.695945] RIP: 0033:0x7fc3a60905a9 [ 2633.699652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2633.718538] RSP: 002b:00007fc3a4603168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2633.726267] RAX: ffffffffffffffda RBX: 00007fc3a61b0f80 RCX: 00007fc3a60905a9 [ 2633.733528] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 02:11:20 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 16) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xf0ff7f) 02:11:20 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0, 0xffee}}, 0x44015) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008085}, 0x4044015) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2e, 0x6a}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x6008800}, 0x4048000) 02:11:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) (fail_nth: 3) 02:11:20 executing program 2: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)) 02:11:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000800) [ 2633.740789] RBP: 00007fc3a46031d0 R08: 00000000000004d0 R09: 0000000000000000 [ 2633.748038] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 2633.755302] R13: 00007ffc604247cf R14: 00007fc3a4603300 R15: 0000000000022000 02:11:20 executing program 2: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)) 02:11:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x7ffff000) 02:11:20 executing program 0: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) 02:11:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2633.852837] FAULT_INJECTION: forcing a failure. [ 2633.852837] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.874188] CPU: 0 PID: 18846 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2633.882096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2633.891456] Call Trace: [ 2633.894069] dump_stack+0x1fc/0x2ef [ 2633.897795] should_fail.cold+0xa/0xf 02:11:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x3a, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2633.901609] ? setup_fault_attr+0x200/0x200 [ 2633.906026] ? lock_acquire+0x170/0x3c0 [ 2633.910013] ? mempool_free+0x370/0x370 [ 2633.913994] ? mempool_free+0x370/0x370 [ 2633.917983] __should_failslab+0x115/0x180 [ 2633.922236] should_failslab+0x5/0x10 [ 2633.926042] kmem_cache_alloc+0x277/0x370 [ 2633.930194] ? mempool_alloc+0x350/0x350 [ 2633.934284] ? mempool_free+0x370/0x370 [ 2633.938265] mempool_init_node+0x2d0/0x6c0 [ 2633.942508] ? mempool_alloc+0x350/0x350 [ 2633.946575] ? mempool_free+0x370/0x370 [ 2633.950561] mempool_init+0x38/0x50 [ 2633.954199] bioset_init+0x532/0x810 [ 2633.957917] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2633.962688] blk_alloc_queue_node+0x189/0xbf0 [ 2633.967200] blk_mq_init_queue+0x44/0xa0 [ 2633.971283] loop_add+0x2cb/0x8a0 [ 2633.974744] loop_control_ioctl+0x16c/0x480 [ 2633.979244] ? loop_lookup+0x1d0/0x1d0 [ 2633.983145] ? ksys_write+0x241/0x2a0 [ 2633.986939] ? loop_lookup+0x1d0/0x1d0 [ 2633.990811] do_vfs_ioctl+0xcdb/0x12e0 [ 2633.994682] ? lock_downgrade+0x720/0x720 [ 2633.998813] ? check_preemption_disabled+0x41/0x280 [ 2634.003808] ? ioctl_preallocate+0x200/0x200 [ 2634.008196] ? __fget+0x356/0x510 [ 2634.011648] ? do_dup2+0x450/0x450 [ 2634.015184] ? vfs_write+0x393/0x540 [ 2634.018975] ? fput+0x2b/0x190 [ 2634.022165] ksys_ioctl+0x9b/0xc0 [ 2634.025611] __x64_sys_ioctl+0x6f/0xb0 [ 2634.029480] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2634.034070] do_syscall_64+0xf9/0x620 [ 2634.037867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2634.043050] RIP: 0033:0x7fc956aba5a9 [ 2634.046755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2634.065635] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2634.073334] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2634.080601] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2634.087858] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2634.095117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:11:20 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 17) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xffffff7f) 02:11:20 executing program 0: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) 02:11:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000800) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) pipe2(&(0x7f0000000000), 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000800) (async) 02:11:20 executing program 2: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)) (async) [ 2634.102382] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:20 executing program 0: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) (async) 02:11:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x7ffffffff000) 02:11:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:20 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{r1, r2+60000000}, {0x77359400}}, 0x0) [ 2634.177017] FAULT_INJECTION: forcing a failure. [ 2634.177017] name failslab, interval 1, probability 0, space 0, times 0 02:11:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x5, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:20 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x5, 0x7ce, [0x20000240, 0x0, 0x0, 0x2000069c, 0x20000772], 0x0, &(0x7f0000000000), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x2, 0x8808, 'ip6tnl0\x00', 'ip6gretap0\x00', 'veth0_to_batadv\x00', 'pim6reg1\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0xff, 0x0, 0x0, 0xff], 0x2de, 0x34e, 0x386, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0xc, [{0x7fff, 0x8, 0x3f, 0x8}, {0xffc1, 0x1f, 0x7c, 0xc5}, {0x5, 0x20, 0x9}, {0x3, 0x3, 0x80, 0x36}, {0x3, 0x4, 0x42, 0x8}, {0x8, 0x1, 0x6, 0x1}, {0x101, 0x3, 0x40, 0x3}, {0x1, 0x3e, 0x4, 0xff}, {0x1000, 0x40, 0x40, 0x1}, {0x7, 0x7f, 0x7f, 0x9}, {0x9, 0xf9, 0x4, 0xff}, {0x6cf8, 0x3, 0x0, 0x1aab}, {0x2, 0x54, 0x54, 0xfffffc01}, {0x7, 0xfd, 0x0, 0x200}, {0x9, 0x0, 0x6a, 0x1}, {0x3, 0x3, 0x3, 0xb204}, {0x7, 0xff, 0x4, 0x1}, {0x100, 0x1, 0x7}, {0x8, 0x3f, 0x4, 0x1}, {0x3c, 0x81, 0x20, 0xfff}, {0x1, 0x0, 0x5, 0x1}, {0x101, 0xff, 0x4, 0x4}, {0x800, 0xb1, 0x4, 0x1b}, {0x5, 0xe1, 0x4, 0x4}, {0x1, 0x0, 0x5, 0x8000}, {0x7ff, 0x5, 0x0, 0x5}, {0x7, 0x1, 0xab, 0x5}, {0xadc, 0x3, 0xae, 0x75}, {0x3, 0xfa, 0x4, 0x7}, {0xbcd, 0x4, 0x0, 0x4}, {0x2, 0xc4, 0x81, 0x2}, {0x6, 0xa9, 0x6, 0x8001}, {0x7fff, 0x4, 0xfc, 0x6}, {0x4, 0xd9, 0x80, 0xfff}, {0x4, 0xc1, 0xdc, 0x9}, {0x3, 0x8, 0x50, 0xffffffff}, {0x2, 0x2, 0x5, 0x8}, {0x7fff, 0x0, 0x81, 0xffffffff}, {0x2, 0x4, 0x1, 0x8}, {0x80, 0x8, 0x9, 0x5}, {0xff01, 0x51, 0xb4, 0x7}, {0x5, 0x8, 0x0, 0x1}, {0xffff, 0x4, 0x1f, 0x6}, {0x7, 0x80, 0x4, 0xfffffffa}, {0xdb7, 0x4, 0x7, 0x1}, {0x2, 0x1, 0x80, 0xffffff81}, {0x401, 0xff, 0xf7, 0x5}, {0x2, 0x9, 0x5, 0x1}, {0x0, 0x80, 0x3, 0x3}, {0x3, 0x20, 0x4, 0x4}, {0x4, 0x0, 0x1, 0x7}, {0x8, 0x5, 0x1, 0x7}, {0x1f, 0xfe, 0x9, 0x200}, {0x7f, 0x3, 0x80, 0xb2c9}, {0xfd, 0xab, 0x48, 0x7}, {0x4, 0x0, 0x80, 0xffffffff}, {0x400, 0x0, 0x2a, 0x40}, {0x4, 0xd2, 0x1, 0x5}, {0x2, 0x20, 0x2, 0x6}, {0xffff, 0x7f, 0x40}, {0x8, 0x7a, 0x1, 0xa66}, {0x8001, 0x4, 0x42, 0xcd}, {0x8000, 0xc9, 0x2, 0x3ff}, {0xa1e1, 0xb7, 0x9, 0xfffffff7}], {0x40}}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@multicast}}}], [@snat={'snat\x00', 0x10, {{@empty, 0x12}}}, @arpreply={'arpreply\x00', 0x10, {{@random="7de3e5d45b12", 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, 0xfffffffffffffffc}}}}, {0x11, 0x0, 0x88fb, 'nicvf0\x00', 'wg2\x00', 'veth1_to_bridge\x00', 'veth0_to_bridge\x00', @random="8d42962cf335", [0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@remote, 0x10}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x9, 0xb, 0x10, 'wg2\x00', 'macvlan0\x00', 'gre0\x00', 'veth1_vlan\x00', @multicast, [0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x9, 0x50, 0x6000, 'pimreg1\x00', 'sit0\x00', 'sit0\x00', 'geneve0\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0xee, 0x126, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x2}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x4, 0x2}}}], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x9537e0bb52334408, 0x21, 0xf6, 'hsr0\x00', 'team_slave_0\x00', 'virt_wifi0\x00', 'erspan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0xde, 0xde, 0x116, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'bond0\x00', {}, 'vlan1\x00', {0xff}, 0x4, 0xa}}}], [], @snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}}]}]}, 0x846) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2634.222282] CPU: 0 PID: 18875 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2634.230202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2634.239657] Call Trace: [ 2634.242258] dump_stack+0x1fc/0x2ef [ 2634.245897] should_fail.cold+0xa/0xf [ 2634.249710] ? setup_fault_attr+0x200/0x200 [ 2634.254038] ? lock_acquire+0x170/0x3c0 [ 2634.258022] __should_failslab+0x115/0x180 [ 2634.262277] should_failslab+0x5/0x10 [ 2634.266080] kmem_cache_alloc+0x277/0x370 [ 2634.270234] ? mempool_alloc+0x350/0x350 [ 2634.274308] mempool_init_node+0x2d0/0x6c0 [ 2634.278564] ? mempool_alloc+0x350/0x350 [ 2634.282638] ? mempool_free+0x370/0x370 [ 2634.286615] mempool_init+0x38/0x50 [ 2634.290249] bioset_init+0x532/0x810 [ 2634.293979] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2634.298750] blk_alloc_queue_node+0x189/0xbf0 [ 2634.303261] blk_mq_init_queue+0x44/0xa0 [ 2634.307330] loop_add+0x2cb/0x8a0 [ 2634.310792] loop_control_ioctl+0x16c/0x480 [ 2634.315125] ? loop_lookup+0x1d0/0x1d0 [ 2634.319018] ? ksys_write+0x241/0x2a0 [ 2634.322870] ? loop_lookup+0x1d0/0x1d0 [ 2634.326765] do_vfs_ioctl+0xcdb/0x12e0 [ 2634.330648] ? lock_downgrade+0x720/0x720 [ 2634.334780] ? check_preemption_disabled+0x41/0x280 [ 2634.339869] ? ioctl_preallocate+0x200/0x200 [ 2634.344348] ? __fget+0x356/0x510 [ 2634.347782] ? do_dup2+0x450/0x450 [ 2634.351300] ? vfs_write+0x393/0x540 [ 2634.354996] ? fput+0x2b/0x190 [ 2634.358185] ksys_ioctl+0x9b/0xc0 [ 2634.361643] __x64_sys_ioctl+0x6f/0xb0 [ 2634.365540] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2634.370190] do_syscall_64+0xf9/0x620 [ 2634.373981] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2634.379151] RIP: 0033:0x7fc956aba5a9 [ 2634.382853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2634.401858] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2634.409582] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 02:11:20 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 18) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:20 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x5, 0x7ce, [0x20000240, 0x0, 0x0, 0x2000069c, 0x20000772], 0x0, &(0x7f0000000000), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x2, 0x8808, 'ip6tnl0\x00', 'ip6gretap0\x00', 'veth0_to_batadv\x00', 'pim6reg1\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0xff, 0x0, 0x0, 0xff], 0x2de, 0x34e, 0x386, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0xc, [{0x7fff, 0x8, 0x3f, 0x8}, {0xffc1, 0x1f, 0x7c, 0xc5}, {0x5, 0x20, 0x9}, {0x3, 0x3, 0x80, 0x36}, {0x3, 0x4, 0x42, 0x8}, {0x8, 0x1, 0x6, 0x1}, {0x101, 0x3, 0x40, 0x3}, {0x1, 0x3e, 0x4, 0xff}, {0x1000, 0x40, 0x40, 0x1}, {0x7, 0x7f, 0x7f, 0x9}, {0x9, 0xf9, 0x4, 0xff}, {0x6cf8, 0x3, 0x0, 0x1aab}, {0x2, 0x54, 0x54, 0xfffffc01}, {0x7, 0xfd, 0x0, 0x200}, {0x9, 0x0, 0x6a, 0x1}, {0x3, 0x3, 0x3, 0xb204}, {0x7, 0xff, 0x4, 0x1}, {0x100, 0x1, 0x7}, {0x8, 0x3f, 0x4, 0x1}, {0x3c, 0x81, 0x20, 0xfff}, {0x1, 0x0, 0x5, 0x1}, {0x101, 0xff, 0x4, 0x4}, {0x800, 0xb1, 0x4, 0x1b}, {0x5, 0xe1, 0x4, 0x4}, {0x1, 0x0, 0x5, 0x8000}, {0x7ff, 0x5, 0x0, 0x5}, {0x7, 0x1, 0xab, 0x5}, {0xadc, 0x3, 0xae, 0x75}, {0x3, 0xfa, 0x4, 0x7}, {0xbcd, 0x4, 0x0, 0x4}, {0x2, 0xc4, 0x81, 0x2}, {0x6, 0xa9, 0x6, 0x8001}, {0x7fff, 0x4, 0xfc, 0x6}, {0x4, 0xd9, 0x80, 0xfff}, {0x4, 0xc1, 0xdc, 0x9}, {0x3, 0x8, 0x50, 0xffffffff}, {0x2, 0x2, 0x5, 0x8}, {0x7fff, 0x0, 0x81, 0xffffffff}, {0x2, 0x4, 0x1, 0x8}, {0x80, 0x8, 0x9, 0x5}, {0xff01, 0x51, 0xb4, 0x7}, {0x5, 0x8, 0x0, 0x1}, {0xffff, 0x4, 0x1f, 0x6}, {0x7, 0x80, 0x4, 0xfffffffa}, {0xdb7, 0x4, 0x7, 0x1}, {0x2, 0x1, 0x80, 0xffffff81}, {0x401, 0xff, 0xf7, 0x5}, {0x2, 0x9, 0x5, 0x1}, {0x0, 0x80, 0x3, 0x3}, {0x3, 0x20, 0x4, 0x4}, {0x4, 0x0, 0x1, 0x7}, {0x8, 0x5, 0x1, 0x7}, {0x1f, 0xfe, 0x9, 0x200}, {0x7f, 0x3, 0x80, 0xb2c9}, {0xfd, 0xab, 0x48, 0x7}, {0x4, 0x0, 0x80, 0xffffffff}, {0x400, 0x0, 0x2a, 0x40}, {0x4, 0xd2, 0x1, 0x5}, {0x2, 0x20, 0x2, 0x6}, {0xffff, 0x7f, 0x40}, {0x8, 0x7a, 0x1, 0xa66}, {0x8001, 0x4, 0x42, 0xcd}, {0x8000, 0xc9, 0x2, 0x3ff}, {0xa1e1, 0xb7, 0x9, 0xfffffff7}], {0x40}}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@multicast}}}], [@snat={'snat\x00', 0x10, {{@empty, 0x12}}}, @arpreply={'arpreply\x00', 0x10, {{@random="7de3e5d45b12", 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, 0xfffffffffffffffc}}}}, {0x11, 0x0, 0x88fb, 'nicvf0\x00', 'wg2\x00', 'veth1_to_bridge\x00', 'veth0_to_bridge\x00', @random="8d42962cf335", [0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@remote, 0x10}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x9, 0xb, 0x10, 'wg2\x00', 'macvlan0\x00', 'gre0\x00', 'veth1_vlan\x00', @multicast, [0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x9, 0x50, 0x6000, 'pimreg1\x00', 'sit0\x00', 'sit0\x00', 'geneve0\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0xee, 0x126, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x2}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x4, 0x2}}}], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x9537e0bb52334408, 0x21, 0xf6, 'hsr0\x00', 'team_slave_0\x00', 'virt_wifi0\x00', 'erspan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0xde, 0xde, 0x116, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'bond0\x00', {}, 'vlan1\x00', {0xff}, 0x4, 0xa}}}], [], @snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}}]}]}, 0x846) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x5, 0x7ce, [0x20000240, 0x0, 0x0, 0x2000069c, 0x20000772], 0x0, &(0x7f0000000000), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x2, 0x8808, 'ip6tnl0\x00', 'ip6gretap0\x00', 'veth0_to_batadv\x00', 'pim6reg1\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0xff, 0x0, 0x0, 0xff], 0x2de, 0x34e, 0x386, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0xc, [{0x7fff, 0x8, 0x3f, 0x8}, {0xffc1, 0x1f, 0x7c, 0xc5}, {0x5, 0x20, 0x9}, {0x3, 0x3, 0x80, 0x36}, {0x3, 0x4, 0x42, 0x8}, {0x8, 0x1, 0x6, 0x1}, {0x101, 0x3, 0x40, 0x3}, {0x1, 0x3e, 0x4, 0xff}, {0x1000, 0x40, 0x40, 0x1}, {0x7, 0x7f, 0x7f, 0x9}, {0x9, 0xf9, 0x4, 0xff}, {0x6cf8, 0x3, 0x0, 0x1aab}, {0x2, 0x54, 0x54, 0xfffffc01}, {0x7, 0xfd, 0x0, 0x200}, {0x9, 0x0, 0x6a, 0x1}, {0x3, 0x3, 0x3, 0xb204}, {0x7, 0xff, 0x4, 0x1}, {0x100, 0x1, 0x7}, {0x8, 0x3f, 0x4, 0x1}, {0x3c, 0x81, 0x20, 0xfff}, {0x1, 0x0, 0x5, 0x1}, {0x101, 0xff, 0x4, 0x4}, {0x800, 0xb1, 0x4, 0x1b}, {0x5, 0xe1, 0x4, 0x4}, {0x1, 0x0, 0x5, 0x8000}, {0x7ff, 0x5, 0x0, 0x5}, {0x7, 0x1, 0xab, 0x5}, {0xadc, 0x3, 0xae, 0x75}, {0x3, 0xfa, 0x4, 0x7}, {0xbcd, 0x4, 0x0, 0x4}, {0x2, 0xc4, 0x81, 0x2}, {0x6, 0xa9, 0x6, 0x8001}, {0x7fff, 0x4, 0xfc, 0x6}, {0x4, 0xd9, 0x80, 0xfff}, {0x4, 0xc1, 0xdc, 0x9}, {0x3, 0x8, 0x50, 0xffffffff}, {0x2, 0x2, 0x5, 0x8}, {0x7fff, 0x0, 0x81, 0xffffffff}, {0x2, 0x4, 0x1, 0x8}, {0x80, 0x8, 0x9, 0x5}, {0xff01, 0x51, 0xb4, 0x7}, {0x5, 0x8, 0x0, 0x1}, {0xffff, 0x4, 0x1f, 0x6}, {0x7, 0x80, 0x4, 0xfffffffa}, {0xdb7, 0x4, 0x7, 0x1}, {0x2, 0x1, 0x80, 0xffffff81}, {0x401, 0xff, 0xf7, 0x5}, {0x2, 0x9, 0x5, 0x1}, {0x0, 0x80, 0x3, 0x3}, {0x3, 0x20, 0x4, 0x4}, {0x4, 0x0, 0x1, 0x7}, {0x8, 0x5, 0x1, 0x7}, {0x1f, 0xfe, 0x9, 0x200}, {0x7f, 0x3, 0x80, 0xb2c9}, {0xfd, 0xab, 0x48, 0x7}, {0x4, 0x0, 0x80, 0xffffffff}, {0x400, 0x0, 0x2a, 0x40}, {0x4, 0xd2, 0x1, 0x5}, {0x2, 0x20, 0x2, 0x6}, {0xffff, 0x7f, 0x40}, {0x8, 0x7a, 0x1, 0xa66}, {0x8001, 0x4, 0x42, 0xcd}, {0x8000, 0xc9, 0x2, 0x3ff}, {0xa1e1, 0xb7, 0x9, 0xfffffff7}], {0x40}}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@multicast}}}], [@snat={'snat\x00', 0x10, {{@empty, 0x12}}}, @arpreply={'arpreply\x00', 0x10, {{@random="7de3e5d45b12", 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, 0xfffffffffffffffc}}}}, {0x11, 0x0, 0x88fb, 'nicvf0\x00', 'wg2\x00', 'veth1_to_bridge\x00', 'veth0_to_bridge\x00', @random="8d42962cf335", [0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@remote, 0x10}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x9, 0xb, 0x10, 'wg2\x00', 'macvlan0\x00', 'gre0\x00', 'veth1_vlan\x00', @multicast, [0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x9, 0x50, 0x6000, 'pimreg1\x00', 'sit0\x00', 'sit0\x00', 'geneve0\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0xee, 0x126, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x2}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x4, 0x2}}}], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x9537e0bb52334408, 0x21, 0xf6, 'hsr0\x00', 'team_slave_0\x00', 'virt_wifi0\x00', 'erspan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0xde, 0xde, 0x116, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'bond0\x00', {}, 'vlan1\x00', {0xff}, 0x4, 0xa}}}], [], @snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}}]}]}, 0x846) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) 02:11:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xf0ff7f00000000) 02:11:20 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{r1, r2+60000000}, {0x77359400}}, 0x0) 02:11:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24004044}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x26, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2110000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x2004c050) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) [ 2634.416843] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2634.424092] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2634.431341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2634.438676] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x7, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24004044}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x26, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2110000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x2004c050) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) [ 2634.504056] FAULT_INJECTION: forcing a failure. [ 2634.504056] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.519133] CPU: 0 PID: 18906 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2634.527037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2634.536407] Call Trace: [ 2634.539006] dump_stack+0x1fc/0x2ef [ 2634.542647] should_fail.cold+0xa/0xf [ 2634.546463] ? setup_fault_attr+0x200/0x200 02:11:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xf0ffffff7f0000) 02:11:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xffffff7f00000000) 02:11:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24004044}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x26, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2110000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x2004c050) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) [ 2634.550793] ? lock_acquire+0x170/0x3c0 [ 2634.554866] __should_failslab+0x115/0x180 [ 2634.559109] should_failslab+0x5/0x10 [ 2634.562927] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2634.568137] bdi_alloc_node+0x5c/0xd0 [ 2634.571956] blk_alloc_queue_node+0x1af/0xbf0 [ 2634.576465] blk_mq_init_queue+0x44/0xa0 [ 2634.580555] loop_add+0x2cb/0x8a0 [ 2634.584029] loop_control_ioctl+0x16c/0x480 [ 2634.588465] ? loop_lookup+0x1d0/0x1d0 [ 2634.592449] ? ksys_write+0x241/0x2a0 [ 2634.596252] ? loop_lookup+0x1d0/0x1d0 [ 2634.600144] do_vfs_ioctl+0xcdb/0x12e0 02:11:21 executing program 5: r0 = socket$inet6(0xa, 0xa, 0x9) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2634.604039] ? lock_downgrade+0x720/0x720 [ 2634.608283] ? check_preemption_disabled+0x41/0x280 [ 2634.613307] ? ioctl_preallocate+0x200/0x200 [ 2634.617835] ? __fget+0x356/0x510 [ 2634.621303] ? do_dup2+0x450/0x450 [ 2634.624954] ? vfs_write+0x393/0x540 [ 2634.628682] ? fput+0x2b/0x190 [ 2634.631887] ksys_ioctl+0x9b/0xc0 [ 2634.635351] __x64_sys_ioctl+0x6f/0xb0 [ 2634.639246] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2634.643831] do_syscall_64+0xf9/0x620 [ 2634.647641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2634.652828] RIP: 0033:0x7fc956aba5a9 [ 2634.656549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2634.675456] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2634.683176] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2634.690538] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2634.697812] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 02:11:21 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 19) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:21 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x5, 0x7ce, [0x20000240, 0x0, 0x0, 0x2000069c, 0x20000772], 0x0, &(0x7f0000000000), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x2, 0x8808, 'ip6tnl0\x00', 'ip6gretap0\x00', 'veth0_to_batadv\x00', 'pim6reg1\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0xff, 0x0, 0x0, 0xff], 0x2de, 0x34e, 0x386, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0xc, [{0x7fff, 0x8, 0x3f, 0x8}, {0xffc1, 0x1f, 0x7c, 0xc5}, {0x5, 0x20, 0x9}, {0x3, 0x3, 0x80, 0x36}, {0x3, 0x4, 0x42, 0x8}, {0x8, 0x1, 0x6, 0x1}, {0x101, 0x3, 0x40, 0x3}, {0x1, 0x3e, 0x4, 0xff}, {0x1000, 0x40, 0x40, 0x1}, {0x7, 0x7f, 0x7f, 0x9}, {0x9, 0xf9, 0x4, 0xff}, {0x6cf8, 0x3, 0x0, 0x1aab}, {0x2, 0x54, 0x54, 0xfffffc01}, {0x7, 0xfd, 0x0, 0x200}, {0x9, 0x0, 0x6a, 0x1}, {0x3, 0x3, 0x3, 0xb204}, {0x7, 0xff, 0x4, 0x1}, {0x100, 0x1, 0x7}, {0x8, 0x3f, 0x4, 0x1}, {0x3c, 0x81, 0x20, 0xfff}, {0x1, 0x0, 0x5, 0x1}, {0x101, 0xff, 0x4, 0x4}, {0x800, 0xb1, 0x4, 0x1b}, {0x5, 0xe1, 0x4, 0x4}, {0x1, 0x0, 0x5, 0x8000}, {0x7ff, 0x5, 0x0, 0x5}, {0x7, 0x1, 0xab, 0x5}, {0xadc, 0x3, 0xae, 0x75}, {0x3, 0xfa, 0x4, 0x7}, {0xbcd, 0x4, 0x0, 0x4}, {0x2, 0xc4, 0x81, 0x2}, {0x6, 0xa9, 0x6, 0x8001}, {0x7fff, 0x4, 0xfc, 0x6}, {0x4, 0xd9, 0x80, 0xfff}, {0x4, 0xc1, 0xdc, 0x9}, {0x3, 0x8, 0x50, 0xffffffff}, {0x2, 0x2, 0x5, 0x8}, {0x7fff, 0x0, 0x81, 0xffffffff}, {0x2, 0x4, 0x1, 0x8}, {0x80, 0x8, 0x9, 0x5}, {0xff01, 0x51, 0xb4, 0x7}, {0x5, 0x8, 0x0, 0x1}, {0xffff, 0x4, 0x1f, 0x6}, {0x7, 0x80, 0x4, 0xfffffffa}, {0xdb7, 0x4, 0x7, 0x1}, {0x2, 0x1, 0x80, 0xffffff81}, {0x401, 0xff, 0xf7, 0x5}, {0x2, 0x9, 0x5, 0x1}, {0x0, 0x80, 0x3, 0x3}, {0x3, 0x20, 0x4, 0x4}, {0x4, 0x0, 0x1, 0x7}, {0x8, 0x5, 0x1, 0x7}, {0x1f, 0xfe, 0x9, 0x200}, {0x7f, 0x3, 0x80, 0xb2c9}, {0xfd, 0xab, 0x48, 0x7}, {0x4, 0x0, 0x80, 0xffffffff}, {0x400, 0x0, 0x2a, 0x40}, {0x4, 0xd2, 0x1, 0x5}, {0x2, 0x20, 0x2, 0x6}, {0xffff, 0x7f, 0x40}, {0x8, 0x7a, 0x1, 0xa66}, {0x8001, 0x4, 0x42, 0xcd}, {0x8000, 0xc9, 0x2, 0x3ff}, {0xa1e1, 0xb7, 0x9, 0xfffffff7}], {0x40}}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@multicast}}}], [@snat={'snat\x00', 0x10, {{@empty, 0x12}}}, @arpreply={'arpreply\x00', 0x10, {{@random="7de3e5d45b12", 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, 0xfffffffffffffffc}}}}, {0x11, 0x0, 0x88fb, 'nicvf0\x00', 'wg2\x00', 'veth1_to_bridge\x00', 'veth0_to_bridge\x00', @random="8d42962cf335", [0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@remote, 0x10}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x9, 0xb, 0x10, 'wg2\x00', 'macvlan0\x00', 'gre0\x00', 'veth1_vlan\x00', @multicast, [0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x9, 0x50, 0x6000, 'pimreg1\x00', 'sit0\x00', 'sit0\x00', 'geneve0\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0xee, 0x126, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x2}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x4, 0x2}}}], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x9537e0bb52334408, 0x21, 0xf6, 'hsr0\x00', 'team_slave_0\x00', 'virt_wifi0\x00', 'erspan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0xde, 0xde, 0x116, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'bond0\x00', {}, 'vlan1\x00', {0xff}, 0x4, 0xa}}}], [], @snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}}]}]}, 0x846) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (rerun: 32) 02:11:21 executing program 5: r0 = socket$inet6(0xa, 0xa, 0x9) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:21 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{r1, r2+60000000}, {0x77359400}}, 0x0) timerfd_create(0x8, 0x0) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{r1, r2+60000000}, {0x77359400}}, 0x0) (async) [ 2634.705105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2634.712482] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0xb, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:21 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000080)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:21 executing program 5: r0 = socket$inet6(0xa, 0xa, 0x9) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:21 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x710, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x30}}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r1, r0, 0x4, r0}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) pipe2(&(0x7f0000000140), 0x53754c8b5e83056f) [ 2634.818285] FAULT_INJECTION: forcing a failure. [ 2634.818285] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.853672] CPU: 0 PID: 18949 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 02:11:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100"/14], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x64, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x800}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0xd000}, 0x44000) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000240)="240dad1469544b38eafd1009d8669a8ab58b0a86e0056ffa222b450dbe5f9cd4766c17769373c2d28fa94a8a733e2ddd6d7c240e8ceca1d6225d59a89bd578eb8f1b5e142da1db1821c72d923fd4d3840923e233c4fece68d746d76eec2276f33820a1671541df6f054734135009beedd8a01f07828ea94efa7c8cb5e76f944eea831dd2200b5732e8847a81719deaf7c13d219bc63ec038b789b210ee563c", 0x9f, 0x2000c080, &(0x7f0000000180)={0x2, 0x0, @empty, 0x1}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x74, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1f}]}, 0x74}, 0x1, 0x0, 0x0, 0xc8c4}, 0x40) [ 2634.861584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2634.871116] Call Trace: [ 2634.873714] dump_stack+0x1fc/0x2ef [ 2634.877357] should_fail.cold+0xa/0xf [ 2634.881174] ? setup_fault_attr+0x200/0x200 [ 2634.885599] ? lock_acquire+0x170/0x3c0 [ 2634.889587] __should_failslab+0x115/0x180 [ 2634.893837] should_failslab+0x5/0x10 [ 2634.897649] kmem_cache_alloc_trace+0x284/0x380 [ 2634.902330] wb_congested_get_create+0x180/0x3a0 [ 2634.907101] wb_init+0x4a7/0x770 [ 2634.910473] ? __raw_spin_lock_init+0x28/0x100 [ 2634.915061] bdi_init+0x29c/0x410 02:11:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100"/14], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x64, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x800}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0xd000}, 0x44000) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000240)="240dad1469544b38eafd1009d8669a8ab58b0a86e0056ffa222b450dbe5f9cd4766c17769373c2d28fa94a8a733e2ddd6d7c240e8ceca1d6225d59a89bd578eb8f1b5e142da1db1821c72d923fd4d3840923e233c4fece68d746d76eec2276f33820a1671541df6f054734135009beedd8a01f07828ea94efa7c8cb5e76f944eea831dd2200b5732e8847a81719deaf7c13d219bc63ec038b789b210ee563c", 0x9f, 0x2000c080, &(0x7f0000000180)={0x2, 0x0, @empty, 0x1}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x74, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1f}]}, 0x74}, 0x1, 0x0, 0x0, 0xc8c4}, 0x40) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100"/14], 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x64, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x800}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0xd000}, 0x44000) (async) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000240)="240dad1469544b38eafd1009d8669a8ab58b0a86e0056ffa222b450dbe5f9cd4766c17769373c2d28fa94a8a733e2ddd6d7c240e8ceca1d6225d59a89bd578eb8f1b5e142da1db1821c72d923fd4d3840923e233c4fece68d746d76eec2276f33820a1671541df6f054734135009beedd8a01f07828ea94efa7c8cb5e76f944eea831dd2200b5732e8847a81719deaf7c13d219bc63ec038b789b210ee563c", 0x9f, 0x2000c080, &(0x7f0000000180)={0x2, 0x0, @empty, 0x1}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x74, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1f}]}, 0x74}, 0x1, 0x0, 0x0, 0xc8c4}, 0x40) (async) [ 2634.918625] bdi_alloc_node+0x76/0xd0 [ 2634.922473] blk_alloc_queue_node+0x1af/0xbf0 [ 2634.926982] blk_mq_init_queue+0x44/0xa0 [ 2634.931056] loop_add+0x2cb/0x8a0 [ 2634.934523] loop_control_ioctl+0x16c/0x480 [ 2634.938853] ? loop_lookup+0x1d0/0x1d0 [ 2634.942754] ? ksys_write+0x241/0x2a0 [ 2634.946567] ? loop_lookup+0x1d0/0x1d0 [ 2634.950467] do_vfs_ioctl+0xcdb/0x12e0 [ 2634.954361] ? lock_downgrade+0x720/0x720 [ 2634.958519] ? check_preemption_disabled+0x41/0x280 [ 2634.963540] ? ioctl_preallocate+0x200/0x200 02:11:21 executing program 5: socket$inet6(0xa, 0x2, 0x0) [ 2634.967958] ? __fget+0x356/0x510 [ 2634.971419] ? do_dup2+0x450/0x450 [ 2634.975137] ? vfs_write+0x393/0x540 [ 2634.978864] ? fput+0x2b/0x190 [ 2634.982077] ksys_ioctl+0x9b/0xc0 [ 2634.985707] __x64_sys_ioctl+0x6f/0xb0 [ 2634.989692] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2634.994279] do_syscall_64+0xf9/0x620 [ 2634.998095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2635.003294] RIP: 0033:0x7fc956aba5a9 [ 2635.007010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2635.026108] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2635.034075] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2635.041333] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2635.048593] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2635.055850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:11:21 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 20) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:21 executing program 5: socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) 02:11:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100"/14], 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x64, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x800}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0xd000}, 0x44000) (async) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000240)="240dad1469544b38eafd1009d8669a8ab58b0a86e0056ffa222b450dbe5f9cd4766c17769373c2d28fa94a8a733e2ddd6d7c240e8ceca1d6225d59a89bd578eb8f1b5e142da1db1821c72d923fd4d3840923e233c4fece68d746d76eec2276f33820a1671541df6f054734135009beedd8a01f07828ea94efa7c8cb5e76f944eea831dd2200b5732e8847a81719deaf7c13d219bc63ec038b789b210ee563c", 0x9f, 0x2000c080, &(0x7f0000000180)={0x2, 0x0, @empty, 0x1}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x74, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1f}]}, 0x74}, 0x1, 0x0, 0x0, 0xc8c4}, 0x40) 02:11:21 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x710, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x30}}, 0x80) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r1, r0, 0x4, r0}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) pipe2(&(0x7f0000000140), 0x53754c8b5e83056f) 02:11:21 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000080)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x10, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2635.063380] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 [ 2635.124522] FAULT_INJECTION: forcing a failure. [ 2635.124522] name failslab, interval 1, probability 0, space 0, times 0 [ 2635.154884] CPU: 1 PID: 18990 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2635.162789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2635.172139] Call Trace: [ 2635.175045] dump_stack+0x1fc/0x2ef [ 2635.178666] should_fail.cold+0xa/0xf [ 2635.182471] ? setup_fault_attr+0x200/0x200 [ 2635.186864] ? lock_acquire+0x170/0x3c0 [ 2635.190943] __should_failslab+0x115/0x180 [ 2635.195175] should_failslab+0x5/0x10 [ 2635.198956] kmem_cache_alloc_trace+0x284/0x380 [ 2635.203609] blk_alloc_queue_stats+0x3c/0x100 [ 2635.208087] blk_alloc_queue_node+0x1eb/0xbf0 [ 2635.212569] blk_mq_init_queue+0x44/0xa0 [ 2635.216614] loop_add+0x2cb/0x8a0 [ 2635.220049] loop_control_ioctl+0x16c/0x480 [ 2635.224353] ? loop_lookup+0x1d0/0x1d0 [ 2635.228230] ? ksys_write+0x241/0x2a0 [ 2635.232013] ? loop_lookup+0x1d0/0x1d0 [ 2635.235880] do_vfs_ioctl+0xcdb/0x12e0 [ 2635.239753] ? lock_downgrade+0x720/0x720 [ 2635.243883] ? check_preemption_disabled+0x41/0x280 [ 2635.248884] ? ioctl_preallocate+0x200/0x200 [ 2635.253279] ? __fget+0x356/0x510 [ 2635.256712] ? do_dup2+0x450/0x450 [ 2635.260230] ? vfs_write+0x393/0x540 [ 2635.263928] ? fput+0x2b/0x190 [ 2635.267103] ksys_ioctl+0x9b/0xc0 [ 2635.270541] __x64_sys_ioctl+0x6f/0xb0 [ 2635.274499] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2635.279238] do_syscall_64+0xf9/0x620 [ 2635.283032] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2635.288210] RIP: 