&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x4000000000000000}, 0x0) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x6}, 0x0) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x7, 0x7, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x15, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0xffffff7f00000000}, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x15, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="02140000070000000000000000e4ff000500050000a000000a00000000000000000000cd1822218b6c80c60000000001000000000000000091664c01ab93ba988489f8067c9db947e73e6b8246d17dbd75117ea462279d4eed9256bc7db38cfc1183d1a1e1513ef3f71ecc5b6f9463062e4c5cb6d7f3fbd399ea8ec55dea59eab99577cbf353dcea9ec305f30bc016e37b080415a512ff10eefd8efcd81e28f067e13d0858f4e0a52c88758c9c7a90de4a12bec03b3bb7bc10ebbd9ce7be670b9707013f74dd1a943afa6254c967c3d1e0a167e99e3f66e1b0"], 0x38}}, 0x48040) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x10, 0x1, 0x5, 0x7, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @broadcast}}]}, 0x38}}, 0x80) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000040)=""/192, &(0x7f0000000180)=0xc0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140000070000000000000000000000050017e400a000000a00000009000000000000000000000000000000000000210000000000000000"], 0x38}}, 0x0) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x6}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0xffffffff00000000}, 0x0) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x15, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@private=0xa010100, 0x25, 0x14, 0x14}]}, 0x38}}, 0x4001000) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x6}, 0x0) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000040)=""/192, &(0x7f0000000180)=0xc0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140000070000000000000000000000050017e400a000000a00000009000000000000000000000000000000000000210000000000000000"], 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000040)=""/192, &(0x7f0000000180)=0xc0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140000070000000000000000000000050017e400a000000a00000009000000000000000000000000000000000000210000000000000000"], 0x38}}, 0x0) (async) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000040)=""/192, &(0x7f0000000180)=0xc0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140000070000000000000000000000050017e400a000000a00000009000000000000000000000000000000000000210000000000000000"], 0x38}}, 0x0) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@private=0xa010100, 0x25, 0x14, 0x14}]}, 0x38}}, 0x4001000) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x2}, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="021300001800"/16], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x3, 0x3, 0xfff, 0x3ff}, 0x14) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000040)=""/192, &(0x7f0000000180)=0xc0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140000070000000000000000000000050017e400a000000a00000009000000000000000000000000000000000000210000000000000000"], 0x38}}, 0x0) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@private=0xa010100, 0x25, 0x14, 0x14}]}, 0x38}}, 0x4001000) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x4}, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="021300001800"/16], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x3, 0x3, 0xfff, 0x3ff}, 0x14) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="021300001800"/16], 0x10}}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x3, 0x3, 0xfff, 0x3ff}, 0x14) (async) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x4000}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x38000}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x800300}, 0x0) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="021300001800"/16], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x3, 0x3, 0xfff, 0x3ff}, 0x14) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x300000c, 0x100010, r1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x6, 0x20, 0x3, 0x40, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_ident={0x2, 0xb, 0x9, 0x0, 0x4e}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_key={0x1f, 0x9, 0x760, 0x0, "301e21792ff5a313d545e8f87867f967ae7af41b628351ce610877062c8cdacacec0c874da4771d70a7b1560491353d223a9e5d7ab7c6eb8469dfba2c719943a793cec0ad3b242243439c2f858b4d699b326e12ded3cab47a72af7cd5fe5d2ebcc2b11ebf6fd592eeb343d6bd8f509f3b7da4862c4ad2f99b5a6762ad58325c93a8696c74b11f302c60ca74aa343b5d15092ce2bdc325cf5a9921fafc250bb2098ce0495c1af5f5c2006b8d3c253e599df6a2ba1717992dcfe5de0515af2c14ddf053371f7a755d4a88b1a16b4e05814086b13a90b5a610ab5e7ba0cf0463ad52ff192883e241727221867c8"}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in=@empty, 0x1f, 0x4, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_key={0x6, 0xc03c1da79b45d06d, 0x138, 0x0, "6bd3b9bedb02ea6c72140e05a00cfaaf50779cd892b524a539953985cf4d0b5b9a5dc232b953fd"}, @sadb_sa={0x2, 0x1, 0x4d3, 0xc0, 0x3d, 0xa3, 0x3, 0x80000001}, @sadb_sa={0x2, 0x1, 0x4d4, 0x6, 0x8, 0xec, 0x2, 0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bb5, 0x1a2, {0x6, 0x6c, 0xff, 0x4, 0x0, 0x4, 0x0, @in6=@private2, @in=@multicast2}}]}, 0x200}}, 0x40) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140000070000eb00000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000040"], 0x38}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) getitimer(0x0, &(0x7f0000000040)) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@any, 0x7}) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0xbfb8, 0x20, 0x4}, 0x2f) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}, 0x6}, 0x0) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x300000c, 0x100010, r1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x6, 0x20, 0x3, 0x40, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_ident={0x2, 0xb, 0x9, 0x0, 0x4e}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_key={0x1f, 0x9, 0x760, 0x0, "301e21792ff5a313d545e8f87867f967ae7af41b628351ce610877062c8cdacacec0c874da4771d70a7b1560491353d223a9e5d7ab7c6eb8469dfba2c719943a793cec0ad3b242243439c2f858b4d699b326e12ded3cab47a72af7cd5fe5d2ebcc2b11ebf6fd592eeb343d6bd8f509f3b7da4862c4ad2f99b5a6762ad58325c93a8696c74b11f302c60ca74aa343b5d15092ce2bdc325cf5a9921fafc250bb2098ce0495c1af5f5c2006b8d3c253e599df6a2ba1717992dcfe5de0515af2c14ddf053371f7a755d4a88b1a16b4e05814086b13a90b5a610ab5e7ba0cf0463ad52ff192883e241727221867c8"}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in=@empty, 0x1f, 0x4, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_key={0x6, 0xc03c1da79b45d06d, 0x138, 0x0, "6bd3b9bedb02ea6c72140e05a00cfaaf50779cd892b524a539953985cf4d0b5b9a5dc232b953fd"}, @sadb_sa={0x2, 0x1, 0x4d3, 0xc0, 0x3d, 0xa3, 0x3, 0x80000001}, @sadb_sa={0x2, 0x1, 0x4d4, 0x6, 0x8, 0xec, 0x2, 0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bb5, 0x1a2, {0x6, 0x6c, 0xff, 0x4, 0x0, 0x4, 0x0, @in6=@private2, @in=@multicast2}}]}, 0x200}}, 0x40) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140000070000eb00000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000040"], 0x38}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$key(0xf, 0x3, 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x300000c, 0x100010, r1, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x6, 0x20, 0x3, 0x40, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_ident={0x2, 0xb, 0x9, 0x0, 0x4e}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_key={0x1f, 0x9, 0x760, 0x0, "301e21792ff5a313d545e8f87867f967ae7af41b628351ce610877062c8cdacacec0c874da4771d70a7b1560491353d223a9e5d7ab7c6eb8469dfba2c719943a793cec0ad3b242243439c2f858b4d699b326e12ded3cab47a72af7cd5fe5d2ebcc2b11ebf6fd592eeb343d6bd8f509f3b7da4862c4ad2f99b5a6762ad58325c93a8696c74b11f302c60ca74aa343b5d15092ce2bdc325cf5a9921fafc250bb2098ce0495c1af5f5c2006b8d3c253e599df6a2ba1717992dcfe5de0515af2c14ddf053371f7a755d4a88b1a16b4e05814086b13a90b5a610ab5e7ba0cf0463ad52ff192883e241727221867c8"}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in=@empty, 0x1f, 0x4, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_key={0x6, 0xc03c1da79b45d06d, 0x138, 0x0, "6bd3b9bedb02ea6c72140e05a00cfaaf50779cd892b524a539953985cf4d0b5b9a5dc232b953fd"}, @sadb_sa={0x2, 0x1, 0x4d3, 0xc0, 0x3d, 0xa3, 0x3, 0x80000001}, @sadb_sa={0x2, 0x1, 0x4d4, 0x6, 0x8, 0xec, 0x2, 0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bb5, 0x1a2, {0x6, 0x6c, 0xff, 0x4, 0x0, 0x4, 0x0, @in6=@private2, @in=@multicast2}}]}, 0x200}}, 0x40) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140000070000eb00000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000040"], 0x38}}, 0x0) (async) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async, rerun: 32) getitimer(0x0, &(0x7f0000000040)) (rerun: 32) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x4000000}, 0x0) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}, 0x6}, 0x0) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@any, 0x7}) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0xbfb8, 0x20, 0x4}, 0x2f) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}, 0x6}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x40000000}, 0x0) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async, rerun: 32) getitimer(0x0, &(0x7f0000000040)) (rerun: 32) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@any, 0x7}) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0xbfb8, 0x20, 0x4}, 0x2f) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x300000c, 0x100010, r1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x6, 0x20, 0x3, 0x40, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_ident={0x2, 0xb, 0x9, 0x0, 0x4e}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_key={0x1f, 0x9, 0x760, 0x0, "301e21792ff5a313d545e8f87867f967ae7af41b628351ce610877062c8cdacacec0c874da4771d70a7b1560491353d223a9e5d7ab7c6eb8469dfba2c719943a793cec0ad3b242243439c2f858b4d699b326e12ded3cab47a72af7cd5fe5d2ebcc2b11ebf6fd592eeb343d6bd8f509f3b7da4862c4ad2f99b5a6762ad58325c93a8696c74b11f302c60ca74aa343b5d15092ce2bdc325cf5a9921fafc250bb2098ce0495c1af5f5c2006b8d3c253e599df6a2ba1717992dcfe5de0515af2c14ddf053371f7a755d4a88b1a16b4e05814086b13a90b5a610ab5e7ba0cf0463ad52ff192883e241727221867c8"}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in=@empty, 0x1f, 0x4, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_key={0x6, 0xc03c1da79b45d06d, 0x138, 0x0, "6bd3b9bedb02ea6c72140e05a00cfaaf50779cd892b524a539953985cf4d0b5b9a5dc232b953fd"}, @sadb_sa={0x2, 0x1, 0x4d3, 0xc0, 0x3d, 0xa3, 0x3, 0x80000001}, @sadb_sa={0x2, 0x1, 0x4d4, 0x6, 0x8, 0xec, 0x2, 0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bb5, 0x1a2, {0x6, 0x6c, 0xff, 0x4, 0x0, 0x4, 0x0, @in6=@private2, @in=@multicast2}}]}, 0x200}}, 0x40) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140000070000eb00000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000040"], 0x38}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 03:37:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:37:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f00000002c0)=""/144, 0x90}], 0x2, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/116, 0x74}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/82, 0x52}, {&(0x7f00000004c0)=""/176, 0xb0}], 0x4, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRES16=r2, @ANYRES16, @ANYRES64=0x0], 0x38}}, 0x4000000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mknodat$loop(r3, &(0x7f0000000580)='./file0\x00', 0x940e, 0x1) pipe2$watch_queue(&(0x7f0000000280), 0x80) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ')'}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x48}}, 0x20040000) 03:37:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) r2 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x40040, &(0x7f0000000380)=ANY=[@ANYBLOB="4000bf6695764b912f67c4666436", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f40003d30303030303030303030303030303021303130303030302c757365725f69643d7fec56a55cdec7775bb1baa1eb27d06558419ff66f9307314c9f061cfef906c31e68aa331197f0f5f12af6482d84e07c3800557f147c0dd1ab9825247d206f1331ed1233d56b1b037f200c2d36fde3d7a9976097253144f0fa01a728c267a82e90efe60308fb1e50f2a2368a614ac363bee21ab43f6ce0054156bd9b3daf33a97790dc7f08e42f1144d405d247b8e1bf222318719217ce88d45dac4ab756c376faf12dc30ad829", @ANYRES64, @ANYRES32=r1, @ANYRESOCT=r0, @ANYBLOB=',blksize=0x0000000000000200,max_read=0x0000000000000003,blksize=0x0000000000000400,rootcontext=sysadm_u,mask=^MAY_READ,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',appraise_type=imasig,audit,obj_user=],\x00'], 0x1, 0x0, &(0x7f0000000280)="33045531b20c18a17550c176023033afe599d53883e1e19be8e46e05c520561f08fbf8d8a5da8c6c238924c5228a85f555ff5af8ed3267d10e97ffed0edd696f959beac3f6dc77ce391b26b72f11b1135e33f9cd2249c533729dd21cbeacabd4083eb131c4c6ca019af78256fc7bf44ec883d760793d6ea25e3cb4f5da1797da9f1c9852178a838f1c4b19020deb0ec79541a1486d059cab00b4e08ba156") mknodat(r2, &(0x7f0000000340)='./file0\x00', 0x8000, 0x6) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r3, &(0x7f0000000080)=""/45, 0x2d) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="02010000000d000000000000"], 0x10}}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x80030000000000}, 0x0) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f00000002c0)=""/144, 0x90}], 0x2, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/116, 0x74}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/82, 0x52}, {&(0x7f00000004c0)=""/176, 0xb0}], 0x4, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRES16=r2, @ANYRES16, @ANYRES64=0x0], 0x38}}, 0x4000000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mknodat$loop(r3, &(0x7f0000000580)='./file0\x00', 0x940e, 0x1) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000280), 0x80) (rerun: 64) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ')'}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x48}}, 