0033:0x7fc956aba5a9 [ 2635.291919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2635.310828] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 02:11:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x11, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:21 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x710, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x30}}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r1, r0, 0x4, r0}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) (async) pipe2(&(0x7f0000000140), 0x53754c8b5e83056f) 02:11:21 executing program 5: socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) 02:11:21 executing program 3: ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x0, 0x56, 0xffffff4b, 0xf529, 0x2, 0x2, 0x5, 0x3, 0x0, 0x1ff, 0xffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x28, 0x1}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x8001) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1ff, 0x1d, 0x7, 0x9}, {0x1, 0x6, 0x3f, 0x9df}, {0xa9b0, 0x7, 0x1, 0x80}, {0x2, 0x4, 0x0, 0x5}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000080000000000000000f2660085000000360000009500000000000000dd081800040000001853000000000000000000000000000018400000050000000000000000000000184600000700000000000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0xd, &(0x7f0000000340)=""/13, 0x41100, 0xa, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x2, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x4, 0x5, 0x2a, 0x820, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r2, r3}, 0xc) 02:11:21 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000080)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:21 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 21) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) [ 2635.318523] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2635.325773] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2635.333023] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2635.340370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2635.347637] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:21 executing program 3: ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x0, 0x56, 0xffffff4b, 0xf529, 0x2, 0x2, 0x5, 0x3, 0x0, 0x1ff, 0xffffffff}) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x28, 0x1}, 0x14) (async) r0 = socket$inet6(0xa, 0x2, 0x8001) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0x4) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1ff, 0x1d, 0x7, 0x9}, {0x1, 0x6, 0x3f, 0x9df}, {0xa9b0, 0x7, 0x1, 0x80}, {0x2, 0x4, 0x0, 0x5}]}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000080000000000000000f2660085000000360000009500000000000000dd081800040000001853000000000000000000000000000018400000050000000000000000000000184600000700000000000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0xd, &(0x7f0000000340)=""/13, 0x41100, 0xa, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x2, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x4, 0x5, 0x2a, 0x820, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r2, r3}, 0xc) 02:11:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x12, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r2, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES8=r1, @ANYRES16=r3, @ANYRES16=r3, @ANYRESHEX=r2, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004c41}, 0x1) 02:11:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) [ 2635.419208] FAULT_INJECTION: forcing a failure. [ 2635.419208] name failslab, interval 1, probability 0, space 0, times 0 [ 2635.448632] CPU: 0 PID: 19015 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2635.456539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2635.465894] Call Trace: 02:11:21 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x1, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 02:11:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async, rerun: 32) r1 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) getpeername$l2tp(r1, 0x0, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r2, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$l2tp(r3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES8=r1, @ANYRES16=r3, @ANYRES16=r3, @ANYRESHEX=r2, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async, rerun: 32) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004c41}, 0x1) (rerun: 32) 02:11:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2635.468579] dump_stack+0x1fc/0x2ef [ 2635.472224] should_fail.cold+0xa/0xf [ 2635.476036] ? setup_fault_attr+0x200/0x200 [ 2635.480369] ? lock_acquire+0x170/0x3c0 [ 2635.484353] __should_failslab+0x115/0x180 [ 2635.488598] should_failslab+0x5/0x10 [ 2635.492405] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2635.497518] blkg_alloc+0x92/0x630 [ 2635.501076] blkcg_init_queue+0x24/0x540 [ 2635.505163] blk_alloc_queue_node+0x7d0/0xbf0 [ 2635.509679] blk_mq_init_queue+0x44/0xa0 [ 2635.513754] loop_add+0x2cb/0x8a0 02:11:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x14, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2635.517219] loop_control_ioctl+0x16c/0x480 [ 2635.521548] ? loop_lookup+0x1d0/0x1d0 [ 2635.525451] ? ksys_write+0x241/0x2a0 [ 2635.529259] ? loop_lookup+0x1d0/0x1d0 [ 2635.533170] do_vfs_ioctl+0xcdb/0x12e0 [ 2635.537066] ? lock_downgrade+0x720/0x720 [ 2635.541221] ? check_preemption_disabled+0x41/0x280 [ 2635.546244] ? ioctl_preallocate+0x200/0x200 [ 2635.550659] ? __fget+0x356/0x510 [ 2635.554117] ? do_dup2+0x450/0x450 [ 2635.557660] ? vfs_write+0x393/0x540 [ 2635.561380] ? fput+0x2b/0x190 [ 2635.564580] ksys_ioctl+0x9b/0xc0 02:11:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 02:11:21 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x1, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 2635.568047] __x64_sys_ioctl+0x6f/0xb0 [ 2635.571939] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2635.576556] do_syscall_64+0xf9/0x620 [ 2635.580377] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2635.585608] RIP: 0033:0x7fc956aba5a9 [ 2635.589333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2635.608586] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 02:11:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x15, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2635.616390] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2635.623667] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2635.631127] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2635.638410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2635.645696] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:22 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 22) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:22 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000140)={0x1, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 02:11:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x16, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) (async) 02:11:22 executing program 3: ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x0, 0x56, 0xffffff4b, 0xf529, 0x2, 0x2, 0x5, 0x3, 0x0, 0x1ff, 0xffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x28, 0x1}, 0x14) r0 = socket$inet6(0xa, 0x2, 0x8001) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1ff, 0x1d, 0x7, 0x9}, {0x1, 0x6, 0x3f, 0x9df}, {0xa9b0, 0x7, 0x1, 0x80}, {0x2, 0x4, 0x0, 0x5}]}) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000080000000000000000f2660085000000360000009500000000000000dd081800040000001853000000000000000000000000000018400000050000000000000000000000184600000700000000000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0xd, &(0x7f0000000340)=""/13, 0x41100, 0xa, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x2, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x4, 0x5, 0x2a, 0x820, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r2, r3}, 0xc) 02:11:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r2, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES8=r1, @ANYRES16=r3, @ANYRES16=r3, @ANYRESHEX=r2, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004c41}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$l2tp(r1, 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$l2tp(r2, 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$l2tp(r3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES8=r1, @ANYRES16=r3, @ANYRES16=r3, @ANYRESHEX=r2, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004c41}, 0x1) (async) 02:11:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2635.726525] FAULT_INJECTION: forcing a failure. [ 2635.726525] name failslab, interval 1, probability 0, space 0, times 0 [ 2635.751164] CPU: 1 PID: 19059 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2635.759102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2635.768498] Call Trace: [ 2635.771095] dump_stack+0x1fc/0x2ef [ 2635.774737] should_fail.cold+0xa/0xf [ 2635.778553] ? setup_fault_attr+0x200/0x200 [ 2635.782888] ? lock_acquire+0x170/0x3c0 [ 2635.786877] __should_failslab+0x115/0x180 [ 2635.791121] should_failslab+0x5/0x10 [ 2635.794929] kmem_cache_alloc_trace+0x284/0x380 [ 2635.799686] blk_iolatency_init+0x47/0x2d0 [ 2635.804020] blkcg_init_queue+0x1c1/0x540 [ 2635.808181] blk_alloc_queue_node+0x7d0/0xbf0 [ 2635.812695] blk_mq_init_queue+0x44/0xa0 [ 2635.816764] loop_add+0x2cb/0x8a0 [ 2635.820235] loop_control_ioctl+0x16c/0x480 [ 2635.824563] ? loop_lookup+0x1d0/0x1d0 [ 2635.828551] ? ksys_write+0x241/0x2a0 [ 2635.832359] ? loop_lookup+0x1d0/0x1d0 [ 2635.836256] do_vfs_ioctl+0xcdb/0x12e0 [ 2635.840155] ? lock_downgrade+0x720/0x720 [ 2635.844308] ? check_preemption_disabled+0x41/0x280 [ 2635.849335] ? ioctl_preallocate+0x200/0x200 [ 2635.853750] ? __fget+0x356/0x510 [ 2635.857218] ? do_dup2+0x450/0x450 [ 2635.860760] ? vfs_write+0x393/0x540 [ 2635.864481] ? fput+0x2b/0x190 [ 2635.867683] ksys_ioctl+0x9b/0xc0 [ 2635.871139] __x64_sys_ioctl+0x6f/0xb0 02:11:22 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:22 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:22 executing program 3: socket$inet6(0xa, 0x800, 0x0) r0 = getpid() sched_rr_get_interval(r0, &(0x7f00000000c0)) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)) 02:11:22 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:22 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) r0 = socket(0x0, 0x1, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0xc}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {}, @broadcast}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 2635.875026] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2635.879702] do_syscall_64+0xf9/0x620 [ 2635.883604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2635.888879] RIP: 0033:0x7fc956aba5a9 [ 2635.892594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2635.911690] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2635.919626] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 02:11:22 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 23) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x210, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x71, 0xfa, "499d220075918f131acdd76cdea76970f284e4396ce52a3c23b18539f0c6d03103e91404c373553dfb895a8b36387d5aed6734c9f5388336b54f5b5f4f71a70d29fea3135e426165eadd86542f8cd8d4931f4fc5853c8de895834894bb0b0ae364a0fb81ea5dab3703abbd166b"}], @NL80211_ATTR_IE={0x3a, 0x2a, [@dsss={0x3, 0x1, 0x9d}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x5, @device_a, 0x7ff, @broadcast, 0x7, 0x80000000, @device_a, 0x8}}, @dsss={0x3, 0x1, 0x7c}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x1, 0x9, 0x40}}]}, @NL80211_ATTR_IE={0x149, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0x9, 0xfb}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x2c, 0x6}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x1, 0xb1, 0x48}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2, @device_b, 0xffffffff, "", 0xff, 0x1000, @broadcast, 0x1e}}, @random={0x57, 0xc, "58c006537ecb43eda20bcd91"}, @gcr_ga={0xbd, 0x6, @broadcast}, @tim={0x5, 0xca, {0x1, 0x18, 0x81, "1223c5b3ae60b62fe5a032688df9868265e27129afb986c8be1404041d0b77784b10bc6cefff1c63aaf456e522b537466ba579c241e0a478b53b572c50fd8c5a597cc12e6b2d42ed0bbe4cdbc03e33ef67baacdea4328b771875e8f49f641fbfc6ef68a46b26d1ad405a1b6d7800cbba7ae7ebfcac9ffc1c3d86efe01b19b7d66bbad34ab808eb404e20e31f68bf17fec8ba766a18a6635b0e816843abd2b0fc23d980dd5fe908ca4d32f7e775db314d99b3d2f6e879cb91d2fc5659b7eea962b4920b004d3922"}}, @supported_rates={0x1, 0x1, [{0xb, 0x1}]}, @prep={0x83, 0x25, @ext={{}, 0xff, 0x3, @broadcast, 0x2, @device_b, 0x20200000, 0x9, @broadcast, 0x2}}, @dsss={0x3, 0x1, 0x40}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x8050}, 0x20000015) r4 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r4, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:22 executing program 3: socket$inet6(0xa, 0x800, 0x0) (async) r0 = getpid() sched_rr_get_interval(r0, &(0x7f00000000c0)) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)) 02:11:22 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) r0 = socket(0x0, 0x1, 0x6) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0xc}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {}, @broadcast}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 02:11:22 executing program 2: r0 = timerfd_create(0x8, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000000c0)=0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4080) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{r3, r4+10000000}}, 0x0) 02:11:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x18, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2635.926889] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2635.934150] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2635.941410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2635.948666] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:22 executing program 2: r0 = timerfd_create(0x8, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000000c0)=0x8) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async, rerun: 32) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4080) (rerun: 32) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{r3, r4+10000000}}, 0x0) 02:11:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x19, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2636.030188] FAULT_INJECTION: forcing a failure. [ 2636.030188] name failslab, interval 1, probability 0, space 0, times 0 [ 2636.056474] CPU: 1 PID: 19109 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2636.064484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2636.073852] Call Trace: [ 2636.076452] dump_stack+0x1fc/0x2ef 02:11:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x210, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x71, 0xfa, "499d220075918f131acdd76cdea76970f284e4396ce52a3c23b18539f0c6d03103e91404c373553dfb895a8b36387d5aed6734c9f5388336b54f5b5f4f71a70d29fea3135e426165eadd86542f8cd8d4931f4fc5853c8de895834894bb0b0ae364a0fb81ea5dab3703abbd166b"}], @NL80211_ATTR_IE={0x3a, 0x2a, [@dsss={0x3, 0x1, 0x9d}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x5, @device_a, 0x7ff, @broadcast, 0x7, 0x80000000, @device_a, 0x8}}, @dsss={0x3, 0x1, 0x7c}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x1, 0x9, 0x40}}]}, @NL80211_ATTR_IE={0x149, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0x9, 0xfb}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x2c, 0x6}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x1, 0xb1, 0x48}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2, @device_b, 0xffffffff, "", 0xff, 0x1000, @broadcast, 0x1e}}, @random={0x57, 0xc, "58c006537ecb43eda20bcd91"}, @gcr_ga={0xbd, 0x6, @broadcast}, @tim={0x5, 0xca, {0x1, 0x18, 0x81, "1223c5b3ae60b62fe5a032688df9868265e27129afb986c8be1404041d0b77784b10bc6cefff1c63aaf456e522b537466ba579c241e0a478b53b572c50fd8c5a597cc12e6b2d42ed0bbe4cdbc03e33ef67baacdea4328b771875e8f49f641fbfc6ef68a46b26d1ad405a1b6d7800cbba7ae7ebfcac9ffc1c3d86efe01b19b7d66bbad34ab808eb404e20e31f68bf17fec8ba766a18a6635b0e816843abd2b0fc23d980dd5fe908ca4d32f7e775db314d99b3d2f6e879cb91d2fc5659b7eea962b4920b004d3922"}}, @supported_rates={0x1, 0x1, [{0xb, 0x1}]}, @prep={0x83, 0x25, @ext={{}, 0xff, 0x3, @broadcast, 0x2, @device_b, 0x20200000, 0x9, @broadcast, 0x2}}, @dsss={0x3, 0x1, 0x40}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x8050}, 0x20000015) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r4, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2636.080094] should_fail.cold+0xa/0xf [ 2636.083908] ? setup_fault_attr+0x200/0x200 [ 2636.088258] ? lock_acquire+0x170/0x3c0 [ 2636.092242] __should_failslab+0x115/0x180 [ 2636.096485] should_failslab+0x5/0x10 [ 2636.100291] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2636.105406] ? iolatency_pd_init+0x6f0/0x6f0 [ 2636.109824] iolatency_pd_alloc+0x6e/0x120 [ 2636.114069] blkcg_activate_policy+0x120/0x5d0 [ 2636.118660] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2636.123690] blk_iolatency_init+0x123/0x2d0 02:11:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1b, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:22 executing program 2: r0 = timerfd_create(0x8, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000000c0)=0x8) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async, rerun: 32) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4080) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{r3, r4+10000000}}, 0x0) [ 2636.128018] blkcg_init_queue+0x1c1/0x540 [ 2636.132186] blk_alloc_queue_node+0x7d0/0xbf0 [ 2636.136710] blk_mq_init_queue+0x44/0xa0 [ 2636.140787] loop_add+0x2cb/0x8a0 [ 2636.144342] loop_control_ioctl+0x16c/0x480 [ 2636.148676] ? loop_lookup+0x1d0/0x1d0 [ 2636.152574] ? ksys_write+0x241/0x2a0 [ 2636.156383] ? loop_lookup+0x1d0/0x1d0 [ 2636.160369] do_vfs_ioctl+0xcdb/0x12e0 [ 2636.164264] ? lock_downgrade+0x720/0x720 [ 2636.168422] ? check_preemption_disabled+0x41/0x280 [ 2636.173452] ? ioctl_preallocate+0x200/0x200 [ 2636.177874] ? __fget+0x356/0x510 [ 2636.181335] ? do_dup2+0x450/0x450 [ 2636.184887] ? vfs_write+0x393/0x540 [ 2636.188643] ? fput+0x2b/0x190 [ 2636.191870] ksys_ioctl+0x9b/0xc0 [ 2636.195329] __x64_sys_ioctl+0x6f/0xb0 [ 2636.199206] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2636.203891] do_syscall_64+0xf9/0x620 [ 2636.207692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2636.212966] RIP: 0033:0x7fc956aba5a9 [ 2636.216669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2636.235569] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2636.243278] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2636.250536] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2636.257790] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2636.265045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2636.272396] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:22 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 24) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1c, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x210, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x71, 0xfa, "499d220075918f131acdd76cdea76970f284e4396ce52a3c23b18539f0c6d03103e91404c373553dfb895a8b36387d5aed6734c9f5388336b54f5b5f4f71a70d29fea3135e426165eadd86542f8cd8d4931f4fc5853c8de895834894bb0b0ae364a0fb81ea5dab3703abbd166b"}], @NL80211_ATTR_IE={0x3a, 0x2a, [@dsss={0x3, 0x1, 0x9d}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x5, @device_a, 0x7ff, @broadcast, 0x7, 0x80000000, @device_a, 0x8}}, @dsss={0x3, 0x1, 0x7c}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x1, 0x9, 0x40}}]}, @NL80211_ATTR_IE={0x149, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0x9, 0xfb}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x2c, 0x6}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x1, 0xb1, 0x48}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2, @device_b, 0xffffffff, "", 0xff, 0x1000, @broadcast, 0x1e}}, @random={0x57, 0xc, "58c006537ecb43eda20bcd91"}, @gcr_ga={0xbd, 0x6, @broadcast}, @tim={0x5, 0xca, {0x1, 0x18, 0x81, "1223c5b3ae60b62fe5a032688df9868265e27129afb986c8be1404041d0b77784b10bc6cefff1c63aaf456e522b537466ba579c241e0a478b53b572c50fd8c5a597cc12e6b2d42ed0bbe4cdbc03e33ef67baacdea4328b771875e8f49f641fbfc6ef68a46b26d1ad405a1b6d7800cbba7ae7ebfcac9ffc1c3d86efe01b19b7d66bbad34ab808eb404e20e31f68bf17fec8ba766a18a6635b0e816843abd2b0fc23d980dd5fe908ca4d32f7e775db314d99b3d2f6e879cb91d2fc5659b7eea962b4920b004d3922"}}, @supported_rates={0x1, 0x1, [{0xb, 0x1}]}, @prep={0x83, 0x25, @ext={{}, 0xff, 0x3, @broadcast, 0x2, @device_b, 0x20200000, 0x9, @broadcast, 0x2}}, @dsss={0x3, 0x1, 0x40}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x8050}, 0x20000015) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r4, 0x0, 0x0) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:22 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) r0 = socket(0x0, 0x1, 0x6) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0xc}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {}, @broadcast}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 02:11:22 executing program 3: socket$inet6(0xa, 0x800, 0x0) (async) r0 = getpid() sched_rr_get_interval(r0, &(0x7f00000000c0)) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)) 02:11:22 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x21, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:22 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2636.363028] FAULT_INJECTION: forcing a failure. [ 2636.363028] name failslab, interval 1, probability 0, space 0, times 0 [ 2636.374652] CPU: 1 PID: 19152 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2636.382727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2636.392083] Call Trace: [ 2636.394686] dump_stack+0x1fc/0x2ef [ 2636.398326] should_fail.cold+0xa/0xf [ 2636.402137] ? setup_fault_attr+0x200/0x200 [ 2636.406473] ? rcu_read_lock_sched_held+0x16c/0x1d0 02:11:22 executing program 2: r0 = timerfd_create(0x8, 0x0) (async) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:22 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x3) [ 2636.411501] __should_failslab+0x115/0x180 [ 2636.415831] should_failslab+0x5/0x10 [ 2636.419642] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 2636.424669] iolatency_pd_alloc+0x6e/0x120 [ 2636.428940] ? iolatency_pd_init+0x6f0/0x6f0 [ 2636.433373] blkcg_activate_policy+0x249/0x5d0 [ 2636.438060] blk_iolatency_init+0x123/0x2d0 [ 2636.442392] blkcg_init_queue+0x1c1/0x540 [ 2636.446547] blk_alloc_queue_node+0x7d0/0xbf0 [ 2636.451053] blk_mq_init_queue+0x44/0xa0 [ 2636.455122] loop_add+0x2cb/0x8a0 [ 2636.458581] loop_control_ioctl+0x16c/0x480 02:11:22 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x3) timerfd_create(0x8, 0x0) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x3) (async) 02:11:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) [ 2636.462908] ? loop_lookup+0x1d0/0x1d0 [ 2636.466807] ? ksys_write+0x241/0x2a0 [ 2636.470613] ? loop_lookup+0x1d0/0x1d0 [ 2636.474510] do_vfs_ioctl+0xcdb/0x12e0 [ 2636.478411] ? lock_downgrade+0x720/0x720 [ 2636.482569] ? check_preemption_disabled+0x41/0x280 [ 2636.487595] ? ioctl_preallocate+0x200/0x200 [ 2636.492015] ? __fget+0x356/0x510 [ 2636.495479] ? do_dup2+0x450/0x450 [ 2636.499024] ? vfs_write+0x393/0x540 [ 2636.502749] ? fput+0x2b/0x190 [ 2636.505962] ksys_ioctl+0x9b/0xc0 [ 2636.509424] __x64_sys_ioctl+0x6f/0xb0 [ 2636.513323] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2636.517998] do_syscall_64+0xf9/0x620 [ 2636.521809] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2636.526994] RIP: 0033:0x7fc956aba5a9 [ 2636.530724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2636.549614] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 02:11:23 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 25) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) (rerun: 64) 02:11:23 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x0, 0x3}, 0x2, 0x8}) 02:11:23 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async, rerun: 32) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x3) (rerun: 32) 02:11:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) [ 2636.557305] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2636.564557] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2636.571809] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2636.579103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2636.586389] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x23, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 02:11:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) 02:11:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 02:11:23 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) r2 = mmap$binder(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1, 0x11, 0xffffffffffffffff, 0xf911) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000002400)={0xf0, 0x0, &(0x7f0000002200)=[@decrefs={0x40046307, 0x1}, @decrefs={0x40046307, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/4096, 0x1000, 0x2, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f00000011c0)=""/4096, 0x1000, 0x0, 0x7}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}, 0x400}, @request_death, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x1, 0x0, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/18, 0x12, 0x1, 0x1}}, &(0x7f00000021c0)={0x0, 0x18, 0x38}}}, @clear_death, @free_buffer={0x40086303, r2}, @increfs_done={0x40106308, 0x3}, @increfs={0x40046304, 0x3}], 0xe4, 0x0, &(0x7f0000002300)="fa61e97bb3c964767acfbe66262db122fd432df2d53c8f069df21b05acb1e76f150318d9d4eda1343e4a6e5f7b6318cb38a57e903c10bee390226153e1e9b77b1e2a9c7b66832cf0da42f4ea9cd743fe8884549852866adb46c60066cd17f4a7ac7b9020e961c34a01223adb0506e89c05fb7f5d045c0f41c6ce41cfc8847db4693ae385ac633640a6044d01788c4253095eb44b67682e42c5490e47f68d64bfab4248690d33ecb28fc9e9e07ddace2746eabc1ce8154115927957085b84e94f73a61b5d49832826d275fe3e71aeafd1b0819086997a9ac750bcf1b90623fc16f2bc244c"}) 02:11:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x24, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2636.742885] FAULT_INJECTION: forcing a failure. [ 2636.742885] name failslab, interval 1, probability 0, space 0, times 0 [ 2636.766235] CPU: 1 PID: 19205 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2636.774202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2636.783561] Call Trace: [ 2636.786273] dump_stack+0x1fc/0x2ef [ 2636.789926] should_fail.cold+0xa/0xf [ 2636.793753] ? setup_fault_attr+0x200/0x200 [ 2636.798087] ? lock_acquire+0x170/0x3c0 [ 2636.802080] __should_failslab+0x115/0x180 [ 2636.806334] should_failslab+0x5/0x10 [ 2636.810152] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2636.815358] blk_throtl_init+0x7c/0x620 [ 2636.819336] ? blk_iolatency_init+0x1b7/0x2d0 [ 2636.823822] blkcg_init_queue+0x1e3/0x540 [ 2636.827988] blk_alloc_queue_node+0x7d0/0xbf0 [ 2636.832481] blk_mq_init_queue+0x44/0xa0 [ 2636.836524] loop_add+0x2cb/0x8a0 [ 2636.839963] loop_control_ioctl+0x16c/0x480 [ 2636.844274] ? loop_lookup+0x1d0/0x1d0 [ 2636.848159] ? ksys_write+0x241/0x2a0 [ 2636.851949] ? loop_lookup+0x1d0/0x1d0 [ 2636.855827] do_vfs_ioctl+0xcdb/0x12e0 [ 2636.859710] ? lock_downgrade+0x720/0x720 [ 2636.863846] ? check_preemption_disabled+0x41/0x280 [ 2636.868851] ? ioctl_preallocate+0x200/0x200 [ 2636.873254] ? __fget+0x356/0x510 [ 2636.876708] ? do_dup2+0x450/0x450 [ 2636.880253] ? vfs_write+0x393/0x540 [ 2636.883948] ? fput+0x2b/0x190 [ 2636.887169] ksys_ioctl+0x9b/0xc0 [ 2636.890741] __x64_sys_ioctl+0x6f/0xb0 [ 2636.894623] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2636.899196] do_syscall_64+0xf9/0x620 [ 2636.902987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2636.908165] RIP: 0033:0x7fc956aba5a9 [ 2636.911980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2636.931057] RSP: 002b:00007fc95500c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 02:11:23 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 26) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:23 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x0, 0x3}, 0x2, 0x8}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x0, 0x3}, 0x2, 0x8}) (async) 02:11:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x60cb11f9c9e8a80, 0xcc, 0x81, 0x8, 0x3, 0x2, 0x0, 0x5, 0x80000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x3b}, 0x0, 0x5, 0x5, 0x0, 0x5, 0x7ffffffe, 0x3b4, 0x0, 0x1000, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x2, 0x40, 0x4, 0x0, 0x200, 0x400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x4, 0x6}, 0x2108, 0x6, 0x4, 0x7, 0xfffffffffffffff7, 0x8, 0x20, 0x0, 0x10000, 0x0, 0xd7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3e, 0x9, 0x2, 0x8, 0x0, 0x8000000000000001, 0x95220, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x80, 0x3, 0x3, 0x6, 0xfffffffffffffff8, 0x10001, 0x100, 0x0, 0x80000000, 0x0, 0x5}, 0x0, 0x4, r1, 0x9) 02:11:23 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) (async) r2 = mmap$binder(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1, 0x11, 0xffffffffffffffff, 0xf911) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000002400)={0xf0, 0x0, &(0x7f0000002200)=[@decrefs={0x40046307, 0x1}, @decrefs={0x40046307, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/4096, 0x1000, 0x2, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f00000011c0)=""/4096, 0x1000, 0x0, 0x7}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}, 0x400}, @request_death, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x1, 0x0, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/18, 0x12, 0x1, 0x1}}, &(0x7f00000021c0)={0x0, 0x18, 0x38}}}, @clear_death, @free_buffer={0x40086303, r2}, @increfs_done={0x40106308, 0x3}, @increfs={0x40046304, 0x3}], 0xe4, 0x0, &(0x7f0000002300)="fa61e97bb3c964767acfbe66262db122fd432df2d53c8f069df21b05acb1e76f150318d9d4eda1343e4a6e5f7b6318cb38a57e903c10bee390226153e1e9b77b1e2a9c7b66832cf0da42f4ea9cd743fe8884549852866adb46c60066cd17f4a7ac7b9020e961c34a01223adb0506e89c05fb7f5d045c0f41c6ce41cfc8847db4693ae385ac633640a6044d01788c4253095eb44b67682e42c5490e47f68d64bfab4248690d33ecb28fc9e9e07ddace2746eabc1ce8154115927957085b84e94f73a61b5d49832826d275fe3e71aeafd1b0819086997a9ac750bcf1b90623fc16f2bc244c"}) 02:11:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2a, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x1f, r0, &(0x7f0000000000)="77d531d99aa691ca24fe386747555c261449a72fbc6c9b3ad87e0b0f03130380bb79a4d3175ce3c628b6bc656d2bbace00389787039e1198a6bd02b4089dca5d9a9a3d250a2fc9d05f49930eb13c5046e49c952789d0d1c11ce6b9100489d729d7b82cc5", 0x64, 0x2, 0x0, 0x2, r1}, &(0x7f0000000100)) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2636.938772] RAX: ffffffffffffffda RBX: 00007fc956bdb050 RCX: 00007fc956aba5a9 [ 2636.946035] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2636.953296] RBP: 00007fc95500c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2636.960561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2636.967919] R13: 00007ffe9b642c8f R14: 00007fc95500c300 R15: 0000000000022000 02:11:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2b, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x60cb11f9c9e8a80, 0xcc, 0x81, 0x8, 0x3, 0x2, 0x0, 0x5, 0x80000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x3b}, 0x0, 0x5, 0x5, 0x0, 0x5, 0x7ffffffe, 0x3b4, 0x0, 0x1000, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (rerun: 64) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x2, 0x40, 0x4, 0x0, 0x200, 0x400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x4, 0x6}, 0x2108, 0x6, 0x4, 0x7, 0xfffffffffffffff7, 0x8, 0x20, 0x0, 0x10000, 0x0, 0xd7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3e, 0x9, 0x2, 0x8, 0x0, 0x8000000000000001, 0x95220, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x80, 0x3, 0x3, 0x6, 0xfffffffffffffff8, 0x10001, 0x100, 0x0, 0x80000000, 0x0, 0x5}, 0x0, 0x4, r1, 0x9) 02:11:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x1f, r0, &(0x7f0000000000)="77d531d99aa691ca24fe386747555c261449a72fbc6c9b3ad87e0b0f03130380bb79a4d3175ce3c628b6bc656d2bbace00389787039e1198a6bd02b4089dca5d9a9a3d250a2fc9d05f49930eb13c5046e49c952789d0d1c11ce6b9100489d729d7b82cc5", 0x64, 0x2, 0x0, 0x2, r1}, &(0x7f0000000100)) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:23 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x0, 0x3}, 0x2, 0x8}) 02:11:23 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) (async) r2 = mmap$binder(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1, 0x11, 0xffffffffffffffff, 0xf911) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000002400)={0xf0, 0x0, &(0x7f0000002200)=[@decrefs={0x40046307, 0x1}, @decrefs={0x40046307, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/4096, 0x1000, 0x2, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f00000011c0)=""/4096, 0x1000, 0x0, 0x7}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}, 0x400}, @request_death, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x1, 0x0, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/18, 0x12, 0x1, 0x1}}, &(0x7f00000021c0)={0x0, 0x18, 0x38}}}, @clear_death, @free_buffer={0x40086303, r2}, @increfs_done={0x40106308, 0x3}, @increfs={0x40046304, 0x3}], 0xe4, 0x0, &(0x7f0000002300)="fa61e97bb3c964767acfbe66262db122fd432df2d53c8f069df21b05acb1e76f150318d9d4eda1343e4a6e5f7b6318cb38a57e903c10bee390226153e1e9b77b1e2a9c7b66832cf0da42f4ea9cd743fe8884549852866adb46c60066cd17f4a7ac7b9020e961c34a01223adb0506e89c05fb7f5d045c0f41c6ce41cfc8847db4693ae385ac633640a6044d01788c4253095eb44b67682e42c5490e47f68d64bfab4248690d33ecb28fc9e9e07ddace2746eabc1ce8154115927957085b84e94f73a61b5d49832826d275fe3e71aeafd1b0819086997a9ac750bcf1b90623fc16f2bc244c"}) [ 2637.052583] FAULT_INJECTION: forcing a failure. [ 2637.052583] name failslab, interval 1, probability 0, space 0, times 0 02:11:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2c, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2637.094203] CPU: 1 PID: 19226 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2637.102218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2637.111666] Call Trace: [ 2637.114274] dump_stack+0x1fc/0x2ef [ 2637.117933] should_fail.cold+0xa/0xf [ 2637.121753] ? setup_fault_attr+0x200/0x200 [ 2637.126087] ? lock_acquire+0x170/0x3c0 [ 2637.130091] __should_failslab+0x115/0x180 [ 2637.134354] should_failslab+0x5/0x10 [ 2637.138165] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2637.143275] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 2637.147688] throtl_pd_alloc+0x6b/0x940 [ 2637.151667] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 2637.156087] blkcg_activate_policy+0x120/0x5d0 [ 2637.160699] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2637.165726] ? init_timer_key+0x88/0x350 [ 2637.169812] blk_throtl_init+0x40d/0x620 [ 2637.173889] ? blk_iolatency_init+0x1b7/0x2d0 [ 2637.178402] blkcg_init_queue+0x1e3/0x540 [ 2637.182567] blk_alloc_queue_node+0x7d0/0xbf0 [ 2637.187092] blk_mq_init_queue+0x44/0xa0 [ 2637.191167] loop_add+0x2cb/0x8a0 [ 2637.194641] loop_control_ioctl+0x16c/0x480 [ 2637.198980] ? loop_lookup+0x1d0/0x1d0 [ 2637.202891] ? ksys_write+0x241/0x2a0 [ 2637.206692] ? loop_lookup+0x1d0/0x1d0 [ 2637.210565] do_vfs_ioctl+0xcdb/0x12e0 [ 2637.214440] ? lock_downgrade+0x720/0x720 [ 2637.218588] ? check_preemption_disabled+0x41/0x280 [ 2637.223763] ? ioctl_preallocate+0x200/0x200 [ 2637.228346] ? __fget+0x356/0x510 [ 2637.231783] ? do_dup2+0x450/0x450 [ 2637.235400] ? vfs_write+0x393/0x540 [ 2637.239106] ? fput+0x2b/0x190 [ 2637.242290] ksys_ioctl+0x9b/0xc0 [ 2637.245738] __x64_sys_ioctl+0x6f/0xb0 [ 2637.249611] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2637.254182] do_syscall_64+0xf9/0x620 [ 2637.257972] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2637.263152] RIP: 0033:0x7fc956aba5a9 [ 2637.266861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2637.285794] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 02:11:23 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 27) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:23 executing program 2: r0 = timerfd_create(0x8, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done], 0x9a, 0x0, &(0x7f00000000c0)="184f63a665de27b10d36b9684e6c410cb0ee26f45891544f54e388739b7c4f3ddd4ed23ca7ad50592fda0f33e360d7a9af0fae647080a76f30b636ca8df0aad1e67549b9a0c2d3539c951165bf96b8eb91fe856e691de07fe2d3ef12e97348c090c26117ce9a2dbe4686b37bb66171b0dabe0e798e4a9902f2214c366e1190f306b5b419059cced2b5aab90463ba697aff23ec0350ab8ff2ac4c"}) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {r2, r3+60000000}}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) 02:11:23 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002780)={&(0x7f0000002800)={0x2738, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@fils_params, @NL80211_ATTR_IE={0xe0, 0x2a, [@perr={0x84, 0x9c, {0x5, 0xa, [@ext={{}, @broadcast, 0x5, @broadcast, 0x29}, @not_ext={{}, @device_a, 0x8c, "", 0xc}, @not_ext={{}, @broadcast, 0x3, "", 0xb}, @not_ext={{}, @broadcast, 0x1, "", 0x2c}, @ext={{}, @device_b, 0x8, @broadcast, 0x25}, @not_ext={{}, @device_a, 0x9, "", 0x1b}, @ext={{}, @device_a, 0x0, @broadcast, 0x17}, @not_ext={{}, @device_b, 0x8000000, "", 0x29}, @ext={{}, @device_a, 0x1, @device_b, 0x29}, @not_ext={{}, @device_b, 0x101, "", 0x28}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1d, 0xa5, 0x42}}, @mic={0x8c, 0x10, {0xcde, "e4c2fef4d05d", @short="fccd96c91bf19fdb"}}, @ssid={0x0, 0x16, @random="45ddd60203b92ac1cb77367ad554fc7c4a6bc474a1af"}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x40, 0x20}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xea, 0xfc, "878080122e6dc4ef0bcbbdde2545cfe2d01bf1c2afe6a99720bfa1ad09d3c375d78fbd871d07c27382e2ee4997fe807f67d12066e55d784529121845ad2c719f76466c22ac89e650a0874ec2de2af0345c2807d467d57e16f86778b97917b3d3c68ff6e4ef883cca25d23ac274161e47d0d4b5fa47b81c2f2ffef6fac28f205d6238b7db51df419ec5a8f4f7362519481d203df07e91b1c1e2b05490a8713313f045e220e42ec9c96f55a6bff16081e07d44da75babc3d0950bf5095a4fd272896f3dbfc63583b8a7cb8e7b5bbeafe3ff813f2014428c07865533601312d9645bcc1e2600465"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8000}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x101}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "797c08dc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf6a}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "3e179ee798f46bbe5edca3069c60a0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "7d7f988257813663449ba5baba"}], @NL80211_ATTR_IE={0x153, 0x2a, [@gcr_ga={0xbd, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x0, 0x2}}, @cf={0x4, 0x6, {0xff, 0x80, 0x4, 0x9}}, @ht={0x2d, 0x1a, {0x0, 0x3, 0x1, 0x0, {0x4b90, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0xb6a1, 0xff}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @random_vendor={0xdd, 0xfc, "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"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x40, 0x40}}, @ibss={0x6, 0x2, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_chsw={0x76, 0x6, {0x9, 0x9, 0x41, 0x7ff}}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x14}, 0xf7, 0x7, @device_b, 0x4, 0x5eda, 0x7}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x99, 0xfa, "5b1d7c7ca571b23ab1e34158349217afa0298e5080b8fef787bec5af91c1269bbd599c0b1242114ceaf2198a2d6d4299fa871e69ee4172c2ced43ec5643952a330a1a9f00c65538f668f3adb70077ec6c75702365f5484fcc4c3d2fa0f9f7b058c2b5acaca8e31de579630d1df50b0b939500817c82f1b0f3970fee2f5a0e783011165236661c30d43d902e2aa4ab58fe6efc599d6"}, @NL80211_ATTR_FILS_ERP_RRK={0x5e, 0xfc, "56f798f53f8b91e040b9bfc924c111a1fff28c47be041988cf7946b0941202c72132634d2e66592bb9f598c3e9be10fdd106a225c9e1172700907a2668271ee65caabdc4328b21eec1303dda9149179e15e498b5cc4fbd0c43fa"}, @NL80211_ATTR_FILS_ERP_REALM={0x1b, 0xfa, "6237d61eed8cb6f479f78ba5e56a801ed74925151111d8"}, @NL80211_ATTR_FILS_ERP_RRK={0xdf, 0xfc, "e52f3949d29cb96ea6891bd231429015f84b9e98181b5dedaaa5037c045cde6ebd1e99e3327395bca9a31ace0cb82286413166ccbf3dd38dbfa8e2372fdbd94a28ac41679a1d90132f801fa51b23ad2c0afd69d325374e88ede4d0d781aaffa8ef05f4ab133df7a1a44ae12de9ad495791b448adf68133a195fdb20c1819244cabbea943c4257642f730d29985505340431acf5f2d426aac1ca4f99058bb3235a50978d23f40c836100deda97bc4e26f2ab14fa56a952a6dd23fa4e9b2070fd57f82b3f48bebc550c151e824a08ab0f6bc284a156d2d96d3c02b1e"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x47, 0xfa, "51f957adf2a4892cd34be09170e5af61adc634f1a20e675636e52f86c98603625566c24b6934b333121763c9f1d82f718e215e157a7afda8617dc5cdafc5b2b64ab6c4"}], @NL80211_ATTR_IE={0x10c6, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x74, 0x6}}, @dsss={0x3, 0x1, 0xb}, @measure_req={0x26, 0x1003, {0x2, 0x9, 0x9, "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"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x20, 0x7, 0x9}}, @random_vendor={0xdd, 0x93, "4092fe8181bfb5d018de1cbe53b37572f0e98207822eac6184d61a3e24dba8212a3542f907fb19a6edd3a7af0e13bbfd848dca6c90fb9bc53061c34c02f3a29d637427d0d3d7e448694ae6cefb12aecf86447169ea58fcc07d1049285c1912cbe2a3c9c906eab0917bdfa89f8ddafe69bda04b06595b6a52111cdb61d119beebdac0f2fe8969d7db4814e8f7cff422992b0fdd"}, @mic={0x8c, 0x18, {0x757, "2242ee9d35d0", @long="2dc30177e46d2b4d04d8c6fa9d18447d"}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@tim={0x5, 0x5d, {0x80, 0x47, 0x3b, "7ccc4dbde2169734281a03dcde037b8c15f5adc517537434c823e1641c41649f7d27b7d23784152aa5aaeb6ce067ebf8f3a5be5d79e5c6b960fb8b182bb5bf8b2f216b6165b09e447d2f59016a6fec4a6b9ccc6a635bf5c5d59c"}}, @challenge={0x10, 0x1, 0xb2}, @random={0x5}, @peer_mgmt={0x75, 0x18, {0x0, 0x3, @val=0x6, @val=0x33, @val="9a9c89da98bd9a575744967285772bc4"}}]}]}, 0x2738}}, 0x20000000) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1412}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x79}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x4000910) 02:11:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x60cb11f9c9e8a80, 0xcc, 0x81, 0x8, 0x3, 0x2, 0x0, 0x5, 0x80000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x3b}, 0x0, 0x5, 0x5, 0x0, 0x5, 0x7ffffffe, 0x3b4, 0x0, 0x1000, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async, rerun: 64) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x2, 0x40, 0x4, 0x0, 0x200, 0x400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x4, 0x6}, 0x2108, 0x6, 0x4, 0x7, 0xfffffffffffffff7, 0x8, 0x20, 0x0, 0x10000, 0x0, 0xd7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3e, 0x9, 0x2, 0x8, 0x0, 0x8000000000000001, 0x95220, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x80, 0x3, 0x3, 0x6, 0xfffffffffffffff8, 0x10001, 0x100, 0x0, 0x80000000, 0x0, 0x5}, 0x0, 0x4, r1, 0x9) 02:11:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x1f, r0, &(0x7f0000000000)="77d531d99aa691ca24fe386747555c261449a72fbc6c9b3ad87e0b0f03130380bb79a4d3175ce3c628b6bc656d2bbace00389787039e1198a6bd02b4089dca5d9a9a3d250a2fc9d05f49930eb13c5046e49c952789d0d1c11ce6b9100489d729d7b82cc5", 0x64, 0x2, 0x0, 0x2, r1}, &(0x7f0000000100)) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000080), 0x84080) (async) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x1f, r0, &(0x7f0000000000)="77d531d99aa691ca24fe386747555c261449a72fbc6c9b3ad87e0b0f03130380bb79a4d3175ce3c628b6bc656d2bbace00389787039e1198a6bd02b4089dca5d9a9a3d250a2fc9d05f49930eb13c5046e49c952789d0d1c11ce6b9100489d729d7b82cc5", 0x64, 0x2, 0x0, 0x2, r1}, &(0x7f0000000100)) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) 02:11:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2d, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2637.293488] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2637.300858] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2637.308111] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2637.315360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2637.322619] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 [ 2637.398071] FAULT_INJECTION: forcing a failure. [ 2637.398071] name failslab, interval 1, probability 0, space 0, times 0 [ 2637.409479] CPU: 0 PID: 19254 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2637.417370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2637.426727] Call Trace: [ 2637.429329] dump_stack+0x1fc/0x2ef [ 2637.432977] should_fail.cold+0xa/0xf [ 2637.436790] ? setup_fault_attr+0x200/0x200 [ 2637.441116] ? lock_acquire+0x170/0x3c0 02:11:23 executing program 3: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x840) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x57, &(0x7f00000001c0)={0x0, 0x1e}, 0x1, 0x0, 0x0, 0xc007}, 0x24000040) 02:11:23 executing program 3: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x840) socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x57, &(0x7f00000001c0)={0x0, 0x1e}, 0x1, 0x0, 0x0, 0xc007}, 0x24000040) 02:11:23 executing program 3: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x840) (async) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x57, &(0x7f00000001c0)={0x0, 0x1e}, 0x1, 0x0, 0x0, 0xc007}, 0x24000040) [ 2637.445115] ? check_preemption_disabled+0x41/0x280 [ 2637.450150] __should_failslab+0x115/0x180 [ 2637.454400] should_failslab+0x5/0x10 [ 2637.458212] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 2637.463241] throtl_pd_alloc+0x6b/0x940 [ 2637.467219] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 2637.471983] blkcg_activate_policy+0x249/0x5d0 [ 2637.476587] blk_throtl_init+0x40d/0x620 [ 2637.480745] ? blk_iolatency_init+0x1b7/0x2d0 [ 2637.485259] blkcg_init_queue+0x1e3/0x540 [ 2637.489428] blk_alloc_queue_node+0x7d0/0xbf0 [ 2637.493929] blk_mq_init_queue+0x44/0xa0 02:11:23 executing program 3: socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24000091) [ 2637.497996] loop_add+0x2cb/0x8a0 [ 2637.501464] loop_control_ioctl+0x16c/0x480 [ 2637.505794] ? loop_lookup+0x1d0/0x1d0 [ 2637.509776] ? ksys_write+0x241/0x2a0 [ 2637.513579] ? loop_lookup+0x1d0/0x1d0 [ 2637.517473] do_vfs_ioctl+0xcdb/0x12e0 [ 2637.521367] ? lock_downgrade+0x720/0x720 [ 2637.525519] ? check_preemption_disabled+0x41/0x280 [ 2637.530548] ? ioctl_preallocate+0x200/0x200 [ 2637.534977] ? __fget+0x356/0x510 [ 2637.538444] ? do_dup2+0x450/0x450 [ 2637.541985] ? vfs_write+0x393/0x540 [ 2637.545700] ? fput+0x2b/0x190 02:11:23 executing program 3: socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24000091) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24000091) (async) 02:11:23 executing program 3: socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24000091) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24000091) (async) [ 2637.548907] ksys_ioctl+0x9b/0xc0 [ 2637.552367] __x64_sys_ioctl+0x6f/0xb0 [ 2637.556259] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2637.560846] do_syscall_64+0xf9/0x620 [ 2637.564664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2637.569953] RIP: 0033:0x7fc956aba5a9 [ 2637.573672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2637.592575] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2637.600309] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2637.607579] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2637.614861] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2637.622126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2637.629393] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:24 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 28) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:24 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 02:11:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2e, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:24 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002780)={&(0x7f0000002800)={0x2738, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@fils_params, @NL80211_ATTR_IE={0xe0, 0x2a, [@perr={0x84, 0x9c, {0x5, 0xa, [@ext={{}, @broadcast, 0x5, @broadcast, 0x29}, @not_ext={{}, @device_a, 0x8c, "", 0xc}, @not_ext={{}, @broadcast, 0x3, "", 0xb}, @not_ext={{}, @broadcast, 0x1, "", 0x2c}, @ext={{}, @device_b, 0x8, @broadcast, 0x25}, @not_ext={{}, @device_a, 0x9, "", 0x1b}, @ext={{}, @device_a, 0x0, @broadcast, 0x17}, @not_ext={{}, @device_b, 0x8000000, "", 0x29}, @ext={{}, @device_a, 0x1, @device_b, 0x29}, @not_ext={{}, @device_b, 0x101, "", 0x28}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1d, 0xa5, 0x42}}, @mic={0x8c, 0x10, {0xcde, "e4c2fef4d05d", @short="fccd96c91bf19fdb"}}, @ssid={0x0, 0x16, @random="45ddd60203b92ac1cb77367ad554fc7c4a6bc474a1af"}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x40, 0x20}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xea, 0xfc, "878080122e6dc4ef0bcbbdde2545cfe2d01bf1c2afe6a99720bfa1ad09d3c375d78fbd871d07c27382e2ee4997fe807f67d12066e55d784529121845ad2c719f76466c22ac89e650a0874ec2de2af0345c2807d467d57e16f86778b97917b3d3c68ff6e4ef883cca25d23ac274161e47d0d4b5fa47b81c2f2ffef6fac28f205d6238b7db51df419ec5a8f4f7362519481d203df07e91b1c1e2b05490a8713313f045e220e42ec9c96f55a6bff16081e07d44da75babc3d0950bf5095a4fd272896f3dbfc63583b8a7cb8e7b5bbeafe3ff813f2014428c07865533601312d9645bcc1e2600465"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8000}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x101}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "797c08dc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf6a}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "3e179ee798f46bbe5edca3069c60a0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "7d7f988257813663449ba5baba"}], @NL80211_ATTR_IE={0x153, 0x2a, [@gcr_ga={0xbd, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x0, 0x2}}, @cf={0x4, 0x6, {0xff, 0x80, 0x4, 0x9}}, @ht={0x2d, 0x1a, {0x0, 0x3, 0x1, 0x0, {0x4b90, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0xb6a1, 0xff}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @random_vendor={0xdd, 0xfc, "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"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x40, 0x40}}, @ibss={0x6, 0x2, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_chsw={0x76, 0x6, {0x9, 0x9, 0x41, 0x7ff}}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x14}, 0xf7, 0x7, @device_b, 0x4, 0x5eda, 0x7}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x99, 0xfa, "5b1d7c7ca571b23ab1e34158349217afa0298e5080b8fef787bec5af91c1269bbd599c0b1242114ceaf2198a2d6d4299fa871e69ee4172c2ced43ec5643952a330a1a9f00c65538f668f3adb70077ec6c75702365f5484fcc4c3d2fa0f9f7b058c2b5acaca8e31de579630d1df50b0b939500817c82f1b0f3970fee2f5a0e783011165236661c30d43d902e2aa4ab58fe6efc599d6"}, @NL80211_ATTR_FILS_ERP_RRK={0x5e, 0xfc, "56f798f53f8b91e040b9bfc924c111a1fff28c47be041988cf7946b0941202c72132634d2e66592bb9f598c3e9be10fdd106a225c9e1172700907a2668271ee65caabdc4328b21eec1303dda9149179e15e498b5cc4fbd0c43fa"}, @NL80211_ATTR_FILS_ERP_REALM={0x1b, 0xfa, "6237d61eed8cb6f479f78ba5e56a801ed74925151111d8"}, @NL80211_ATTR_FILS_ERP_RRK={0xdf, 0xfc, "e52f3949d29cb96ea6891bd231429015f84b9e98181b5dedaaa5037c045cde6ebd1e99e3327395bca9a31ace0cb82286413166ccbf3dd38dbfa8e2372fdbd94a28ac41679a1d90132f801fa51b23ad2c0afd69d325374e88ede4d0d781aaffa8ef05f4ab133df7a1a44ae12de9ad495791b448adf68133a195fdb20c1819244cabbea943c4257642f730d29985505340431acf5f2d426aac1ca4f99058bb3235a50978d23f40c836100deda97bc4e26f2ab14fa56a952a6dd23fa4e9b2070fd57f82b3f48bebc550c151e824a08ab0f6bc284a156d2d96d3c02b1e"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x47, 0xfa, "51f957adf2a4892cd34be09170e5af61adc634f1a20e675636e52f86c98603625566c24b6934b333121763c9f1d82f718e215e157a7afda8617dc5cdafc5b2b64ab6c4"}], @NL80211_ATTR_IE={0x10c6, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x74, 0x6}}, @dsss={0x3, 0x1, 0xb}, @measure_req={0x26, 0x1003, {0x2, 0x9, 0x9, "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"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x20, 0x7, 0x9}}, @random_vendor={0xdd, 0x93, "4092fe8181bfb5d018de1cbe53b37572f0e98207822eac6184d61a3e24dba8212a3542f907fb19a6edd3a7af0e13bbfd848dca6c90fb9bc53061c34c02f3a29d637427d0d3d7e448694ae6cefb12aecf86447169ea58fcc07d1049285c1912cbe2a3c9c906eab0917bdfa89f8ddafe69bda04b06595b6a52111cdb61d119beebdac0f2fe8969d7db4814e8f7cff422992b0fdd"}, @mic={0x8c, 0x18, {0x757, "2242ee9d35d0", @long="2dc30177e46d2b4d04d8c6fa9d18447d"}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@tim={0x5, 0x5d, {0x80, 0x47, 0x3b, "7ccc4dbde2169734281a03dcde037b8c15f5adc517537434c823e1641c41649f7d27b7d23784152aa5aaeb6ce067ebf8f3a5be5d79e5c6b960fb8b182bb5bf8b2f216b6165b09e447d2f59016a6fec4a6b9ccc6a635bf5c5d59c"}}, @challenge={0x10, 0x1, 0xb2}, @random={0x5}, @peer_mgmt={0x75, 0x18, {0x0, 0x3, @val=0x6, @val=0x33, @val="9a9c89da98bd9a575744967285772bc4"}}]}]}, 0x2738}}, 0x20000000) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1412}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x79}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x4000910) 02:11:24 executing program 2: r0 = timerfd_create(0x8, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done], 0x9a, 0x0, &(0x7f00000000c0)="184f63a665de27b10d36b9684e6c410cb0ee26f45891544f54e388739b7c4f3ddd4ed23ca7ad50592fda0f33e360d7a9af0fae647080a76f30b636ca8df0aad1e67549b9a0c2d3539c951165bf96b8eb91fe856e691de07fe2d3ef12e97348c090c26117ce9a2dbe4686b37bb66171b0dabe0e798e4a9902f2214c366e1190f306b5b419059cced2b5aab90463ba697aff23ec0350ab8ff2ac4c"}) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {r2, r3+60000000}}, 0x0) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) 02:11:24 executing program 5: io_setup(0x3e, &(0x7f00000000c0)=0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:24 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002780)={&(0x7f0000002800)={0x2738, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@fils_params, @NL80211_ATTR_IE={0xe0, 0x2a, [@perr={0x84, 0x9c, {0x5, 0xa, [@ext={{}, @broadcast, 0x5, @broadcast, 0x29}, @not_ext={{}, @device_a, 0x8c, "", 0xc}, @not_ext={{}, @broadcast, 0x3, "", 0xb}, @not_ext={{}, @broadcast, 0x1, "", 0x2c}, @ext={{}, @device_b, 0x8, @broadcast, 0x25}, @not_ext={{}, @device_a, 0x9, "", 0x1b}, @ext={{}, @device_a, 0x0, @broadcast, 0x17}, @not_ext={{}, @device_b, 0x8000000, "", 0x29}, @ext={{}, @device_a, 0x1, @device_b, 0x29}, @not_ext={{}, @device_b, 0x101, "", 0x28}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1d, 0xa5, 0x42}}, @mic={0x8c, 0x10, {0xcde, "e4c2fef4d05d", @short="fccd96c91bf19fdb"}}, @ssid={0x0, 0x16, @random="45ddd60203b92ac1cb77367ad554fc7c4a6bc474a1af"}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x40, 0x20}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xea, 0xfc, "878080122e6dc4ef0bcbbdde2545cfe2d01bf1c2afe6a99720bfa1ad09d3c375d78fbd871d07c27382e2ee4997fe807f67d12066e55d784529121845ad2c719f76466c22ac89e650a0874ec2de2af0345c2807d467d57e16f86778b97917b3d3c68ff6e4ef883cca25d23ac274161e47d0d4b5fa47b81c2f2ffef6fac28f205d6238b7db51df419ec5a8f4f7362519481d203df07e91b1c1e2b05490a8713313f045e220e42ec9c96f55a6bff16081e07d44da75babc3d0950bf5095a4fd272896f3dbfc63583b8a7cb8e7b5bbeafe3ff813f2014428c07865533601312d9645bcc1e2600465"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8000}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x101}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "797c08dc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf6a}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "3e179ee798f46bbe5edca3069c60a0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "7d7f988257813663449ba5baba"}], @NL80211_ATTR_IE={0x153, 0x2a, [@gcr_ga={0xbd, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x0, 0x2}}, @cf={0x4, 0x6, {0xff, 0x80, 0x4, 0x9}}, @ht={0x2d, 0x1a, {0x0, 0x3, 0x1, 0x0, {0x4b90, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0xb6a1, 0xff}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @random_vendor={0xdd, 0xfc, "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"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x40, 0x40}}, @ibss={0x6, 0x2, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_chsw={0x76, 0x6, {0x9, 0x9, 0x41, 0x7ff}}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x14}, 0xf7, 0x7, @device_b, 0x4, 0x5eda, 0x7}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x99, 0xfa, "5b1d7c7ca571b23ab1e34158349217afa0298e5080b8fef787bec5af91c1269bbd599c0b1242114ceaf2198a2d6d4299fa871e69ee4172c2ced43ec5643952a330a1a9f00c65538f668f3adb70077ec6c75702365f5484fcc4c3d2fa0f9f7b058c2b5acaca8e31de579630d1df50b0b939500817c82f1b0f3970fee2f5a0e783011165236661c30d43d902e2aa4ab58fe6efc599d6"}, @NL80211_ATTR_FILS_ERP_RRK={0x5e, 0xfc, "56f798f53f8b91e040b9bfc924c111a1fff28c47be041988cf7946b0941202c72132634d2e66592bb9f598c3e9be10fdd106a225c9e1172700907a2668271ee65caabdc4328b21eec1303dda9149179e15e498b5cc4fbd0c43fa"}, @NL80211_ATTR_FILS_ERP_REALM={0x1b, 0xfa, "6237d61eed8cb6f479f78ba5e56a801ed74925151111d8"}, @NL80211_ATTR_FILS_ERP_RRK={0xdf, 0xfc, "e52f3949d29cb96ea6891bd231429015f84b9e98181b5dedaaa5037c045cde6ebd1e99e3327395bca9a31ace0cb82286413166ccbf3dd38dbfa8e2372fdbd94a28ac41679a1d90132f801fa51b23ad2c0afd69d325374e88ede4d0d781aaffa8ef05f4ab133df7a1a44ae12de9ad495791b448adf68133a195fdb20c1819244cabbea943c4257642f730d29985505340431acf5f2d426aac1ca4f99058bb3235a50978d23f40c836100deda97bc4e26f2ab14fa56a952a6dd23fa4e9b2070fd57f82b3f48bebc550c151e824a08ab0f6bc284a156d2d96d3c02b1e"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x47, 0xfa, "51f957adf2a4892cd34be09170e5af61adc634f1a20e675636e52f86c98603625566c24b6934b333121763c9f1d82f718e215e157a7afda8617dc5cdafc5b2b64ab6c4"}], @NL80211_ATTR_IE={0x10c6, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x74, 0x6}}, @dsss={0x3, 0x1, 0xb}, @measure_req={0x26, 0x1003, {0x2, 0x9, 0x9, "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"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x20, 0x7, 0x9}}, @random_vendor={0xdd, 0x93, "4092fe8181bfb5d018de1cbe53b37572f0e98207822eac6184d61a3e24dba8212a3542f907fb19a6edd3a7af0e13bbfd848dca6c90fb9bc53061c34c02f3a29d637427d0d3d7e448694ae6cefb12aecf86447169ea58fcc07d1049285c1912cbe2a3c9c906eab0917bdfa89f8ddafe69bda04b06595b6a52111cdb61d119beebdac0f2fe8969d7db4814e8f7cff422992b0fdd"}, @mic={0x8c, 0x18, {0x757, "2242ee9d35d0", @long="2dc30177e46d2b4d04d8c6fa9d18447d"}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@tim={0x5, 0x5d, {0x80, 0x47, 0x3b, "7ccc4dbde2169734281a03dcde037b8c15f5adc517537434c823e1641c41649f7d27b7d23784152aa5aaeb6ce067ebf8f3a5be5d79e5c6b960fb8b182bb5bf8b2f216b6165b09e447d2f59016a6fec4a6b9ccc6a635bf5c5d59c"}}, @challenge={0x10, 0x1, 0xb2}, @random={0x5}, @peer_mgmt={0x75, 0x18, {0x0, 0x3, @val=0x6, @val=0x33, @val="9a9c89da98bd9a575744967285772bc4"}}]}]}, 0x2738}}, 0x20000000) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1412}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x79}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x4000910) 02:11:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2f, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:24 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$l2tp(r0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) 02:11:24 executing program 2: r0 = timerfd_create(0x8, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done], 0x9a, 0x0, &(0x7f00000000c0)="184f63a665de27b10d36b9684e6c410cb0ee26f45891544f54e388739b7c4f3ddd4ed23ca7ad50592fda0f33e360d7a9af0fae647080a76f30b636ca8df0aad1e67549b9a0c2d3539c951165bf96b8eb91fe856e691de07fe2d3ef12e97348c090c26117ce9a2dbe4686b37bb66171b0dabe0e798e4a9902f2214c366e1190f306b5b419059cced2b5aab90463ba697aff23ec0350ab8ff2ac4c"}) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {r2, r3+60000000}}, 0x0) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) 02:11:24 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:24 executing program 5: io_setup(0x3e, &(0x7f00000000c0)=0x0) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2637.788486] FAULT_INJECTION: forcing a failure. [ 2637.788486] name failslab, interval 1, probability 0, space 0, times 0 [ 2637.837059] CPU: 0 PID: 19298 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2637.844982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2637.854339] Call Trace: [ 2637.856992] dump_stack+0x1fc/0x2ef [ 2637.860644] should_fail.cold+0xa/0xf [ 2637.864473] ? setup_fault_attr+0x200/0x200 [ 2637.868811] ? lock_acquire+0x170/0x3c0 [ 2637.872821] __should_failslab+0x115/0x180 [ 2637.877142] should_failslab+0x5/0x10 [ 2637.880946] kmem_cache_alloc_trace+0x284/0x380 [ 2637.885608] ? blk_mq_hctx_mark_pending+0x1f0/0x1f0 [ 2637.890615] ? plug_ctx_cmp+0x100/0x100 [ 2637.894594] blk_stat_alloc_callback+0x54/0x290 [ 2637.899271] blk_mq_init_allocated_queue+0x80/0x1300 [ 2637.904362] ? blkcg_init_queue+0x1fd/0x540 [ 2637.908699] ? blk_alloc_queue_node+0x7e4/0xbf0 [ 2637.913380] blk_mq_init_queue+0x5c/0xa0 [ 2637.917481] loop_add+0x2cb/0x8a0 [ 2637.920922] loop_control_ioctl+0x16c/0x480 [ 2637.925248] ? loop_lookup+0x1d0/0x1d0 [ 2637.929129] ? ksys_write+0x241/0x2a0 [ 2637.932938] ? loop_lookup+0x1d0/0x1d0 [ 2637.936820] do_vfs_ioctl+0xcdb/0x12e0 [ 2637.940694] ? lock_downgrade+0x720/0x720 [ 2637.944831] ? check_preemption_disabled+0x41/0x280 [ 2637.949840] ? ioctl_preallocate+0x200/0x200 [ 2637.954245] ? __fget+0x356/0x510 [ 2637.957700] ? do_dup2+0x450/0x450 [ 2637.961231] ? vfs_write+0x393/0x540 [ 2637.964939] ? fput+0x2b/0x190 [ 2637.968120] ksys_ioctl+0x9b/0xc0 [ 2637.971574] __x64_sys_ioctl+0x6f/0xb0 [ 2637.975463] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2637.980032] do_syscall_64+0xf9/0x620 [ 2637.983824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2637.989005] RIP: 0033:0x7fc956aba5a9 [ 2637.992708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2638.011621] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2638.019323] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2638.026574] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 02:11:24 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 29) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x30, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:24 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$l2tp(r0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) 02:11:24 executing program 2: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) timerfd_gettime(r3, &(0x7f0000000080)) timerfd_settime(r0, 0x2, &(0x7f0000000180)={{0x77359400}, {r1, r2+10000000}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:24 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:24 executing program 5: io_setup(0x3e, &(0x7f00000000c0)=0x0) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x200, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2638.033947] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2638.041211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2638.048470] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x31, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:24 executing program 3: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@private2, @remote, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0xffffff00, 0xffffffff], 'veth1_vlan\x00', 'vcan0\x00', {}, {0xff}, 0x3a, 0x1, 0x1, 0xa3}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x200, 0x7fffffff, 0x7, 0x2}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [0xff000000, 0xffffffff, 0x0, 0xffffffff], 'ip6gre0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x0, 0x40, 0x2}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8000, 0x7, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x1c43}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x100800) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000100)={0x1, 0x10000, 0x100}, 0xc) 02:11:24 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:24 executing program 2: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) timerfd_gettime(r3, &(0x7f0000000080)) timerfd_settime(r0, 0x2, &(0x7f0000000180)={{0x77359400}, {r1, r2+10000000}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_create(0x8, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) (async) timerfd_gettime(r3, &(0x7f0000000080)) (async) timerfd_settime(r0, 0x2, &(0x7f0000000180)={{0x77359400}, {r1, r2+10000000}}, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) pipe2(&(0x7f00000000c0), 0x800) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) 02:11:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x32, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2638.161592] FAULT_INJECTION: forcing a failure. [ 2638.161592] name failslab, interval 1, probability 0, space 0, times 0 [ 2638.177237] CPU: 1 PID: 19343 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2638.185147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2638.194506] Call Trace: [ 2638.197113] dump_stack+0x1fc/0x2ef [ 2638.200757] should_fail.cold+0xa/0xf [ 2638.204580] ? setup_fault_attr+0x200/0x200 02:11:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x33, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2638.208915] ? lock_acquire+0x170/0x3c0 [ 2638.212908] __should_failslab+0x115/0x180 [ 2638.217159] should_failslab+0x5/0x10 [ 2638.221171] __kmalloc+0x2ab/0x3c0 [ 2638.224720] ? blk_stat_alloc_callback+0x81/0x290 [ 2638.229588] ? blk_mq_hctx_mark_pending+0x1f0/0x1f0 [ 2638.234602] ? plug_ctx_cmp+0x100/0x100 [ 2638.238580] blk_stat_alloc_callback+0x81/0x290 [ 2638.243252] blk_mq_init_allocated_queue+0x80/0x1300 [ 2638.248491] ? blkcg_init_queue+0x1fd/0x540 [ 2638.252822] ? blk_alloc_queue_node+0x7e4/0xbf0 [ 2638.257489] blk_mq_init_queue+0x5c/0xa0 [ 2638.261538] loop_add+0x2cb/0x8a0 [ 2638.265006] loop_control_ioctl+0x16c/0x480 [ 2638.269331] ? loop_lookup+0x1d0/0x1d0 [ 2638.273211] ? ksys_write+0x241/0x2a0 [ 2638.276996] ? loop_lookup+0x1d0/0x1d0 [ 2638.280892] do_vfs_ioctl+0xcdb/0x12e0 [ 2638.284767] ? lock_downgrade+0x720/0x720 [ 2638.288904] ? check_preemption_disabled+0x41/0x280 [ 2638.293919] ? ioctl_preallocate+0x200/0x200 [ 2638.298365] ? __fget+0x356/0x510 [ 2638.301802] ? do_dup2+0x450/0x450 [ 2638.305339] ? vfs_write+0x393/0x540 [ 2638.309066] ? fput+0x2b/0x190 [ 2638.312246] ksys_ioctl+0x9b/0xc0 [ 2638.315683] __x64_sys_ioctl+0x6f/0xb0 [ 2638.319551] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2638.324116] do_syscall_64+0xf9/0x620 [ 2638.327903] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2638.333267] RIP: 0033:0x7fc956aba5a9 [ 2638.336971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 02:11:24 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 30) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x35, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:24 executing program 3: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) (async) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@private2, @remote, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0xffffff00, 0xffffffff], 'veth1_vlan\x00', 'vcan0\x00', {}, {0xff}, 0x3a, 0x1, 0x1, 0xa3}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x200, 0x7fffffff, 0x7, 0x2}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [0xff000000, 0xffffffff, 0x0, 0xffffffff], 'ip6gre0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x0, 0x40, 0x2}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8000, 0x7, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x1c43}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x100800) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000100)={0x1, 0x10000, 0x100}, 0xc) 02:11:24 executing program 2: r0 = timerfd_create(0x8, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) (async) timerfd_gettime(r3, &(0x7f0000000080)) timerfd_settime(r0, 0x2, &(0x7f0000000180)={{0x77359400}, {r1, r2+10000000}}, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:24 executing program 5: ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)=0x14c7) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) [ 2638.355854] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2638.363545] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2638.370890] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2638.378240] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2638.385687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2638.392941] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:24 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20080840) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x6d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x408c1}, 0x20000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r8) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9d}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5d}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x200}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4000) 02:11:24 executing program 2: r0 = timerfd_create(0x5, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:24 executing program 5: ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)=0x14c7) (async) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) [ 2638.468721] FAULT_INJECTION: forcing a failure. [ 2638.468721] name failslab, interval 1, probability 0, space 0, times 0 02:11:24 executing program 3: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@private2, @remote, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0xffffff00, 0xffffffff], 'veth1_vlan\x00', 'vcan0\x00', {}, {0xff}, 0x3a, 0x1, 0x1, 0xa3}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x200, 0x7fffffff, 0x7, 0x2}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [0xff000000, 0xffffffff, 0x0, 0xffffffff], 'ip6gre0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x0, 0x40, 0x2}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8000, 0x7, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x1c43}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x100800) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000100)={0x1, 0x10000, 0x100}, 0xc) 02:11:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x37, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2638.518089] CPU: 1 PID: 19374 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2638.526004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2638.535365] Call Trace: [ 2638.537962] dump_stack+0x1fc/0x2ef [ 2638.541600] should_fail.cold+0xa/0xf [ 2638.545411] ? setup_fault_attr+0x200/0x200 [ 2638.549741] ? lock_acquire+0x170/0x3c0 [ 2638.553730] __should_failslab+0x115/0x180 [ 2638.557977] should_failslab+0x5/0x10 [ 2638.561788] kmem_cache_alloc_node_trace+0x244/0x3b0 02:11:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x38, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2638.566908] __kmalloc_node+0x38/0x70 [ 2638.570720] blk_mq_init_allocated_queue+0x178/0x1300 [ 2638.575945] ? blkcg_init_queue+0x1fd/0x540 [ 2638.580288] blk_mq_init_queue+0x5c/0xa0 [ 2638.584445] loop_add+0x2cb/0x8a0 [ 2638.587916] loop_control_ioctl+0x16c/0x480 [ 2638.592244] ? loop_lookup+0x1d0/0x1d0 [ 2638.596144] ? ksys_write+0x241/0x2a0 [ 2638.600038] ? loop_lookup+0x1d0/0x1d0 [ 2638.603932] do_vfs_ioctl+0xcdb/0x12e0 [ 2638.607834] ? lock_downgrade+0x720/0x720 [ 2638.612877] ? check_preemption_disabled+0x41/0x280 [ 2638.617903] ? ioctl_preallocate+0x200/0x200 [ 2638.622319] ? __fget+0x356/0x510 [ 2638.625763] ? do_dup2+0x450/0x450 [ 2638.629294] ? vfs_write+0x393/0x540 [ 2638.632998] ? fput+0x2b/0x190 [ 2638.636181] ksys_ioctl+0x9b/0xc0 [ 2638.639653] __x64_sys_ioctl+0x6f/0xb0 [ 2638.643530] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2638.648094] do_syscall_64+0xf9/0x620 [ 2638.651881] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2638.657060] RIP: 0033:0x7fc956aba5a9 [ 2638.660775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2638.679666] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2638.687357] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2638.694715] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2638.701974] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2638.709232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:11:25 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 31) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x39, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:25 executing program 3: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfe}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8575}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) 02:11:25 executing program 5: ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)=0x14c7) (async) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) 02:11:25 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20080840) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x6d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x408c1}, 0x20000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r8) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9d}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5d}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x200}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4000) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x1}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20080840) (async) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x6d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x408c1}, 0x20000004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r8) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9d}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5d}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x200}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4000) (async) 02:11:25 executing program 2: r0 = timerfd_create(0x5, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_create(0x5, 0x0) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) [ 2638.716492] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:25 executing program 3: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfe}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8575}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) 02:11:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3a, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:25 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20080840) (async) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x6d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x408c1}, 0x20000004) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r8) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9d}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5d}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x200}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4000) 02:11:25 executing program 2: r0 = timerfd_create(0x5, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3b, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:25 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x10, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2005) r1 = timerfd_create(0x8, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)) timerfd_settime(r1, 0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0) [ 2638.843239] FAULT_INJECTION: forcing a failure. [ 2638.843239] name failslab, interval 1, probability 0, space 0, times 0 [ 2638.878352] CPU: 1 PID: 19427 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2638.886561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2638.895919] Call Trace: [ 2638.898524] dump_stack+0x1fc/0x2ef [ 2638.902166] should_fail.cold+0xa/0xf [ 2638.906003] ? setup_fault_attr+0x200/0x200 [ 2638.910351] ? mutex_trylock+0x1a0/0x1a0 [ 2638.914541] __should_failslab+0x115/0x180 [ 2638.918793] should_failslab+0x5/0x10 [ 2638.922610] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2638.927732] __kmalloc_node+0x38/0x70 [ 2638.931556] blk_mq_realloc_hw_ctxs+0x1d8/0x1000 [ 2638.936329] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 2638.941628] blk_mq_init_allocated_queue+0x20c/0x1300 [ 2638.946841] ? blkcg_init_queue+0x1fd/0x540 [ 2638.951187] blk_mq_init_queue+0x5c/0xa0 [ 2638.955250] loop_add+0x2cb/0x8a0 [ 2638.958708] loop_control_ioctl+0x16c/0x480 [ 2638.963034] ? loop_lookup+0x1d0/0x1d0 [ 2638.966928] ? ksys_write+0x241/0x2a0 [ 2638.970731] ? loop_lookup+0x1d0/0x1d0 [ 2638.974623] do_vfs_ioctl+0xcdb/0x12e0 [ 2638.978511] ? lock_downgrade+0x720/0x720 [ 2638.982662] ? check_preemption_disabled+0x41/0x280 [ 2638.987774] ? ioctl_preallocate+0x200/0x200 [ 2638.992191] ? __fget+0x356/0x510 [ 2638.995650] ? do_dup2+0x450/0x450 [ 2638.999192] ? vfs_write+0x393/0x540 [ 2639.002915] ? fput+0x2b/0x190 [ 2639.006120] ksys_ioctl+0x9b/0xc0 [ 2639.009668] __x64_sys_ioctl+0x6f/0xb0 [ 2639.013572] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2639.018167] do_syscall_64+0xf9/0x620 [ 2639.022095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2639.027278] RIP: 0033:0x7fc956aba5a9 02:11:25 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 32) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:25 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x10, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2005) r1 = timerfd_create(0x8, 0x0) (async) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)) timerfd_settime(r1, 0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0) 02:11:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r4 = socket(0x23, 0xa, 0x86) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) 02:11:25 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x668, 0x440, 0x440, 0xffffffff, 0x440, 0x0, 0x5d0, 0x5d0, 0xffffffff, 0x5d0, 0x5d0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x108, 0x140, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x80, 0x1, 0x1}}, @common=@unspec=@physdev={{0x68}, {'team_slave_1\x00', {0xff}, 'xfrm0\x00', {0xff}, 0x13, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@loopback, @empty, 0xff, 0xff, 'syzkaller1\x00', 'wg1\x00', {0xff}, {}, 0x16, 0x1, 0x89}, 0x0, 0x2d0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}, @common=@addrtype={{0x30}, {0x18, 0x8de, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x6, 0x7}, 0x2, 0x4}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xc}, @loopback, 0xffffff00, 0xff, 'gre0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x67, 0x3}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x1, 0xfff}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1a, @ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @port=0x4e24, @gre_key}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @multicast2, @rand_addr=0x64010100, @icmp_id=0x67, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6c8) 02:11:25 executing program 3: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfe}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8575}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfe}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8575}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) (async) [ 2639.030986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2639.049959] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2639.057650] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2639.064903] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2639.072170] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2639.079448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2639.086788] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:25 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x10, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2005) (async) r1 = timerfd_create(0x8, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)) (async) timerfd_settime(r1, 0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0) 02:11:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3e, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1000) (async, rerun: 32) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (rerun: 32) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r4 = socket(0x23, 0xa, 0x86) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) (async, rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) (rerun: 64) 02:11:25 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x668, 0x440, 0x440, 0xffffffff, 0x440, 0x0, 0x5d0, 0x5d0, 0xffffffff, 0x5d0, 0x5d0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x108, 0x140, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x80, 0x1, 0x1}}, @common=@unspec=@physdev={{0x68}, {'team_slave_1\x00', {0xff}, 'xfrm0\x00', {0xff}, 0x13, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@loopback, @empty, 0xff, 0xff, 'syzkaller1\x00', 'wg1\x00', {0xff}, {}, 0x16, 0x1, 0x89}, 0x0, 0x2d0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}, @common=@addrtype={{0x30}, {0x18, 0x8de, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x6, 0x7}, 0x2, 0x4}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xc}, @loopback, 0xffffff00, 0xff, 'gre0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x67, 0x3}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x1, 0xfff}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1a, @ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @port=0x4e24, @gre_key}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @multicast2, @rand_addr=0x64010100, @icmp_id=0x67, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6c8) 02:11:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x612, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x30}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2639.197871] FAULT_INJECTION: forcing a failure. [ 2639.197871] name failslab, interval 1, probability 0, space 0, times 0 02:11:25 executing program 2: r0 = timerfd_create(0x8, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0xfffffffffffffffc) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) [ 2639.238094] CPU: 1 PID: 19458 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2639.246014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2639.255545] Call Trace: [ 2639.258142] dump_stack+0x1fc/0x2ef [ 2639.261782] should_fail.cold+0xa/0xf [ 2639.265585] ? setup_fault_attr+0x200/0x200 [ 2639.269921] ? __debug_object_init+0x410/0x9b0 [ 2639.274526] __should_failslab+0x115/0x180 [ 2639.278769] should_failslab+0x5/0x10 [ 2639.282581] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2639.287699] __kmalloc_node+0x38/0x70 [ 2639.291524] blk_mq_realloc_hw_ctxs+0x568/0x1000 [ 2639.296287] blk_mq_init_allocated_queue+0x20c/0x1300 [ 2639.301476] ? blkcg_init_queue+0x1fd/0x540 [ 2639.305794] blk_mq_init_queue+0x5c/0xa0 [ 2639.309839] loop_add+0x2cb/0x8a0 [ 2639.313275] loop_control_ioctl+0x16c/0x480 [ 2639.317576] ? loop_lookup+0x1d0/0x1d0 [ 2639.321444] ? ksys_write+0x241/0x2a0 [ 2639.325230] ? loop_lookup+0x1d0/0x1d0 [ 2639.329105] do_vfs_ioctl+0xcdb/0x12e0 [ 2639.332992] ? lock_downgrade+0x720/0x720 [ 2639.337120] ? check_preemption_disabled+0x41/0x280 [ 2639.342118] ? ioctl_preallocate+0x200/0x200 [ 2639.346507] ? __fget+0x356/0x510 [ 2639.349940] ? do_dup2+0x450/0x450 [ 2639.353545] ? vfs_write+0x393/0x540 [ 2639.357239] ? fput+0x2b/0x190 [ 2639.360416] ksys_ioctl+0x9b/0xc0 [ 2639.363854] __x64_sys_ioctl+0x6f/0xb0 [ 2639.367721] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2639.372311] do_syscall_64+0xf9/0x620 [ 2639.376097] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2639.381266] RIP: 0033:0x7fc956aba5a9 [ 2639.384962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2639.403991] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2639.411696] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2639.418956] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2639.426209] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 02:11:25 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 33) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x41, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x612, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x30}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:25 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x668, 0x440, 0x440, 0xffffffff, 0x440, 0x0, 0x5d0, 0x5d0, 0xffffffff, 0x5d0, 0x5d0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x108, 0x140, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x80, 0x1, 0x1}}, @common=@unspec=@physdev={{0x68}, {'team_slave_1\x00', {0xff}, 'xfrm0\x00', {0xff}, 0x13, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@loopback, @empty, 0xff, 0xff, 'syzkaller1\x00', 'wg1\x00', {0xff}, {}, 0x16, 0x1, 0x89}, 0x0, 0x2d0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}, @common=@addrtype={{0x30}, {0x18, 0x8de, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x6, 0x7}, 0x2, 0x4}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xc}, @loopback, 0xffffff00, 0xff, 'gre0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x67, 0x3}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x1, 0xfff}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1a, @ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @port=0x4e24, @gre_key}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @multicast2, @rand_addr=0x64010100, @icmp_id=0x67, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6c8) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x668, 0x440, 0x440, 0xffffffff, 0x440, 0x0, 0x5d0, 0x5d0, 0xffffffff, 0x5d0, 0x5d0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x108, 0x140, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x80, 0x1, 0x1}}, @common=@unspec=@physdev={{0x68}, {'team_slave_1\x00', {0xff}, 'xfrm0\x00', {0xff}, 0x13, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@loopback, @empty, 0xff, 0xff, 'syzkaller1\x00', 'wg1\x00', {0xff}, {}, 0x16, 0x1, 0x89}, 0x0, 0x2d0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}, @common=@addrtype={{0x30}, {0x18, 0x8de, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x6, 0x7}, 0x2, 0x4}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xc}, @loopback, 0xffffff00, 0xff, 'gre0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x67, 0x3}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x1, 0xfff}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1a, @ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @port=0x4e24, @gre_key}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @multicast2, @rand_addr=0x64010100, @icmp_id=0x67, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6c8) (async) 02:11:25 executing program 2: r0 = timerfd_create(0x8, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0xfffffffffffffffc) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_create(0x8, 0x0) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0xfffffffffffffffc) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) [ 2639.433459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2639.440708] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x612, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x30}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:25 executing program 2: r0 = timerfd_create(0x8, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0xfffffffffffffffc) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_create(0x8, 0x0) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0xfffffffffffffffc) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) 02:11:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x42, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2639.511742] FAULT_INJECTION: forcing a failure. [ 2639.511742] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.577084] CPU: 0 PID: 19498 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2639.585000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2639.594372] Call Trace: [ 2639.597147] dump_stack+0x1fc/0x2ef [ 2639.600785] should_fail.cold+0xa/0xf [ 2639.604597] ? setup_fault_attr+0x200/0x200 [ 2639.608924] ? should_fail+0x142/0x7b0 [ 2639.612825] __should_failslab+0x115/0x180 [ 2639.617083] should_failslab+0x5/0x10 [ 2639.620879] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2639.625984] __kmalloc_node+0x38/0x70 [ 2639.629769] sbitmap_init_node+0x123/0x440 [ 2639.633989] blk_mq_realloc_hw_ctxs+0x5db/0x1000 [ 2639.638754] blk_mq_init_allocated_queue+0x20c/0x1300 [ 2639.643931] ? blkcg_init_queue+0x1fd/0x540 [ 2639.648240] blk_mq_init_queue+0x5c/0xa0 [ 2639.652399] loop_add+0x2cb/0x8a0 [ 2639.655845] loop_control_ioctl+0x16c/0x480 [ 2639.660146] ? loop_lookup+0x1d0/0x1d0 [ 2639.664017] ? ksys_write+0x241/0x2a0 [ 2639.667801] ? loop_lookup+0x1d0/0x1d0 [ 2639.671689] do_vfs_ioctl+0xcdb/0x12e0 [ 2639.675570] ? lock_downgrade+0x720/0x720 [ 2639.679698] ? check_preemption_disabled+0x41/0x280 [ 2639.684817] ? ioctl_preallocate+0x200/0x200 [ 2639.689392] ? __fget+0x356/0x510 [ 2639.692840] ? do_dup2+0x450/0x450 [ 2639.696404] ? vfs_write+0x393/0x540 [ 2639.700104] ? fput+0x2b/0x190 [ 2639.703384] ksys_ioctl+0x9b/0xc0 [ 2639.706935] __x64_sys_ioctl+0x6f/0xb0 [ 2639.710806] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2639.715512] do_syscall_64+0xf9/0x620 [ 2639.719321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2639.724520] RIP: 0033:0x7fc956aba5a9 [ 2639.728242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2639.747579] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2639.755371] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2639.762637] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2639.769912] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 02:11:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1000) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) r4 = socket(0x23, 0xa, 0x86) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) 02:11:26 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}, {r2, r3+10000000}}, 0x0) 02:11:26 executing program 0: ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000040)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0xa, 0xfff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000ffdbdf250a000000080003555f9c9a084800", @ANYRES32=0x0, @ANYBLOB="0c009900870f00006600000010006e800400010004000100040001000800370002000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) socket(0x27, 0x1, 0x13f) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x1, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket(0x1, 0xa, 0xfffffff9) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) 02:11:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x8, &(0x7f00000000c0)=""/8, 0x41100, 0x10, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x4, 0x2, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1, r1, 0x1, r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x39, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2639.777181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2639.784448] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:26 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 34) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:26 executing program 0: ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000040)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0xa, 0xfff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000ffdbdf250a000000080003555f9c9a084800", @ANYRES32=0x0, @ANYBLOB="0c009900870f00006600000010006e800400010004000100040001000800370002000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) socket(0x27, 0x1, 0x13f) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x1, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket(0x1, 0xa, 0xfffffff9) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000040)=0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x3, 0xa, 0xfff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000ffdbdf250a000000080003555f9c9a084800", @ANYRES32=0x0, @ANYBLOB="0c009900870f00006600000010006e800400010004000100040001000800370002000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) socket(0x27, 0x1, 0x13f) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x3, 0x1, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket(0x1, 0xa, 0xfffffff9) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) (async) 02:11:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x8, &(0x7f00000000c0)=""/8, 0x41100, 0x10, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x4, 0x2, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1, r1, 0x1, r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x39, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x8, &(0x7f00000000c0)=""/8, 0x41100, 0x10, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x4, 0x2, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1, r1, 0x1, r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x39, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) 02:11:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x46, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:26 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 32) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}, {r2, r3+10000000}}, 0x0) 02:11:26 executing program 0: ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000040)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0xa, 0xfff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000ffdbdf250a000000080003555f9c9a084800", @ANYRES32=0x0, @ANYBLOB="0c009900870f00006600000010006e800400010004000100040001000800370002000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) socket(0x27, 0x1, 0x13f) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x1, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket(0x1, 0xa, 0xfffffff9) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000040)=0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x3, 0xa, 0xfff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000ffdbdf250a000000080003555f9c9a084800", @ANYRES32=0x0, @ANYBLOB="0c009900870f00006600000010006e800400010004000100040001000800370002000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) socket(0x27, 0x1, 0x13f) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x3, 0x1, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket(0x1, 0xa, 0xfffffff9) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) (async) 02:11:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x48, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2639.914192] FAULT_INJECTION: forcing a failure. [ 2639.914192] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.952097] CPU: 1 PID: 19555 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2639.960126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2639.969505] Call Trace: [ 2639.972107] dump_stack+0x1fc/0x2ef [ 2639.975756] should_fail.cold+0xa/0xf [ 2639.979571] ? should_fail+0x142/0x7b0 [ 2639.983655] ? setup_fault_attr+0x200/0x200 [ 2639.988019] __should_failslab+0x115/0x180 [ 2639.992270] should_failslab+0x5/0x10 [ 2639.996087] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2640.001297] blk_alloc_flush_queue+0x76/0x300 [ 2640.005815] blk_mq_realloc_hw_ctxs+0x7bc/0x1000 [ 2640.010840] blk_mq_init_allocated_queue+0x20c/0x1300 [ 2640.016042] ? blkcg_init_queue+0x1fd/0x540 [ 2640.020382] blk_mq_init_queue+0x5c/0xa0 [ 2640.024472] loop_add+0x2cb/0x8a0 [ 2640.027946] loop_control_ioctl+0x16c/0x480 [ 2640.032279] ? loop_lookup+0x1d0/0x1d0 [ 2640.036354] ? ksys_write+0x241/0x2a0 [ 2640.040167] ? loop_lookup+0x1d0/0x1d0 [ 2640.044251] do_vfs_ioctl+0xcdb/0x12e0 [ 2640.048149] ? lock_downgrade+0x720/0x720 [ 2640.052308] ? check_preemption_disabled+0x41/0x280 [ 2640.057335] ? ioctl_preallocate+0x200/0x200 [ 2640.061752] ? __fget+0x356/0x510 [ 2640.065211] ? do_dup2+0x450/0x450 [ 2640.068757] ? vfs_write+0x393/0x540 [ 2640.072479] ? fput+0x2b/0x190 [ 2640.075723] ksys_ioctl+0x9b/0xc0 [ 2640.079198] __x64_sys_ioctl+0x6f/0xb0 [ 2640.083192] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2640.087783] do_syscall_64+0xf9/0x620 [ 2640.091772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2640.097053] RIP: 0033:0x7fc956aba5a9 [ 2640.100773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2640.119856] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2640.127665] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2640.135289] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2640.142654] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2640.150033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2640.157310] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20011}, 0x40080) 02:11:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x8, &(0x7f00000000c0)=""/8, 0x41100, 0x10, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x4, 0x2, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1, r1, 0x1, r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x39, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (rerun: 32) 02:11:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:26 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}, {r2, r3+10000000}}, 0x0) 02:11:26 executing program 0: socket(0x10, 0x1, 0x1) r0 = socket(0xe, 0x3, 0x20) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) 02:11:26 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 35) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20011}, 0x40080) 02:11:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4a, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2640.415427] FAULT_INJECTION: forcing a failure. [ 2640.415427] name failslab, interval 1, probability 0, space 0, times 0 [ 2640.444156] CPU: 0 PID: 19655 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2640.452075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2640.461436] Call Trace: 02:11:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20011}, 0x40080) 02:11:26 executing program 5: ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4040040) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f00000000c0)={0x3e, 0x2}) 02:11:26 executing program 5: ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000000)) (async) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4040040) (async) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f00000000c0)={0x3e, 0x2}) [ 2640.464035] dump_stack+0x1fc/0x2ef [ 2640.471430] should_fail.cold+0xa/0xf [ 2640.475251] ? setup_fault_attr+0x200/0x200 [ 2640.479579] ? should_fail+0x142/0x7b0 [ 2640.483480] __should_failslab+0x115/0x180 [ 2640.487732] should_failslab+0x5/0x10 [ 2640.491549] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2640.496685] __kmalloc_node+0x38/0x70 [ 2640.500499] blk_alloc_flush_queue+0x120/0x300 [ 2640.505198] blk_mq_realloc_hw_ctxs+0x7bc/0x1000 [ 2640.509985] blk_mq_init_allocated_queue+0x20c/0x1300 02:11:26 executing program 5: ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4040040) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f00000000c0)={0x3e, 0x2}) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000000)) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4040040) (async) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f00000000c0)={0x3e, 0x2}) (async) 02:11:26 executing program 5: r0 = socket$inet6(0xa, 0x4, 0x200002) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2640.515181] ? blkcg_init_queue+0x1fd/0x540 [ 2640.519524] blk_mq_init_queue+0x5c/0xa0 [ 2640.523595] loop_add+0x2cb/0x8a0 [ 2640.527172] loop_control_ioctl+0x16c/0x480 [ 2640.531617] ? loop_lookup+0x1d0/0x1d0 [ 2640.535518] ? ksys_write+0x241/0x2a0 [ 2640.539329] ? loop_lookup+0x1d0/0x1d0 [ 2640.543228] do_vfs_ioctl+0xcdb/0x12e0 [ 2640.547160] ? lock_downgrade+0x720/0x720 [ 2640.551317] ? check_preemption_disabled+0x41/0x280 [ 2640.556339] ? ioctl_preallocate+0x200/0x200 [ 2640.560749] ? __fget+0x356/0x510 [ 2640.564192] ? do_dup2+0x450/0x450 [ 2640.567718] ? vfs_write+0x393/0x540 [ 2640.571425] ? fput+0x2b/0x190 [ 2640.574624] ksys_ioctl+0x9b/0xc0 [ 2640.578071] __x64_sys_ioctl+0x6f/0xb0 [ 2640.582120] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2640.587124] do_syscall_64+0xf9/0x620 [ 2640.590950] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2640.596931] RIP: 0033:0x7fc956aba5a9 02:11:27 executing program 3: socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffeba, &(0x7f0000000000)={0x0}}, 0x0) 02:11:27 executing program 5: r0 = socket$inet6(0xa, 0x4, 0x200002) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$inet6(0xa, 0x4, 0x200002) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) 02:11:27 executing program 2: r0 = timerfd_create(0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000080)={0x6, "b9d5c62fce4ac6434d24b184541a3e5af8153d86c09ed20e9c3de285dd4e7176a5fd684c545587d704dc99ca8335c89399ca228aa75d9a3f2a38472da8aa5823", {0x7fffffffffffffff, 0xffb}}) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb463, 0x8cc02) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f00000001c0)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2640.600634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2640.619526] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2640.627237] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2640.634589] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2640.641855] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2640.649125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2640.656377] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:27 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 36) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:27 executing program 0: socket(0x10, 0x1, 0x1) r0 = socket(0xe, 0x3, 0x20) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) socket(0x10, 0x1, 0x1) (async) socket(0xe, 0x3, 0x20) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) (async) 02:11:27 executing program 2: r0 = timerfd_create(0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000080)={0x6, "b9d5c62fce4ac6434d24b184541a3e5af8153d86c09ed20e9c3de285dd4e7176a5fd684c545587d704dc99ca8335c89399ca228aa75d9a3f2a38472da8aa5823", {0x7fffffffffffffff, 0xffb}}) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb463, 0x8cc02) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f00000001c0)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4c, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:27 executing program 5: r0 = socket$inet6(0xa, 0x4, 0x200002) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4d, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:27 executing program 3: socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffeba, &(0x7f0000000000)={0x0}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffeba, &(0x7f0000000000)={0x0}}, 0x0) (async) [ 2640.780249] FAULT_INJECTION: forcing a failure. [ 2640.780249] name failslab, interval 1, probability 0, space 0, times 0 [ 2640.799765] CPU: 0 PID: 19698 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2640.807766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2640.817313] Call Trace: [ 2640.819921] dump_stack+0x1fc/0x2ef [ 2640.823572] should_fail.cold+0xa/0xf 02:11:27 executing program 5: socket$inet6(0xa, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048010}, 0x4008801) 02:11:27 executing program 0: socket(0x10, 0x1, 0x1) r0 = socket(0xe, 0x3, 0x20) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) socket(0x10, 0x1, 0x1) (async) socket(0xe, 0x3, 0x20) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) (async) [ 2640.827477] ? setup_fault_attr+0x200/0x200 [ 2640.831807] ? lock_acquire+0x170/0x3c0 [ 2640.835806] __should_failslab+0x115/0x180 [ 2640.840046] should_failslab+0x5/0x10 [ 2640.843855] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2640.848983] blk_mq_init_tags+0x6a/0x2b0 [ 2640.853055] blk_mq_alloc_rq_map+0x9d/0x230 [ 2640.857378] ? elevator_get+0x29/0x170 [ 2640.861273] blk_mq_init_sched+0x219/0x730 [ 2640.865521] elevator_init_mq+0xf0/0x180 [ 2640.869595] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2640.874805] blk_mq_init_queue+0x5c/0xa0 02:11:27 executing program 5: socket$inet6(0xa, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048010}, 0x4008801) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048010}, 0x4008801) (async) 02:11:27 executing program 5: socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20048010}, 0x4008801) [ 2640.879005] loop_add+0x2cb/0x8a0 [ 2640.882571] loop_control_ioctl+0x16c/0x480 [ 2640.886925] ? loop_lookup+0x1d0/0x1d0 [ 2640.891003] ? ksys_write+0x241/0x2a0 [ 2640.894903] ? loop_lookup+0x1d0/0x1d0 [ 2640.898891] do_vfs_ioctl+0xcdb/0x12e0 [ 2640.902788] ? lock_downgrade+0x720/0x720 [ 2640.906941] ? check_preemption_disabled+0x41/0x280 [ 2640.911966] ? ioctl_preallocate+0x200/0x200 [ 2640.916388] ? __fget+0x356/0x510 [ 2640.919971] ? do_dup2+0x450/0x450 [ 2640.923516] ? vfs_write+0x393/0x540 [ 2640.927237] ? fput+0x2b/0x190 02:11:27 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="fcffffff", @ANYRES16=r2, @ANYBLOB="020029bd7000fbdbdf25060000000800040006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "f3d98677022f0999a33cbc8461e86fba"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d6af95d4bb4bcf1d8119e99128fd22af"}, @NL80211_ATTR_PMK={0x14, 0xfe, "157406bae2074982dd0985b80e2a1874"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x10) [ 2640.930528] ksys_ioctl+0x9b/0xc0 [ 2640.933994] __x64_sys_ioctl+0x6f/0xb0 [ 2640.937897] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2640.942484] do_syscall_64+0xf9/0x620 [ 2640.946302] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2640.951493] RIP: 0033:0x7fc956aba5a9 [ 2640.955209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 02:11:27 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 37) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x9, 0x1}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 02:11:27 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="fcffffff", @ANYRES16=r2, @ANYBLOB="020029bd7000fbdbdf25060000000800040006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "f3d98677022f0999a33cbc8461e86fba"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d6af95d4bb4bcf1d8119e99128fd22af"}, @NL80211_ATTR_PMK={0x14, 0xfe, "157406bae2074982dd0985b80e2a1874"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x10) 02:11:27 executing program 3: socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffeba, &(0x7f0000000000)={0x0}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffeba, &(0x7f0000000000)={0x0}}, 0x0) (async) 02:11:27 executing program 2: r0 = timerfd_create(0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000080)={0x6, "b9d5c62fce4ac6434d24b184541a3e5af8153d86c09ed20e9c3de285dd4e7176a5fd684c545587d704dc99ca8335c89399ca228aa75d9a3f2a38472da8aa5823", {0x7fffffffffffffff, 0xffb}}) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb463, 0x8cc02) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f00000001c0)) (async, rerun: 32) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (rerun: 32) 02:11:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2640.974115] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2640.981833] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2640.989429] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2640.997038] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2641.004381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2641.011649] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:27 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="fcffffff", @ANYRES16=r2, @ANYBLOB="020029bd7000fbdbdf25060000000800040006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "f3d98677022f0999a33cbc8461e86fba"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d6af95d4bb4bcf1d8119e99128fd22af"}, @NL80211_ATTR_PMK={0x14, 0xfe, "157406bae2074982dd0985b80e2a1874"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x10) 02:11:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x2, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x9, 0x1}) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 02:11:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x5) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x41) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) [ 2641.083794] FAULT_INJECTION: forcing a failure. [ 2641.083794] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.128661] CPU: 0 PID: 19741 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2641.136571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2641.145942] Call Trace: [ 2641.148545] dump_stack+0x1fc/0x2ef [ 2641.152201] should_fail.cold+0xa/0xf [ 2641.156015] ? setup_fault_attr+0x200/0x200 [ 2641.160345] ? lock_acquire+0x170/0x3c0 [ 2641.164330] __should_failslab+0x115/0x180 [ 2641.168576] should_failslab+0x5/0x10 [ 2641.172383] kmem_cache_alloc_node_trace+0x244/0x3b0 02:11:27 executing program 0: r0 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x80) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0363b90034e9eb230effff000000000000de2df4886d7aafde6fef588c0000000000000000046311025a411632d00fda0ec38600dd628f7c539fff26a979653d490d9d52", @ANYRES64=r0, @ANYBLOB="03630840", @ANYRES64=r1], 0xd6, 0x0, &(0x7f0000000040)="0d0eb8e448cb0b1a9b4f71a5201e1ac9a282b4bc69f8feff51104dcdca253311d8d545f4aaf849a38fdddb4c61759a68935dfd5103af59fdc00c7458c9ac080dcfc003267a037004343acd211df0de3e474dd46334bb7b1e7a50826e054a3391249ab455ae07432037f92a5eddb016f0c962df0b5b14ecb4a75086bec1ca0ea5648710d4352b1f695d6206c9f6e5594de9ae700568382ff0243875fdc177a8796bb21676769e70d7a6cb0269312b315fd6e78e19b03cb729c99a975d905adbb61f621273b27b19fefef783bf5441773740d9e60ba643"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) 02:11:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x9, 0x1}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x9, 0x1}) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) [ 2641.177495] __kmalloc_node+0x38/0x70 [ 2641.181312] sbitmap_init_node+0x123/0x440 [ 2641.185558] sbitmap_queue_init_node+0x37/0x6c0 [ 2641.190247] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2641.195365] blk_mq_init_tags+0x10d/0x2b0 [ 2641.199529] blk_mq_alloc_rq_map+0x9d/0x230 [ 2641.203907] ? elevator_get+0x29/0x170 [ 2641.207810] blk_mq_init_sched+0x219/0x730 [ 2641.212060] elevator_init_mq+0xf0/0x180 [ 2641.216331] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2641.221548] blk_mq_init_queue+0x5c/0xa0 [ 2641.225704] loop_add+0x2cb/0x8a0 [ 2641.229519] loop_control_ioctl+0x16c/0x480 [ 2641.233849] ? loop_lookup+0x1d0/0x1d0 [ 2641.237748] ? ksys_write+0x241/0x2a0 [ 2641.241553] ? loop_lookup+0x1d0/0x1d0 [ 2641.245443] do_vfs_ioctl+0xcdb/0x12e0 [ 2641.249334] ? lock_downgrade+0x720/0x720 [ 2641.253489] ? check_preemption_disabled+0x41/0x280 [ 2641.258503] ? ioctl_preallocate+0x200/0x200 [ 2641.262912] ? __fget+0x356/0x510 [ 2641.266368] ? do_dup2+0x450/0x450 [ 2641.269911] ? vfs_write+0x393/0x540 [ 2641.273636] ? fput+0x2b/0x190 [ 2641.276835] ksys_ioctl+0x9b/0xc0 [ 2641.280272] __x64_sys_ioctl+0x6f/0xb0 [ 2641.284146] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2641.288715] do_syscall_64+0xf9/0x620 [ 2641.292516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2641.297696] RIP: 0033:0x7fc956aba5a9 [ 2641.301399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2641.320292] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 02:11:27 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 38) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:27 executing program 0: r0 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x80) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0363b90034e9eb230effff000000000000de2df4886d7aafde6fef588c0000000000000000046311025a411632d00fda0ec38600dd628f7c539fff26a979653d490d9d52", @ANYRES64=r0, @ANYBLOB="03630840", @ANYRES64=r1], 0xd6, 0x0, &(0x7f0000000040)="0d0eb8e448cb0b1a9b4f71a5201e1ac9a282b4bc69f8feff51104dcdca253311d8d545f4aaf849a38fdddb4c61759a68935dfd5103af59fdc00c7458c9ac080dcfc003267a037004343acd211df0de3e474dd46334bb7b1e7a50826e054a3391249ab455ae07432037f92a5eddb016f0c962df0b5b14ecb4a75086bec1ca0ea5648710d4352b1f695d6206c9f6e5594de9ae700568382ff0243875fdc177a8796bb21676769e70d7a6cb0269312b315fd6e78e19b03cb729c99a975d905adbb61f621273b27b19fefef783bf5441773740d9e60ba643"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x80) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0363b90034e9eb230effff000000000000de2df4886d7aafde6fef588c0000000000000000046311025a411632d00fda0ec38600dd628f7c539fff26a979653d490d9d52", @ANYRES64=r0, @ANYBLOB="03630840", @ANYRES64=r1], 0xd6, 0x0, &(0x7f0000000040)="0d0eb8e448cb0b1a9b4f71a5201e1ac9a282b4bc69f8feff51104dcdca253311d8d545f4aaf849a38fdddb4c61759a68935dfd5103af59fdc00c7458c9ac080dcfc003267a037004343acd211df0de3e474dd46334bb7b1e7a50826e054a3391249ab455ae07432037f92a5eddb016f0c962df0b5b14ecb4a75086bec1ca0ea5648710d4352b1f695d6206c9f6e5594de9ae700568382ff0243875fdc177a8796bb21676769e70d7a6cb0269312b315fd6e78e19b03cb729c99a975d905adbb61f621273b27b19fefef783bf5441773740d9e60ba643"}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2) (async) pipe2(&(0x7f0000000000), 0x84000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) 02:11:27 executing program 5: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x10}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:27 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) getitimer(0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r2}, 0xc) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000200)=""/126) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x7fffffe, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x5) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x41) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) [ 2641.328096] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2641.335362] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2641.342625] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2641.349888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2641.357141] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:27 executing program 5: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x10}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:27 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) getitimer(0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r2}, 0xc) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000200)=""/126) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_create(0x8, 0x0) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) getitimer(0x0, &(0x7f0000000080)) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000200)=""/126) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) 02:11:27 executing program 5: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) (async) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x10}, 0x10) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:27 executing program 0: r0 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x80) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0363b90034e9eb230effff000000000000de2df4886d7aafde6fef588c0000000000000000046311025a411632d00fda0ec38600dd628f7c539fff26a979653d490d9d52", @ANYRES64=r0, @ANYBLOB="03630840", @ANYRES64=r1], 0xd6, 0x0, &(0x7f0000000040)="0d0eb8e448cb0b1a9b4f71a5201e1ac9a282b4bc69f8feff51104dcdca253311d8d545f4aaf849a38fdddb4c61759a68935dfd5103af59fdc00c7458c9ac080dcfc003267a037004343acd211df0de3e474dd46334bb7b1e7a50826e054a3391249ab455ae07432037f92a5eddb016f0c962df0b5b14ecb4a75086bec1ca0ea5648710d4352b1f695d6206c9f6e5594de9ae700568382ff0243875fdc177a8796bb21676769e70d7a6cb0269312b315fd6e78e19b03cb729c99a975d905adbb61f621273b27b19fefef783bf5441773740d9e60ba643"}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) [ 2641.436602] FAULT_INJECTION: forcing a failure. [ 2641.436602] name failslab, interval 1, probability 0, space 0, times 0 02:11:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="d12300001c2046f5bc27ab26cbb8ecebfaefd7bf29be6eb9714ec47b37e279180f607c9d5e2c0885fc4b9eeca29881d3b639ff885205b4e2666d730d494ae7d280c1d5a5f49867c4cdb9", @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="05001e00000000000c00ff"], 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2641.482706] CPU: 0 PID: 19776 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2641.490710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2641.500079] Call Trace: [ 2641.502679] dump_stack+0x1fc/0x2ef [ 2641.506329] should_fail.cold+0xa/0xf [ 2641.510151] ? setup_fault_attr+0x200/0x200 [ 2641.514483] ? lock_acquire+0x170/0x3c0 [ 2641.518475] __should_failslab+0x115/0x180 [ 2641.522722] should_failslab+0x5/0x10 [ 2641.526639] kmem_cache_alloc_node_trace+0x244/0x3b0 02:11:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="d12300001c2046f5bc27ab26cbb8ecebfaefd7bf29be6eb9714ec47b37e279180f607c9d5e2c0885fc4b9eeca29881d3b639ff885205b4e2666d730d494ae7d280c1d5a5f49867c4cdb9", @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="05001e00000000000c00ff"], 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2641.531761] sbitmap_queue_init_node+0x240/0x6c0 [ 2641.536534] blk_mq_init_tags+0x10d/0x2b0 [ 2641.540707] blk_mq_alloc_rq_map+0x9d/0x230 [ 2641.545040] ? elevator_get+0x29/0x170 [ 2641.548941] blk_mq_init_sched+0x219/0x730 [ 2641.553191] elevator_init_mq+0xf0/0x180 [ 2641.557263] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2641.562468] blk_mq_init_queue+0x5c/0xa0 [ 2641.566539] loop_add+0x2cb/0x8a0 [ 2641.570010] loop_control_ioctl+0x16c/0x480 [ 2641.574529] ? loop_lookup+0x1d0/0x1d0 [ 2641.578427] ? ksys_write+0x241/0x2a0 [ 2641.582236] ? loop_lookup+0x1d0/0x1d0 [ 2641.586131] do_vfs_ioctl+0xcdb/0x12e0 [ 2641.590130] ? lock_downgrade+0x720/0x720 [ 2641.594373] ? check_preemption_disabled+0x41/0x280 [ 2641.599394] ? ioctl_preallocate+0x200/0x200 [ 2641.603818] ? __fget+0x356/0x510 [ 2641.607288] ? do_dup2+0x450/0x450 [ 2641.610836] ? vfs_write+0x393/0x540 [ 2641.614555] ? fput+0x2b/0x190 [ 2641.617758] ksys_ioctl+0x9b/0xc0 [ 2641.621214] __x64_sys_ioctl+0x6f/0xb0 [ 2641.625102] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2641.629686] do_syscall_64+0xf9/0x620 [ 2641.633501] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2641.638690] RIP: 0033:0x7fc956aba5a9 [ 2641.642401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2641.661310] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2641.669021] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2641.676290] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2641.683559] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2641.690831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2641.698100] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 39) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="d12300001c2046f5bc27ab26cbb8ecebfaefd7bf29be6eb9714ec47b37e279180f607c9d5e2c0885fc4b9eeca29881d3b639ff885205b4e2666d730d494ae7d280c1d5a5f49867c4cdb9", @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="05001e00000000000c00ff"], 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x5) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x41) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) socket$inet6(0xa, 0x2, 0x5) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x41) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) 02:11:28 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) getitimer(0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r2}, 0xc) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000200)=""/126) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_create(0x8, 0x0) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) getitimer(0x0, &(0x7f0000000080)) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000200)=""/126) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) [ 2641.829213] FAULT_INJECTION: forcing a failure. [ 2641.829213] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.856101] CPU: 1 PID: 19823 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2641.864007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2641.873364] Call Trace: [ 2641.875972] dump_stack+0x1fc/0x2ef [ 2641.879611] should_fail.cold+0xa/0xf [ 2641.883425] ? setup_fault_attr+0x200/0x200 [ 2641.887759] ? lock_acquire+0x170/0x3c0 [ 2641.891776] __should_failslab+0x115/0x180 [ 2641.896029] should_failslab+0x5/0x10 [ 2641.899836] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2641.904960] sbitmap_queue_init_node+0x240/0x6c0 [ 2641.909737] blk_mq_init_tags+0x16f/0x2b0 [ 2641.920084] blk_mq_alloc_rq_map+0x9d/0x230 [ 2641.924412] ? elevator_get+0x29/0x170 [ 2641.928316] blk_mq_init_sched+0x219/0x730 [ 2641.932630] elevator_init_mq+0xf0/0x180 [ 2641.936702] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2641.941911] blk_mq_init_queue+0x5c/0xa0 [ 2641.945992] loop_add+0x2cb/0x8a0 [ 2641.949456] loop_control_ioctl+0x16c/0x480 [ 2641.953783] ? loop_lookup+0x1d0/0x1d0 [ 2641.957680] ? ksys_write+0x241/0x2a0 [ 2641.961492] ? loop_lookup+0x1d0/0x1d0 [ 2641.965479] do_vfs_ioctl+0xcdb/0x12e0 [ 2641.969377] ? lock_downgrade+0x720/0x720 [ 2641.973541] ? check_preemption_disabled+0x41/0x280 [ 2641.978571] ? ioctl_preallocate+0x200/0x200 [ 2641.982995] ? __fget+0x356/0x510 [ 2641.986473] ? do_dup2+0x450/0x450 [ 2641.990032] ? vfs_write+0x393/0x540 [ 2641.993767] ? fput+0x2b/0x190 [ 2641.996981] ksys_ioctl+0x9b/0xc0 [ 2642.000454] __x64_sys_ioctl+0x6f/0xb0 [ 2642.004702] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2642.009295] do_syscall_64+0xf9/0x620 [ 2642.013130] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2642.018328] RIP: 0033:0x7fc956aba5a9 [ 2642.022047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2642.041179] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2642.048895] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2642.056168] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2642.063447] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2642.070720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2642.078104] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x8000000, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:29 executing program 5: socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x8, 0x2, 0x7fff, 0x10, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0xa}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=r1, r2, 0x13, 0x4, r3}, 0x14) 02:11:29 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x230, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf7, 0x2a}}}}, [@fils_params, @NL80211_ATTR_IE={0x107, 0x2a, [@supported_rates, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x6c, 0x2}}, @measure_req={0x26, 0xd7, {0x2, 0x3, 0x1f, "9aff03ea5869a0fa6a68c819d155a900d4be6dcf21abfabb46903a8ab5f088a7e3bd3ee4e6d40377857b94ea33eaae2ffb4bd07d9e724d51faa87fdfa7e29f8dad7fd663f86d954e04ab9eda978b4dcc0798a4e1714e572266ca1fed9aca45608a8b1b365377533449bf55bd5f6d9066b2f426283eb204d647e98da03cdd8d7da6ed98fc365c26305d0b83532cfecfd0d0057d0dbdc48da49ccf2136a1aece34bf3f9620e3f85a6f5d2da087431faf62252fce04eda6ccd7fd6baa50f9f4a8a4aa1f4cae39925f3257f0f72dd53a89d9a8534704"}}, @mic={0x8c, 0x18, {0x3ab, "993ae62c27ac", @long="f59a9611d4c036cc0c605359b85d32a9"}}]}, @NL80211_ATTR_IE={0x35, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @gcr_ga={0xbd, 0x6, @broadcast}, @prep={0x83, 0x1f, @not_ext={{}, 0x81, 0xd, @broadcast, 0x3, "", 0x0, 0x7, @device_b, 0x45f}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "8917d9af95a619"}, @NL80211_ATTR_FILS_ERP_RRK={0xa8, 0xfc, "effbf4afef157dea7c718648e697df1e75f45215cad707cd23fc261e644b557f8583f6873646414bbb636ecccf1e37f724b4b66f4043c654fdeedc6932a6456aa3ec3447ced5d53657b30c1eda889d3c017914391f2828bb6ba302bf1feaf60043870828633229ce13425af3bb5d3ffc0e2a234a53ffbd4fadd46de8b0bf63025e8bf84b3fc67313bfba78e1ba12b3a5930e0463895109bfce928f133b67da6fda687d48"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "06c6627b48c80bbe93efffbae3"}]]}, 0x230}, 0x1, 0x0, 0x0, 0x2}, 0x80) 02:11:29 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdfabb8f0dbcfc8d74d25160000000c0099003ad6000069000033be85481994e7c894000a000600080211"], 0x38}, 0x1, 0x0, 0x0, 0x20004055}, 0x4000000) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000140)={0x0, &(0x7f00000001c0)="d44f735064560fcb7d87b108beab009b0630251a9cb4ada61918503c57c6fffab9327df83d5a5e893d935bd44f691b746362537e8149e327197bbc713da5806ad88b1e9160902579fdd75d65de105241d588f941147c53ef35eecad74fa3aefbf5412997c3d35905e9b86e637749c1853c7e22d89cd7ac2781c511792da5c0f1d7405963a21ce5ebfc1cc50b454bd4288a943123dc493522ea91149d97c72dde32037efff76ae5b9c5eaa5b9ad25f63e", 0xb0}) 02:11:29 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 40) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140200000f6d77b611a4a65e2ad5ece8807fc2814c19279c469ea4b33f40ded3b8", @ANYRES16=r3, @ANYBLOB="0100"/14], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20084000) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:29 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdfabb8f0dbcfc8d74d25160000000c0099003ad6000069000033be85481994e7c894000a000600080211"], 0x38}, 0x1, 0x0, 0x0, 0x20004055}, 0x4000000) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000140)={0x0, &(0x7f00000001c0)="d44f735064560fcb7d87b108beab009b0630251a9cb4ada61918503c57c6fffab9327df83d5a5e893d935bd44f691b746362537e8149e327197bbc713da5806ad88b1e9160902579fdd75d65de105241d588f941147c53ef35eecad74fa3aefbf5412997c3d35905e9b86e637749c1853c7e22d89cd7ac2781c511792da5c0f1d7405963a21ce5ebfc1cc50b454bd4288a943123dc493522ea91149d97c72dde32037efff76ae5b9c5eaa5b9ad25f63e", 0xb0}) 02:11:29 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x230, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf7, 0x2a}}}}, [@fils_params, @NL80211_ATTR_IE={0x107, 0x2a, [@supported_rates, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x6c, 0x2}}, @measure_req={0x26, 0xd7, {0x2, 0x3, 0x1f, "9aff03ea5869a0fa6a68c819d155a900d4be6dcf21abfabb46903a8ab5f088a7e3bd3ee4e6d40377857b94ea33eaae2ffb4bd07d9e724d51faa87fdfa7e29f8dad7fd663f86d954e04ab9eda978b4dcc0798a4e1714e572266ca1fed9aca45608a8b1b365377533449bf55bd5f6d9066b2f426283eb204d647e98da03cdd8d7da6ed98fc365c26305d0b83532cfecfd0d0057d0dbdc48da49ccf2136a1aece34bf3f9620e3f85a6f5d2da087431faf62252fce04eda6ccd7fd6baa50f9f4a8a4aa1f4cae39925f3257f0f72dd53a89d9a8534704"}}, @mic={0x8c, 0x18, {0x3ab, "993ae62c27ac", @long="f59a9611d4c036cc0c605359b85d32a9"}}]}, @NL80211_ATTR_IE={0x35, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @gcr_ga={0xbd, 0x6, @broadcast}, @prep={0x83, 0x1f, @not_ext={{}, 0x81, 0xd, @broadcast, 0x3, "", 0x0, 0x7, @device_b, 0x45f}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "8917d9af95a619"}, @NL80211_ATTR_FILS_ERP_RRK={0xa8, 0xfc, "effbf4afef157dea7c718648e697df1e75f45215cad707cd23fc261e644b557f8583f6873646414bbb636ecccf1e37f724b4b66f4043c654fdeedc6932a6456aa3ec3447ced5d53657b30c1eda889d3c017914391f2828bb6ba302bf1feaf60043870828633229ce13425af3bb5d3ffc0e2a234a53ffbd4fadd46de8b0bf63025e8bf84b3fc67313bfba78e1ba12b3a5930e0463895109bfce928f133b67da6fda687d48"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "06c6627b48c80bbe93efffbae3"}]]}, 0x230}, 0x1, 0x0, 0x0, 0x2}, 0x80) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x230, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf7, 0x2a}}}}, [@fils_params, @NL80211_ATTR_IE={0x107, 0x2a, [@supported_rates, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x6c, 0x2}}, @measure_req={0x26, 0xd7, {0x2, 0x3, 0x1f, "9aff03ea5869a0fa6a68c819d155a900d4be6dcf21abfabb46903a8ab5f088a7e3bd3ee4e6d40377857b94ea33eaae2ffb4bd07d9e724d51faa87fdfa7e29f8dad7fd663f86d954e04ab9eda978b4dcc0798a4e1714e572266ca1fed9aca45608a8b1b365377533449bf55bd5f6d9066b2f426283eb204d647e98da03cdd8d7da6ed98fc365c26305d0b83532cfecfd0d0057d0dbdc48da49ccf2136a1aece34bf3f9620e3f85a6f5d2da087431faf62252fce04eda6ccd7fd6baa50f9f4a8a4aa1f4cae39925f3257f0f72dd53a89d9a8534704"}}, @mic={0x8c, 0x18, {0x3ab, "993ae62c27ac", @long="f59a9611d4c036cc0c605359b85d32a9"}}]}, @NL80211_ATTR_IE={0x35, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @gcr_ga={0xbd, 0x6, @broadcast}, @prep={0x83, 0x1f, @not_ext={{}, 0x81, 0xd, @broadcast, 0x3, "", 0x0, 0x7, @device_b, 0x45f}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "8917d9af95a619"}, @NL80211_ATTR_FILS_ERP_RRK={0xa8, 0xfc, "effbf4afef157dea7c718648e697df1e75f45215cad707cd23fc261e644b557f8583f6873646414bbb636ecccf1e37f724b4b66f4043c654fdeedc6932a6456aa3ec3447ced5d53657b30c1eda889d3c017914391f2828bb6ba302bf1feaf60043870828633229ce13425af3bb5d3ffc0e2a234a53ffbd4fadd46de8b0bf63025e8bf84b3fc67313bfba78e1ba12b3a5930e0463895109bfce928f133b67da6fda687d48"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "06c6627b48c80bbe93efffbae3"}]]}, 0x230}, 0x1, 0x0, 0x0, 0x2}, 0x80) (async) 02:11:29 executing program 5: socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x8, 0x2, 0x7fff, 0x10, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0xa}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=r1, r2, 0x13, 0x4, r3}, 0x14) 02:11:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140200000f6d77b611a4a65e2ad5ece8807fc2814c19279c469ea4b33f40ded3b8", @ANYRES16=r3, @ANYBLOB="0100"/14], 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20084000) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (rerun: 64) 02:11:29 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdfabb8f0dbcfc8d74d25160000000c0099003ad6000069000033be85481994e7c894000a000600080211"], 0x38}, 0x1, 0x0, 0x0, 0x20004055}, 0x4000000) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000140)={0x0, &(0x7f00000001c0)="d44f735064560fcb7d87b108beab009b0630251a9cb4ada61918503c57c6fffab9327df83d5a5e893d935bd44f691b746362537e8149e327197bbc713da5806ad88b1e9160902579fdd75d65de105241d588f941147c53ef35eecad74fa3aefbf5412997c3d35905e9b86e637749c1853c7e22d89cd7ac2781c511792da5c0f1d7405963a21ce5ebfc1cc50b454bd4288a943123dc493522ea91149d97c72dde32037efff76ae5b9c5eaa5b9ad25f63e", 0xb0}) [ 2642.809980] FAULT_INJECTION: forcing a failure. [ 2642.809980] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.857949] CPU: 0 PID: 19849 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2642.865864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2642.875227] Call Trace: [ 2642.877825] dump_stack+0x1fc/0x2ef [ 2642.881468] should_fail.cold+0xa/0xf [ 2642.885290] ? setup_fault_attr+0x200/0x200 [ 2642.889625] ? __lockdep_init_map+0x100/0x5a0 [ 2642.894153] __should_failslab+0x115/0x180 [ 2642.898399] should_failslab+0x5/0x10 [ 2642.902253] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2642.907373] __kmalloc_node+0x38/0x70 [ 2642.911278] blk_mq_alloc_rq_map+0xdf/0x230 [ 2642.915607] ? elevator_get+0x29/0x170 [ 2642.919526] blk_mq_init_sched+0x219/0x730 [ 2642.923802] elevator_init_mq+0xf0/0x180 [ 2642.927877] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2642.933187] blk_mq_init_queue+0x5c/0xa0 [ 2642.937273] loop_add+0x2cb/0x8a0 [ 2642.940797] loop_control_ioctl+0x16c/0x480 [ 2642.945130] ? loop_lookup+0x1d0/0x1d0 [ 2642.949035] ? ksys_write+0x241/0x2a0 [ 2642.952845] ? loop_lookup+0x1d0/0x1d0 [ 2642.956747] do_vfs_ioctl+0xcdb/0x12e0 [ 2642.960656] ? lock_downgrade+0x720/0x720 [ 2642.964821] ? check_preemption_disabled+0x41/0x280 [ 2642.969854] ? ioctl_preallocate+0x200/0x200 [ 2642.974276] ? __fget+0x356/0x510 [ 2642.977743] ? do_dup2+0x450/0x450 [ 2642.981420] ? vfs_write+0x393/0x540 [ 2642.985137] ? fput+0x2b/0x190 [ 2642.988336] ksys_ioctl+0x9b/0xc0 [ 2642.991797] __x64_sys_ioctl+0x6f/0xb0 [ 2642.995687] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2643.000369] do_syscall_64+0xf9/0x620 [ 2643.004187] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2643.009385] RIP: 0033:0x7fc956aba5a9 [ 2643.013104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2643.032477] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2643.040201] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2643.047477] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 02:11:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140200000f6d77b611a4a65e2ad5ece8807fc2814c19279c469ea4b33f40ded3b8", @ANYRES16=r3, @ANYBLOB="0100"/14], 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20084000) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2643.054778] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2643.062058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2643.069447] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x1fffffbf, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:30 