0x20040000) 03:37:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:37:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 03:37:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) r2 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x40040, &(0x7f0000000380)=ANY=[@ANYBLOB="4000bf6695764b912f67c4666436", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f40003d30303030303030303030303030303021303130303030302c757365725f69643d7fec56a55cdec7775bb1baa1eb27d06558419ff66f9307314c9f061cfef906c31e68aa331197f0f5f12af6482d84e07c3800557f147c0dd1ab9825247d206f1331ed1233d56b1b037f200c2d36fde3d7a9976097253144f0fa01a728c267a82e90efe60308fb1e50f2a2368a614ac363bee21ab43f6ce0054156bd9b3daf33a97790dc7f08e42f1144d405d247b8e1bf222318719217ce88d45dac4ab756c376faf12dc30ad829", @ANYRES64, @ANYRES32=r1, @ANYRESOCT=r0, @ANYBLOB=',blksize=0x0000000000000200,max_read=0x0000000000000003,blksize=0x0000000000000400,rootcontext=sysadm_u,mask=^MAY_READ,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',appraise_type=imasig,audit,obj_user=],\x00'], 0x1, 0x0, &(0x7f0000000280)="33045531b20c18a17550c176023033afe599d53883e1e19be8e46e05c520561f08fbf8d8a5da8c6c238924c5228a85f555ff5af8ed3267d10e97ffed0edd696f959beac3f6dc77ce391b26b72f11b1135e33f9cd2249c533729dd21cbeacabd4083eb131c4c6ca019af78256fc7bf44ec883d760793d6ea25e3cb4f5da1797da9f1c9852178a838f1c4b19020deb0ec79541a1486d059cab00b4e08ba156") mknodat(r2, &(0x7f0000000340)='./file0\x00', 0x8000, 0x6) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r3, &(0x7f0000000080)=""/45, 0x2d) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="02010000000d000000000000"], 0x10}}, 0x0) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f00000002c0)=""/144, 0x90}], 0x2, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/116, 0x74}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/82, 0x52}, {&(0x7f00000004c0)=""/176, 0xb0}], 0x4, 0x0) (rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRES16=r2, @ANYRES16, @ANYRES64=0x0], 0x38}}, 0x4000000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mknodat$loop(r3, &(0x7f0000000580)='./file0\x00', 0x940e, 0x1) (async) pipe2$watch_queue(&(0x7f0000000280), 0x80) 03:37:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:37:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) r2 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x40040, &(0x7f0000000380)=ANY=[@ANYBLOB="4000bf6695764b912f67c4666436", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f40003d30303030303030303030303030303021303130303030302c757365725f69643d7fec56a55cdec7775bb1baa1eb27d06558419ff66f9307314c9f061cfef906c31e68aa331197f0f5f12af6482d84e07c3800557f147c0dd1ab9825247d206f1331ed1233d56b1b037f200c2d36fde3d7a9976097253144f0fa01a728c267a82e90efe60308fb1e50f2a2368a614ac363bee21ab43f6ce0054156bd9b3daf33a97790dc7f08e42f1144d405d247b8e1bf222318719217ce88d45dac4ab756c376faf12dc30ad829", @ANYRES64, @ANYRES32=r1, @ANYRESOCT=r0, @ANYBLOB=',blksize=0x0000000000000200,max_read=0x0000000000000003,blksize=0x0000000000000400,rootcontext=sysadm_u,mask=^MAY_READ,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',appraise_type=imasig,audit,obj_user=],\x00'], 0x1, 0x0, &(0x7f0000000280)="33045531b20c18a17550c176023033afe599d53883e1e19be8e46e05c520561f08fbf8d8a5da8c6c238924c5228a85f555ff5af8ed3267d10e97ffed0edd696f959beac3f6dc77ce391b26b72f11b1135e33f9cd2249c533729dd21cbeacabd4083eb131c4c6ca019af78256fc7bf44ec883d760793d6ea25e3cb4f5da1797da9f1c9852178a838f1c4b19020deb0ec79541a1486d059cab00b4e08ba156") mknodat(r2, &(0x7f0000000340)='./file0\x00', 0x8000, 0x6) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r3, &(0x7f0000000080)=""/45, 0x2d) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="02010000000d000000000000"], 0x10}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x40040, &(0x7f0000000380)=ANY=[@ANYBLOB="4000bf6695764b912f67c4666436", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f40003d30303030303030303030303030303021303130303030302c757365725f69643d7fec56a55cdec7775bb1baa1eb27d06558419ff66f9307314c9f061cfef906c31e68aa331197f0f5f12af6482d84e07c3800557f147c0dd1ab9825247d206f1331ed1233d56b1b037f200c2d36fde3d7a9976097253144f0fa01a728c267a82e90efe60308fb1e50f2a2368a614ac363bee21ab43f6ce0054156bd9b3daf33a97790dc7f08e42f1144d405d247b8e1bf222318719217ce88d45dac4ab756c376faf12dc30ad829", @ANYRES64, @ANYRES32=r1, @ANYRESOCT=r0, @ANYBLOB=',blksize=0x0000000000000200,max_read=0x0000000000000003,blksize=0x0000000000000400,rootcontext=sysadm_u,mask=^MAY_READ,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',appraise_type=imasig,audit,obj_user=],\x00'], 0x1, 0x0, &(0x7f0000000280)="33045531b20c18a17550c176023033afe599d53883e1e19be8e46e05c520561f08fbf8d8a5da8c6c238924c5228a85f555ff5af8ed3267d10e97ffed0edd696f959beac3f6dc77ce391b26b72f11b1135e33f9cd2249c533729dd21cbeacabd4083eb131c4c6ca019af78256fc7bf44ec883d760793d6ea25e3cb4f5da1797da9f1c9852178a838f1c4b19020deb0ec79541a1486d059cab00b4e08ba156") (async) mknodat(r2, &(0x7f0000000340)='./file0\x00', 0x8000, 0x6) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) read$watch_queue(r3, &(0x7f0000000080)=""/45, 0x2d) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="02010000000d000000000000"], 0x10}}, 0x0) (async) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ')'}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x48}}, 0x20040000) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0xffffffffffffff6e}}, 0x0) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) process_vm_readv(0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f00000002c0)=""/144, 0x90}], 0x2, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/116, 0x74}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/82, 0x52}, {&(0x7f00000004c0)=""/176, 0xb0}], 0x4, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRES16=r2, @ANYRES16, @ANYRES64=0x0], 0x38}}, 0x4000000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mknodat$loop(r3, &(0x7f0000000580)='./file0\x00', 0x940e, 0x1) pipe2$watch_queue(&(0x7f0000000280), 0x80) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0xffffffff}, 0x10}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)=""/125, 0x7d}, &(0x7f0000000180)=0x40) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0xffffffffffffff6e}}, 0x0) [ 2720.912351][T29163] debugfs: Directory 'loop0' with parent 'block' already present! [ 2720.929322][T27464] udevd[27464]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x4000000000000000}, 0x0) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0xffffffff}, 0x10}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)=""/125, 0x7d}, &(0x7f0000000180)=0x40) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0xffffffff}, 0x10}}, 0x0) (async) pipe(&(0x7f0000000080)) (async) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)=""/125, 0x7d}, &(0x7f0000000180)=0x40) (async) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0xffffffffffffff6e}}, 0x0) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) (async) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x4, 0x0, @empty, 0xfffffffe}}]}, 0x38}}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0xffffffff}, 0x10}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)=""/125, 0x7d}, &(0x7f0000000180)=0x40) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x4, 0x0, @empty, 0xfffffffe}}]}, 0x38}}, 0x0) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) (async) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x4, 0x0, @empty, 0xfffffffe}}]}, 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x4, 0x0, @empty, 0xfffffffe}}]}, 0x38}}, 0x0) (async) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="02130000020000000000000000000000aaed77a213001a667356e106dfd62b1916763d7d271a021fa5e5147dd07e7b"], 0x10}}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:37:07 executing program 4: setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r0 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602989a000ab"], 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 03:37:07 executing program 2: socket$key(0xf, 0x3, 0x2) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2a, 0x3503}]}, 0x20}}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x38000}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800300}, 0x0) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="02130000020000000000000000000000aaed77a213001a667356e106dfd62b1916763d7d271a021fa5e5147dd07e7b"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="02130000020000000000000000000000aaed77a213001a667356e106dfd62b1916763d7d271a021fa5e5147dd07e7b"], 0x10}}, 0x0) (async) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 4: setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) (async) r0 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602989a000ab"], 0x0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="02130000020000000000000000000000aaed77a213001a667356e106dfd62b1916763d7d271a021fa5e5147dd07e7b"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="02130000020000000000000000000000aaed77a213001a667356e106dfd62b1916763d7d271a021fa5e5147dd07e7b"], 0x10}}, 0x0) (async) 03:37:07 executing program 2: socket$key(0xf, 0x3, 0x2) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2a, 0x3503}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2a, 0x3503}]}, 0x20}}, 0x0) (async) [ 2721.159897][T27464] udevd[27464]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 03:37:07 executing program 4: setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) (async) r0 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602989a000ab"], 0x0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 03:37:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x60801}, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250c0000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r3, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x11) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="fcff5a8b", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf2503000000080001006e626400"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}}, 0x4008845) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 03:37:07 executing program 2: socket$key(0xf, 0x3, 0x2) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2a, 0x3503}]}, 0x20}}, 0x0) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x38}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:37:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x60801}, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250c0000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r3, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x11) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="fcff5a8b", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf2503000000080001006e626400"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x60801}, 0x5) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250c0000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r3, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x11) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) (async) socket$key(0xf, 0x3, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="fcff5a8b", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf2503000000080001006e626400"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) (async) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) r1 = socket(0xb, 0x6, 0x5) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x38}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) r1 = socket(0xb, 0x6, 0x5) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 03:37:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x60801}, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250c0000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r3, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x11) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="fcff5a8b", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf2503000000080001006e626400"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x60801}, 0x5) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250c0000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r3, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x11) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) (async) socket$key(0xf, 0x3, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="fcff5a8b", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf2503000000080001006e626400"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) (async) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x2) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x38}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 03:37:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) (async, rerun: 32) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (rerun: 32) r1 = socket(0xb, 0x6, 0x5) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 03:37:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x4) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x4000) 03:37:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x24004844) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x0, 0x401, 0xfffffff8}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x404040, 0x0) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000240)='bpf_lsm_cred_getsecid\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7fff}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1748, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x9, 0x8000, 0x2}, 0x10, r3}, 0x80) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x38000) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x800300) 03:37:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x1000000) 03:37:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) 03:37:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x2000000) 03:37:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) prctl$PR_SET_FP_MODE(0x2d, 0x0) (async) [ 2721.434293][T27464] udevd[27464]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x4000000) 03:37:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x24004844) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x0, 0x401, 0xfffffff8}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x404040, 0x0) (async) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000240)='bpf_lsm_cred_getsecid\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7fff}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1748, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x9, 0x8000, 0x2}, 0x10, r3}, 0x80) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x40000000) 03:37:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e24, @empty}}]}, 0x28}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, 0x0, 0x100, 0x9, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xb, 0x2, 0x7, 0x22e, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@broadcast, 0x22, 0x0, 0x10}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private1, 0x10, 0x4, 0x10}, @sadb_key={0x1c, 0x8, 0x6b0, 0x0, "bacee5c0f53fada72ed599b15841848e6c0df68a80a10b3bb0902295107f5f51c11f03d211b3093f244f005b60fdc4b36bd691096114746a01d0547bc5f57ae9af5aa44dad555c0ec5b5369b4c27f96ccba403cd27c7ab9829b953857ddd3a4ba4822b01d78bf2952075b8173219246bd173d74682fd9e93fb6799afe4b99b000daac4162a9867d23a441cf752087292bbe6c49e48e7eee0782f51aa8e773a211863bdb53fb96cad5535f3fe45d7ae83344797a536ace9a1e6948d8e981b271a0dde47673a4f9bdefec322ba9127ff39deed7b29b1cc"}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@broadcast, 0x11, 0x0, 0x14}, @sadb_x_sec_ctx={0x201, 0x18, 0x0, 0x4c, 0x1000, "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"}]}, 0x1170}}, 0x440c0) socket$key(0xf, 0x3, 0x2) 03:37:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e24, @empty}}]}, 0x28}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, 0x0, 0x100, 0x9, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xb, 0x2, 0x7, 0x22e, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@broadcast, 0x22, 0x0, 0x10}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private1, 0x10, 0x4, 0x10}, @sadb_key={0x1c, 0x8, 0x6b0, 0x0, "bacee5c0f53fada72ed599b15841848e6c0df68a80a10b3bb0902295107f5f51c11f03d211b3093f244f005b60fdc4b36bd691096114746a01d0547bc5f57ae9af5aa44dad555c0ec5b5369b4c27f96ccba403cd27c7ab9829b953857ddd3a4ba4822b01d78bf2952075b8173219246bd173d74682fd9e93fb6799afe4b99b000daac4162a9867d23a441cf752087292bbe6c49e48e7eee0782f51aa8e773a211863bdb53fb96cad5535f3fe45d7ae83344797a536ace9a1e6948d8e981b271a0dde47673a4f9bdefec322ba9127ff39deed7b29b1cc"}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@broadcast, 0x11, 0x0, 0x14}, @sadb_x_sec_ctx={0x201, 0x18, 0x0, 0x4c, 0x1000, "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"}]}, 0x1170}}, 0x440c0) (async) socket$key(0xf, 0x3, 0x2) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0xffffff7f) 03:37:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="021300000200"/16], 0x10}}, 0x0) 03:37:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e24, @empty}}]}, 0x28}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, 0x0, 0x100, 0x9, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xb, 0x2, 0x7, 0x22e, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@broadcast, 0x22, 0x0, 0x10}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private1, 0x10, 0x4, 0x10}, @sadb_key={0x1c, 0x8, 0x6b0, 0x0, "bacee5c0f53fada72ed599b15841848e6c0df68a80a10b3bb0902295107f5f51c11f03d211b3093f244f005b60fdc4b36bd691096114746a01d0547bc5f57ae9af5aa44dad555c0ec5b5369b4c27f96ccba403cd27c7ab9829b953857ddd3a4ba4822b01d78bf2952075b8173219246bd173d74682fd9e93fb6799afe4b99b000daac4162a9867d23a441cf752087292bbe6c49e48e7eee0782f51aa8e773a211863bdb53fb96cad5535f3fe45d7ae83344797a536ace9a1e6948d8e981b271a0dde47673a4f9bdefec322ba9127ff39deed7b29b1cc"}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@broadcast, 0x11, 0x0, 0x14}, @sadb_x_sec_ctx={0x201, 0x18, 0x0, 0x4c, 0x1000, "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"}]}, 0x1170}}, 0x440c0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e24, @empty}}]}, 0x28}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, 0x0, 0x100, 0x9, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xb, 0x2, 0x7, 0x22e, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@broadcast, 0x22, 0x0, 0x10}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private1, 0x10, 0x4, 0x10}, @sadb_key={0x1c, 0x8, 0x6b0, 0x0, "bacee5c0f53fada72ed599b15841848e6c0df68a80a10b3bb0902295107f5f51c11f03d211b3093f244f005b60fdc4b36bd691096114746a01d0547bc5f57ae9af5aa44dad555c0ec5b5369b4c27f96ccba403cd27c7ab9829b953857ddd3a4ba4822b01d78bf2952075b8173219246bd173d74682fd9e93fb6799afe4b99b000daac4162a9867d23a441cf752087292bbe6c49e48e7eee0782f51aa8e773a211863bdb53fb96cad5535f3fe45d7ae83344797a536ace9a1e6948d8e981b271a0dde47673a4f9bdefec322ba9127ff39deed7b29b1cc"}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@broadcast, 0x11, 0x0, 0x14}, @sadb_x_sec_ctx={0x201, 0x18, 0x0, 0x4c, 0x1000, "d3486c8a874c8a1730da1613ada88b226e4b50d9c7f6f01d605272d2e08ed51eba99412499ef1f1f83755ad7501a48fea15ce12de758c07433715c964f535f4dd95a872bcc363bb85b80eb9cef35da8e4416ca9136853e2267dfa3055721e07afceb24d49f9c1a5fd0034229ac43ccc4a6fcc1bdbf73725d8119a1af75fe34078a4183916846623eb8b0a0eb2bfd631c620a966f74b04c98d6da40199809021a54fda6f7d7f3bd999323cc6c60931d5eada2ccfc271620751e6d30f68f77f8b02712ad334142bcd6d591f2b41831d0af55abb717eb5cd7e93e731be9d7b8ca78e22123964ea7039ab9d69b14156ffac7f3b3876c6e068accaeac8fe299b1a30496dd46687779752c2607eabfa5bdafc412fd7bc0cd86fc0361de26c5152ffe82fdba63fdee04e474d36af78c063f11bf0f9d8b53913ef60c3a1c7085fe4d8fd60381702555ccf4962e02571d8c8f00077baff439830ebac9246976751d9041163ed53960a2b6e490e386e276170b2b209e4beb80349c61cdcba7944c8ac0b837c676513d83b4ed5b0cdbbdee5cca5a42cc40781ede903fcf095db36d12f3a8fc461c5e1bed52eb983d590641f124fb973ac9b6be29f018296b06fb13ee5e32b159153c7ce0e1b12083c931462027dfcaeb6b2ea48649b44e92bc5691fdff20b12884fd61a66397f802a230d129902578cd181421dc255587ce006e404bc2589cad874016058a2ea4d98cf4f61de94d8202590000fa9f78ae0b1383137171b567796f3a4f76309fc2c97a816e93c5971d9306dc5fa2e496d7b3858531f8d178d3664d2170ae91e99aecabe66b512b1cdb4e8aefe170a40e5de31f07bef8b342d450e8397b860e26eba43b7c231ea9b2b0618eaf005693d344e35559c204ec29e5b9e070856f54bce442267fe566d2bf5a93a8a43995442821cd68720d41bc18339d546b455419489b4ff5f9a3a3ed82ed1210ae94a02c755277e05e5e63d19ff8825f9d565a4450e82dad2fa757bb22d8ad1bd3fbef533e333a2478a744552e6a0c6efc97eae9876dfe32a7828e611b83bcbef47212f2fc6ed343bcc9da2bab7976740fec159abee9aa9b6dcfd36921063f7a83682d26004d110a82846e159a7494af8d4143b6754e40fdc89b4542200a12308725ac4e19de35e56459265e3d793eb69c2a06a57f4fad4e9a9ba1f3986b86eeb99077395d97477b8e801cf52fb2b995f2665ae6d13464cedeac7ba77755d1cba80602831187c9ca0192531d2cb06ac58c9d043b08a7aedae2600216ac3983453401c46661f601b2ac7d33f6a9c3dc04cdfa058ada57242485ff9d42c493e2928dee530fe36d04c66a1633e403c0c34c70514a84bc58d95a5675698ef23d446ee0d2f2bb111c90c2faba680ff2e84efe5856b0dcae4a0ef813d5729e98fbaa848dda272ab890cab2a0ba76365d619f1ad9e2c4fe8b39c7da84adedd6c3e6422c3239dc2dc32aefa5ae5b2d051a7a1c7cf66449de4783164350a3ab4edf85dfc354148bf704080a978ec59a66f3498e0f922d8944471c8066b68dea4bd60b9253d8794f5c2d4e501c8ee65dfa8f46f2c705bf1aa5de37243b72ab6a6a78320bb996ec05d395dc47e8e2501e300ef0c50b1b1f37a145da024b399558ea3abfb646242e829b12bb2d340cdb317be91286a5b6e292ad004ea1e81efea84fd1f74dcbe53d9e13e7be762ce37db2df16147c1c0e14fc79fa87a981e989c0e694654f724cc7e41ec99fae321c5b629373ab1eb4f45027aea054430fa7618c276a8690f338ee9ad9fe7bb2810555918ad2365015c9e2f36fc60886c45543a7f8246f724daf790e3950021a2538e77f8ccf4646e0838d7d2d16f0d71e4d051750ddc896ef78e5b7871281a78eeb95f9dab8ebf4dc5a3ffd1265023bb21a1c26b6e9af078381a42085b21a5f3c2f91b996c44c7fa13fee140e45d7e9bdeb62507e00cfc1762f32e61bf2f041a7bfe1c004de0ce199fad9a27b21d5da0f8427923f3a21214c31c86e507f7bbf66a560f39664787653712bd401eac009c7cfadcecae6700040352d1cf04547c930683bf4d8018b8d403240236f474c8c55d95e252935e8e0242210970e01c452aa133da6ec97fe2adb0f5102ecc5787991921f710eccf6f052b6b8b689a5a107ef8cdb5736eb468a5ded3d78753122a03880a297551eb5c8dd041df1d7ddcbcef0db8927abb9e7bce39efafeca922a5c709ba17571ca13b426b375498e4aa6b2d2d8b51509382cc7ee4629c265d12179bb635d3491d5627081b6816ab6a32fb5db6c9053841888c9e06546a3abbf7af4e3ea1c687c7d0779b2da1c1cd739347d981919686af91c4bb7da79102d9e0933924a6b2fa08abecf36ad85d1a7842c6d68d51f8d8688c931b379bb0cb56c00e176f48facc9a1f6cb4ecdc187014f3adc98ae2da75e11d93806ff50d3fa2869833cdbd3a56c0a0d44232d3813b84c8f356ea5f78f341afaf3fb4459b2dde803108b406c27e0ab4d454f0a91ec15a8f2ac856cc49a5b20539ba7354865b7d7468925ee352a292d3912709b8c506034a74f83b63382ad6a9ad1d6f20196ec5e864cb87a9b70bc10085908aa8318c86a415c79ccfd35e91de8c8a976da24e9e38db65a3365dd8090c920ffdde002c1e184a27f10f5e806c725783964aaf130be29f30a1f148978f48ad6795a7480f3aed9a02dcb69a937c2c3e7fc3f574933c81053ca9d30694633900cc49d910023af46971f284445e78c7e9a2a75aa9836aabfde8785fcd577358f4db3589941bfd0cb3d1008ad26711621970a3de1d0cdd939f7c7fafeaba72dd24f6838e66bc6ea6a10431d9cd78478eca63efcd0b3358e269fb9963836ca553c4625c3b2aa3159a86ab5ec33028b5921a1b77ade93d7d5b1ba7c333b8e81cb2193d1d45139aafea177f261e20d2cb4ba7944b0befc98adc1fc28e2db5cb7954abff3e6890f98b0b03160f5208707bb3be4695aad70dd40e4d3ef993e0b01e00e3b7e612d64ca8beb7d42358a9bc8c71b270e3c565634e482bc2322a74a07bb8f037d565681cefb8d1ace9447c0425fb06e7573593e121d0a4a3bcf41db744b77ea9a7288e694da7ae32c80b33aa172fa7e52ed60f7d2442901fb7d5cd51b4afc0051abe0613c665f9b4b18d980edffff70b3f9fb440039c5af272d702aa3788fd472275ab8090256d110e06368a5c4798a2ae1481309cf1efd5bae4c3c6243482254c4ce773861fb8f74d824bebe9486efbfe0d06817323a1f5e4598fda48224706f7802e0e211b14a68a9da999f5a03279321a84b621482de52c6064e183af8dea67cc4774827e230a21f720f77b28945034d9867f89cc13b71cc1d013255008beefb47c218d0ed6940b334992c547cb570c7c7e43b1115106b7860b4c901d98bc29a8db68adb33057356a555b4a18d66f67fed42df544845956a0403d14bb9b818f88b21a9547a841738042bf95d132061759772ca2190d516925d33ca6b93f95c33f022d957e6a911f065639d41c33665fc9d101f665a6abb60a1517478d678cb2779eff3dadaf27b91d6a8ec66608b13c9718d801a56216e414aa99c36d03d28bbe26cc34f673d259ff334c8e1dd7298ff5d0521f840831571ae9bf44ee2394859228f38e36f4b270c6b0913c5192fad5049d0b91b097945665582c772a96b60798c6e35cc25c5fbee9e8bc704e137da7630f9056fc69bc6db553d64b3f8af09b6f8cac0a1067628a4cfa95a53f7b806cd8e1e97ca8a699c7b42b5654ee84d8ac10072e3dd8808714d858d68847b1d3c819725644bd85be84eb25cebff61814c808f85f39086a93bb5f10bbe0d2f2313c66969628d276a1d5544050b079891828ed961feb59fd30aa12e26fae692a136b28924065b1409cbb93b6c1f2d45418dbb7d6b0cad8129fe0220e3b124e64bec24668c0dfd2515c1bd6d4bf36451fafd9cb00567fbfd82a1227beb1b96b4232b88b3b5b0ec5062bb82750f7ec5e22f1e7960996c81948c9beef19b9bf4be9533449e23c9fd93967998360e82a29a8b56080953d30fed195aa8cffa4640fcd34da88d953e54c98073482b00ce0f2735fca9ed685a01fe3b74eb9914d1eba3b890d91e10fcfbc065bbc0a2732b7ec3663009ad712f4914f2137714e20f69767b6e320d628765bbdace789c9dc86062219a00f8e04d467c7a7a5a5e2a0f754465cee5e78721b4ccf77658b62360bf981e1e5a88813a50f7671e51ef715a87bd08584a73157213c60b4b6b55f728d472543cc36914ff3961875f700ff00eac933bc07bfd5dc055f216930206f22f6addff4478450fe188823c4ec5e866a80685b26f940f7a27f7d01315ff554657af9011561baa8c0c9795625221e6125142fc472bbb8a8000c6eb4fec3d406614716d89bcac3391fda3ef0e2750402374e22dad55c7958a6d29315b5ba4516b30177e248f2f1550e5a592ef20677cf4e1ac82c03459ae0f609b8513ac22878e62b424ec12b26956f36b47e87126cab53945ae71b67ad9678d39c3595968f9db54b9d5d6f5faa1432fac2bb7c96c0463a1a9983d98caf9fe4f13e24255d097c2de07254e1bc7afa829282af49c4502107757779fecad79204bc4ba93e3600754bf43d548ca59bd57f3fa1c3858d0f9bd7ba4f1aed6d4e9cd60d89549d612cdfaef6f2de0bb4f00f1ed46ff2ecb840ec5ff5f8ef1c5ade1a89c08f29f9193cbf46e4097074149f50d30c6cadbb54325502ce951c6c3e040b1e720a0611b8d8e053f96838902a827962d81f0ea510d21f18afabd59ad2239418f22b9b1cc949b3487c6dd2b4a06ccfc856aacd27dd6906d02e53baaad42e4c53d35074d719577fbb9c4dba03995f31b91f42721029dbe228221495730b0d532548601c180a7354c58d3d10479bfcdad767a531d022963401c518c227f8290df97f82c9ffff46cd373c9df94e6863254004e4e562eefe569ae81c0b5273ad7aca4e98de6b43eb82d8f3abea8a8991fa96a60b7cd0bf74316be36bf437ad8bc44bdaed5eab0f56ec11edec58bafceb43613dc5210a4343ddc7033d5fcc6a3d722a6b93e758782a86f84977eac4b4d2f1bf8937010f18004267c2c49f052b55f6821f6d115470a3b4e249e3e8e8a2df53fea48a800d22a7d9cb2d3d143040006e8ec209783ec58ff505c68f901d1f3321ac9115f0876b4fb433b0c794dc05a81f4f4567ec1d1d31ce71c92f792c558cff15cd398596e57a7c83db60b065cc315f3e17d44135e4203d294f0ab06046442d3d644952911c1caa92f868026cb0f4a3ad6a8d6aec2539494589b751c5294d3758529e74c077be94e7ff58914ed959693ef8561fb78b67e471dd26dd2689091ca17ecd2fe0d7ff4f1723dac74228200ace22dba113504d398cf930db43e1c1bebf0e8659e57b558106ab61b5e56a9cd044af61fa8e03cf71be49582f0c4754c004bd1addaba89931fc6fc366a5ac56e7be0b2275371f9d5c469517414490f0c52623e2e2ae640c7b6f2164d146274fa551880927e13a0256c0ce0b38d9305f2f32feb4e6308fa1dfeafea59beafb39bce23bcb1f19b41a96984d314ba96b668b1babf313304f72349d16d59bb720509b612fd34b3e7fc5de75ec13f0daf845a4375d26796217f348ecd514959293ea5d1f690f561beacf652700cb1cb2d980bd0a5827a548453c096799345235f375a11ab8c7659e27e77a3125b96c3a9e1b0278817a6639937d90169672a9e823dc3e55119ad53a642cb4cc443422634f02f7727354bbc3a9844efe95cb6"}]}, 0x1170}}, 0x440c0) (async) socket$key(0xf, 0x3, 0x2) (async) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x80030000000000) 03:37:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="021300000200"/16], 0x10}}, 0x0) 03:37:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x24004844) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x0, 0x401, 0xfffffff8}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x404040, 0x0) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000240)='bpf_lsm_cred_getsecid\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7fff}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1748, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x9, 