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f0000000080)="73cced691cac881755beddcb99f633ed5bc8c5c316bcd115d3af1e3feb40a5ee5f1a6926a3e6138a4bbbae89d7a13f163fad3fe5840e78edea7ce69c5c4d2e23877601c3d02eb0138187f7a2760f60bab9f1c6979dc28ec48123fab3d92b5b5062f4a7d5f590fe5753e88aabd1e792f070ac6b7fb3a4b1c43d2915e71e2a3d05c52d1130d05d1eeefd31a2f17ee9b2a970f9e9421f2125151f801c5dae480a4efb0150429e1a39bb932c500458cee0a29e93cd9683c76ef8ae2a018029c1504e73304b5396bf12911d7e1ef65b35342e317d9ecbcf5f4182d6b8e03251107debaf87167371", 0xe5}) 02:11:30 executing program 5: socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async, rerun: 64) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x8, 0x2, 0x7fff, 0x10, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0xa}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) (async, rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=r1, r2, 0x13, 0x4, r3}, 0x14) (rerun: 64) 02:11:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) 02:11:30 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 41) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:30 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x230, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf7, 0x2a}}}}, [@fils_params, @NL80211_ATTR_IE={0x107, 0x2a, [@supported_rates, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x6c, 0x2}}, @measure_req={0x26, 0xd7, {0x2, 0x3, 0x1f, "9aff03ea5869a0fa6a68c819d155a900d4be6dcf21abfabb46903a8ab5f088a7e3bd3ee4e6d40377857b94ea33eaae2ffb4bd07d9e724d51faa87fdfa7e29f8dad7fd663f86d954e04ab9eda978b4dcc0798a4e1714e572266ca1fed9aca45608a8b1b365377533449bf55bd5f6d9066b2f426283eb204d647e98da03cdd8d7da6ed98fc365c26305d0b83532cfecfd0d0057d0dbdc48da49ccf2136a1aece34bf3f9620e3f85a6f5d2da087431faf62252fce04eda6ccd7fd6baa50f9f4a8a4aa1f4cae39925f3257f0f72dd53a89d9a8534704"}}, @mic={0x8c, 0x18, {0x3ab, "993ae62c27ac", @long="f59a9611d4c036cc0c605359b85d32a9"}}]}, @NL80211_ATTR_IE={0x35, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @gcr_ga={0xbd, 0x6, @broadcast}, @prep={0x83, 0x1f, @not_ext={{}, 0x81, 0xd, @broadcast, 0x3, "", 0x0, 0x7, @device_b, 0x45f}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "8917d9af95a619"}, @NL80211_ATTR_FILS_ERP_RRK={0xa8, 0xfc, "effbf4afef157dea7c718648e697df1e75f45215cad707cd23fc261e644b557f8583f6873646414bbb636ecccf1e37f724b4b66f4043c654fdeedc6932a6456aa3ec3447ced5d53657b30c1eda889d3c017914391f2828bb6ba302bf1feaf60043870828633229ce13425af3bb5d3ffc0e2a234a53ffbd4fadd46de8b0bf63025e8bf84b3fc67313bfba78e1ba12b3a5930e0463895109bfce928f133b67da6fda687d48"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "06c6627b48c80bbe93efffbae3"}]]}, 0x230}, 0x1, 0x0, 0x0, 0x2}, 0x80) (rerun: 64) 02:11:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000040), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) (async) [ 2643.789723] FAULT_INJECTION: forcing a failure. [ 2643.789723] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.817872] CPU: 1 PID: 19890 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2643.826045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2643.835402] Call Trace: [ 2643.838004] dump_stack+0x1fc/0x2ef [ 2643.841648] should_fail.cold+0xa/0xf [ 2643.845465] ? setup_fault_attr+0x200/0x200 [ 2643.849801] ? __lockdep_init_map+0x100/0x5a0 [ 2643.854310] __should_failslab+0x115/0x180 [ 2643.858625] should_failslab+0x5/0x10 [ 2643.862457] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2643.867571] __kmalloc_node+0x38/0x70 [ 2643.871385] blk_mq_alloc_rq_map+0x120/0x230 [ 2643.875799] ? elevator_get+0x29/0x170 [ 2643.879701] blk_mq_init_sched+0x219/0x730 [ 2643.883981] elevator_init_mq+0xf0/0x180 [ 2643.888058] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2643.893365] blk_mq_init_queue+0x5c/0xa0 [ 2643.897528] loop_add+0x2cb/0x8a0 [ 2643.900991] loop_control_ioctl+0x16c/0x480 [ 2643.905327] ? loop_lookup+0x1d0/0x1d0 [ 2643.909232] ? ksys_write+0x241/0x2a0 [ 2643.913038] ? loop_lookup+0x1d0/0x1d0 [ 2643.916938] do_vfs_ioctl+0xcdb/0x12e0 [ 2643.920839] ? lock_downgrade+0x720/0x720 [ 2643.925007] ? check_preemption_disabled+0x41/0x280 [ 2643.930027] ? ioctl_preallocate+0x200/0x200 [ 2643.934448] ? __fget+0x356/0x510 [ 2643.937906] ? do_dup2+0x450/0x450 [ 2643.941465] ? vfs_write+0x393/0x540 [ 2643.945180] ? fput+0x2b/0x190 [ 2643.948385] ksys_ioctl+0x9b/0xc0 [ 2643.951847] __x64_sys_ioctl+0x6f/0xb0 [ 2643.955745] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2643.960330] do_syscall_64+0xf9/0x620 [ 2643.964136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2643.969428] RIP: 0033:0x7fc956aba5a9 02:11:30 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f0000000080)="73cced691cac881755beddcb99f633ed5bc8c5c316bcd115d3af1e3feb40a5ee5f1a6926a3e6138a4bbbae89d7a13f163fad3fe5840e78edea7ce69c5c4d2e23877601c3d02eb0138187f7a2760f60bab9f1c6979dc28ec48123fab3d92b5b5062f4a7d5f590fe5753e88aabd1e792f070ac6b7fb3a4b1c43d2915e71e2a3d05c52d1130d05d1eeefd31a2f17ee9b2a970f9e9421f2125151f801c5dae480a4efb0150429e1a39bb932c500458cee0a29e93cd9683c76ef8ae2a018029c1504e73304b5396bf12911d7e1ef65b35342e317d9ecbcf5f4182d6b8e03251107debaf87167371", 0xe5}) 02:11:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x404c080) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r4) 02:11:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xc}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x691}, @NL80211_MESHCONF_TTL={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xb885}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7fffffff}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x44}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xff}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x200000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x801) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2643.973148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2643.992055] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2643.999781] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2644.007143] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2644.014417] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2644.021691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2644.028964] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) 02:11:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x404c080) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r4) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x404c080) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r4) (async) 02:11:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000550, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:31 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f0000000080)="73cced691cac881755beddcb99f633ed5bc8c5c316bcd115d3af1e3feb40a5ee5f1a6926a3e6138a4bbbae89d7a13f163fad3fe5840e78edea7ce69c5c4d2e23877601c3d02eb0138187f7a2760f60bab9f1c6979dc28ec48123fab3d92b5b5062f4a7d5f590fe5753e88aabd1e792f070ac6b7fb3a4b1c43d2915e71e2a3d05c52d1130d05d1eeefd31a2f17ee9b2a970f9e9421f2125151f801c5dae480a4efb0150429e1a39bb932c500458cee0a29e93cd9683c76ef8ae2a018029c1504e73304b5396bf12911d7e1ef65b35342e317d9ecbcf5f4182d6b8e03251107debaf87167371", 0xe5}) 02:11:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xc}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x691}, @NL80211_MESHCONF_TTL={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xb885}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7fffffff}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x44}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xff}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x200000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x801) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:31 executing program 3: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2004855}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x7, 0x7, 0x100, 0x3ff, 0x521d0bb9}, 0x14) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x6a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000c}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400009dc4213c1a2f26978ca477e6539aed5d126d0b734b0962cc0a23a1d9d1684eba63f958bfdce3e180174093bb7d08069f83af5fc6182c617a960aa2503ae805fd297fc7554ce442062144babf67e58731b6802f262cfa5a23c7e724d52e10d4bd21327bf49977baf5fcab5247f4a74bec663b6fc1011a4c4e15abcad709b479417ec61a317ecf7273c33efe2b23df318d7683cae3e7e40ac81bbe91e154a78c9149f9564197f870230859d62ad015360905a444a4e3f128e5b903860149779ec449987665a3103fe36456972b323c617266b992f7b376ac5491a6b5f241912c819b6d9469bf8323338b750969f8d1a6aa15d88b830addd506ad8e5f3d4fce898852759e1a4755d664dff7f22d157e3305011aa34d0197dd9be5f24c3d9135a728a6a891a31f41f83a99f7a721575fc93a1f59223f4632c8b2c31220d69ca892c2eaf99f42d22a0e50c5e5e217a9af187ca2e87ee5f71bae", @ANYRES16=r3, @ANYBLOB="010000000000000000007a0000000c009900000000000000000004002a00"], 0x24}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="f4ffff00330801810f34623fc5e9db200f99034177af5dc53f7f00761d0f437e96416309b78f45677ee1e6b3d0a96566d8f36d523797af14e0f0f45f181317ad95bd78c582ebcc5c696860c7af8cce75cb28fb53eab4f50a903ae06f75680a1a851960937d399e35455f122247c542f059f01e29836e86290e1064b4e88ac3d78c3fcee4cd9eee35d63f50", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25300000000c009900000000007f000000060036002500000006003600410000000600360031000000060036001e00000006003600150000000600360027000000060036002e0000000600360035000000"], 0x60}, 0x1, 0x0, 0x0, 0x445}, 0x4004005) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008090}, 0x8885) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 02:11:31 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 42) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x404c080) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r4) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x404c080) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r4) (async) 02:11:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0xf0, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:31 executing program 3: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2004855}, 0x80) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x7, 0x7, 0x100, 0x3ff, 0x521d0bb9}, 0x14) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x6a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000c}, 0x800) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010000000000000000007a0000000c009900000000000000000004002a00"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="f4ffff00330801810f34623fc5e9db200f99034177af5dc53f7f00761d0f437e96416309b78f45677ee1e6b3d0a96566d8f36d523797af14e0f0f45f181317ad95bd78c582ebcc5c696860c7af8cce75cb28fb53eab4f50a903ae06f75680a1a851960937d399e35455f122247c542f059f01e29836e86290e1064b4e88ac3d78c3fcee4cd9eee35d63f50", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25300000000c009900000000007f000000060036002500000006003600410000000600360031000000060036001e00000006003600150000000600360027000000060036002e0000000600360035000000"], 0x60}, 0x1, 0x0, 0x0, 0x445}, 0x4004005) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008090}, 0x8885) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 02:11:31 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) timerfd_gettime(r0, &(0x7f0000000080)) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0x6) 02:11:31 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x5) 02:11:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x1e0, 0x370, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xc}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x691}, @NL80211_MESHCONF_TTL={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xb885}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7fffffff}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x44}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xff}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x200000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x801) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2644.832236] FAULT_INJECTION: forcing a failure. [ 2644.832236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2644.875877] CPU: 1 PID: 19941 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2644.883790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2644.893240] Call Trace: [ 2644.895845] dump_stack+0x1fc/0x2ef [ 2644.899500] should_fail.cold+0xa/0xf [ 2644.903320] ? setup_fault_attr+0x200/0x200 [ 2644.907676] __alloc_pages_nodemask+0x239/0x2890 [ 2644.912454] ? kasan_kmalloc+0x139/0x160 [ 2644.916533] ? __kmalloc_node+0x4c/0x70 [ 2644.920526] ? blk_mq_alloc_rq_map+0x120/0x230 [ 2644.926080] ? blk_mq_init_sched+0x219/0x730 [ 2644.930509] ? elevator_init_mq+0xf0/0x180 [ 2644.934757] ? blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2644.940223] ? blk_mq_init_queue+0x5c/0xa0 [ 2644.944476] ? loop_add+0x2cb/0x8a0 [ 2644.948115] ? ksys_ioctl+0x9b/0xc0 [ 2644.951751] ? __x64_sys_ioctl+0x6f/0xb0 [ 2644.955833] ? do_syscall_64+0xf9/0x620 [ 2644.959820] ? should_fail+0x142/0x7b0 [ 2644.963722] ? fs_reclaim_release+0xd0/0x110 [ 2644.968148] ? gfp_pfmemalloc_allowed+0x150/0x150 02:11:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0xf0, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x1e0, 0xffffffff, 0x258, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0xf0, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2644.973014] ? setup_fault_attr+0x200/0x200 [ 2644.977380] ? lock_acquire+0x170/0x3c0 [ 2644.981408] ? check_preemption_disabled+0x41/0x280 [ 2644.986528] ? should_fail+0x142/0x7b0 [ 2644.990446] ? setup_fault_attr+0x200/0x200 [ 2644.994813] ? __lockdep_init_map+0x100/0x5a0 [ 2644.999422] ? find_next_bit+0x105/0x130 [ 2645.003586] ? __cpu_to_node+0x7b/0xa0 [ 2645.007507] ? blk_mq_hw_queue_to_node+0xc1/0x100 [ 2645.012553] blk_mq_alloc_rqs+0x242/0x800 [ 2645.016727] ? blk_mq_alloc_rq_map+0xaa/0x230 [ 2645.021332] blk_mq_init_sched+0x26c/0x730 02:11:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x1e0, 0x168, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2645.025597] elevator_init_mq+0xf0/0x180 [ 2645.029812] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2645.035215] blk_mq_init_queue+0x5c/0xa0 [ 2645.039480] loop_add+0x2cb/0x8a0 [ 2645.042949] loop_control_ioctl+0x16c/0x480 [ 2645.047289] ? loop_lookup+0x1d0/0x1d0 [ 2645.051191] ? ksys_write+0x241/0x2a0 [ 2645.055009] ? loop_lookup+0x1d0/0x1d0 [ 2645.058914] do_vfs_ioctl+0xcdb/0x12e0 [ 2645.062813] ? lock_downgrade+0x720/0x720 [ 2645.066973] ? check_preemption_disabled+0x41/0x280 [ 2645.072033] ? ioctl_preallocate+0x200/0x200 [ 2645.076473] ? __fget+0x356/0x510 [ 2645.080000] ? do_dup2+0x450/0x450 [ 2645.083660] ? vfs_write+0x393/0x540 [ 2645.087579] ? fput+0x2b/0x190 [ 2645.090766] ksys_ioctl+0x9b/0xc0 [ 2645.094217] __x64_sys_ioctl+0x6f/0xb0 [ 2645.098097] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2645.102718] do_syscall_64+0xf9/0x620 [ 2645.106781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2645.111956] RIP: 0033:0x7fc956aba5a9 [ 2645.115652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2645.134543] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2645.142235] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2645.149489] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2645.156743] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.164006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:11:31 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 43) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:31 executing program 3: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2004855}, 0x80) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x7, 0x7, 0x100, 0x3ff, 0x521d0bb9}, 0x14) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x6a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000c}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010000000000000000007a0000000c009900000000000000000004002a00"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="f4ffff00330801810f34623fc5e9db200f99034177af5dc53f7f00761d0f437e96416309b78f45677ee1e6b3d0a96566d8f36d523797af14e0f0f45f181317ad95bd78c582ebcc5c696860c7af8cce75cb28fb53eab4f50a903ae06f75680a1a851960937d399e35455f122247c542f059f01e29836e86290e1064b4e88ac3d78c3fcee4cd9eee35d63f50", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25300000000c009900000000007f000000060036002500000006003600410000000600360031000000060036001e00000006003600150000000600360027000000060036002e0000000600360035000000"], 0x60}, 0x1, 0x0, 0x0, 0x445}, 0x4004005) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008090}, 0x8885) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 02:11:31 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) timerfd_gettime(r0, &(0x7f0000000080)) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0x6) timerfd_create(0x7, 0x0) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) timerfd_gettime(r0, &(0x7f0000000080)) (async) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0x6) (async) 02:11:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0xf0, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:31 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x5) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) pipe2(&(0x7f0000000040), 0x800) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x5) (async) [ 2645.171260] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:31 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x2, 0x0, 0x6, 0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) 02:11:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) 02:11:31 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x5) [ 2645.305660] FAULT_INJECTION: forcing a failure. [ 2645.305660] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2645.331969] CPU: 1 PID: 19978 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2645.339886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2645.349328] Call Trace: [ 2645.351929] dump_stack+0x1fc/0x2ef 02:11:31 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) timerfd_gettime(r0, &(0x7f0000000080)) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0x6) 02:11:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x1e0, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) (async) [ 2645.355581] should_fail.cold+0xa/0xf [ 2645.359398] ? setup_fault_attr+0x200/0x200 [ 2645.363737] __alloc_pages_nodemask+0x239/0x2890 [ 2645.368508] ? kasan_kmalloc+0x139/0x160 [ 2645.372701] ? __kmalloc_node+0x4c/0x70 [ 2645.376702] ? blk_mq_alloc_rq_map+0x120/0x230 [ 2645.381303] ? blk_mq_init_sched+0x219/0x730 [ 2645.385720] ? elevator_init_mq+0xf0/0x180 [ 2645.389973] ? blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2645.395443] ? blk_mq_init_queue+0x5c/0xa0 [ 2645.399721] ? loop_add+0x2cb/0x8a0 02:11:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) [ 2645.403355] ? ksys_ioctl+0x9b/0xc0 [ 2645.406994] ? should_fail+0x142/0x7b0 [ 2645.410887] ? fs_reclaim_release+0xd0/0x110 [ 2645.415332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2645.420186] ? setup_fault_attr+0x200/0x200 [ 2645.424519] ? lock_acquire+0x170/0x3c0 [ 2645.428510] ? check_preemption_disabled+0x41/0x280 [ 2645.434410] ? should_fail+0x142/0x7b0 [ 2645.438309] ? setup_fault_attr+0x200/0x200 [ 2645.442641] ? __lockdep_init_map+0x100/0x5a0 [ 2645.447150] ? find_next_bit+0x105/0x130 [ 2645.451233] ? __cpu_to_node+0x7b/0xa0 [ 2645.455134] blk_mq_alloc_rqs+0x242/0x800 [ 2645.459304] blk_mq_init_sched+0x26c/0x730 [ 2645.463554] elevator_init_mq+0xf0/0x180 [ 2645.467613] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2645.472795] blk_mq_init_queue+0x5c/0xa0 [ 2645.476858] loop_add+0x2cb/0x8a0 [ 2645.480308] loop_control_ioctl+0x16c/0x480 [ 2645.484629] ? loop_lookup+0x1d0/0x1d0 [ 2645.488509] ? ksys_write+0x241/0x2a0 [ 2645.492304] ? loop_lookup+0x1d0/0x1d0 [ 2645.496184] do_vfs_ioctl+0xcdb/0x12e0 [ 2645.500058] ? lock_downgrade+0x720/0x720 [ 2645.504189] ? check_preemption_disabled+0x41/0x280 [ 2645.509209] ? ioctl_preallocate+0x200/0x200 [ 2645.513614] ? __fget+0x356/0x510 [ 2645.517052] ? do_dup2+0x450/0x450 [ 2645.520614] ? vfs_write+0x393/0x540 [ 2645.524322] ? fput+0x2b/0x190 [ 2645.527529] ksys_ioctl+0x9b/0xc0 [ 2645.531009] __x64_sys_ioctl+0x6f/0xb0 [ 2645.534897] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2645.539469] do_syscall_64+0xf9/0x620 [ 2645.543266] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2645.548452] RIP: 0033:0x7fc956aba5a9 [ 2645.552151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2645.571034] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2645.578727] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2645.586067] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2645.593452] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.600724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2645.607989] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:32 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 44) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0xf0, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 02:11:32 executing program 0: socket(0x10, 0xa, 0xfffffffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x20040010) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) 02:11:32 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x2, 0x0, 0x6, 0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) pipe2(&(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x2, 0x0, 0x6, 0x2}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) (async) 02:11:32 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\t'], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x1078, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x17}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @beacon=[@NL80211_ATTR_IE={0xf2, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x0, 0x1, 0x0, {0x7fffffff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x5, 0x6}}, @random_vendor={0xdd, 0x7f, "302abfb8a94630c0954fe767c428ec3a1f590e4d7f923da9ffbd0ba6796bc9c9ecba3631af15d273530b45e86a432549acd5f34eaf7fd7af74b127f32ab74dc9b91be5dcd0f80648cdb176ea00851c46ca25dd2a1f8ac17bfa961c68d47986b7cf685427c4a4f462bde4a4b8eed16c89f73c2bd78e0954456a0a24462627d3"}, @mesh_chsw={0x76, 0x6, {0x80, 0xff, 0x36, 0xfc00}}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x3, 0x0, {0x20, 0x1, 0x0, 0x212, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x0, 0x1f, 0x97}}, @channel_switch={0x25, 0x3, {0x0, 0x8c, 0x40}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x9, 0x41}}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x69}, 0x8, 0x3, @device_a, 0x0, 0x1, 0x6}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x422, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0x141, {0x8, 0x13, [@ext={{}, @device_a, 0x3f, @device_a, 0x30}, @ext={{}, @broadcast, 0x3, @device_b, 0x37}, @not_ext={{}, @device_b, 0x4, "", 0xf}, @not_ext={{}, @device_a, 0x1, "", 0xa}, @ext={{}, @device_b, 0x3, @device_a, 0x25}, @ext={{}, @broadcast, 0x400, @device_b, 0x12}, @ext={{}, @device_a, 0xbc0e, @device_b, 0x38}, @ext={{}, @device_b, 0x101, @device_a, 0x3}, @not_ext={{}, @device_a, 0x2, "", 0x3}, @not_ext={{}, @broadcast, 0x7, "", 0x30}, @ext={{}, @device_b, 0x9, @device_a, 0x2c}, @ext={{}, @device_b, 0x7, @device_a, 0xd}, @ext={{}, @device_a, 0x5, @device_a, 0x32}, @ext={{}, @device_a, 0xfffffffe, @device_a, 0xf}, @ext={{}, @device_b, 0x21, @device_b, 0x1c}, @not_ext={{}, @device_a, 0x2, "", 0x8}, @ext={{}, @device_a, 0x2, @broadcast, 0x39}, @not_ext={{}, @broadcast, 0x7ff, "", 0x3d}, @not_ext={{}, @device_a, 0x8, "", 0x20}]}}, @peer_mgmt={0x75, 0x16, {0x0, 0xff, @val=0x400, @void, @val="0e80e6f05e0bb12dd644134804e8a290"}}, @supported_rates={0x1, 0x8, [{0x5}, {0x36, 0x1}, {0x16, 0x1}, {0x5}, {0xb, 0x1}, {0x12, 0x1}, {0x30}, {0x60}]}, @peer_mgmt={0x75, 0x14, {0x1, 0x7, @void, @void, @val="dd41c30a4953ca6ef76f8f2d30a25275"}}, @perr={0x84, 0x122, {0x5, 0x12, [@not_ext={{}, @device_b, 0x2, "", 0x11}, @ext={{}, @broadcast, 0x1d, @broadcast, 0x20}, @not_ext={{}, @broadcast, 0xfce, "", 0x34}, @not_ext={{}, @broadcast, 0xcf, "", 0x1d}, @ext={{}, @device_a, 0x3, @broadcast, 0x11}, @ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @device_b, 0x400, "", 0x1b}, @not_ext={{}, @broadcast, 0x7, "", 0x3f}, @not_ext={{}, @device_b, 0x0, "", 0x8}, @not_ext={{}, @device_b, 0x8, "", 0x39}, @ext={{}, @device_a, 0xb0, @device_a, 0x1f}, @ext={{}, @device_a, 0x80000001, @device_b, 0x10}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @ext={{}, @broadcast, 0x80000001, @device_a, 0x26}, @ext={{}, @device_b, 0x2, @device_b, 0xf}, @ext={{}, @device_a, 0x1, @device_a, 0x36}, @not_ext={{}, @device_b, 0x0, "", 0x23}, @not_ext={{}, @device_b, 0x4, "", 0x30}]}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0xba, {0x0, 0x5, "8ad88d753f38193319fbfac1014528a7", "a408b7044253b11ddb204e0542e905d42cc4549a0a0c5e7d02dbc841dd94837c", "2223b458981c3d3817a1651482bb7245727535f6015a5cd39556d1971603233f", [{0x1, 0x11, "e99b141e4dfb3c9eb47b5ff175dfec3c0c"}, {0x4, 0x8, "079ec7aed57b8175"}, {0x2, 0x18, "cca11931193c9d45b094003e260f4637fabeecaee1fc75ff"}, {0x2, 0x1c, "6aceebe9c4de0cd7fcdd34d8cb4a80aec448e053b5747637e8f41a77"}, {0x3, 0x11, "9183d8330fc3bb29a6192b2e8cf1c5b713"}]}}, @measure_req={0x26, 0xb1, {0x3, 0x3, 0x3, "c2a9ce2b58eae705fb84087939e0960f269d3527ece22c2a0325533f7afae4bdf0dde0c7a177315f21872000dedecdc82eb13acf08b0157531d46fd2e40811083f6b53d8da6715afc578c6974294210c4e5db94c6c63956198f449d9de4accdbac951fc145a398d5ab7d525bd3032281ad247fcce76fb0d5ab0490aade30ea5ddf8c11d3a6fa188f0e612c7529ed9d5c643b68c7104594ba725afab220bed0252b81f989284cedcb1773eed339dc"}}]}, @NL80211_ATTR_PROBE_RESP={0x7bd, 0x91, "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"}, @NL80211_ATTR_IE={0x95, 0x2a, [@random_vendor={0xdd, 0x64, "0530eec61c2e0b49edbc744eb6d71d7d1145c70155b6848e57a596189564f25590984c321275c7c659754a37ef9b7084ca736c97ca107bd94386a759f59370b06f40c75e6c5237e1b6774487f91ea6826c54a7fd28d0d916644e18b60588ffa87918564f"}, @cf={0x4, 0x6, {0x5, 0x6, 0xfff9, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, @mic={0x8c, 0x18, {0x549, "cd55369df13f", @long="742ac6cf28bfd46af0fcc0dc9447e383"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe6, 0x7f, [@tim={0x5, 0x1e, {0x6, 0x19, 0x3, "992eb3e2c23af983df89dbf105e891fafdb9c0b6baf105a98d5c5a"}}, @cf={0x4, 0x6, {0xa6, 0x7a, 0x5, 0x1}}, @mic={0x8c, 0x10, {0x169, "cae52040d26b", @short="93a319b19cdee2ec"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @random_vendor={0xdd, 0x5c, "6d7ab0a9630f3730da52d897f99bb053ccfaab4185d6b1e6d458c92e0d2a6225a2ac0fe19279ab2012b843f4ee84e47b95fda5429948605df8267576352c683becfd2e1f651de68ba57bf748b9d54a19fd0cf755ba9177a14d6d870f"}, @mesh_chsw={0x76, 0x6, {0x3, 0x2, 0x27, 0x7}}, @ssid={0x0, 0x6, @default_ap_ssid}, @rann={0x7e, 0x15, {{0x1, 0x66}, 0x1, 0xc9, @device_b, 0x3, 0x1f, 0x6}}, @ssid={0x0, 0x19, @random="6458e5853971b125812d68ca76d4e65d555f99d613f00b8430"}]}, @NL80211_ATTR_IE={0x198, 0x2a, [@preq={0x82, 0x41, @ext={{}, 0x7, 0x4, 0x2, @broadcast, 0x8, @device_a, 0x1000, 0xcc3, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0x7ff}, {{}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @device_b, 0x1}]}}, @measure_req={0x26, 0x50, {0x7b, 0x8, 0x40, "a8e644157cc7c7101a095fa2d5a82f1610e7baf7dba783c83f9b3e606d32ff718ab969448be15b794a8d9b47eee5d566a6b5d29b255e754a70fa72847c9b519e30e596138124b5125e54cf6a6f"}}, @channel_switch={0x25, 0x3, {0x1, 0x30, 0x5}}, @mesh_chsw={0x76, 0x6, {0xff, 0x0, 0x2f, 0x8}}, @perr={0x84, 0xe8, {0x6, 0xe, [@not_ext={{}, @broadcast, 0x7, "", 0x31}, @not_ext={{}, @broadcast, 0x8, "", 0x38}, @ext={{}, @device_b, 0x4590, @device_a, 0x41}, @ext={{}, @device_b, 0x1, @device_b, 0x37}, @ext={{}, @broadcast, 0x8, @device_b, 0x36}, @ext={{}, @broadcast, 0x81, @device_a, 0x35}, @ext={{}, @device_b, 0x0, @device_a, 0x1d}, @not_ext={{}, @device_b, 0x1, "", 0x3f}, @ext={{}, @device_b, 0xffffffff, @broadcast, 0x2a}, @ext={{}, @device_a, 0x8, @device_a, 0x35}, @not_ext={{}, @broadcast, 0x4, "", 0x3c}, @not_ext={{}, @device_a, 0x101, "", 0x28}, @ext={{}, @device_b, 0x5, @broadcast, 0x25}, @not_ext={{}, @device_a, 0xffff, "", 0x24}]}}, @channel_switch={0x25, 0x3, {0x1, 0x99, 0x6}}, @dsss={0x3, 0x1, 0xb7}]}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x1078}, 0x1, 0x0, 0x0, 0x60004080}, 0x0) 02:11:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 02:11:32 executing program 0: socket(0x10, 0xa, 0xfffffffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x20040010) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) socket(0x10, 0xa, 0xfffffffc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x20040010) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) (async) 02:11:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x1e0, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:32 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x2, 0x0, 0x6, 0x2}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) [ 2645.787535] FAULT_INJECTION: forcing a failure. [ 2645.787535] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.791016] nla_parse: 12 callbacks suppressed [ 2645.791025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 02:11:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20014080) [ 2645.837501] CPU: 0 PID: 20031 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2645.845405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2645.854757] Call Trace: [ 2645.857359] dump_stack+0x1fc/0x2ef [ 2645.860997] should_fail.cold+0xa/0xf [ 2645.864811] ? setup_fault_attr+0x200/0x200 [ 2645.869142] ? lock_acquire+0x170/0x3c0 [ 2645.873134] __should_failslab+0x115/0x180 [ 2645.877379] should_failslab+0x5/0x10 [ 2645.881188] kmem_cache_alloc_node_trace+0x244/0x3b0 02:11:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x1) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20014080) [ 2645.886297] elevator_alloc+0x7a/0x200 [ 2645.890193] dd_init_queue+0x20/0x430 [ 2645.894002] blk_mq_init_sched+0x395/0x730 [ 2645.898258] elevator_init_mq+0xf0/0x180 [ 2645.902338] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2645.907549] blk_mq_init_queue+0x5c/0xa0 [ 2645.911713] loop_add+0x2cb/0x8a0 [ 2645.915175] loop_control_ioctl+0x16c/0x480 [ 2645.919593] ? loop_lookup+0x1d0/0x1d0 [ 2645.923501] ? ksys_write+0x241/0x2a0 [ 2645.927312] ? loop_lookup+0x1d0/0x1d0 [ 2645.931222] do_vfs_ioctl+0xcdb/0x12e0 [ 2645.935119] ? lock_downgrade+0x720/0x720 [ 2645.939281] ? check_preemption_disabled+0x41/0x280 [ 2645.944311] ? ioctl_preallocate+0x200/0x200 [ 2645.948730] ? __fget+0x356/0x510 [ 2645.952194] ? do_dup2+0x450/0x450 [ 2645.955737] ? vfs_write+0x393/0x540 [ 2645.959465] ? fput+0x2b/0x190 [ 2645.962680] ksys_ioctl+0x9b/0xc0 [ 2645.966143] __x64_sys_ioctl+0x6f/0xb0 [ 2645.970036] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2645.974624] do_syscall_64+0xf9/0x620 [ 2645.978431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2645.983611] RIP: 0033:0x7fc956aba5a9 [ 2645.987328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2646.006225] RSP: 002b:00007fc95500c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2646.014789] RAX: ffffffffffffffda RBX: 00007fc956bdb050 RCX: 00007fc956aba5a9 [ 2646.022045] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2646.029419] RBP: 00007fc95500c1d0 R08: 0000000000000000 R09: 0000000000000000 02:11:32 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 45) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:32 executing program 0: socket(0x10, 0xa, 0xfffffffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x20040010) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) socket(0x10, 0xa, 0xfffffffc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x20040010) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) (async) 02:11:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20014080) socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000000), 0x80000) (async) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x1) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20014080) (async) 02:11:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x402, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 02:11:32 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\t'], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x1078, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x17}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @beacon=[@NL80211_ATTR_IE={0xf2, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x0, 0x1, 0x0, {0x7fffffff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x5, 0x6}}, @random_vendor={0xdd, 0x7f, "302abfb8a94630c0954fe767c428ec3a1f590e4d7f923da9ffbd0ba6796bc9c9ecba3631af15d273530b45e86a432549acd5f34eaf7fd7af74b127f32ab74dc9b91be5dcd0f80648cdb176ea00851c46ca25dd2a1f8ac17bfa961c68d47986b7cf685427c4a4f462bde4a4b8eed16c89f73c2bd78e0954456a0a24462627d3"}, @mesh_chsw={0x76, 0x6, {0x80, 0xff, 0x36, 0xfc00}}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x3, 0x0, {0x20, 0x1, 0x0, 0x212, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x0, 0x1f, 0x97}}, @channel_switch={0x25, 0x3, {0x0, 0x8c, 0x40}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x9, 