0x8000, 0x2}, 0x10, r3}, 0x80) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x24004844) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x0, 0x401, 0xfffffff8}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x404040, 0x0) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000240)='bpf_lsm_cred_getsecid\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7fff}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1748, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x9, 0x8000, 0x2}, 0x10, r3}, 0x80) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x100000000000000) 03:37:08 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000b, 0x30, r0, 0x10000000) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="021300000200"/16], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="021300000200"/16], 0x10}}, 0x0) (async) 03:37:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x100, 0x1, 0x5, 0x1f}, 0x14) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x200000000000000) 03:37:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) sendmsg$key(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0], 0xf0}}, 0x4008050) socket$key(0xf, 0x3, 0x2) 03:37:08 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000b, 0x30, r0, 0x10000000) (async) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 03:37:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) sendmsg$key(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0], 0xf0}}, 0x4008050) socket$key(0xf, 0x3, 0x2) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x400000000000000) 03:37:08 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, r0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000b, 0x30, r0, 0x10000000) (async) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:08 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/80, 0x50) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x38}}, 0x80c5) r3 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2012, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@appraise}, {@subj_type={'subj_type', 0x3d, '/dev/vcs\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x63, 0x31, 0x64, 0x64, 0x36, 0x63], 0x2d, [0x63, 0x63, 0x39, 0x64], 0x2d, [0x39, 0x32, 0x32, 0x37], 0x2d, [0x61, 0x61, 0x33, 0x61], 0x2d, [0x62, 0x32, 0x61, 0x36, 0x33, 0x31, 0x34, 0x39]}}}, {@subj_role={'subj_role', 0x3d, '/dev/vcs\x00'}}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000380)="c97b3ac38a08a4655c077f1dae6458aa8e9c671ca8062dcccad0138a7b554cdf86dd134776f86aa83d27828d79a99ec19699fa480186cf1b90fd815a38dcc2f1d084538108b96af5915d1f08394238e4ec21d4d93404f8c3b29ee9931324038c21dd517209a4080c0f61fb33be7b465da17c8cac18aa3bcc8792bde19307bda97de839ab6be97ff21b58ab4856") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000440)={@id={0x2, 0x0, @auto="de660e908da3fc08b4931e1cadd09117"}}) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x4000000000000000) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0xffffff7f00000000) 03:37:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) sendmsg$key(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0], 0xf0}}, 0x4008050) (async) socket$key(0xf, 0x3, 0x2) 03:37:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) (fail_nth: 1) 03:37:08 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/80, 0x50) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x38}}, 0x80c5) r3 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2012, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@appraise}, {@subj_type={'subj_type', 0x3d, '/dev/vcs\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x63, 0x31, 0x64, 0x64, 0x36, 0x63], 0x2d, [0x63, 0x63, 0x39, 0x64], 0x2d, [0x39, 0x32, 0x32, 0x37], 0x2d, [0x61, 0x61, 0x33, 0x61], 0x2d, [0x62, 0x32, 0x61, 0x36, 0x33, 0x31, 0x34, 0x39]}}}, {@subj_role={'subj_role', 0x3d, '/dev/vcs\x00'}}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000380)="c97b3ac38a08a4655c077f1dae6458aa8e9c671ca8062dcccad0138a7b554cdf86dd134776f86aa83d27828d79a99ec19699fa480186cf1b90fd815a38dcc2f1d084538108b96af5915d1f08394238e4ec21d4d93404f8c3b29ee9931324038c21dd517209a4080c0f61fb33be7b465da17c8cac18aa3bcc8792bde19307bda97de839ab6be97ff21b58ab4856") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000440)={@id={0x2, 0x0, @auto="de660e908da3fc08b4931e1cadd09117"}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/80, 0x50) (async) socket$key(0xf, 0x3, 0x2) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) (async) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x38}}, 0x80c5) (async) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2012, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@appraise}, {@subj_type={'subj_type', 0x3d, '/dev/vcs\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x63, 0x31, 0x64, 0x64, 0x36, 0x63], 0x2d, [0x63, 0x63, 0x39, 0x64], 0x2d, [0x39, 0x32, 0x32, 0x37], 0x2d, [0x61, 0x61, 0x33, 0x61], 0x2d, [0x62, 0x32, 0x61, 0x36, 0x33, 0x31, 0x34, 0x39]}}}, {@subj_role={'subj_role', 0x3d, '/dev/vcs\x00'}}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000380)="c97b3ac38a08a4655c077f1dae6458aa8e9c671ca8062dcccad0138a7b554cdf86dd134776f86aa83d27828d79a99ec19699fa480186cf1b90fd815a38dcc2f1d084538108b96af5915d1f08394238e4ec21d4d93404f8c3b29ee9931324038c21dd517209a4080c0f61fb33be7b465da17c8cac18aa3bcc8792bde19307bda97de839ab6be97ff21b58ab4856") (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000440)={@id={0x2, 0x0, @auto="de660e908da3fc08b4931e1cadd09117"}}) (async) [ 2721.729991][T27464] udevd[27464]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 03:37:08 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async, rerun: 32) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/80, 0x50) (rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x38}}, 0x80c5) r3 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2012, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@appraise}, {@subj_type={'subj_type', 0x3d, '/dev/vcs\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x63, 0x31, 0x64, 0x64, 0x36, 0x63], 0x2d, [0x63, 0x63, 0x39, 0x64], 0x2d, [0x39, 0x32, 0x32, 0x37], 0x2d, [0x61, 0x61, 0x33, 0x61], 0x2d, [0x62, 0x32, 0x61, 0x36, 0x33, 0x31, 0x34, 0x39]}}}, {@subj_role={'subj_role', 0x3d, '/dev/vcs\x00'}}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000380)="c97b3ac38a08a4655c077f1dae6458aa8e9c671ca8062dcccad0138a7b554cdf86dd134776f86aa83d27828d79a99ec19699fa480186cf1b90fd815a38dcc2f1d084538108b96af5915d1f08394238e4ec21d4d93404f8c3b29ee9931324038c21dd517209a4080c0f61fb33be7b465da17c8cac18aa3bcc8792bde19307bda97de839ab6be97ff21b58ab4856") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000440)={@id={0x2, 0x0, @auto="de660e908da3fc08b4931e1cadd09117"}}) 03:37:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) [ 2721.771525][T29490] FAULT_INJECTION: forcing a failure. [ 2721.771525][T29490] name failslab, interval 1, probability 0, space 0, times 0 [ 2721.784322][T29490] CPU: 0 PID: 29490 Comm: syz-executor.1 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2721.794540][T29490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2721.804569][T29490] Call Trace: [ 2721.807843][T29490] dump_stack+0x1d8/0x241 [ 2721.812142][T29490] ? panic+0x73e/0x73e [ 2721.816176][T29490] ? arch_stack_walk+0x114/0x140 [ 2721.821079][T29490] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2721.826854][T29490] ? page_fault+0x2f/0x40 [ 2721.831149][T29490] should_fail+0x709/0x870 [ 2721.835542][T29490] ? setup_fault_attr+0x3d0/0x3d0 [ 2721.840537][T29490] ? __alloc_skb+0x78/0x4d0 [ 2721.845007][T29490] should_failslab+0x5/0x20 [ 2721.849489][T29490] kmem_cache_alloc+0x24/0x210 [ 2721.854228][T29490] __alloc_skb+0x78/0x4d0 [ 2721.858526][T29490] ? get_page_from_freelist+0x524/0x560 [ 2721.864041][T29490] pfkey_sendmsg+0x1c2/0xf00 [ 2721.868600][T29490] ? debug_smp_processor_id+0x20/0x20 [ 2721.873936][T29490] ? pfkey_release+0x330/0x330 [ 2721.878761][T29490] ? selinux_socket_sendmsg+0x23f/0x340 [ 2721.884286][T29490] ? selinux_socket_accept+0x5b0/0x5b0 [ 2721.889731][T29490] ? rw_copy_check_uvector+0x2d0/0x320 [ 2721.895248][T29490] ? import_iovec+0x1bc/0x380 [ 2721.899894][T29490] ? security_socket_sendmsg+0x9d/0xb0 [ 2721.905327][T29490] ? pfkey_release+0x330/0x330 [ 2721.910059][T29490] ____sys_sendmsg+0x5a6/0x8f0 [ 2721.914793][T29490] ? __sys_sendmsg_sock+0x2b0/0x2b0 03:37:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0xffffffff00000000) 03:37:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) (fail_nth: 2) 03:37:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="021400000700000000000020000000000500170000a000000a000000000000000000000000000000010000000000000000000000cf03000000c5a20347da22bcaea9ce2560241a0b22735d01d76d6461988b392bf3e4a0c3512a762a2d213835de7d9aef683a7097c17b76419ba300f7b366545ed8ea48adc2c7c040f8e8ea48ea120a8d9aa11695a25a09a0d62a093a76e9327529d4a72da2d20e6ad1256b777825dbbcb8ca14698a9991cbb2a59025f8e806c6732c0c56158a836126b4b56226a0418af74aea8b5107fbe9a8d4a41bf7419494b0afef131f21595c7d2e767965"], 0x38}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0x9, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000ff010000050000000000070073797374656d5f753a6f626a6563745f723a6175646974645f7661725f72f56e5f743a73300000002b00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f7661725f6c69625f743a7330000014000300000000000000000000000000000000012600070073797374656d5f753a6f626a6563745f723a7474795f6465766963655f743a73300000002800070073797374656d5f753a6f626a6563745f723a73657472616e735f657865635f743a7330001400030000000000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x38, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048801}, 0x20005800) 03:37:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) [ 2721.919963][T29490] ? __lru_cache_add+0x1bf/0x210 [ 2721.924867][T29490] ? proc_fail_nth_read+0x220/0x220 [ 2721.930117][T29490] __sys_sendmsg+0x2b7/0x3a0 [ 2721.934673][T29490] ? ____sys_sendmsg+0x8f0/0x8f0 [ 2721.939577][T29490] ? check_preemption_disabled+0x9e/0x330 [ 2721.945266][T29490] ? fput_many+0x42/0x1a0 [ 2721.949563][T29490] ? check_preemption_disabled+0x154/0x330 [ 2721.955362][T29490] do_syscall_64+0xcb/0x1c0 [ 2721.959840][T29490] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = io_uring_setup(0x3c25, &(0x7f0000000100)={0x0, 0x6861, 0x400, 0x0, 0x3c5}) io_uring_setup(0x1066, &(0x7f0000000180)={0x0, 0x20c, 0x800, 0x3, 0x233, 0x0, r1}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) [ 2722.009361][T29503] FAULT_INJECTION: forcing a failure. [ 2722.009361][T29503] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.024674][T29503] CPU: 1 PID: 29503 Comm: syz-executor.1 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2722.034992][T29503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2722.045019][T29503] Call Trace: [ 2722.048291][T29503] dump_stack+0x1d8/0x241 [ 2722.052593][T29503] ? panic+0x73e/0x73e [ 2722.056629][T29503] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2722.062409][T29503] should_fail+0x709/0x870 [ 2722.066803][T29503] ? setup_fault_attr+0x3d0/0x3d0 [ 2722.071804][T29503] ? pfkey_sendmsg+0x1c2/0xf00 [ 2722.076543][T29503] should_failslab+0x5/0x20 [ 2722.081016][T29503] __kmalloc_track_caller+0x4f/0x280 [ 2722.086278][T29503] ? kmem_cache_alloc+0xd0/0x210 [ 2722.091184][T29503] ? pfkey_sendmsg+0x1c2/0xf00 [ 2722.095914][T29503] __alloc_skb+0xb5/0x4d0 [ 2722.100210][T29503] ? get_page_from_freelist+0x524/0x560 [ 2722.105735][T29503] pfkey_sendmsg+0x1c2/0xf00 [ 2722.110311][T29503] ? pfkey_release+0x330/0x330 [ 2722.115042][T29503] ? selinux_socket_sendmsg+0x23f/0x340 [ 2722.120580][T29503] ? selinux_socket_accept+0x5b0/0x5b0 [ 2722.126027][T29503] ? rw_copy_check_uvector+0x2d0/0x320 [ 2722.131466][T29503] ? import_iovec+0x1bc/0x380 [ 2722.136118][T29503] ? security_socket_sendmsg+0x9d/0xb0 [ 2722.141564][T29503] ? pfkey_release+0x330/0x330 [ 2722.146303][T29503] ____sys_sendmsg+0x5a6/0x8f0 [ 2722.151040][T29503] ? __sys_sendmsg_sock+0x2b0/0x2b0 03:37:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="021400000700000000000020000000000500170000a000000a000000000000000000000000000000010000000000000000000000cf03000000c5a20347da22bcaea9ce2560241a0b22735d01d76d6461988b392bf3e4a0c3512a762a2d213835de7d9aef683a7097c17b76419ba300f7b366545ed8ea48adc2c7c040f8e8ea48ea120a8d9aa11695a25a09a0d62a093a76e9327529d4a72da2d20e6ad1256b777825dbbcb8ca14698a9991cbb2a59025f8e806c6732c0c56158a836126b4b56226a0418af74aea8b5107fbe9a8d4a41bf7419494b0afef131f21595c7d2e767965"], 0x38}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0x9, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000ff010000050000000000070073797374656d5f753a6f626a6563745f723a6175646974645f7661725f72f56e5f743a73300000002b00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f7661725f6c69625f743a7330000014000300000000000000000000000000000000012600070073797374656d5f753a6f626a6563745f723a7474795f6465766963655f743a73300000002800070073797374656d5f753a6f626a6563745f723a73657472616e735f657865635f743a7330001400030000000000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x38, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048801}, 0x20005800) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="021400000700000000000020000000000500170000a000000a000000000000000000000000000000010000000000000000000000cf03000000c5a20347da22bcaea9ce2560241a0b22735d01d76d6461988b392bf3e4a0c3512a762a2d213835de7d9aef683a7097c17b76419ba300f7b366545ed8ea48adc2c7c040f8e8ea48ea120a8d9aa11695a25a09a0d62a093a76e9327529d4a72da2d20e6ad1256b777825dbbcb8ca14698a9991cbb2a59025f8e806c6732c0c56158a836126b4b56226a0418af74aea8b5107fbe9a8d4a41bf7419494b0afef131f21595c7d2e767965"], 0x38}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0x9, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000ff010000050000000000070073797374656d5f753a6f626a6563745f723a6175646974645f7661725f72f56e5f743a73300000002b00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f7661725f6c69625f743a7330000014000300000000000000000000000000000000012600070073797374656d5f753a6f626a6563745f723a7474795f6465766963655f743a73300000002800070073797374656d5f753a6f626a6563745f723a73657472616e735f657865635f743a7330001400030000000000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x38, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048801}, 0x20005800) (async) 03:37:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) 03:37:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = io_uring_setup(0x3c25, &(0x7f0000000100)={0x0, 0x6861, 0x400, 0x0, 0x3c5}) io_uring_setup(0x1066, &(0x7f0000000180)={0x0, 0x20c, 0x800, 0x3, 0x233, 0x0, r1}) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) (fail_nth: 3) [ 2722.156209][T29503] ? __lru_cache_add+0x1bf/0x210 [ 2722.161118][T29503] ? proc_fail_nth_read+0x220/0x220 [ 2722.166298][T29503] __sys_sendmsg+0x2b7/0x3a0 [ 2722.170863][T29503] ? ____sys_sendmsg+0x8f0/0x8f0 [ 2722.175773][T29503] ? check_preemption_disabled+0x9e/0x330 [ 2722.181467][T29503] ? fput_many+0x42/0x1a0 [ 2722.185781][T29503] ? check_preemption_disabled+0x154/0x330 [ 2722.191558][T29503] do_syscall_64+0xcb/0x1c0 [ 2722.196029][T29503] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = io_uring_setup(0x3c25, &(0x7f0000000100)={0x0, 0x6861, 0x400, 0x0, 0x3c5}) io_uring_setup(0x1066, &(0x7f0000000180)={0x0, 0x20c, 0x800, 0x3, 0x233, 0x0, r1}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) io_uring_setup(0x3c25, &(0x7f0000000100)={0x0, 0x6861, 0x400, 0x0, 0x3c5}) (async) io_uring_setup(0x1066, &(0x7f0000000180)={0x0, 0x20c, 0x800, 0x3, 0x233, 0x0, r1}) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="021400000700000000000020000000000500170000a000000a000000000000000000000000000000010000000000000000000000cf03000000c5a20347da22bcaea9ce2560241a0b22735d01d76d6461988b392bf3e4a0c3512a762a2d213835de7d9aef683a7097c17b76419ba300f7b366545ed8ea48adc2c7c040f8e8ea48ea120a8d9aa11695a25a09a0d62a093a76e9327529d4a72da2d20e6ad1256b777825dbbcb8ca14698a9991cbb2a59025f8e806c6732c0c56158a836126b4b56226a0418af74aea8b5107fbe9a8d4a41bf7419494b0afef131f21595c7d2e767965"], 0x38}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0x9, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000ff010000050000000000070073797374656d5f753a6f626a6563745f723a6175646974645f7661725f72f56e5f743a73300000002b00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f7661725f6c69625f743a7330000014000300000000000000000000000000000000012600070073797374656d5f753a6f626a6563745f723a7474795f6465766963655f743a73300000002800070073797374656d5f753a6f626a6563745f723a73657472616e735f657865635f743a7330001400030000000000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x38, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048801}, 0x20005800) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="021400000700000000000020000000000500170000a000000a000000000000000000000000000000010000000000000000000000cf03000000c5a20347da22bcaea9ce2560241a0b22735d01d76d6461988b392bf3e4a0c3512a762a2d213835de7d9aef683a7097c17b76419ba300f7b366545ed8ea48adc2c7c040f8e8ea48ea120a8d9aa11695a25a09a0d62a093a76e9327529d4a72da2d20e6ad1256b777825dbbcb8ca14698a9991cbb2a59025f8e806c6732c0c56158a836126b4b56226a0418af74aea8b5107fbe9a8d4a41bf7419494b0afef131f21595c7d2e767965"], 0x38}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0x9, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000ff010000050000000000070073797374656d5f753a6f626a6563745f723a6175646974645f7661725f72f56e5f743a73300000002b00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f7661725f6c69625f743a7330000014000300000000000000000000000000000000012600070073797374656d5f753a6f626a6563745f723a7474795f6465766963655f743a73300000002800070073797374656d5f753a6f626a6563745f723a73657472616e735f657865635f743a7330001400030000000000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x38, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048801}, 0x20005800) (async) [ 2722.226379][T29519] FAULT_INJECTION: forcing a failure. [ 2722.226379][T29519] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.243017][T29519] CPU: 1 PID: 29519 Comm: syz-executor.1 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2722.253250][T29519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2722.263283][T29519] Call Trace: [ 2722.266654][T29519] dump_stack+0x1d8/0x241 [ 2722.270978][T29519] ? panic+0x73e/0x73e [ 2722.275032][T29519] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2722.280806][T29519] should_fail+0x709/0x870 [ 2722.285191][T29519] ? setup_fault_attr+0x3d0/0x3d0 [ 2722.290215][T29519] ? skb_clone+0x1b7/0x380 [ 2722.294604][T29519] should_failslab+0x5/0x20 [ 2722.299089][T29519] kmem_cache_alloc+0x24/0x210 [ 2722.303843][T29519] skb_clone+0x1b7/0x380 [ 2722.308078][T29519] pfkey_sendmsg+0x3f9/0xf00 [ 2722.312641][T29519] ? pfkey_release+0x330/0x330 [ 2722.317376][T29519] ? selinux_socket_sendmsg+0x23f/0x340 [ 2722.322890][T29519] ? selinux_socket_accept+0x5b0/0x5b0 [ 2722.328335][T29519] ? rw_copy_check_uvector+0x2d0/0x320 [ 2722.333762][T29519] ? import_iovec+0x1bc/0x380 [ 2722.338414][T29519] ? security_socket_sendmsg+0x9d/0xb0 [ 2722.343854][T29519] ? pfkey_release+0x330/0x330 [ 2722.348594][T29519] ____sys_sendmsg+0x5a6/0x8f0 [ 2722.353353][T29519] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 2722.358538][T29519] ? __lru_cache_add+0x1bf/0x210 [ 2722.363449][T29519] ? proc_fail_nth_read+0x220/0x220 [ 2722.368630][T29519] __sys_sendmsg+0x2b7/0x3a0 03:37:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) 03:37:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) 03:37:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x80000, 0x2) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x2000) 03:37:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8000, 0xa9d7, 0x7, 0x8}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) (fail_nth: 4) 03:37:08 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8000, 0xa9d7, 0x7, 0x8}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:08 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) 03:37:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) 03:37:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) r1 = socket(0x10, 0x80000, 0x2) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x2000) 03:37:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) [ 2722.373188][T29519] ? ____sys_sendmsg+0x8f0/0x8f0 [ 2722.378176][T29519] ? check_preemption_disabled+0x9e/0x330 [ 2722.383865][T29519] ? fput_many+0x42/0x1a0 [ 2722.388162][T29519] ? check_preemption_disabled+0x154/0x330 [ 2722.393945][T29519] do_syscall_64+0xcb/0x1c0 [ 2722.398424][T29519] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:09 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:09 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_io_uring_setup(0x4e3e, &(0x7f00000000c0)={0x0, 0xfde2, 0x2, 0x2, 0xc1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5000001, 0x40010, r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r1, r2/1000+10000}}, 0x100) [ 2722.459234][T29559] FAULT_INJECTION: forcing a failure. [ 2722.459234][T29559] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.474004][T29559] CPU: 0 PID: 29559 Comm: syz-executor.1 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2722.484241][T29559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2722.494280][T29559] Call Trace: [ 2722.497545][T29559] dump_stack+0x1d8/0x241 [ 2722.501851][T29559] ? panic+0x73e/0x73e [ 2722.505887][T29559] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2722.511670][T29559] should_fail+0x709/0x870 [ 2722.516187][T29559] ? setup_fault_attr+0x3d0/0x3d0 [ 2722.521188][T29559] ? slab_free_freelist_hook+0x80/0x150 [ 2722.526702][T29559] ? __alloc_skb+0x78/0x4d0 [ 2722.531169][T29559] should_failslab+0x5/0x20 [ 2722.535637][T29559] kmem_cache_alloc+0x24/0x210 [ 2722.540369][T29559] __alloc_skb+0x78/0x4d0 [ 2722.544666][T29559] ? pfkey_broadcast+0x2f9/0x310 [ 2722.549572][T29559] pfkey_sendmsg+0xb35/0xf00 [ 2722.554133][T29559] ? pfkey_release+0x330/0x330 [ 2722.558865][T29559] ? selinux_socket_sendmsg+0x23f/0x340 [ 2722.564508][T29559] ? import_iovec+0x1bc/0x380 [ 2722.569161][T29559] ? security_socket_sendmsg+0x9d/0xb0 [ 2722.574615][T29559] ? pfkey_release+0x330/0x330 [ 2722.579376][T29559] ____sys_sendmsg+0x5a6/0x8f0 [ 2722.584133][T29559] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 2722.589307][T29559] ? __lru_cache_add+0x1bf/0x210 [ 2722.594217][T29559] ? proc_fail_nth_read+0x220/0x220 [ 2722.599389][T29559] __sys_sendmsg+0x2b7/0x3a0 [ 2722.603948][T29559] ? ____sys_sendmsg+0x8f0/0x8f0 03:37:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8000, 0xa9d7, 0x7, 0x8}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:09 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_io_uring_setup(0x4e3e, &(0x7f00000000c0)={0x0, 0xfde2, 0x2, 0x2, 0xc1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5000001, 0x40010, r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r1, r2/1000+10000}}, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) syz_io_uring_setup(0x4e3e, &(0x7f00000000c0)={0x0, 0xfde2, 0x2, 0x2, 0xc1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5000001, 0x40010, r0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r1, r2/1000+10000}}, 0x100) (async) 03:37:09 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) r1 = socket(0x10, 0x80000, 0x2) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x2000) 03:37:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) (fail_nth: 5) 03:37:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) 03:37:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) 03:37:09 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r0, &(0x7f0000000100)=""/152, 0x98) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="022c1379690001000010000000000000400000000000000000000000f7ff"], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) [ 2722.608859][T29559] ? check_preemption_disabled+0x9e/0x330 [ 2722.614556][T29559] ? fput_many+0x42/0x1a0 [ 2722.618880][T29559] ? check_preemption_disabled+0x154/0x330 [ 2722.624743][T29559] do_syscall_64+0xcb/0x1c0 [ 2722.629216][T29559] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:09 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 1) [ 2722.670988][T29588] FAULT_INJECTION: forcing a failure. [ 2722.670988][T29588] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.681464][T29600] FAULT_INJECTION: forcing a failure. [ 2722.681464][T29600] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.684990][T29588] CPU: 0 PID: 29588 Comm: syz-executor.1 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2722.706380][T29588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2722.716415][T29588] Call Trace: [ 2722.719715][T29588] dump_stack+0x1d8/0x241 [ 2722.724022][T29588] ? panic+0x73e/0x73e [ 2722.728067][T29588] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2722.733854][T29588] should_fail+0x709/0x870 [ 2722.738248][T29588] ? setup_fault_attr+0x3d0/0x3d0 [ 2722.743259][T29588] ? pfkey_sendmsg+0xb35/0xf00 [ 2722.748008][T29588] should_failslab+0x5/0x20 [ 2722.752504][T29588] __kmalloc_track_caller+0x4f/0x280 [ 2722.757796][T29588] ? kmem_cache_alloc+0xd0/0x210 [ 2722.762722][T29588] ? pfkey_sendmsg+0xb35/0xf00 [ 2722.767479][T29588] __alloc_skb+0xb5/0x4d0 [ 2722.771786][T29588] ? pfkey_broadcast+0x2f9/0x310 [ 2722.776700][T29588] pfkey_sendmsg+0xb35/0xf00 [ 2722.781282][T29588] ? pfkey_release+0x330/0x330 [ 2722.786027][T29588] ? selinux_socket_sendmsg+0x23f/0x340 [ 2722.791558][T29588] ? import_iovec+0x1bc/0x380 [ 2722.796223][T29588] ? security_socket_sendmsg+0x9d/0xb0 [ 2722.801664][T29588] ? pfkey_release+0x330/0x330 [ 2722.806408][T29588] ____sys_sendmsg+0x5a6/0x8f0 [ 2722.811147][T29588] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 2722.816318][T29588] ? __lru_cache_add+0x1bf/0x210 [ 2722.821228][T29588] ? proc_fail_nth_read+0x220/0x220 [ 2722.826405][T29588] __sys_sendmsg+0x2b7/0x3a0 [ 2722.830973][T29588] ? ____sys_sendmsg+0x8f0/0x8f0 [ 2722.836153][T29588] ? check_preemption_disabled+0x9e/0x330 [ 2722.841859][T29588] ? fput_many+0x42/0x1a0 [ 2722.846163][T29588] ? check_preemption_disabled+0x154/0x330 [ 2722.851948][T29588] do_syscall_64+0xcb/0x1c0 [ 2722.856428][T29588] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2722.862296][T29600] CPU: 1 PID: 29600 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2722.872513][T29600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2722.882538][T29600] Call Trace: [ 2722.885802][T29600] dump_stack+0x1d8/0x241 [ 2722.890138][T29600] ? panic+0x73e/0x73e [ 2722.894188][T29600] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2722.899967][T29600] should_fail+0x709/0x870 [ 2722.904354][T29600] ? setup_fault_attr+0x3d0/0x3d0 [ 2722.909345][T29600] ? kstrtouint_from_user+0x215/0x2b0 [ 2722.914752][T29600] ? loop_add+0x56/0x710 [ 2722.918966][T29600] should_failslab+0x5/0x20 [ 2722.923440][T29600] kmem_cache_alloc_trace+0x28/0x240 [ 2722.928691][T29600] loop_add+0x56/0x710 [ 2722.932728][T29600] ? radix_tree_lookup+0x17a/0x1d0 [ 2722.937808][T29600] loop_control_ioctl+0x564/0x740 [ 2722.942799][T29600] ? loop_remove+0xa0/0xa0 [ 2722.947183][T29600] ? __lru_cache_add+0x1bf/0x210 [ 2722.952092][T29600] ? memset+0x1f/0x40 [ 2722.956041][T29600] ? fsnotify+0x1332/0x13f0 [ 2722.960513][T29600] ? loop_remove+0xa0/0xa0 [ 2722.964894][T29600] do_vfs_ioctl+0x744/0x1730 03:37:09 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_io_uring_setup(0x4e3e, &(0x7f00000000c0)={0x0, 0xfde2, 0x2, 0x2, 0xc1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5000001, 0x40010, r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r1, r2/1000+10000}}, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) syz_io_uring_setup(0x4e3e, &(0x7f00000000c0)={0x0, 