0x41}}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x69}, 0x8, 0x3, @device_a, 0x0, 0x1, 0x6}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x422, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0x141, {0x8, 0x13, [@ext={{}, @device_a, 0x3f, @device_a, 0x30}, @ext={{}, @broadcast, 0x3, @device_b, 0x37}, @not_ext={{}, @device_b, 0x4, "", 0xf}, @not_ext={{}, @device_a, 0x1, "", 0xa}, @ext={{}, @device_b, 0x3, @device_a, 0x25}, @ext={{}, @broadcast, 0x400, @device_b, 0x12}, @ext={{}, @device_a, 0xbc0e, @device_b, 0x38}, @ext={{}, @device_b, 0x101, @device_a, 0x3}, @not_ext={{}, @device_a, 0x2, "", 0x3}, @not_ext={{}, @broadcast, 0x7, "", 0x30}, @ext={{}, @device_b, 0x9, @device_a, 0x2c}, @ext={{}, @device_b, 0x7, @device_a, 0xd}, @ext={{}, @device_a, 0x5, @device_a, 0x32}, @ext={{}, @device_a, 0xfffffffe, @device_a, 0xf}, @ext={{}, @device_b, 0x21, @device_b, 0x1c}, @not_ext={{}, @device_a, 0x2, "", 0x8}, @ext={{}, @device_a, 0x2, @broadcast, 0x39}, @not_ext={{}, @broadcast, 0x7ff, "", 0x3d}, @not_ext={{}, @device_a, 0x8, "", 0x20}]}}, @peer_mgmt={0x75, 0x16, {0x0, 0xff, @val=0x400, @void, @val="0e80e6f05e0bb12dd644134804e8a290"}}, @supported_rates={0x1, 0x8, [{0x5}, {0x36, 0x1}, {0x16, 0x1}, {0x5}, {0xb, 0x1}, {0x12, 0x1}, {0x30}, {0x60}]}, @peer_mgmt={0x75, 0x14, {0x1, 0x7, @void, @void, @val="dd41c30a4953ca6ef76f8f2d30a25275"}}, @perr={0x84, 0x122, {0x5, 0x12, [@not_ext={{}, @device_b, 0x2, "", 0x11}, @ext={{}, @broadcast, 0x1d, @broadcast, 0x20}, @not_ext={{}, @broadcast, 0xfce, "", 0x34}, @not_ext={{}, @broadcast, 0xcf, "", 0x1d}, @ext={{}, @device_a, 0x3, @broadcast, 0x11}, @ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @device_b, 0x400, "", 0x1b}, @not_ext={{}, @broadcast, 0x7, "", 0x3f}, @not_ext={{}, @device_b, 0x0, "", 0x8}, @not_ext={{}, @device_b, 0x8, "", 0x39}, @ext={{}, @device_a, 0xb0, @device_a, 0x1f}, @ext={{}, @device_a, 0x80000001, @device_b, 0x10}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @ext={{}, @broadcast, 0x80000001, @device_a, 0x26}, @ext={{}, @device_b, 0x2, @device_b, 0xf}, @ext={{}, @device_a, 0x1, @device_a, 0x36}, @not_ext={{}, @device_b, 0x0, "", 0x23}, @not_ext={{}, @device_b, 0x4, "", 0x30}]}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0xba, {0x0, 0x5, "8ad88d753f38193319fbfac1014528a7", "a408b7044253b11ddb204e0542e905d42cc4549a0a0c5e7d02dbc841dd94837c", "2223b458981c3d3817a1651482bb7245727535f6015a5cd39556d1971603233f", [{0x1, 0x11, "e99b141e4dfb3c9eb47b5ff175dfec3c0c"}, {0x4, 0x8, "079ec7aed57b8175"}, {0x2, 0x18, "cca11931193c9d45b094003e260f4637fabeecaee1fc75ff"}, {0x2, 0x1c, "6aceebe9c4de0cd7fcdd34d8cb4a80aec448e053b5747637e8f41a77"}, {0x3, 0x11, "9183d8330fc3bb29a6192b2e8cf1c5b713"}]}}, @measure_req={0x26, 0xb1, {0x3, 0x3, 0x3, "c2a9ce2b58eae705fb84087939e0960f269d3527ece22c2a0325533f7afae4bdf0dde0c7a177315f21872000dedecdc82eb13acf08b0157531d46fd2e40811083f6b53d8da6715afc578c6974294210c4e5db94c6c63956198f449d9de4accdbac951fc145a398d5ab7d525bd3032281ad247fcce76fb0d5ab0490aade30ea5ddf8c11d3a6fa188f0e612c7529ed9d5c643b68c7104594ba725afab220bed0252b81f989284cedcb1773eed339dc"}}]}, @NL80211_ATTR_PROBE_RESP={0x7bd, 0x91, "1d4e0d2e66066d091db723260f6c89b50445cdd311c1d74cbc41cd1fba5009c4235bb3a334a697f637b75b64202528c9bc51d8cb9d8fff4a4a65b035be1620213752267fbbf8a6e93ca337c0c89fdbec73c10d44f00a382bbdc99f5c434f3a09764653678de43594d591f3da771b492e9766b8c46cc2e613df4b39526ab455f5c7edfbafd666f8ade0be5671eccc866b7c8efafeebe50e67948798c346bfc8360c71bc767ba75dda874cc8d2e61c6cd644f10aa1d10d7cf3d9458eddf2bec715494a3cde628194af8420fea1fc2ac1b5ec43dc99009f9bb73caded39a8ceee672a76e7fa08844f298285b99a9d520a2d25c74f2cb7cd6fe716bf2a81fe17505bbf62f0ee562dfe314177461142620bf145316c5a2aa2a522857ca99806fca896871b6dd34d8c2dc635c3df94cd8fcc8b3ae372d8bba7da7420ceceb031c23f5ae2f9ee1e7c31903e7159abe8307d03ce0333c8251683d34add2b1ad8ab09556d98de90f92db4e94403baa7d4350f99bab73a8e34ba4258accbbd860d520f8c5acc639c1dcba4460a75bedcbd2a9dc319b1f09315da05f3e97397d178235e583c1c9098f5da410dd793424942927217b21d126c407ff5e03d71977366070e084f036ef530f4118877d797356cbdba603e47a86cc3ff625f727c4c4fb0dccb3272cb6275b108d284a4c944ec588c81a9567dda3c5fc09fc6e34b8ed41754e9be6ec2875f447591abbab4f26cc0a1bf5cf3f3950d6d41b1000153c3256b900e497aa11adc71ebd581d50ce35c36aad9a2a3af162acfffc2b51a6492281bfd95a0111ff455cdd36ec8984446f950aabaea8b47ae10620c4f6a6c83dcad4bc23827201d10622e2b848df00200512a4535be5ab265b1a1ba0501a586d1d962243ed3bd166bdec3da523990642621a6337bd849aba42f39adcbee917026f49bd44abffb6bd8704f0e80ef2f8daa589918fe4acbfe29d48800136dcba0329f8d91cc7b8df97179fa24b589b5cf6472eb82503c9fb5bb3362f3da2468c211e9a02113af272b4357432af7104031d3be3b7d6237af00c6606096163a182b6108331755b7b6c73a51b7061d794e301360bb33c1c00360cd283152f285850043cf5e7f68d5a63d2f746fefd56085215165229551c435be7eb3dc11868cbd82f91c05059841cd1a961132534eeb38a01e2dc56e07c2c6d86e210d9a4255df586ec8f867fa15aaee389c668f0a80ace4caedefadce296c528a6b8cd1d1a6126dac995726eecb45751f39fe2de8cc37696666a7f1f0c90ea08844996bb4c6595f32d6526972d5bb429ac2ac6b3e0960eb1c0e2418d719c22e34fd86d2e1cacd5aa88304a26e6ce2a98e22023dea5871854807d49c2b8733c888a5343c7d6155735572c4fa0eab080351d9ff0639e59a269fce143de42c6117bf5832491de084d7024ce199d59f533f99bb3ba2a4eecd5b74a39aa52f08d5c8337ad0ade75bebe6a47968c93c10c37255fd1c42da695c1d36af8c18dfa71c4fa9f373d24f48ddd1700141eec7c48f98332fbcaf952a55016f52a986aeefbea757f6d2d11a3236c7753582ae2d75854d38b3979f45fd0ad1c42f6ab8c4ee083ffca5dd18900bd36f0a367dfef648cb872efc566152a6b2f6cae24331c9917b5c9fee38c1e30330ca9181633d9202e903f5551708334d0aa05882800d53fe1d6953fccefbd6aa8d3c9867d05d40f836d39063290a60d2cccdacd2c83a60c81e485a30dd073f8fde425faa2b1370e89d9ea74c7f86760dc57b95fca640d35857ac338b86caf5ca55c01a3ba25efde09839880f67b2384c6e2f309b65e0e4a09d7c1422bc4e0f6f8f00fb01356721bc0246412e9e86369d2a4f5990fbb806dcc57ea5b8f0f767432b6e06d6d0a0c806d35fa7ed1d6be38f79b08fac7ea42576c455f894c6d3e9ae55b70aa36afe3e64b6f8f80efdf04b69634a273069436e30d5527669058924cbfe4da023aed28d6a2b38b46c95b379152d25d52ccbcfc32c07493b0b0dddee0f29ac12cfe8dc7296ac116dd14287ac1ca34ef756f06bff58db582403f05a5e12a5796851e97b22fded5506ba8bd97b828f582988149f86ad4ac03f1d34fab1733f786703f9b606a63e3d81595ec6d476f944a8079c1cdd7e8826e241b7344cd06cf852e86519158f9bf16fdff6c4d355b571ce3f547a78bf0ecd370ee2487c06a716b3353ed34cc64a2c9f1760a6a780f5d707d09e60ef55858aec756a1ce78b107fc21e8a0a640edf1757a4be2adc016acb3c1b14b5cc291e93b8d9363a4c67677bfd7146544378b65e1134366ac1b709ca5aa5499907142cea73c9bbe44b364f08c490faa65331a32b4f93ace0f281e834fd2d3c8d7aaab9d52b283fe4fb57e79e27161b939353c43a78f8bba207431199ffbb5696cb313e030840a35db9e3e3188379051de085a6130bbca2365768e36aa8d209ad692b3de9fbe4d21ce54ff2998ea6870ae7513479bd957e87a16369095baa34c3488102de2cb91a42c904408ac60c442e1ec6827e7cfa49ea825770c57ad3f5b81733f8eeed3edacc6f61914ed99f9c9472ae939f306019421b49d453e97b6f9f9c6a0fa55c7d1f9f3685c3558232e30e488cf42cd66bfce129ad07a67c685e5e63bbbb13a3de6fb3f432c18406df7911956563a6a2208c6f86ba96981762512bf5e1f5cb80ce8345da50b704cc900c6a56095a6e18124ff2827586a998bf49008219b049e3408a13241eefef0bcdcd04944e0a61c2499322747508774ba6ba400958a8bdce3ecba4505dfa1b"}, @NL80211_ATTR_IE={0x95, 0x2a, [@random_vendor={0xdd, 0x64, "0530eec61c2e0b49edbc744eb6d71d7d1145c70155b6848e57a596189564f25590984c321275c7c659754a37ef9b7084ca736c97ca107bd94386a759f59370b06f40c75e6c5237e1b6774487f91ea6826c54a7fd28d0d916644e18b60588ffa87918564f"}, @cf={0x4, 0x6, {0x5, 0x6, 0xfff9, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, @mic={0x8c, 0x18, {0x549, "cd55369df13f", @long="742ac6cf28bfd46af0fcc0dc9447e383"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe6, 0x7f, [@tim={0x5, 0x1e, {0x6, 0x19, 0x3, "992eb3e2c23af983df89dbf105e891fafdb9c0b6baf105a98d5c5a"}}, @cf={0x4, 0x6, {0xa6, 0x7a, 0x5, 0x1}}, @mic={0x8c, 0x10, {0x169, "cae52040d26b", @short="93a319b19cdee2ec"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @random_vendor={0xdd, 0x5c, "6d7ab0a9630f3730da52d897f99bb053ccfaab4185d6b1e6d458c92e0d2a6225a2ac0fe19279ab2012b843f4ee84e47b95fda5429948605df8267576352c683becfd2e1f651de68ba57bf748b9d54a19fd0cf755ba9177a14d6d870f"}, @mesh_chsw={0x76, 0x6, {0x3, 0x2, 0x27, 0x7}}, @ssid={0x0, 0x6, @default_ap_ssid}, @rann={0x7e, 0x15, {{0x1, 0x66}, 0x1, 0xc9, @device_b, 0x3, 0x1f, 0x6}}, @ssid={0x0, 0x19, @random="6458e5853971b125812d68ca76d4e65d555f99d613f00b8430"}]}, @NL80211_ATTR_IE={0x198, 0x2a, [@preq={0x82, 0x41, @ext={{}, 0x7, 0x4, 0x2, @broadcast, 0x8, @device_a, 0x1000, 0xcc3, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0x7ff}, {{}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @device_b, 0x1}]}}, @measure_req={0x26, 0x50, {0x7b, 0x8, 0x40, "a8e644157cc7c7101a095fa2d5a82f1610e7baf7dba783c83f9b3e606d32ff718ab969448be15b794a8d9b47eee5d566a6b5d29b255e754a70fa72847c9b519e30e596138124b5125e54cf6a6f"}}, @channel_switch={0x25, 0x3, {0x1, 0x30, 0x5}}, @mesh_chsw={0x76, 0x6, {0xff, 0x0, 0x2f, 0x8}}, @perr={0x84, 0xe8, {0x6, 0xe, [@not_ext={{}, @broadcast, 0x7, "", 0x31}, @not_ext={{}, @broadcast, 0x8, "", 0x38}, @ext={{}, @device_b, 0x4590, @device_a, 0x41}, @ext={{}, @device_b, 0x1, @device_b, 0x37}, @ext={{}, @broadcast, 0x8, @device_b, 0x36}, @ext={{}, @broadcast, 0x81, @device_a, 0x35}, @ext={{}, @device_b, 0x0, @device_a, 0x1d}, @not_ext={{}, @device_b, 0x1, "", 0x3f}, @ext={{}, @device_b, 0xffffffff, @broadcast, 0x2a}, @ext={{}, @device_a, 0x8, @device_a, 0x35}, @not_ext={{}, @broadcast, 0x4, "", 0x3c}, @not_ext={{}, @device_a, 0x101, "", 0x28}, @ext={{}, @device_b, 0x5, @broadcast, 0x25}, @not_ext={{}, @device_a, 0xffff, "", 0x24}]}}, @channel_switch={0x25, 0x3, {0x1, 0x99, 0x6}}, @dsss={0x3, 0x1, 0xb7}]}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x1078}, 0x1, 0x0, 0x0, 0x60004080}, 0x0) timerfd_create(0x8, 0x0) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) (async) pipe2(&(0x7f0000000000), 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\t'], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x1078, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x17}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @beacon=[@NL80211_ATTR_IE={0xf2, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x0, 0x1, 0x0, {0x7fffffff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x5, 0x6}}, @random_vendor={0xdd, 0x7f, "302abfb8a94630c0954fe767c428ec3a1f590e4d7f923da9ffbd0ba6796bc9c9ecba3631af15d273530b45e86a432549acd5f34eaf7fd7af74b127f32ab74dc9b91be5dcd0f80648cdb176ea00851c46ca25dd2a1f8ac17bfa961c68d47986b7cf685427c4a4f462bde4a4b8eed16c89f73c2bd78e0954456a0a24462627d3"}, @mesh_chsw={0x76, 0x6, {0x80, 0xff, 0x36, 0xfc00}}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x3, 0x0, {0x20, 0x1, 0x0, 0x212, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x0, 0x1f, 0x97}}, @channel_switch={0x25, 0x3, {0x0, 0x8c, 0x40}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x9, 0x41}}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x69}, 0x8, 0x3, @device_a, 0x0, 0x1, 0x6}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x422, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0x141, {0x8, 0x13, [@ext={{}, @device_a, 0x3f, @device_a, 0x30}, @ext={{}, @broadcast, 0x3, @device_b, 0x37}, @not_ext={{}, @device_b, 0x4, "", 0xf}, @not_ext={{}, @device_a, 0x1, "", 0xa}, @ext={{}, @device_b, 0x3, @device_a, 0x25}, @ext={{}, @broadcast, 0x400, @device_b, 0x12}, @ext={{}, @device_a, 0xbc0e, @device_b, 0x38}, @ext={{}, @device_b, 0x101, @device_a, 0x3}, @not_ext={{}, @device_a, 0x2, "", 0x3}, @not_ext={{}, @broadcast, 0x7, "", 0x30}, @ext={{}, @device_b, 0x9, @device_a, 0x2c}, @ext={{}, @device_b, 0x7, @device_a, 0xd}, @ext={{}, @device_a, 0x5, @device_a, 0x32}, @ext={{}, @device_a, 0xfffffffe, @device_a, 0xf}, @ext={{}, @device_b, 0x21, @device_b, 0x1c}, @not_ext={{}, @device_a, 0x2, "", 0x8}, @ext={{}, @device_a, 0x2, @broadcast, 0x39}, @not_ext={{}, @broadcast, 0x7ff, "", 0x3d}, @not_ext={{}, @device_a, 0x8, "", 0x20}]}}, @peer_mgmt={0x75, 0x16, {0x0, 0xff, @val=0x400, @void, @val="0e80e6f05e0bb12dd644134804e8a290"}}, @supported_rates={0x1, 0x8, [{0x5}, {0x36, 0x1}, {0x16, 0x1}, {0x5}, {0xb, 0x1}, {0x12, 0x1}, {0x30}, {0x60}]}, @peer_mgmt={0x75, 0x14, {0x1, 0x7, @void, @void, @val="dd41c30a4953ca6ef76f8f2d30a25275"}}, @perr={0x84, 0x122, {0x5, 0x12, [@not_ext={{}, @device_b, 0x2, "", 0x11}, @ext={{}, @broadcast, 0x1d, @broadcast, 0x20}, @not_ext={{}, @broadcast, 0xfce, "", 0x34}, @not_ext={{}, @broadcast, 0xcf, "", 0x1d}, @ext={{}, @device_a, 0x3, @broadcast, 0x11}, @ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @device_b, 0x400, "", 0x1b}, @not_ext={{}, @broadcast, 0x7, "", 0x3f}, @not_ext={{}, @device_b, 0x0, "", 0x8}, @not_ext={{}, @device_b, 0x8, "", 0x39}, @ext={{}, @device_a, 0xb0, @device_a, 0x1f}, @ext={{}, @device_a, 0x80000001, @device_b, 0x10}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @ext={{}, @broadcast, 0x80000001, @device_a, 0x26}, @ext={{}, @device_b, 0x2, @device_b, 0xf}, @ext={{}, @device_a, 0x1, @device_a, 0x36}, @not_ext={{}, @device_b, 0x0, "", 0x23}, @not_ext={{}, @device_b, 0x4, "", 0x30}]}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0xba, {0x0, 0x5, "8ad88d753f38193319fbfac1014528a7", "a408b7044253b11ddb204e0542e905d42cc4549a0a0c5e7d02dbc841dd94837c", "2223b458981c3d3817a1651482bb7245727535f6015a5cd39556d1971603233f", [{0x1, 0x11, "e99b141e4dfb3c9eb47b5ff175dfec3c0c"}, {0x4, 0x8, "079ec7aed57b8175"}, {0x2, 0x18, "cca11931193c9d45b094003e260f4637fabeecaee1fc75ff"}, {0x2, 0x1c, "6aceebe9c4de0cd7fcdd34d8cb4a80aec448e053b5747637e8f41a77"}, {0x3, 0x11, "9183d8330fc3bb29a6192b2e8cf1c5b713"}]}}, @measure_req={0x26, 0xb1, {0x3, 0x3, 0x3, "c2a9ce2b58eae705fb84087939e0960f269d3527ece22c2a0325533f7afae4bdf0dde0c7a177315f21872000dedecdc82eb13acf08b0157531d46fd2e40811083f6b53d8da6715afc578c6974294210c4e5db94c6c63956198f449d9de4accdbac951fc145a398d5ab7d525bd3032281ad247fcce76fb0d5ab0490aade30ea5ddf8c11d3a6fa188f0e612c7529ed9d5c643b68c7104594ba725afab220bed0252b81f989284cedcb1773eed339dc"}}]}, @NL80211_ATTR_PROBE_RESP={0x7bd, 0x91, "1d4e0d2e66066d091db723260f6c89b50445cdd311c1d74cbc41cd1fba5009c4235bb3a334a697f637b75b64202528c9bc51d8cb9d8fff4a4a65b035be1620213752267fbbf8a6e93ca337c0c89fdbec73c10d44f00a382bbdc99f5c434f3a09764653678de43594d591f3da771b492e9766b8c46cc2e613df4b39526ab455f5c7edfbafd666f8ade0be5671eccc866b7c8efafeebe50e67948798c346bfc8360c71bc767ba75dda874cc8d2e61c6cd644f10aa1d10d7cf3d9458eddf2bec715494a3cde628194af8420fea1fc2ac1b5ec43dc99009f9bb73caded39a8ceee672a76e7fa08844f298285b99a9d520a2d25c74f2cb7cd6fe716bf2a81fe17505bbf62f0ee562dfe314177461142620bf145316c5a2aa2a522857ca99806fca896871b6dd34d8c2dc635c3df94cd8fcc8b3ae372d8bba7da7420ceceb031c23f5ae2f9ee1e7c31903e7159abe8307d03ce0333c8251683d34add2b1ad8ab09556d98de90f92db4e94403baa7d4350f99bab73a8e34ba4258accbbd860d520f8c5acc639c1dcba4460a75bedcbd2a9dc319b1f09315da05f3e97397d178235e583c1c9098f5da410dd793424942927217b21d126c407ff5e03d71977366070e084f036ef530f4118877d797356cbdba603e47a86cc3ff625f727c4c4fb0dccb3272cb6275b108d284a4c944ec588c81a9567dda3c5fc09fc6e34b8ed41754e9be6ec2875f447591abbab4f26cc0a1bf5cf3f3950d6d41b1000153c3256b900e497aa11adc71ebd581d50ce35c36aad9a2a3af162acfffc2b51a6492281bfd95a0111ff455cdd36ec8984446f950aabaea8b47ae10620c4f6a6c83dcad4bc23827201d10622e2b848df00200512a4535be5ab265b1a1ba0501a586d1d962243ed3bd166bdec3da523990642621a6337bd849aba42f39adcbee917026f49bd44abffb6bd8704f0e80ef2f8daa589918fe4acbfe29d48800136dcba0329f8d91cc7b8df97179fa24b589b5cf6472eb82503c9fb5bb3362f3da2468c211e9a02113af272b4357432af7104031d3be3b7d6237af00c6606096163a182b6108331755b7b6c73a51b7061d794e301360bb33c1c00360cd283152f285850043cf5e7f68d5a63d2f746fefd56085215165229551c435be7eb3dc11868cbd82f91c05059841cd1a961132534eeb38a01e2dc56e07c2c6d86e210d9a4255df586ec8f867fa15aaee389c668f0a80ace4caedefadce296c528a6b8cd1d1a6126dac995726eecb45751f39fe2de8cc37696666a7f1f0c90ea08844996bb4c6595f32d6526972d5bb429ac2ac6b3e0960eb1c0e2418d719c22e34fd86d2e1cacd5aa88304a26e6ce2a98e22023dea5871854807d49c2b8733c888a5343c7d6155735572c4fa0eab080351d9ff0639e59a269fce143de42c6117bf5832491de084d7024ce199d59f533f99bb3ba2a4eecd5b74a39aa52f08d5c8337ad0ade75bebe6a47968c93c10c37255fd1c42da695c1d36af8c18dfa71c4fa9f373d24f48ddd1700141eec7c48f98332fbcaf952a55016f52a986aeefbea757f6d2d11a3236c7753582ae2d75854d38b3979f45fd0ad1c42f6ab8c4ee083ffca5dd18900bd36f0a367dfef648cb872efc566152a6b2f6cae24331c9917b5c9fee38c1e30330ca9181633d9202e903f5551708334d0aa05882800d53fe1d6953fccefbd6aa8d3c9867d05d40f836d39063290a60d2cccdacd2c83a60c81e485a30dd073f8fde425faa2b1370e89d9ea74c7f86760dc57b95fca640d35857ac338b86caf5ca55c01a3ba25efde09839880f67b2384c6e2f309b65e0e4a09d7c1422bc4e0f6f8f00fb01356721bc0246412e9e86369d2a4f5990fbb806dcc57ea5b8f0f767432b6e06d6d0a0c806d35fa7ed1d6be38f79b08fac7ea42576c455f894c6d3e9ae55b70aa36afe3e64b6f8f80efdf04b69634a273069436e30d5527669058924cbfe4da023aed28d6a2b38b46c95b379152d25d52ccbcfc32c07493b0b0dddee0f29ac12cfe8dc7296ac116dd14287ac1ca34ef756f06bff58db582403f05a5e12a5796851e97b22fded5506ba8bd97b828f582988149f86ad4ac03f1d34fab1733f786703f9b606a63e3d81595ec6d476f944a8079c1cdd7e8826e241b7344cd06cf852e86519158f9bf16fdff6c4d355b571ce3f547a78bf0ecd370ee2487c06a716b3353ed34cc64a2c9f1760a6a780f5d707d09e60ef55858aec756a1ce78b107fc21e8a0a640edf1757a4be2adc016acb3c1b14b5cc291e93b8d9363a4c67677bfd7146544378b65e1134366ac1b709ca5aa5499907142cea73c9bbe44b364f08c490faa65331a32b4f93ace0f281e834fd2d3c8d7aaab9d52b283fe4fb57e79e27161b939353c43a78f8bba207431199ffbb5696cb313e030840a35db9e3e3188379051de085a6130bbca2365768e36aa8d209ad692b3de9fbe4d21ce54ff2998ea6870ae7513479bd957e87a16369095baa34c3488102de2cb91a42c904408ac60c442e1ec6827e7cfa49ea825770c57ad3f5b81733f8eeed3edacc6f61914ed99f9c9472ae939f306019421b49d453e97b6f9f9c6a0fa55c7d1f9f3685c3558232e30e488cf42cd66bfce129ad07a67c685e5e63bbbb13a3de6fb3f432c18406df7911956563a6a2208c6f86ba96981762512bf5e1f5cb80ce8345da50b704cc900c6a56095a6e18124ff2827586a998bf49008219b049e3408a13241eefef0bcdcd04944e0a61c2499322747508774ba6ba400958a8bdce3ecba4505dfa1b"}, @NL80211_ATTR_IE={0x95, 0x2a, [@random_vendor={0xdd, 0x64, "0530eec61c2e0b49edbc744eb6d71d7d1145c70155b6848e57a596189564f25590984c321275c7c659754a37ef9b7084ca736c97ca107bd94386a759f59370b06f40c75e6c5237e1b6774487f91ea6826c54a7fd28d0d916644e18b60588ffa87918564f"}, @cf={0x4, 0x6, {0x5, 0x6, 0xfff9, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, @mic={0x8c, 0x18, {0x549, "cd55369df13f", @long="742ac6cf28bfd46af0fcc0dc9447e383"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe6, 0x7f, [@tim={0x5, 0x1e, {0x6, 0x19, 0x3, "992eb3e2c23af983df89dbf105e891fafdb9c0b6baf105a98d5c5a"}}, @cf={0x4, 0x6, {0xa6, 0x7a, 0x5, 0x1}}, @mic={0x8c, 0x10, {0x169, "cae52040d26b", @short="93a319b19cdee2ec"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @random_vendor={0xdd, 0x5c, "6d7ab0a9630f3730da52d897f99bb053ccfaab4185d6b1e6d458c92e0d2a6225a2ac0fe19279ab2012b843f4ee84e47b95fda5429948605df8267576352c683becfd2e1f651de68ba57bf748b9d54a19fd0cf755ba9177a14d6d870f"}, @mesh_chsw={0x76, 0x6, {0x3, 0x2, 0x27, 0x7}}, @ssid={0x0, 0x6, @default_ap_ssid}, @rann={0x7e, 0x15, {{0x1, 0x66}, 0x1, 0xc9, @device_b, 0x3, 0x1f, 0x6}}, @ssid={0x0, 0x19, @random="6458e5853971b125812d68ca76d4e65d555f99d613f00b8430"}]}, @NL80211_ATTR_IE={0x198, 0x2a, [@preq={0x82, 0x41, @ext={{}, 0x7, 0x4, 0x2, @broadcast, 0x8, @device_a, 0x1000, 0xcc3, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0x7ff}, {{}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @device_b, 0x1}]}}, @measure_req={0x26, 0x50, {0x7b, 0x8, 0x40, "a8e644157cc7c7101a095fa2d5a82f1610e7baf7dba783c83f9b3e606d32ff718ab969448be15b794a8d9b47eee5d566a6b5d29b255e754a70fa72847c9b519e30e596138124b5125e54cf6a6f"}}, @channel_switch={0x25, 0x3, {0x1, 0x30, 0x5}}, @mesh_chsw={0x76, 0x6, {0xff, 0x0, 0x2f, 0x8}}, @perr={0x84, 0xe8, {0x6, 0xe, [@not_ext={{}, @broadcast, 0x7, "", 0x31}, @not_ext={{}, @broadcast, 0x8, "", 0x38}, @ext={{}, @device_b, 0x4590, @device_a, 0x41}, @ext={{}, @device_b, 0x1, @device_b, 0x37}, @ext={{}, @broadcast, 0x8, @device_b, 0x36}, @ext={{}, @broadcast, 0x81, @device_a, 0x35}, @ext={{}, @device_b, 0x0, @device_a, 0x1d}, @not_ext={{}, @device_b, 0x1, "", 0x3f}, @ext={{}, @device_b, 0xffffffff, @broadcast, 0x2a}, @ext={{}, @device_a, 0x8, @device_a, 0x35}, @not_ext={{}, @broadcast, 0x4, "", 0x3c}, @not_ext={{}, @device_a, 0x101, "", 0x28}, @ext={{}, @device_b, 0x5, @broadcast, 0x25}, @not_ext={{}, @device_a, 0xffff, "", 0x24}]}}, @channel_switch={0x25, 0x3, {0x1, 0x99, 0x6}}, @dsss={0x3, 0x1, 0xb7}]}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x1078}, 0x1, 0x0, 0x0, 0x60004080}, 0x0) (async) [ 2646.036679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2646.043939] R13: 00007ffe9b642c8f R14: 00007fc95500c300 R15: 0000000000022000 02:11:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x403, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:32 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x200) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000040)={0x4, "6e4761622f79378b18a0b5ef90dbf9f593dee0f3bd25126e52e4f7b4456413079468ae69afd9102767cfaa0f7a61624c9cab028e243a451789d1e3d16f9f334c", {0xca3}}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:32 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "e88fbb6fc05ed4ab8b602a72e399dd5f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "61b70847ee22e70cc54f2957a4d0591c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4c8a6e9f19617167a7b5abecacfe33ed"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b24ce4b3a7b2b8ed9b56b3015f4851dc"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "35b95df8d532cdaf6e2d5ef9aaed5858"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ed48e13002ad6f3e277b1cf4c197162a"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a17271815f707ddf3118d9fa58f43f4d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "783bc42b10d3bbc7a147113f3926e03b"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x8040) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000045) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) [ 2646.146481] FAULT_INJECTION: forcing a failure. [ 2646.146481] name failslab, interval 1, probability 0, space 0, times 0 02:11:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000080) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) [ 2646.187825] CPU: 0 PID: 20066 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2646.195766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2646.205125] Call Trace: [ 2646.207726] dump_stack+0x1fc/0x2ef [ 2646.211383] should_fail.cold+0xa/0xf [ 2646.215195] ? setup_fault_attr+0x200/0x200 [ 2646.219532] ? lock_acquire+0x170/0x3c0 [ 2646.223558] __should_failslab+0x115/0x180 [ 2646.227893] should_failslab+0x5/0x10 [ 2646.231703] kmem_cache_alloc_node_trace+0x244/0x3b0 02:11:32 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "e88fbb6fc05ed4ab8b602a72e399dd5f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "61b70847ee22e70cc54f2957a4d0591c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4c8a6e9f19617167a7b5abecacfe33ed"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b24ce4b3a7b2b8ed9b56b3015f4851dc"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "35b95df8d532cdaf6e2d5ef9aaed5858"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ed48e13002ad6f3e277b1cf4c197162a"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a17271815f707ddf3118d9fa58f43f4d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "783bc42b10d3bbc7a147113f3926e03b"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x8040) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000045) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) 02:11:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x404, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2646.236816] dd_init_queue+0x94/0x430 [ 2646.240634] blk_mq_init_sched+0x395/0x730 [ 2646.245052] elevator_init_mq+0xf0/0x180 [ 2646.249128] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2646.254338] blk_mq_init_queue+0x5c/0xa0 [ 2646.258409] loop_add+0x2cb/0x8a0 [ 2646.261978] loop_control_ioctl+0x16c/0x480 [ 2646.263548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2646.266309] ? loop_lookup+0x1d0/0x1d0 [ 2646.278800] ? ksys_write+0x241/0x2a0 [ 2646.282613] ? loop_lookup+0x1d0/0x1d0 [ 2646.286516] do_vfs_ioctl+0xcdb/0x12e0 [ 2646.290412] ? lock_downgrade+0x720/0x720 [ 2646.294568] ? check_preemption_disabled+0x41/0x280 [ 2646.299590] ? ioctl_preallocate+0x200/0x200 [ 2646.304011] ? __fget+0x356/0x510 [ 2646.307475] ? do_dup2+0x450/0x450 [ 2646.311013] ? vfs_write+0x393/0x540 [ 2646.314737] ? fput+0x2b/0x190 [ 2646.317947] ksys_ioctl+0x9b/0xc0 [ 2646.321418] __x64_sys_ioctl+0x6f/0xb0 [ 2646.325315] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2646.329901] do_syscall_64+0xf9/0x620 [ 2646.333705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2646.338901] RIP: 0033:0x7fc956aba5a9 [ 2646.342619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2646.361513] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2646.369293] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2646.376545] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 02:11:32 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 46) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000080) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000000), 0x84080) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000080) (async) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async) 02:11:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x405, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:32 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "e88fbb6fc05ed4ab8b602a72e399dd5f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "61b70847ee22e70cc54f2957a4d0591c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4c8a6e9f19617167a7b5abecacfe33ed"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b24ce4b3a7b2b8ed9b56b3015f4851dc"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "35b95df8d532cdaf6e2d5ef9aaed5858"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ed48e13002ad6f3e277b1cf4c197162a"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a17271815f707ddf3118d9fa58f43f4d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "783bc42b10d3bbc7a147113f3926e03b"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x8040) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000045) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) pipe2(&(0x7f0000000000), 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "e88fbb6fc05ed4ab8b602a72e399dd5f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "61b70847ee22e70cc54f2957a4d0591c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4c8a6e9f19617167a7b5abecacfe33ed"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b24ce4b3a7b2b8ed9b56b3015f4851dc"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "35b95df8d532cdaf6e2d5ef9aaed5858"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ed48e13002ad6f3e277b1cf4c197162a"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a17271815f707ddf3118d9fa58f43f4d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "783bc42b10d3bbc7a147113f3926e03b"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x8040) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) (async) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000045) (async) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r1) (async) 02:11:32 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) (async, rerun: 64) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\t'], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x1078, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x17}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @beacon=[@NL80211_ATTR_IE={0xf2, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x0, 0x1, 0x0, {0x7fffffff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x5, 0x6}}, @random_vendor={0xdd, 0x7f, "302abfb8a94630c0954fe767c428ec3a1f590e4d7f923da9ffbd0ba6796bc9c9ecba3631af15d273530b45e86a432549acd5f34eaf7fd7af74b127f32ab74dc9b91be5dcd0f80648cdb176ea00851c46ca25dd2a1f8ac17bfa961c68d47986b7cf685427c4a4f462bde4a4b8eed16c89f73c2bd78e0954456a0a24462627d3"}, @mesh_chsw={0x76, 0x6, {0x80, 0xff, 0x36, 0xfc00}}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x3, 0x0, {0x20, 0x1, 0x0, 0x212, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x0, 0x1f, 0x97}}, @channel_switch={0x25, 0x3, {0x0, 0x8c, 0x40}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x9, 0x41}}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x69}, 0x8, 0x3, @device_a, 0x0, 0x1, 0x6}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x422, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0x141, {0x8, 0x13, [@ext={{}, @device_a, 0x3f, @device_a, 0x30}, @ext={{}, @broadcast, 0x3, @device_b, 0x37}, @not_ext={{}, @device_b, 0x4, "", 0xf}, @not_ext={{}, @device_a, 0x1, "", 0xa}, @ext={{}, @device_b, 0x3, @device_a, 0x25}, @ext={{}, @broadcast, 0x400, @device_b, 0x12}, @ext={{}, @device_a, 0xbc0e, @device_b, 0x38}, @ext={{}, @device_b, 0x101, @device_a, 0x3}, @not_ext={{}, @device_a, 0x2, "", 0x3}, @not_ext={{}, @broadcast, 0x7, "", 0x30}, @ext={{}, @device_b, 0x9, @device_a, 0x2c}, @ext={{}, @device_b, 0x7, @device_a, 0xd}, @ext={{}, @device_a, 0x5, @device_a, 0x32}, @ext={{}, @device_a, 0xfffffffe, @device_a, 0xf}, @ext={{}, @device_b, 0x21, @device_b, 0x1c}, @not_ext={{}, @device_a, 0x2, "", 0x8}, @ext={{}, @device_a, 0x2, @broadcast, 0x39}, @not_ext={{}, @broadcast, 0x7ff, "", 0x3d}, @not_ext={{}, @device_a, 0x8, "", 0x20}]}}, @peer_mgmt={0x75, 0x16, {0x0, 0xff, @val=0x400, @void, @val="0e80e6f05e0bb12dd644134804e8a290"}}, @supported_rates={0x1, 0x8, [{0x5}, {0x36, 0x1}, {0x16, 0x1}, {0x5}, {0xb, 0x1}, {0x12, 0x1}, {0x30}, {0x60}]}, @peer_mgmt={0x75, 0x14, {0x1, 0x7, @void, @void, @val="dd41c30a4953ca6ef76f8f2d30a25275"}}, @perr={0x84, 0x122, {0x5, 0x12, [@not_ext={{}, @device_b, 0x2, "", 0x11}, @ext={{}, @broadcast, 0x1d, @broadcast, 0x20}, @not_ext={{}, @broadcast, 0xfce, "", 0x34}, @not_ext={{}, @broadcast, 0xcf, "", 0x1d}, @ext={{}, @device_a, 0x3, @broadcast, 0x11}, @ext={{}, @broadcast, 0x1, @device_b, 0x1d}, @not_ext={{}, @device_b, 0x400, "", 0x1b}, @not_ext={{}, @broadcast, 0x7, "", 0x3f}, @not_ext={{}, @device_b, 0x0, "", 0x8}, @not_ext={{}, @device_b, 0x8, "", 0x39}, @ext={{}, @device_a, 0xb0, @device_a, 0x1f}, @ext={{}, @device_a, 0x80000001, @device_b, 0x10}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @ext={{}, @broadcast, 0x80000001, @device_a, 0x26}, @ext={{}, @device_b, 0x2, @device_b, 0xf}, @ext={{}, @device_a, 0x1, @device_a, 0x36}, @not_ext={{}, @device_b, 0x0, "", 0x23}, @not_ext={{}, @device_b, 0x4, "", 0x30}]}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0xba, {0x0, 0x5, "8ad88d753f38193319fbfac1014528a7", "a408b7044253b11ddb204e0542e905d42cc4549a0a0c5e7d02dbc841dd94837c", "2223b458981c3d3817a1651482bb7245727535f6015a5cd39556d1971603233f", [{0x1, 0x11, "e99b141e4dfb3c9eb47b5ff175dfec3c0c"}, {0x4, 0x8, "079ec7aed57b8175"}, {0x2, 0x18, "cca11931193c9d45b094003e260f4637fabeecaee1fc75ff"}, {0x2, 0x1c, "6aceebe9c4de0cd7fcdd34d8cb4a80aec448e053b5747637e8f41a77"}, {0x3, 0x11, "9183d8330fc3bb29a6192b2e8cf1c5b713"}]}}, @measure_req={0x26, 0xb1, {0x3, 0x3, 0x3, "c2a9ce2b58eae705fb84087939e0960f269d3527ece22c2a0325533f7afae4bdf0dde0c7a177315f21872000dedecdc82eb13acf08b0157531d46fd2e40811083f6b53d8da6715afc578c6974294210c4e5db94c6c63956198f449d9de4accdbac951fc145a398d5ab7d525bd3032281ad247fcce76fb0d5ab0490aade30ea5ddf8c11d3a6fa188f0e612c7529ed9d5c643b68c7104594ba725afab220bed0252b81f989284cedcb1773eed339dc"}}]}, @NL80211_ATTR_PROBE_RESP={0x7bd, 0x91, "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"}, @NL80211_ATTR_IE={0x95, 0x2a, [@random_vendor={0xdd, 0x64, "0530eec61c2e0b49edbc744eb6d71d7d1145c70155b6848e57a596189564f25590984c321275c7c659754a37ef9b7084ca736c97ca107bd94386a759f59370b06f40c75e6c5237e1b6774487f91ea6826c54a7fd28d0d916644e18b60588ffa87918564f"}, @cf={0x4, 0x6, {0x5, 0x6, 0xfff9, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, @mic={0x8c, 0x18, {0x549, "cd55369df13f", @long="742ac6cf28bfd46af0fcc0dc9447e383"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe6, 0x7f, [@tim={0x5, 0x1e, {0x6, 0x19, 0x3, "992eb3e2c23af983df89dbf105e891fafdb9c0b6baf105a98d5c5a"}}, @cf={0x4, 0x6, {0xa6, 0x7a, 0x5, 0x1}}, @mic={0x8c, 0x10, {0x169, "cae52040d26b", @short="93a319b19cdee2ec"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @random_vendor={0xdd, 0x5c, "6d7ab0a9630f3730da52d897f99bb053ccfaab4185d6b1e6d458c92e0d2a6225a2ac0fe19279ab2012b843f4ee84e47b95fda5429948605df8267576352c683becfd2e1f651de68ba57bf748b9d54a19fd0cf755ba9177a14d6d870f"}, @mesh_chsw={0x76, 0x6, {0x3, 0x2, 0x27, 0x7}}, @ssid={0x0, 0x6, @default_ap_ssid}, @rann={0x7e, 0x15, {{0x1, 0x66}, 0x1, 0xc9, @device_b, 0x3, 0x1f, 0x6}}, @ssid={0x0, 0x19, @random="6458e5853971b125812d68ca76d4e65d555f99d613f00b8430"}]}, @NL80211_ATTR_IE={0x198, 0x2a, [@preq={0x82, 0x41, @ext={{}, 0x7, 0x4, 0x2, @broadcast, 0x8, @device_a, 0x1000, 