0xfde2, 0x2, 0x2, 0xc1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5000001, 0x40010, r0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r1, r2/1000+10000}}, 0x100) (async) 03:37:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) 03:37:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3bea}, 0x8) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) (fail_nth: 6) 03:37:09 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r0, &(0x7f0000000100)=""/152, 0x98) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="022c1379690001000010000000000000400000000000000000000000f7ff"], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) read$watch_queue(r0, &(0x7f0000000100)=""/152, 0x98) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="022c1379690001000010000000000000400000000000000000000000f7ff"], 0x20}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) (async) 03:37:09 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 2) [ 2722.969452][T29600] ? selinux_file_ioctl+0x723/0x970 [ 2722.974618][T29600] ? ioctl_preallocate+0x250/0x250 [ 2722.979702][T29600] ? __fget+0x40c/0x4a0 [ 2722.983829][T29600] ? fget_many+0x20/0x20 [ 2722.988041][T29600] ? check_preemption_disabled+0x154/0x330 [ 2722.993818][T29600] ? debug_smp_processor_id+0x20/0x20 [ 2722.999160][T29600] ? security_file_ioctl+0x9d/0xb0 [ 2723.004238][T29600] __x64_sys_ioctl+0xd4/0x110 [ 2723.008883][T29600] do_syscall_64+0xcb/0x1c0 [ 2723.013356][T29600] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2723.047962][T29609] FAULT_INJECTION: forcing a failure. [ 2723.047962][T29609] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.053194][T29618] FAULT_INJECTION: forcing a failure. [ 2723.053194][T29618] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.061652][T29609] CPU: 0 PID: 29609 Comm: syz-executor.1 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2723.083639][T29609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2723.093670][T29609] Call Trace: [ 2723.096944][T29609] dump_stack+0x1d8/0x241 [ 2723.101251][T29609] ? panic+0x73e/0x73e [ 2723.105291][T29609] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2723.111070][T29609] should_fail+0x709/0x870 [ 2723.115468][T29609] ? setup_fault_attr+0x3d0/0x3d0 [ 2723.120471][T29609] ? skb_clone+0x1b7/0x380 [ 2723.124862][T29609] should_failslab+0x5/0x20 [ 2723.129340][T29609] kmem_cache_alloc+0x24/0x210 [ 2723.134085][T29609] skb_clone+0x1b7/0x380 [ 2723.138307][T29609] pfkey_broadcast_one+0x97/0x320 [ 2723.143306][T29609] pfkey_broadcast+0x2e7/0x310 [ 2723.148044][T29609] pfkey_sendmsg+0xc52/0xf00 [ 2723.152615][T29609] ? pfkey_release+0x330/0x330 [ 2723.157351][T29609] ? selinux_socket_sendmsg+0x23f/0x340 [ 2723.162871][T29609] ? import_iovec+0x1bc/0x380 [ 2723.167527][T29609] ? security_socket_sendmsg+0x9d/0xb0 [ 2723.172960][T29609] ? pfkey_release+0x330/0x330 [ 2723.177697][T29609] ____sys_sendmsg+0x5a6/0x8f0 [ 2723.182438][T29609] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 2723.187610][T29609] ? __lru_cache_add+0x1bf/0x210 [ 2723.192521][T29609] ? proc_fail_nth_read+0x220/0x220 [ 2723.197693][T29609] __sys_sendmsg+0x2b7/0x3a0 [ 2723.202258][T29609] ? ____sys_sendmsg+0x8f0/0x8f0 [ 2723.207195][T29609] ? check_preemption_disabled+0x9e/0x330 [ 2723.212895][T29609] ? fput_many+0x42/0x1a0 [ 2723.217202][T29609] ? check_preemption_disabled+0x154/0x330 [ 2723.222994][T29609] do_syscall_64+0xcb/0x1c0 [ 2723.227478][T29609] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2723.233349][T29618] CPU: 1 PID: 29618 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2723.243566][T29618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2723.253595][T29618] Call Trace: [ 2723.256855][T29618] dump_stack+0x1d8/0x241 [ 2723.261153][T29618] ? panic+0x73e/0x73e [ 2723.265198][T29618] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2723.270970][T29618] ? do_vfs_ioctl+0x744/0x1730 [ 2723.275698][T29618] ? do_syscall_64+0xcb/0x1c0 [ 2723.280341][T29618] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2723.286383][T29618] should_fail+0x709/0x870 [ 2723.290777][T29618] ? setup_fault_attr+0x3d0/0x3d0 [ 2723.295776][T29618] ? idr_alloc+0x203/0x2f0 [ 2723.300231][T29618] ? blk_mq_alloc_tag_set+0x300/0x890 [ 2723.305577][T29618] should_failslab+0x5/0x20 [ 2723.310050][T29618] __kmalloc+0x51/0x2b0 [ 2723.314193][T29618] blk_mq_alloc_tag_set+0x300/0x890 [ 2723.319431][T29618] ? kmem_cache_alloc_trace+0xd8/0x240 [ 2723.324862][T29618] ? loop_add+0x56/0x710 [ 2723.329074][T29618] loop_add+0x22b/0x710 [ 2723.333197][T29618] ? radix_tree_lookup+0x17a/0x1d0 [ 2723.338279][T29618] loop_control_ioctl+0x564/0x740 [ 2723.343279][T29618] ? loop_remove+0xa0/0xa0 [ 2723.347664][T29618] ? __lru_cache_add+0x1bf/0x210 [ 2723.352568][T29618] ? memset+0x1f/0x40 [ 2723.356605][T29618] ? fsnotify+0x1332/0x13f0 [ 2723.361081][T29618] ? loop_remove+0xa0/0xa0 [ 2723.365463][T29618] do_vfs_ioctl+0x744/0x1730 [ 2723.370020][T29618] ? selinux_file_ioctl+0x723/0x970 [ 2723.375193][T29618] ? ioctl_preallocate+0x250/0x250 [ 2723.380323][T29618] ? __fget+0x40c/0x4a0 [ 2723.384444][T29618] ? fget_many+0x20/0x20 [ 2723.388665][T29618] ? __fpregs_load_activate+0x1d7/0x3c0 [ 2723.394187][T29618] ? security_file_ioctl+0x9d/0xb0 03:37:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3bea}, 0x8) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) 03:37:09 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 3) 03:37:09 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x140, &(0x7f0000000340)={0x0, 0x3454, 0x8, 0x80000, 0x2e2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r4, 0x10000000) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000200), 0x4) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="20042cbd7000fbdbdf25030000000900010073797a3100fcff000500040002000000050004000200000014000200677265746170300000000000000000000900030073797a31000000000500040001000000050004000200000014000200697036677265746170300000000000000900030073797a31000000000900010073797a3100000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) 03:37:09 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r0, &(0x7f0000000100)=""/152, 0x98) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="022c1379690001000010000000000000400000000000000000000000f7ff"], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) 03:37:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) (fail_nth: 7) [ 2723.399319][T29618] __x64_sys_ioctl+0xd4/0x110 [ 2723.403986][T29618] do_syscall_64+0xcb/0x1c0 [ 2723.408467][T29618] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3bea}, 0x8) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3bea}, 0x8) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) 03:37:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="02050000040000000010c9b621b577626d5400000000006e770e855321f618b0736910c4000002000100000000"], 0x20}}, 0x0) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2723.445964][T29633] FAULT_INJECTION: forcing a failure. [ 2723.445964][T29633] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.460882][T29633] CPU: 1 PID: 29633 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2723.471119][T29633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2723.481158][T29633] Call Trace: [ 2723.484423][T29633] dump_stack+0x1d8/0x241 [ 2723.488723][T29633] ? panic+0x73e/0x73e [ 2723.492769][T29633] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2723.498548][T29633] should_fail+0x709/0x870 [ 2723.502931][T29633] ? setup_fault_attr+0x3d0/0x3d0 [ 2723.507921][T29633] ? blk_mq_alloc_tag_set+0x3ab/0x890 [ 2723.513263][T29633] should_failslab+0x5/0x20 [ 2723.517734][T29633] __kmalloc+0x51/0x2b0 [ 2723.521861][T29633] ? blk_mq_alloc_tag_set+0x300/0x890 [ 2723.527206][T29633] blk_mq_alloc_tag_set+0x3ab/0x890 [ 2723.532370][T29633] loop_add+0x22b/0x710 [ 2723.536493][T29633] ? radix_tree_lookup+0x17a/0x1d0 [ 2723.541577][T29633] loop_control_ioctl+0x564/0x740 [ 2723.546607][T29633] ? loop_remove+0xa0/0xa0 [ 2723.551018][T29633] ? loop_remove+0xa0/0xa0 [ 2723.555515][T29633] do_vfs_ioctl+0x744/0x1730 [ 2723.560072][T29633] ? selinux_file_ioctl+0x723/0x970 [ 2723.565237][T29633] ? ioctl_preallocate+0x250/0x250 [ 2723.570315][T29633] ? __fget+0x40c/0x4a0 [ 2723.574437][T29633] ? fget_many+0x20/0x20 [ 2723.578645][T29633] ? check_preemption_disabled+0x154/0x330 [ 2723.584419][T29633] ? debug_smp_processor_id+0x20/0x20 [ 2723.589765][T29633] ? security_file_ioctl+0x9d/0xb0 03:37:10 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x140, &(0x7f0000000340)={0x0, 0x3454, 0x8, 0x80000, 0x2e2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r4, 0x10000000) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000200), 0x4) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="20042cbd7000fbdbdf25030000000900010073797a3100fcff000500040002000000050004000200000014000200677265746170300000000000000000000900030073797a31000000000500040001000000050004000200000014000200697036677265746170300000000000000900030073797a31000000000900010073797a3100000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_io_uring_setup(0x140, &(0x7f0000000340)={0x0, 0x3454, 0x8, 0x80000, 0x2e2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r4, 0x10000000) (async) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) (async) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000200), 0x4) (async) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="20042cbd7000fbdbdf25030000000900010073797a3100fcff000500040002000000050004000200000014000200677265746170300000000000000000000900030073797a31000000000500040001000000050004000200000014000200697036677265746170300000000000000900030073797a31000000000900010073797a3100000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) (async) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 4) 03:37:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="02050000040000000010c9b621b577626d5400000000006e770e855321f618b0736910c4000002000100000000"], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="02050000040000000010c9b621b577626d5400000000006e770e855321f618b0736910c4000002000100000000"], 0x20}}, 0x0) (async) [ 2723.594842][T29633] __x64_sys_ioctl+0xd4/0x110 [ 2723.599486][T29633] do_syscall_64+0xcb/0x1c0 [ 2723.603959][T29633] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:10 executing program 2: select(0x40, &(0x7f0000000040)={0xfffffffffffff800, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x81, 0xfffffffffffffff9, 0x7, 0x1000}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x8000, 0x5f, 0x7, 0xfffffffffffffffe, 0x10001}, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x200, 0x8, 0x8000000000000000, 0x2, 0x20}, &(0x7f0000000180)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:10 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) (async, rerun: 32) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r4 = syz_io_uring_setup(0x140, &(0x7f0000000340)={0x0, 0x3454, 0x8, 0x80000, 0x2e2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r4, 0x10000000) (async, rerun: 64) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) (async, rerun: 64) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000200), 0x4) (async, rerun: 64) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="20042cbd7000fbdbdf25030000000900010073797a3100fcff000500040002000000050004000200000014000200677265746170300000000000000000000900030073797a31000000000500040001000000050004000200000014000200697036677265746170300000000000000900030073797a31000000000900010073797a3100000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) (rerun: 64) [ 2723.638057][T29652] FAULT_INJECTION: forcing a failure. [ 2723.638057][T29652] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.657569][T29652] CPU: 0 PID: 29652 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2723.667799][T29652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2723.677826][T29652] Call Trace: [ 2723.681130][T29652] dump_stack+0x1d8/0x241 [ 2723.685431][T29652] ? panic+0x73e/0x73e [ 2723.689478][T29652] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2723.695263][T29652] should_fail+0x709/0x870 [ 2723.699652][T29652] ? loop_add+0x22b/0x710 [ 2723.703949][T29652] ? loop_control_ioctl+0x564/0x740 [ 2723.709187][T29652] ? do_syscall_64+0xcb/0x1c0 [ 2723.713832][T29652] ? setup_fault_attr+0x3d0/0x3d0 [ 2723.718910][T29652] ? blk_mq_init_tags+0x74/0x290 [ 2723.723815][T29652] should_failslab+0x5/0x20 [ 2723.728282][T29652] kmem_cache_alloc_trace+0x28/0x240 [ 2723.733532][T29652] blk_mq_init_tags+0x74/0x290 [ 2723.738268][T29652] ? blk_mq_hw_queue_to_node+0xeb/0x100 [ 2723.743867][T29652] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2723.748866][T29652] blk_mq_alloc_rq_maps+0x100/0x650 [ 2723.754031][T29652] blk_mq_alloc_tag_set+0x50e/0x890 [ 2723.759198][T29652] loop_add+0x22b/0x710 [ 2723.763321][T29652] ? radix_tree_lookup+0x17a/0x1d0 [ 2723.768401][T29652] loop_control_ioctl+0x564/0x740 [ 2723.773392][T29652] ? loop_remove+0xa0/0xa0 [ 2723.777773][T29652] ? __lru_cache_add+0x1bf/0x210 [ 2723.782688][T29652] ? memset+0x1f/0x40 [ 2723.786643][T29652] ? fsnotify+0x1332/0x13f0 [ 2723.791115][T29652] ? loop_remove+0xa0/0xa0 [ 2723.795496][T29652] do_vfs_ioctl+0x744/0x1730 [ 2723.800064][T29652] ? selinux_file_ioctl+0x723/0x970 [ 2723.805231][T29652] ? ioctl_preallocate+0x250/0x250 [ 2723.810314][T29652] ? __fget+0x40c/0x4a0 [ 2723.814435][T29652] ? fget_many+0x20/0x20 [ 2723.818643][T29652] ? check_preemption_disabled+0x154/0x330 [ 2723.824413][T29652] ? debug_smp_processor_id+0x20/0x20 [ 2723.829752][T29652] ? security_file_ioctl+0x9d/0xb0 03:37:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="02050000040000000010c9b621b577626d5400000000006e770e855321f618b0736910c4000002000100000000"], 0x20}}, 0x0) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x600, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:10 executing program 2: select(0x40, &(0x7f0000000040)={0xfffffffffffff800, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x81, 0xfffffffffffffff9, 0x7, 0x1000}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x8000, 0x5f, 0x7, 0xfffffffffffffffe, 0x10001}, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x200, 0x8, 0x8000000000000000, 0x2, 0x20}, &(0x7f0000000180)) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 5) 03:37:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x45642, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000240)=0x1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/76, 0x4c}, &(0x7f00000001c0)=0x40) [ 2723.834834][T29652] __x64_sys_ioctl+0xd4/0x110 [ 2723.839481][T29652] do_syscall_64+0xcb/0x1c0 [ 2723.843949][T29652] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2723.853916][T29652] blk-mq: reduced tag depth (128 -> 64) 03:37:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x4000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x45642, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000240)=0x1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/76, 0x4c}, &(0x7f00000001c0)=0x40) socket$key(0xf, 0x3, 0x2) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x45642, 0x0) (async) pipe2$watch_queue(&(0x7f0000000200), 0x80) (async) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000240)=0x1) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/76, 0x4c}, &(0x7f00000001c0)=0x40) (async) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x38000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:10 executing program 2: select(0x40, &(0x7f0000000040)={0xfffffffffffff800, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x81, 0xfffffffffffffff9, 0x7, 0x1000}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x8000, 0x5f, 0x7, 0xfffffffffffffffe, 0x10001}, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x200, 0x8, 0x8000000000000000, 0x2, 0x20}, &(0x7f0000000180)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:10 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a4000020000000000b19400000000"], 0x10}}, 0x0) [ 2723.939720][T27464] udevd[27464]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2723.952118][T29683] FAULT_INJECTION: forcing a failure. [ 2723.952118][T29683] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.973966][T29683] CPU: 0 PID: 29683 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2723.984208][T29683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2723.994239][T29683] Call Trace: [ 2723.997509][T29683] dump_stack+0x1d8/0x241 [ 2724.001913][T29683] ? panic+0x73e/0x73e [ 2724.005965][T29683] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2724.011753][T29683] ? blk_mq_init_tags+0x74/0x290 [ 2724.016673][T29683] ? blk_mq_alloc_rq_maps+0x100/0x650 [ 2724.022093][T29683] ? blk_mq_alloc_tag_set+0x50e/0x890 [ 2724.027442][T29683] ? loop_add+0x22b/0x710 [ 2724.031834][T29683] ? do_vfs_ioctl+0x744/0x1730 [ 2724.036564][T29683] ? __x64_sys_ioctl+0xd4/0x110 [ 2724.041381][T29683] ? do_syscall_64+0xcb/0x1c0 [ 2724.046071][T29683] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2724.052106][T29683] should_fail+0x709/0x870 [ 2724.056489][T29683] ? setup_fault_attr+0x3d0/0x3d0 [ 2724.061482][T29683] ? sbitmap_queue_init_node+0x15e/0xf70 [ 2724.067080][T29683] should_failslab+0x5/0x20 [ 2724.071554][T29683] __kmalloc+0x51/0x2b0 [ 2724.075681][T29683] sbitmap_queue_init_node+0x15e/0xf70 [ 2724.081117][T29683] ? blk_mq_init_tags+0x74/0x290 [ 2724.086027][T29683] blk_mq_init_tags+0xef/0x290 [ 2724.090784][T29683] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2724.095776][T29683] blk_mq_alloc_rq_maps+0x100/0x650 [ 2724.100942][T29683] blk_mq_alloc_tag_set+0x50e/0x890 [ 2724.106108][T29683] loop_add+0x22b/0x710 [ 2724.110231][T29683] ? radix_tree_lookup+0x17a/0x1d0 [ 2724.115310][T29683] loop_control_ioctl+0x564/0x740 [ 2724.120320][T29683] ? loop_remove+0xa0/0xa0 [ 2724.124704][T29683] ? __lru_cache_add+0x1bf/0x210 [ 2724.129610][T29683] ? memset+0x1f/0x40 [ 2724.133560][T29683] ? fsnotify+0x1332/0x13f0 [ 2724.138038][T29683] ? loop_remove+0xa0/0xa0 [ 2724.142423][T29683] do_vfs_ioctl+0x744/0x1730 [ 2724.146992][T29683] ? selinux_file_ioctl+0x723/0x970 [ 2724.152164][T29683] ? ioctl_preallocate+0x250/0x250 [ 2724.157246][T29683] ? __fget+0x40c/0x4a0 [ 2724.161372][T29683] ? fget_many+0x20/0x20 [ 2724.165584][T29683] ? check_preemption_disabled+0x154/0x330 [ 2724.171356][T29683] ? debug_smp_processor_id+0x20/0x20 [ 2724.176695][T29683] ? security_file_ioctl+0x9d/0xb0 [ 2724.181771][T29683] __x64_sys_ioctl+0xd4/0x110 [ 2724.186417][T29683] do_syscall_64+0xcb/0x1c0 03:37:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x45642, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000240)=0x1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/76, 0x4c}, &(0x7f00000001c0)=0x40) socket$key(0xf, 0x3, 0x2) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x45642, 0x0) (async) pipe2$watch_queue(&(0x7f0000000200), 0x80) (async) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000240)=0x1) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/76, 0x4c}, &(0x7f00000001c0)=0x40) (async) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x800300, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x1000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) 03:37:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 6) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x2000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2724.190888][T29683] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2724.200015][T29683] blk-mq: reduced tag depth (128 -> 64) 03:37:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:10 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a4000020000000000b19400000000"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a4000020000000000b19400000000"], 0x10}}, 0x0) (async) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x4000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02050000040000000000000000000000020001000900"/32], 0x20}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 03:37:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02050000040000000000000000000000020001000900"/32], 0x20}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02050000040000000000000000000000020001000900"/32], 0x20}}, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async) 03:37:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x6000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2724.265660][T29731] FAULT_INJECTION: forcing a failure. [ 2724.265660][T29731] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.283137][T29731] CPU: 0 PID: 29731 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2724.293372][T29731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2724.303404][T29731] Call Trace: [ 2724.306672][T29731] dump_stack+0x1d8/0x241 [ 2724.310976][T29731] ? panic+0x73e/0x73e [ 2724.315016][T29731] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2724.320792][T29731] ? pcpu_alloc_area+0x696/0x790 [ 2724.325702][T29731] should_fail+0x709/0x870 [ 2724.330090][T29731] ? setup_fault_attr+0x3d0/0x3d0 [ 2724.335103][T29731] ? sbitmap_queue_init_node+0x69c/0xf70 [ 2724.340980][T29731] should_failslab+0x5/0x20 [ 2724.345468][T29731] kmem_cache_alloc_trace+0x28/0x240 [ 2724.350747][T29731] sbitmap_queue_init_node+0x69c/0xf70 [ 2724.356201][T29731] blk_mq_init_tags+0xef/0x290 [ 2724.360945][T29731] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2724.365953][T29731] blk_mq_alloc_rq_maps+0x100/0x650 [ 2724.371137][T29731] blk_mq_alloc_tag_set+0x50e/0x890 [ 2724.376314][T29731] loop_add+0x22b/0x710 [ 2724.380442][T29731] ? radix_tree_lookup+0x17a/0x1d0 [ 2724.385545][T29731] loop_control_ioctl+0x564/0x740 [ 2724.390546][T29731] ? loop_remove+0xa0/0xa0 [ 2724.394931][T29731] ? __lru_cache_add+0x1bf/0x210 [ 2724.399838][T29731] ? memset+0x1f/0x40 [ 2724.403787][T29731] ? fsnotify+0x1332/0x13f0 [ 2724.408258][T29731] ? loop_remove+0xa0/0xa0 [ 2724.412641][T29731] do_vfs_ioctl+0x744/0x1730 [ 2724.417202][T29731] ? selinux_file_ioctl+0x723/0x970 [ 2724.422371][T29731] ? ioctl_preallocate+0x250/0x250 [ 2724.427452][T29731] ? __fget+0x40c/0x4a0 [ 2724.431575][T29731] ? fget_many+0x20/0x20 [ 2724.435788][T29731] ? check_preemption_disabled+0x154/0x330 [ 2724.441564][T29731] ? debug_smp_processor_id+0x20/0x20 [ 2724.446904][T29731] ? security_file_ioctl+0x9d/0xb0 [ 2724.452004][T29731] __x64_sys_ioctl+0xd4/0x110 [ 2724.456661][T29731] do_syscall_64+0xcb/0x1c0 03:37:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) 03:37:11 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a4000020000000000b19400000000"], 0x10}}, 0x0) 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02050000040000000000000000000000020001000900"/32], 0x20}}, 0x0) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (rerun: 64) 03:37:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 7) 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x7fffefe0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2724.461156][T29731] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2724.470348][T29731] blk-mq: reduced tag depth (128 -> 64) 03:37:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0xe0efff7f, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2724.533164][T27464] udevd[27464]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2724.539245][T29753] FAULT_INJECTION: forcing a failure. [ 2724.539245][T29753] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.555542][T29753] CPU: 1 PID: 29753 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2724.565855][T29753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2724.575893][T29753] Call Trace: [ 2724.579169][T29753] dump_stack+0x1d8/0x241 [ 2724.583467][T29753] ? panic+0x73e/0x73e [ 2724.587504][T29753] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2724.593288][T29753] ? pcpu_alloc_area+0x696/0x790 [ 2724.598196][T29753] should_fail+0x709/0x870 [ 2724.602581][T29753] ? setup_fault_attr+0x3d0/0x3d0 [ 2724.607584][T29753] ? sbitmap_queue_init_node+0x69c/0xf70 [ 2724.613182][T29753] should_failslab+0x5/0x20 [ 2724.617651][T29753] kmem_cache_alloc_trace+0x28/0x240 [ 2724.622908][T29753] sbitmap_queue_init_node+0x69c/0xf70 [ 2724.628340][T29753] blk_mq_init_tags+0x153/0x290 [ 2724.633162][T29753] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2724.638161][T29753] blk_mq_alloc_rq_maps+0x100/0x650 [ 2724.643335][T29753] blk_mq_alloc_tag_set+0x50e/0x890 [ 2724.648538][T29753] loop_add+0x22b/0x710 [ 2724.652666][T29753] ? radix_tree_lookup+0x17a/0x1d0 [ 2724.657745][T29753] loop_control_ioctl+0x564/0x740 [ 2724.662739][T29753] ? loop_remove+0xa0/0xa0 [ 2724.667124][T29753] ? __lru_cache_add+0x1bf/0x210 [ 2724.672034][T29753] ? memset+0x1f/0x40 [ 2724.675991][T29753] ? fsnotify+0x1332/0x13f0 [ 2724.680477][T29753] ? loop_remove+0xa0/0xa0 [ 2724.684863][T29753] do_vfs_ioctl+0x744/0x1730 [ 2724.689430][T29753] ? selinux_file_ioctl+0x723/0x970 [ 2724.694605][T29753] ? ioctl_preallocate+0x250/0x250 [ 2724.699684][T29753] ? __fget+0x40c/0x4a0 [ 2724.703807][T29753] ? fget_many+0x20/0x20 [ 2724.708369][T29753] ? check_preemption_disabled+0x154/0x330 [ 2724.714146][T29753] ? debug_smp_processor_id+0x20/0x20 [ 2724.719493][T29753] ? security_file_ioctl+0x9d/0xb0 [ 2724.724572][T29753] __x64_sys_ioctl+0xd4/0x110 [ 2724.729306][T29753] do_syscall_64+0xcb/0x1c0 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0xffffff7f, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) 03:37:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="02130000020000000000e01adc5545e410a7e8f4685a2df416ef60f694a2f254336ba31f49f7babb4d000000000000"], 0x10}}, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/60) 03:37:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) 03:37:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 8) 03:37:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="02130000020000000000e01adc5545e410a7e8f4685a2df416ef60f694a2f254336ba31f49f7babb4d000000000000"], 0x10}}, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/60) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="02130000020000000000e01adc5545e410a7e8f4685a2df416ef60f694a2f254336ba31f49f7babb4d000000000000"], 0x10}}, 0x0) (async) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/60) (async) 03:37:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x7ffffffff000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2724.733791][T29753] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2724.740696][T29753] blk-mq: reduced tag depth (128 -> 64) [ 2724.830681][T29770] FAULT_INJECTION: forcing a failure. [ 2724.830681][T29770] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.843340][T29770] CPU: 1 PID: 29770 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2724.853552][T29770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2724.863588][T29770] Call Trace: [ 2724.866875][T29770] dump_stack+0x1d8/0x241 [ 2724.871182][T29770] ? panic+0x73e/0x73e [ 2724.875227][T29770] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2724.881011][T29770] should_fail+0x709/0x870 [ 2724.885396][T29770] ? setup_fault_attr+0x3d0/0x3d0 [ 2724.890388][T29770] ? sbitmap_queue_init_node+0xb3d/0xf70 [ 2724.896003][T29770] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2724.901169][T29770] should_failslab+0x5/0x20 [ 2724.905640][T29770] __kmalloc+0x51/0x2b0 [ 2724.909766][T29770] blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2724.914758][T29770] blk_mq_alloc_rq_maps+0x100/0x650 [ 2724.919925][T29770] blk_mq_alloc_tag_set+0x50e/0x890 [ 2724.925099][T29770] loop_add+0x22b/0x710 [ 2724.929268][T29770] ? radix_tree_lookup+0x17a/0x1d0 [ 2724.934357][T29770] loop_control_ioctl+0x564/0x740 [ 2724.939351][T29770] ? loop_remove+0xa0/0xa0 [ 2724.943736][T29770] ? __lru_cache_add+0x1bf/0x210 [ 