0xcc3, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0x7ff}, {{}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @device_b, 0x1}]}}, @measure_req={0x26, 0x50, {0x7b, 0x8, 0x40, "a8e644157cc7c7101a095fa2d5a82f1610e7baf7dba783c83f9b3e606d32ff718ab969448be15b794a8d9b47eee5d566a6b5d29b255e754a70fa72847c9b519e30e596138124b5125e54cf6a6f"}}, @channel_switch={0x25, 0x3, {0x1, 0x30, 0x5}}, @mesh_chsw={0x76, 0x6, {0xff, 0x0, 0x2f, 0x8}}, @perr={0x84, 0xe8, {0x6, 0xe, [@not_ext={{}, @broadcast, 0x7, "", 0x31}, @not_ext={{}, @broadcast, 0x8, "", 0x38}, @ext={{}, @device_b, 0x4590, @device_a, 0x41}, @ext={{}, @device_b, 0x1, @device_b, 0x37}, @ext={{}, @broadcast, 0x8, @device_b, 0x36}, @ext={{}, @broadcast, 0x81, @device_a, 0x35}, @ext={{}, @device_b, 0x0, @device_a, 0x1d}, @not_ext={{}, @device_b, 0x1, "", 0x3f}, @ext={{}, @device_b, 0xffffffff, @broadcast, 0x2a}, @ext={{}, @device_a, 0x8, @device_a, 0x35}, @not_ext={{}, @broadcast, 0x4, "", 0x3c}, @not_ext={{}, @device_a, 0x101, "", 0x28}, @ext={{}, @device_b, 0x5, @broadcast, 0x25}, @not_ext={{}, @device_a, 0xffff, "", 0x24}]}}, @channel_switch={0x25, 0x3, {0x1, 0x99, 0x6}}, @dsss={0x3, 0x1, 0xb7}]}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x1078}, 0x1, 0x0, 0x0, 0x60004080}, 0x0) 02:11:32 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x200) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000040)={0x4, "6e4761622f79378b18a0b5ef90dbf9f593dee0f3bd25126e52e4f7b4456413079468ae69afd9102767cfaa0f7a61624c9cab028e243a451789d1e3d16f9f334c", {0xca3}}) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2646.383798] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2646.391219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2646.398575] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x406, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:32 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40001) 02:11:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000080) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000000), 0x84080) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000080) (async) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async) 02:11:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x407, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:32 executing program 2: r0 = timerfd_create(0x8, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x578, 0x40, 0xf0, 0x140, 0x100, 0x1, 0x0, 0x1, {0xffffffff, 0x40}, {0x9, 0x1, 0x1}, {0x5, 0x1d, 0x1}, {0xfffffc00, 0x4}, 0x1, 0x100, 0xf6f6, 0x4, 0x1, 0xfffffff8, 0x8001, 0x178, 0x2, 0x8, 0x4, 0x0, 0x5, 0x200, 0x3, 0x5}) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) io_setup(0x3e, &(0x7f00000000c0)=0x0) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_destroy(r1) 02:11:32 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40001) [ 2646.526656] FAULT_INJECTION: forcing a failure. [ 2646.526656] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.564760] CPU: 0 PID: 20139 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2646.572672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2646.582026] Call Trace: [ 2646.584625] dump_stack+0x1fc/0x2ef [ 2646.588271] should_fail.cold+0xa/0xf [ 2646.592093] ? setup_fault_attr+0x200/0x200 [ 2646.596420] ? lock_acquire+0x170/0x3c0 [ 2646.600417] __should_failslab+0x115/0x180 [ 2646.604673] should_failslab+0x5/0x10 [ 2646.608479] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2646.613596] __alloc_disk_node+0x69/0x410 [ 2646.617841] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2646.622440] loop_add+0x39c/0x8a0 [ 2646.625927] loop_control_ioctl+0x16c/0x480 [ 2646.630270] ? loop_lookup+0x1d0/0x1d0 [ 2646.634174] ? ksys_write+0x241/0x2a0 [ 2646.637981] ? loop_lookup+0x1d0/0x1d0 [ 2646.641876] do_vfs_ioctl+0xcdb/0x12e0 [ 2646.645763] ? lock_downgrade+0x720/0x720 [ 2646.649979] ? check_preemption_disabled+0x41/0x280 [ 2646.655086] ? ioctl_preallocate+0x200/0x200 [ 2646.659477] ? __fget+0x356/0x510 [ 2646.662910] ? do_dup2+0x450/0x450 [ 2646.666461] ? vfs_write+0x393/0x540 [ 2646.670156] ? fput+0x2b/0x190 [ 2646.673447] ksys_ioctl+0x9b/0xc0 [ 2646.676884] __x64_sys_ioctl+0x6f/0xb0 [ 2646.680771] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2646.685518] do_syscall_64+0xf9/0x620 [ 2646.689406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2646.694586] RIP: 0033:0x7fc956aba5a9 [ 2646.698292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2646.717272] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 02:11:33 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 47) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x200) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000040)={0x4, "6e4761622f79378b18a0b5ef90dbf9f593dee0f3bd25126e52e4f7b4456413079468ae69afd9102767cfaa0f7a61624c9cab028e243a451789d1e3d16f9f334c", {0xca3}}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x200) (async) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000040)={0x4, "6e4761622f79378b18a0b5ef90dbf9f593dee0f3bd25126e52e4f7b4456413079468ae69afd9102767cfaa0f7a61624c9cab028e243a451789d1e3d16f9f334c", {0xca3}}) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) 02:11:33 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40001) 02:11:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x408, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:33 executing program 2: r0 = timerfd_create(0x8, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x578, 0x40, 0xf0, 0x140, 0x100, 0x1, 0x0, 0x1, {0xffffffff, 0x40}, {0x9, 0x1, 0x1}, {0x5, 0x1d, 0x1}, {0xfffffc00, 0x4}, 0x1, 0x100, 0xf6f6, 0x4, 0x1, 0xfffffff8, 0x8001, 0x178, 0x2, 0x8, 0x4, 0x0, 0x5, 0x200, 0x3, 0x5}) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) io_setup(0x3e, &(0x7f00000000c0)=0x0) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_destroy(r1) timerfd_create(0x8, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x578, 0x40, 0xf0, 0x140, 0x100, 0x1, 0x0, 0x1, {0xffffffff, 0x40}, {0x9, 0x1, 0x1}, {0x5, 0x1d, 0x1}, {0xfffffc00, 0x4}, 0x1, 0x100, 0xf6f6, 0x4, 0x1, 0xfffffff8, 0x8001, 0x178, 0x2, 0x8, 0x4, 0x0, 0x5, 0x200, 0x3, 0x5}) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) io_setup(0x3e, &(0x7f00000000c0)) (async) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) io_destroy(r1) (async) 02:11:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd26, 0x25dfcc02, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40880}, 0x801) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="00032dbd7000ffdbdf250800000034000280080009000000000008000600030000000800050000800000080009000300000006000e004e24000008000500810000001c000280080005005b04000008000700b8380000080003000300000008000500070000001c00018008000b007369700008000b007369700006000200320000000c000380080005000a0101026c0002801400010000000000000000000000ffffac1414bb14000100fe8000000000000000000000000000aa080009007f2300000800070006000000060002004e22000014000100e000000200000000000000000000000614000100ac14143300"/250], 0x100}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000041) [ 2646.725072] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2646.732323] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2646.739580] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2646.746827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2646.754075] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 [ 2646.849280] FAULT_INJECTION: forcing a failure. [ 2646.849280] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.862269] CPU: 1 PID: 20171 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2646.870339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2646.879695] Call Trace: [ 2646.882295] dump_stack+0x1fc/0x2ef [ 2646.886064] should_fail.cold+0xa/0xf [ 2646.889988] ? setup_fault_attr+0x200/0x200 [ 2646.894297] ? lock_acquire+0x170/0x3c0 [ 2646.898356] __should_failslab+0x115/0x180 [ 2646.902592] should_failslab+0x5/0x10 [ 2646.906389] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2646.911483] __kmalloc_node+0x38/0x70 [ 2646.915294] disk_expand_part_tbl+0x1b4/0x3a0 [ 2646.919910] __alloc_disk_node+0x118/0x410 [ 2646.924346] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2646.928918] loop_add+0x39c/0x8a0 [ 2646.932361] loop_control_ioctl+0x16c/0x480 [ 2646.936667] ? loop_lookup+0x1d0/0x1d0 [ 2646.940635] ? ksys_write+0x241/0x2a0 [ 2646.944431] ? loop_lookup+0x1d0/0x1d0 [ 2646.948496] do_vfs_ioctl+0xcdb/0x12e0 [ 2646.952406] ? lock_downgrade+0x720/0x720 [ 2646.956541] ? check_preemption_disabled+0x41/0x280 [ 2646.961540] ? ioctl_preallocate+0x200/0x200 [ 2646.965929] ? __fget+0x356/0x510 [ 2646.969363] ? do_dup2+0x450/0x450 [ 2646.972885] ? vfs_write+0x393/0x540 [ 2646.976595] ? fput+0x2b/0x190 [ 2646.979792] ksys_ioctl+0x9b/0xc0 [ 2646.983234] __x64_sys_ioctl+0x6f/0xb0 [ 2646.987204] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2646.991769] do_syscall_64+0xf9/0x620 [ 2646.995556] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.000725] RIP: 0033:0x7fc956aba5a9 [ 2647.004430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2647.023470] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2647.031336] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2647.038585] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 02:11:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x40b, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:33 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1be14ffe}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc772fe177a83dda4}, 0x1) 02:11:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) (async) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd26, 0x25dfcc02, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40880}, 0x801) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="00032dbd7000ffdbdf250800000034000280080009000000000008000600030000000800050000800000080009000300000006000e004e24000008000500810000001c000280080005005b04000008000700b8380000080003000300000008000500070000001c00018008000b007369700008000b007369700006000200320000000c000380080005000a0101026c0002801400010000000000000000000000ffffac1414bb14000100fe8000000000000000000000000000aa080009007f2300000800070006000000060002004e22000014000100e000000200000000000000000000000614000100ac14143300"/250], 0x100}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000041) 02:11:33 executing program 2: r0 = timerfd_create(0x8, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x578, 0x40, 0xf0, 0x140, 0x100, 0x1, 0x0, 0x1, {0xffffffff, 0x40}, {0x9, 0x1, 0x1}, {0x5, 0x1d, 0x1}, {0xfffffc00, 0x4}, 0x1, 0x100, 0xf6f6, 0x4, 0x1, 0xfffffff8, 0x8001, 0x178, 0x2, 0x8, 0x4, 0x0, 0x5, 0x200, 0x3, 0x5}) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) io_setup(0x3e, &(0x7f00000000c0)=0x0) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_destroy(r1) timerfd_create(0x8, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x578, 0x40, 0xf0, 0x140, 0x100, 0x1, 0x0, 0x1, {0xffffffff, 0x40}, {0x9, 0x1, 0x1}, {0x5, 0x1d, 0x1}, {0xfffffc00, 0x4}, 0x1, 0x100, 0xf6f6, 0x4, 0x1, 0xfffffff8, 0x8001, 0x178, 0x2, 0x8, 0x4, 0x0, 0x5, 0x200, 0x3, 0x5}) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) io_setup(0x3e, &(0x7f00000000c0)) (async) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) io_destroy(r1) (async) 02:11:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r2, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x400, 0x4ea6, 0xa6c9, 0x5, 0xba9]}, &(0x7f00000003c0)=0x54) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="c836751b83e57792cbbb9ee5b2cc75ac6b0d8756807f2e332d3d332bceef00382976c892b7280317a17c912b19640efe4f975d56b6", 0x35) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r4, @ANYBLOB="02002dbd7000fedbdf250100000008000000000080000001080073797a6b616c6c657231000000000000e5a6f72401e64e7eb5afcecc936975d9098b385adb87c9880b210614785cb0d2a7243350139ca55be6d05ff4907061b38767b8c2ff41acd5efdc42d21ed5c2d515fa17a34dc42aa49ab0bae5d0a1047109c08974305a407c7d021db24c"], 0x30}, 0x1, 0x0, 0x0, 0x20020004}, 0x2000c005) [ 2647.045836] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2647.053095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2647.060353] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:33 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1be14ffe}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc772fe177a83dda4}, 0x1) 02:11:33 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 48) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x410, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:33 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = getpid() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sched_rr_get_interval(r1, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0xd3, 0x3fae, 0xfffffffd, 0x8, 0xffffffff, r1}) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x20000) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 02:11:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd26, 0x25dfcc02, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40880}, 0x801) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x4000040) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="00032dbd7000ffdbdf250800000034000280080009000000000008000600030000000800050000800000080009000300000006000e004e24000008000500810000001c000280080005005b04000008000700b8380000080003000300000008000500070000001c00018008000b007369700008000b007369700006000200320000000c000380080005000a0101026c0002801400010000000000000000000000ffffac1414bb14000100fe8000000000000000000000000000aa080009007f2300000800070006000000060002004e22000014000100e000000200000000000000000000000614000100ac14143300"/250], 0x100}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000041) 02:11:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) (async) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r2, 0x0, 0x0) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x400, 0x4ea6, 0xa6c9, 0x5, 0xba9]}, &(0x7f00000003c0)=0x54) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="c836751b83e57792cbbb9ee5b2cc75ac6b0d8756807f2e332d3d332bceef00382976c892b7280317a17c912b19640efe4f975d56b6", 0x35) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r4, @ANYBLOB="02002dbd7000fedbdf250100000008000000000080000001080073797a6b616c6c657231000000000000e5a6f72401e64e7eb5afcecc936975d9098b385adb87c9880b210614785cb0d2a7243350139ca55be6d05ff4907061b38767b8c2ff41acd5efdc42d21ed5c2d515fa17a34dc42aa49ab0bae5d0a1047109c08974305a407c7d021db24c"], 0x30}, 0x1, 0x0, 0x0, 0x20020004}, 0x2000c005) 02:11:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x411, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:33 executing program 0: syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1be14ffe}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc772fe177a83dda4}, 0x1) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1be14ffe}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc772fe177a83dda4}, 0x1) (async) 02:11:33 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = getpid() (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sched_rr_get_interval(r1, &(0x7f00000000c0)) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0xd3, 0x3fae, 0xfffffffd, 0x8, 0xffffffff, r1}) (async) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x20000) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) (async) timerfd_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) [ 2647.221393] FAULT_INJECTION: forcing a failure. [ 2647.221393] name failslab, interval 1, probability 0, space 0, times 0 [ 2647.283133] CPU: 0 PID: 20195 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2647.291161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2647.300529] Call Trace: [ 2647.303130] dump_stack+0x1fc/0x2ef [ 2647.306774] should_fail.cold+0xa/0xf [ 2647.310585] ? setup_fault_attr+0x200/0x200 [ 2647.314923] ? lock_acquire+0x170/0x3c0 [ 2647.318908] __should_failslab+0x115/0x180 [ 2647.323161] should_failslab+0x5/0x10 [ 2647.326978] kmem_cache_alloc_trace+0x284/0x380 02:11:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x28, 0x0, 0x135, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000003c0)={{0x1, 0x1, 0xfcd, 0x0, 0x2}, 0x20, 0x2, 'id1\x00', 'timer0\x00', 0x0, 0x1f, 0x6, 0x4, 0xfff}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000016", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000014000800766c616e30000000000000000000000006001b004e24000006000e006188000008001700", @ANYRES8=r0, @ANYBLOB="06001b004e2300000c0016005dc900000000000006000e00bd000000d5d1f10a021511d32ff723da5173bd88508b877cf2a7"], 0x5c}, 0x1, 0x0, 0x0, 0x4008}, 0x24048814) [ 2647.331662] rand_initialize_disk+0x3b/0xc0 [ 2647.336084] __alloc_disk_node+0x234/0x410 [ 2647.340328] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2647.344925] loop_add+0x39c/0x8a0 [ 2647.348397] loop_control_ioctl+0x16c/0x480 [ 2647.352727] ? loop_lookup+0x1d0/0x1d0 [ 2647.356627] ? ksys_write+0x241/0x2a0 [ 2647.360434] ? loop_lookup+0x1d0/0x1d0 [ 2647.364325] do_vfs_ioctl+0xcdb/0x12e0 [ 2647.368218] ? lock_downgrade+0x720/0x720 [ 2647.372368] ? check_preemption_disabled+0x41/0x280 [ 2647.377390] ? ioctl_preallocate+0x200/0x200 02:11:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x28, 0x0, 0x135, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000003c0)={{0x1, 0x1, 0xfcd, 0x0, 0x2}, 0x20, 0x2, 'id1\x00', 'timer0\x00', 0x0, 0x1f, 0x6, 0x4, 0xfff}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000016", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000014000800766c616e30000000000000000000000006001b004e24000006000e006188000008001700", @ANYRES8=r0, @ANYBLOB="06001b004e2300000c0016005dc900000000000006000e00bd000000d5d1f10a021511d32ff723da5173bd88508b877cf2a7"], 0x5c}, 0x1, 0x0, 0x0, 0x4008}, 0x24048814) [ 2647.381810] ? __fget+0x356/0x510 [ 2647.385369] ? do_dup2+0x450/0x450 [ 2647.388912] ? vfs_write+0x393/0x540 [ 2647.392629] ? fput+0x2b/0x190 [ 2647.395832] ksys_ioctl+0x9b/0xc0 [ 2647.399306] __x64_sys_ioctl+0x6f/0xb0 [ 2647.403199] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2647.407890] do_syscall_64+0xf9/0x620 [ 2647.411706] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.416899] RIP: 0033:0x7fc956aba5a9 02:11:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x412, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 2647.420617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2647.439604] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2647.447765] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2647.455038] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2647.462310] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2647.469579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2647.476853] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 02:11:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x413, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:33 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 49) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) 02:11:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r2, 0x0, 0x0) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x400, 0x4ea6, 0xa6c9, 0x5, 0xba9]}, &(0x7f00000003c0)=0x54) (async) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="c836751b83e57792cbbb9ee5b2cc75ac6b0d8756807f2e332d3d332bceef00382976c892b7280317a17c912b19640efe4f975d56b6", 0x35) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r4, @ANYBLOB="02002dbd7000fedbdf250100000008000000000080000001080073797a6b616c6c657231000000000000e5a6f72401e64e7eb5afcecc936975d9098b385adb87c9880b210614785cb0d2a7243350139ca55be6d05ff4907061b38767b8c2ff41acd5efdc42d21ed5c2d515fa17a34dc42aa49ab0bae5d0a1047109c08974305a407c7d021db24c"], 0x30}, 0x1, 0x0, 0x0, 0x20020004}, 0x2000c005) 02:11:33 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x4100) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:33 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) r1 = getpid() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sched_rr_get_interval(r1, &(0x7f00000000c0)) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0xd3, 0x3fae, 0xfffffffd, 0x8, 0xffffffff, r1}) (async) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) r4 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x20000) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) (async) timerfd_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 02:11:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x414, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x28, 0x0, 0x135, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000003c0)={{0x1, 0x1, 0xfcd, 0x0, 0x2}, 0x20, 0x2, 'id1\x00', 'timer0\x00', 0x0, 0x1f, 0x6, 0x4, 0xfff}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000016", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000014000800766c616e30000000000000000000000006001b004e24000006000e006188000008001700", @ANYRES8=r0, @ANYBLOB="06001b004e2300000c0016005dc900000000000006000e00bd000000d5d1f10a021511d32ff723da5173bd88508b877cf2a7"], 0x5c}, 0x1, 0x0, 0x0, 0x4008}, 0x24048814) 02:11:33 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) 02:11:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x384, r2, 0x408, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_IE={0x14d, 0x2a, [@ht={0x2d, 0x1a, {0xc, 0x3, 0x6, 0x0, {0x81, 0x1fe0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x3}}, @challenge={0x10, 0x1, 0x55}, @prep={0x83, 0x25, @ext={{}, 0x9, 0x4, @broadcast, 0x7ff, @device_a, 0x8, 0x8, @device_b, 0x7ff}}, @fast_bss_trans={0x37, 0x90, {0x5, 0x2, "d74809c7ec6f22424773176bf7751089", "9473858a932ded032ccb6b0f5797f4f2c5015247c311e26d3400b8f23aaafb59", "1f34df6f0a346ad7dfec3113b0fc474053a1e3027f41be5c2ef039beeea2aae2", [{0x1, 0x21, "65e718c8d24705974b7c6432e9692278622a9cd1b8ff796ccbe703c949adb9649f"}, {0x2, 0x19, "016ea9385b79fa8712fe6d967fbe0b626263ca2dcd5690050b"}]}}, @random={0x1, 0x35, "97f479f14ced169ae414631f16384b0e722beab6770e75034f30dca255d4efef56b873b9e97bfaef9e725fb52f678b70b3b9894845"}, @random_vendor={0xdd, 0x21, "78f472a096a73fc5ab00cb51d47f4483b03401d1c7e7f1cba3c1dd23caaf04d50b"}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x80, 0x1, @broadcast, 0x5e, 0x8, 0xffffff7b}}]}, @NL80211_ATTR_IE={0x211, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb5, 0x8}}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x3, 0x0, {0x6cf0cacb, 0x1, 0x0, 0xff, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x3f, 0x9}}, @mic={0x8c, 0x18, {0xdc8, "dc73ae6b597f", @long="2f82b04bccf085a02ed5282125d0f26c"}}, @gcr_ga={0xbd, 0x6, @device_b}, @random_vendor={0xdd, 0xc4, "083f7b03c0871a1373920be91734e2c11e7e31cde2fc1a2743cd0a6f7e5d1cc2542341fbe7f0c6e7b42337afb7b95374affb1e6989a75c0c3c232c38f981d9aaaa324a0113a6273fde0faa0c4b536135270012b5c5b3c941e0096e3c029f09556ef4d92ec1e2259672aff0f0c63ee9dec341b1ba6f96bd85df6f3391df5890ffe7e6374bc1604f6170a902c0bf5b33b1e2e09d6de41efa9132e230622ce016530920859d4e1a0ce71e8df517f863b93926f3cc53badbb01dee2857e48ff137f54e4d0161"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x22, 0x9}}, @erp={0x2a, 0x1, {0x1}}, @sec_chan_ofs={0x3e, 0x1}, @random={0x2, 0xf3, "970d5def3731474fc8012b0d16b729e3fd55642371ab8b5bc790e822cc700b30b3da86ae69b5e947b3bf6f9fee5a064f11dfb6b5d1539254241038760424fe974177d00c1476d5dbeb1550523558f37aae7f58bd25b5d016b61485c96863aaafbae4ce61b410709ffd49f59329bcd925324a69765f2bbd62f7f6a13555028b1130b2f56690d16eb5e5e182fe85f13f50abc557df2c367b7b9f10f96f45135755b80de4de82650b1e570befd1dd7d8ccd4e0999f136b4726a08b34cc848759a871e6fc40a820596617004934fb7fca7e8a1610089fd216cbd226d7aa7e6b7a54b35a13201902ee80152b12a52ccc34d1e4a01e7"}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x370, 0x370, 0xffffffff, 0x258, 0x168, 0x415, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'lo\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@remote, @icmp_id, @gre_key}}}, {{@ipv6={@loopback, @loopback, [], [], 'macvlan1\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv4, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 02:11:34 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x4100) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2647.676266] FAULT_INJECTION: forcing a failure. [ 2647.676266] name failslab, interval 1, probability 0, space 0, times 0 [ 2647.714796] CPU: 1 PID: 20244 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2647.722706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2647.732070] Call Trace: [ 2647.734680] dump_stack+0x1fc/0x2ef [ 2647.738325] should_fail.cold+0xa/0xf [ 2647.742136] ? setup_fault_attr+0x200/0x200 [ 2647.746463] ? lock_acquire+0x170/0x3c0 [ 2647.750459] __should_failslab+0x115/0x180 [ 2647.754702] should_failslab+0x5/0x10 [ 2647.758510] kmem_cache_alloc_trace+0x284/0x380 [ 2647.763275] device_create_groups_vargs+0x8a/0x270 [ 2647.768215] device_create+0xdf/0x120 [ 2647.772023] ? device_create_vargs+0x50/0x50 02:11:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x384, r2, 0x408, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_IE={0x14d, 0x2a, [@ht={0x2d, 0x1a, {0xc, 0x3, 0x6, 0x0, {0x81, 0x1fe0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x3}}, @challenge={0x10, 0x1, 0x55}, @prep={0x83, 0x25, @ext={{}, 0x9, 0x4, @broadcast, 0x7ff, @device_a, 0x8, 0x8, @device_b, 0x7ff}}, @fast_bss_trans={0x37, 0x90, {0x5, 0x2, "d74809c7ec6f22424773176bf7751089", "9473858a932ded032ccb6b0f5797f4f2c5015247c311e26d3400b8f23aaafb59", "1f34df6f0a346ad7dfec3113b0fc474053a1e3027f41be5c2ef039beeea2aae2", [{0x1, 0x21, "65e718c8d24705974b7c6432e9692278622a9cd1b8ff796ccbe703c949adb9649f"}, {0x2, 0x19, "016ea9385b79fa8712fe6d967fbe0b626263ca2dcd5690050b"}]}}, @random={0x1, 0x35, "97f479f14ced169ae414631f16384b0e722beab6770e75034f30dca255d4efef56b873b9e97bfaef9e725fb52f678b70b3b9894845"}, @random_vendor={0xdd, 0x21, "78f472a096a73fc5ab00cb51d47f4483b03401d1c7e7f1cba3c1dd23caaf04d50b"}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x80, 0x1, @broadcast, 0x5e, 0x8, 0xffffff7b}}]}, @NL80211_ATTR_IE={0x211, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb5, 0x8}}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x3, 0x0, {0x6cf0cacb, 0x1, 0x0, 0xff, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x3f, 0x9}}, @mic={0x8c, 0x18, {0xdc8, "dc73ae6b597f", @long="2f82b04bccf085a02ed5282125d0f26c"}}, @gcr_ga={0xbd, 0x6, @device_b}, @random_vendor={0xdd, 0xc4, "083f7b03c0871a1373920be91734e2c11e7e31cde2fc1a2743cd0a6f7e5d1cc2542341fbe7f0c6e7b42337afb7b95374affb1e6989a75c0c3c232c38f981d9aaaa324a0113a6273fde0faa0c4b536135270012b5c5b3c941e0096e3c029f09556ef4d92ec1e2259672aff0f0c63ee9dec341b1ba6f96bd85df6f3391df5890ffe7e6374bc1604f6170a902c0bf5b33b1e2e09d6de41efa9132e230622ce016530920859d4e1a0ce71e8df517f863b93926f3cc53badbb01dee2857e48ff137f54e4d0161"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x22, 0x9}}, @erp={0x2a, 0x1, {0x1}}, @sec_chan_ofs={0x3e, 0x1}, @random={0x2, 0xf3, "970d5def3731474fc8012b0d16b729e3fd55642371ab8b5bc790e822cc700b30b3da86ae69b5e947b3bf6f9fee5a064f11dfb6b5d1539254241038760424fe974177d00c1476d5dbeb1550523558f37aae7f58bd25b5d016b61485c96863aaafbae4ce61b410709ffd49f59329bcd925324a69765f2bbd62f7f6a13555028b1130b2f56690d16eb5e5e182fe85f13f50abc557df2c367b7b9f10f96f45135755b80de4de82650b1e570befd1dd7d8ccd4e0999f136b4726a08b34cc848759a871e6fc40a820596617004934fb7fca7e8a1610089fd216cbd226d7aa7e6b7a54b35a13201902ee80152b12a52ccc34d1e4a01e7"}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:11:34 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_create(0x8, 0x0) (async) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timerfd_gettime(r0, &(0x7f0000000000)) (async) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) [ 2647.776445] ? pointer+0x850/0x850 [ 2647.780015] bdi_register_va.part.0+0x4c/0x750 [ 2647.784606] bdi_register+0x12a/0x140 [ 2647.788428] ? bdi_register_va+0x80/0x80 [ 2647.792498] ? vsnprintf+0x2cc/0x14f0 [ 2647.796311] bdi_register_owner+0x59/0x100 [ 2647.800562] __device_add_disk+0xd58/0x10c0 [ 2647.804898] ? sprintf+0xc0/0x100 [ 2647.808360] ? blk_alloc_devt+0x2d0/0x2d0 [ 2647.812508] ? __raw_spin_lock_init+0x28/0x100 [ 2647.817086] ? __lockdep_init_map+0x100/0x5a0 [ 2647.821576] loop_add+0x628/0x8a0 [ 2647.825021] loop_control_ioctl+0x16c/0x480 [ 2647.829323] ? loop_lookup+0x1d0/0x1d0 [ 2647.833206] ? ksys_write+0x241/0x2a0 [ 2647.836993] ? loop_lookup+0x1d0/0x1d0 [ 2647.840868] do_vfs_ioctl+0xcdb/0x12e0 [ 2647.844737] ? lock_downgrade+0x720/0x720 [ 2647.848877] ? check_preemption_disabled+0x41/0x280 [ 2647.853887] ? ioctl_preallocate+0x200/0x200 [ 2647.858290] ? __fget+0x356/0x510 [ 2647.861726] ? do_dup2+0x450/0x450 [ 2647.865244] ? vfs_write+0x393/0x540 [ 2647.868937] ? fput+0x2b/0x190 [ 2647.872115] ksys_ioctl+0x9b/0xc0 [ 2647.875551] __x64_sys_ioctl+0x6f/0xb0 [ 2647.879431] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2647.883999] do_syscall_64+0xf9/0x620 [ 2647.887792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.892965] RIP: 0033:0x7fc956aba5a9 [ 2647.896692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2647.915663] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2647.923441] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2647.930880] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2647.938157] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2647.945408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2647.952662] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 [ 2647.974188] ------------[ cut here ]------------ [ 2647.979401] WARNING: CPU: 1 PID: 20244 at block/genhd.c:719 __device_add_disk.cold+0x69/0x188 [ 2647.988064] Kernel panic - not syncing: panic_on_warn set ... [ 2647.988064] [ 2647.995432] CPU: 1 PID: 20244 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2648.003317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2648.012664] Call Trace: [ 2648.015247] dump_stack+0x1fc/0x2ef [ 2648.018860] panic+0x26a/0x50e [ 2648.022036] ? __warn_printk+0xf3/0xf3 [ 2648.025907] ? __device_add_disk.cold+0x69/0x188 [ 2648.030652] ? __probe_kernel_read+0x130/0x1b0 [ 2648.035212] ? __warn.cold+0x5/0x5a [ 2648.038836] ? __device_add_disk.cold+0x69/0x188 [ 2648.043584] __warn.cold+0x20/0x5a [ 2648.047118] ? io_schedule_timeout+0x140/0x140 [ 2648.051691] ? __device_add_disk.cold+0x69/0x188 [ 2648.056433] report_bug+0x262/0x2b0 [ 2648.060046] do_error_trap+0x1d7/0x310 [ 2648.063914] ? math_error+0x310/0x310 [ 2648.067725] ? __irq_work_queue_local+0x101/0x160 [ 2648.072552] ? irq_work_queue+0x29/0x80 [ 2648.076507] ? error_entry+0x72/0xd0 [ 2648.080204] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2648.085204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2648.090034] invalid_op+0x14/0x20 [ 2648.093471] RIP: 0010:__device_add_disk.cold+0x69/0x188 [ 2648.098816] Code: 02 84 c0 74 08 3c 03 0f 8e a8 00 00 00 44 8b a5 f0 05 00 00 e9 67 ad 6a fb e8 05 45 66 f9 48 c7 c7 60 75 b2 88 e8 64 76 f7 ff <0f> 0b e9 8f b9 6a fb e8 ed 44 66 f9 48 c7 c7 60 75 b2 88 e8 4c 76 [ 2648.117710] RSP: 0018:ffff888025607b38 EFLAGS: 00010286 [ 2648.123161] RAX: 0000000000000024 RBX: 0000000000000001 RCX: 0000000000000000 [ 2648.130417] RDX: 0000000000040000 RSI: ffffffff814dff01 RDI: ffffed1004ac0f59 [ 2648.137668] RBP: ffff88809b07ecc0 R08: 0000000000000024 R09: 0000000000000000 [ 2648.144916] R10: 0000000000000005 R11: 0000000000000000 R12: ffff88809b07ed50 [ 2648.152165] R13: ffff88809b07f350 R14: 00000000fffffff4 R15: ffff88809b07ecc4 [ 2648.159430] ? vprintk_func+0x81/0x180 [ 2648.163314] ? __device_add_disk.cold+0x69/0x188 [ 2648.168066] ? sprintf+0xc0/0x100 [ 2648.171511] ? blk_alloc_devt+0x2d0/0x2d0 [ 2648.175645] ? __raw_spin_lock_init+0x28/0x100 [ 2648.180222] ? __lockdep_init_map+0x100/0x5a0 [ 2648.184710] loop_add+0x628/0x8a0 [ 2648.188168] loop_control_ioctl+0x16c/0x480 [ 2648.192474] ? loop_lookup+0x1d0/0x1d0 [ 2648.196381] ? ksys_write+0x241/0x2a0 [ 2648.200173] ? loop_lookup+0x1d0/0x1d0 [ 2648.204052] do_vfs_ioctl+0xcdb/0x12e0 [ 2648.207938] ? lock_downgrade+0x720/0x720 [ 2648.212076] ? check_preemption_disabled+0x41/0x280 [ 2648.217247] ? ioctl_preallocate+0x200/0x200 [ 2648.221639] ? __fget+0x356/0x510 [ 2648.225073] ? do_dup2+0x450/0x450 [ 2648.228608] ? vfs_write+0x393/0x540 [ 2648.232359] ? fput+0x2b/0x190 [ 2648.235554] ksys_ioctl+0x9b/0xc0 [ 2648.238995] __x64_sys_ioctl+0x6f/0xb0 [ 2648.242865] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2648.247439] do_syscall_64+0xf9/0x620 [ 2648.251230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2648.256405] RIP: 0033:0x7fc956aba5a9 [ 2648.260242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2648.279518] RSP: 002b:00007fc95502d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2648.287211] RAX: ffffffffffffffda RBX: 00007fc956bdaf80 RCX: 00007fc956aba5a9 [ 2648.294465] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 2648.301757] RBP: 00007fc95502d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.309029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2648.316303] R13: 00007ffe9b642c8f R14: 00007fc95502d300 R15: 0000000000022000 [ 2648.323871] Kernel Offset: disabled [ 2648.331431] Rebooting in 86400 seconds..