2724.948644][T29770] ? memset+0x1f/0x40 [ 2724.952594][T29770] ? fsnotify+0x1332/0x13f0 [ 2724.957065][T29770] ? loop_remove+0xa0/0xa0 [ 2724.961473][T29770] do_vfs_ioctl+0x744/0x1730 [ 2724.966032][T29770] ? selinux_file_ioctl+0x723/0x970 [ 2724.971198][T29770] ? ioctl_preallocate+0x250/0x250 [ 2724.976285][T29770] ? __fget+0x40c/0x4a0 03:37:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x6, 0x4, 0x0, 0xfffffffd, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0xe2}]}, 0x20}}, 0x0) 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x80030000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) 03:37:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="02130000020000000000e01adc5545e410a7e8f4685a2df416ef60f694a2f254336ba31f49f7babb4d000000000000"], 0x10}}, 0x0) (async) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/60) 03:37:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 9) 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0xf0ffffff7f0000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000)) 03:37:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x6, 0x4, 0x0, 0xfffffffd, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0xe2}]}, 0x20}}, 0x0) 03:37:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) [ 2724.980414][T29770] ? fget_many+0x20/0x20 [ 2724.984624][T29770] ? check_preemption_disabled+0x154/0x330 [ 2724.990398][T29770] ? debug_smp_processor_id+0x20/0x20 [ 2724.995740][T29770] ? security_file_ioctl+0x9d/0xb0 [ 2725.000819][T29770] __x64_sys_ioctl+0xd4/0x110 [ 2725.005465][T29770] do_syscall_64+0xcb/0x1c0 [ 2725.009938][T29770] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2725.017498][T29770] blk-mq: reduced tag depth (128 -> 64) 03:37:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x6, 0x4, 0x0, 0xfffffffd, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0xe2}]}, 0x20}}, 0x0) 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x100000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000000000000000e4ff00"], 0x20}}, 0x0) [ 2725.075921][T29797] FAULT_INJECTION: forcing a failure. [ 2725.075921][T29797] name failslab, interval 1, probability 0, space 0, times 0 [ 2725.088741][T29797] CPU: 0 PID: 29797 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2725.098965][T29797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2725.108994][T29797] Call Trace: [ 2725.112258][T29797] dump_stack+0x1d8/0x241 [ 2725.116558][T29797] ? panic+0x73e/0x73e [ 2725.120600][T29797] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2725.126384][T29797] should_fail+0x709/0x870 [ 2725.130782][T29797] ? setup_fault_attr+0x3d0/0x3d0 [ 2725.135786][T29797] ? blk_mq_alloc_rq_map+0xe9/0x1a0 [ 2725.140960][T29797] should_failslab+0x5/0x20 [ 2725.145433][T29797] __kmalloc+0x51/0x2b0 [ 2725.149560][T29797] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2725.154725][T29797] blk_mq_alloc_rq_map+0xe9/0x1a0 [ 2725.159725][T29797] blk_mq_alloc_rq_maps+0x100/0x650 [ 2725.164903][T29797] blk_mq_alloc_tag_set+0x50e/0x890 [ 2725.170075][T29797] loop_add+0x22b/0x710 [ 2725.174203][T29797] ? radix_tree_lookup+0x17a/0x1d0 [ 2725.179282][T29797] loop_control_ioctl+0x564/0x740 [ 2725.184276][T29797] ? loop_remove+0xa0/0xa0 [ 2725.188661][T29797] ? __lru_cache_add+0x1bf/0x210 [ 2725.193577][T29797] ? memset+0x1f/0x40 [ 2725.197538][T29797] ? fsnotify+0x1332/0x13f0 [ 2725.202011][T29797] ? loop_remove+0xa0/0xa0 [ 2725.206399][T29797] do_vfs_ioctl+0x744/0x1730 [ 2725.210992][T29797] ? selinux_file_ioctl+0x723/0x970 [ 2725.216162][T29797] ? ioctl_preallocate+0x250/0x250 [ 2725.221243][T29797] ? __fget+0x40c/0x4a0 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x200000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000)) 03:37:11 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x4, 0x88, 0x9, 0x21, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_ident={0x2, 0xa, 0x8001, 0x0, 0x80000000}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x9ee5, @loopback, 0x7fff}, @in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, @sadb_lifetime={0x4, 0x6, 0x9d, 0x8, 0x8000000000000000, 0x20}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e22}, @sadb_sa={0x2, 0x1, 0x4d3, 0x3, 0x1, 0xd9, 0x3, 0x1}, @sadb_ident={0x2, 0xa, 0x6, 0x0, 0xba}, @sadb_x_nat_t_type={0x1, 0x14, 0xff}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bba, 0xffffffff, {0x6, 0x3c, 0xf5, 0x6, 0x0, 0x80000000, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x14}, @in=@multicast2}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_ident={0x2, 0xb, 0x400, 0x0, 0xfffffffffffffff8}]}, 0x108}}, 0x41) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r6, 0x4004743b, 0x0) socket(0x2c, 0x800, 0x5) pipe(&(0x7f0000000240)) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xfffffe0c, r5, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x3c}}, 0x4800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) (async) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000000000000000e4ff00"], 0x20}}, 0x0) 03:37:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 10) 03:37:11 executing program 2: socket$key(0xf, 0x3, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x4, 0x88, 0x9, 0x21, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_ident={0x2, 0xa, 0x8001, 0x0, 0x80000000}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x9ee5, @loopback, 0x7fff}, @in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, @sadb_lifetime={0x4, 0x6, 0x9d, 0x8, 0x8000000000000000, 0x20}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e22}, @sadb_sa={0x2, 0x1, 0x4d3, 0x3, 0x1, 0xd9, 0x3, 0x1}, @sadb_ident={0x2, 0xa, 0x6, 0x0, 0xba}, @sadb_x_nat_t_type={0x1, 0x14, 0xff}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bba, 0xffffffff, {0x6, 0x3c, 0xf5, 0x6, 0x0, 0x80000000, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x14}, @in=@multicast2}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_ident={0x2, 0xb, 0x400, 0x0, 0xfffffffffffffff8}]}, 0x108}}, 0x41) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r6, 0x4004743b, 0x0) (async) socket(0x2c, 0x800, 0x5) (async) pipe(&(0x7f0000000240)) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xfffffe0c, r5, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x3c}}, 0x4800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000000000000000e4ff00"], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000000)) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000000000000000e4ff00"], 0x20}}, 0x0) (async) [ 2725.225377][T29797] ? fget_many+0x20/0x20 [ 2725.229607][T29797] ? check_preemption_disabled+0x154/0x330 [ 2725.235468][T29797] ? debug_smp_processor_id+0x20/0x20 [ 2725.240896][T29797] ? security_file_ioctl+0x9d/0xb0 [ 2725.245976][T29797] __x64_sys_ioctl+0xd4/0x110 [ 2725.250629][T29797] do_syscall_64+0xcb/0x1c0 [ 2725.255105][T29797] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2725.263550][T29797] blk-mq: reduced tag depth (128 -> 64) 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x4000000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2}]}, 0x20}}, 0x20000000) 03:37:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000)) (async) 03:37:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0xe0efff7f00000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2725.311061][T27464] udevd[27464]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2725.339886][T29836] FAULT_INJECTION: forcing a failure. [ 2725.339886][T29836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2725.354628][T29836] CPU: 0 PID: 29836 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2725.364861][T29836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2725.374899][T29836] Call Trace: [ 2725.378172][T29836] dump_stack+0x1d8/0x241 [ 2725.382496][T29836] ? panic+0x73e/0x73e [ 2725.386729][T29836] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2725.392524][T29836] ? blk_mq_alloc_rq_map+0x93/0x1a0 [ 2725.397812][T29836] should_fail+0x709/0x870 [ 2725.402211][T29836] ? setup_fault_attr+0x3d0/0x3d0 [ 2725.407309][T29836] ? blk_mq_alloc_rq_map+0xe9/0x1a0 [ 2725.412487][T29836] ? blk_mq_alloc_rq_maps+0x100/0x650 [ 2725.417828][T29836] ? blk_mq_alloc_tag_set+0x50e/0x890 [ 2725.423167][T29836] ? loop_add+0x22b/0x710 [ 2725.427471][T29836] ? loop_control_ioctl+0x564/0x740 [ 2725.432642][T29836] ? __x64_sys_ioctl+0xd4/0x110 [ 2725.437461][T29836] ? do_syscall_64+0xcb/0x1c0 [ 2725.442109][T29836] __alloc_pages_nodemask+0x1b6/0x860 [ 2725.447547][T29836] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2725.453092][T29836] ? find_next_bit+0xe5/0x110 [ 2725.457737][T29836] ? blk_mq_hw_queue_to_node+0xeb/0x100 [ 2725.463257][T29836] blk_mq_alloc_rqs+0x252/0x6d0 [ 2725.468087][T29836] blk_mq_alloc_rq_maps+0x194/0x650 [ 2725.473258][T29836] blk_mq_alloc_tag_set+0x50e/0x890 [ 2725.478427][T29836] loop_add+0x22b/0x710 [ 2725.482553][T29836] ? radix_tree_lookup+0x17a/0x1d0 [ 2725.487649][T29836] loop_control_ioctl+0x564/0x740 [ 2725.492680][T29836] ? loop_remove+0xa0/0xa0 [ 2725.497089][T29836] ? __lru_cache_add+0x1bf/0x210 [ 2725.502015][T29836] ? memset+0x1f/0x40 [ 2725.505983][T29836] ? fsnotify+0x1332/0x13f0 [ 2725.510550][T29836] ? loop_remove+0xa0/0xa0 [ 2725.514939][T29836] do_vfs_ioctl+0x744/0x1730 [ 2725.519503][T29836] ? selinux_file_ioctl+0x723/0x970 [ 2725.524672][T29836] ? ioctl_preallocate+0x250/0x250 [ 2725.529756][T29836] ? __fget+0x40c/0x4a0 [ 2725.533883][T29836] ? fget_many+0x20/0x20 [ 2725.538100][T29836] ? check_preemption_disabled+0x154/0x330 [ 2725.543876][T29836] ? debug_smp_processor_id+0x20/0x20 [ 2725.549223][T29836] ? security_file_ioctl+0x9d/0xb0 [ 2725.554417][T29836] __x64_sys_ioctl+0xd4/0x110 03:37:12 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2}]}, 0x20}}, 0x20000000) 03:37:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 11) 03:37:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0xffffff7f00000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:12 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) (async) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x4, 0x88, 0x9, 0x21, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_ident={0x2, 0xa, 0x8001, 0x0, 0x80000000}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x9ee5, @loopback, 0x7fff}, @in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, @sadb_lifetime={0x4, 0x6, 0x9d, 0x8, 0x8000000000000000, 0x20}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e22}, @sadb_sa={0x2, 0x1, 0x4d3, 0x3, 0x1, 0xd9, 0x3, 0x1}, @sadb_ident={0x2, 0xa, 0x6, 0x0, 0xba}, @sadb_x_nat_t_type={0x1, 0x14, 0xff}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bba, 0xffffffff, {0x6, 0x3c, 0xf5, 0x6, 0x0, 0x80000000, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x14}, @in=@multicast2}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_ident={0x2, 0xb, 0x400, 0x0, 0xfffffffffffffff8}]}, 0x108}}, 0x41) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r6, 0x4004743b, 0x0) (async) socket(0x2c, 0x800, 0x5) (async) pipe(&(0x7f0000000240)) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xfffffe0c, r5, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x3c}}, 0x4800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) 03:37:12 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2}]}, 0x20}}, 0x20000000) 03:37:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) 03:37:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0xffffffff00000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2725.559068][T29836] do_syscall_64+0xcb/0x1c0 [ 2725.563572][T29836] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2725.609404][T27464] udevd[27464]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2725.627957][T29866] FAULT_INJECTION: forcing a failure. [ 2725.627957][T29866] name failslab, interval 1, probability 0, space 0, times 0 [ 2725.640963][T29866] CPU: 0 PID: 29866 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2725.651292][T29866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2725.661332][T29866] Call Trace: [ 2725.664605][T29866] dump_stack+0x1d8/0x241 [ 2725.668914][T29866] ? panic+0x73e/0x73e [ 2725.673057][T29866] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2725.678929][T29866] ? find_next_bit+0xe5/0x110 [ 2725.683599][T29866] ? memset+0x1f/0x40 [ 2725.687564][T29866] should_fail+0x709/0x870 [ 2725.691955][T29866] ? blk_mq_alloc_rqs+0x664/0x6d0 [ 2725.696985][T29866] ? setup_fault_attr+0x3d0/0x3d0 [ 2725.702003][T29866] ? blk_mq_alloc_rq_maps+0x5ac/0x650 [ 2725.707363][T29866] ? blk_alloc_queue_node+0x2c/0x580 [ 2725.712627][T29866] should_failslab+0x5/0x20 [ 2725.717117][T29866] kmem_cache_alloc+0x24/0x210 [ 2725.721856][T29866] blk_alloc_queue_node+0x2c/0x580 [ 2725.727032][T29866] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2725.732383][T29866] blk_mq_init_queue+0x33/0xa0 [ 2725.737119][T29866] loop_add+0x256/0x710 [ 2725.741281][T29866] ? radix_tree_lookup+0x17a/0x1d0 [ 2725.746369][T29866] loop_control_ioctl+0x564/0x740 [ 2725.751381][T29866] ? loop_remove+0xa0/0xa0 [ 2725.755776][T29866] ? __lru_cache_add+0x1bf/0x210 [ 2725.760697][T29866] ? memset+0x1f/0x40 [ 2725.764667][T29866] ? fsnotify+0x1332/0x13f0 [ 2725.769161][T29866] ? loop_remove+0xa0/0xa0 [ 2725.773564][T29866] do_vfs_ioctl+0x744/0x1730 [ 2725.778143][T29866] ? selinux_file_ioctl+0x723/0x970 [ 2725.783323][T29866] ? ioctl_preallocate+0x250/0x250 [ 2725.788424][T29866] ? __fget+0x40c/0x4a0 [ 2725.792562][T29866] ? fget_many+0x20/0x20 [ 2725.796782][T29866] ? check_preemption_disabled+0x154/0x330 [ 2725.802565][T29866] ? debug_smp_processor_id+0x20/0x20 03:37:12 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000000000000000000000b1200b0fb3ba3a8b4186c7d13e94ea12bbaedba113748af1742e6c5400870be161b0457a95c49a301802730c10dd619bae5f71435ee66eda7f61dc9cc867899898ad01c982db05a55dc7c78f931e4b2d40fdb2b6de5316b5829ac35507cc6dfb50968a7fdd4591a4ab22f4fb95fc9efb737f9a131efbba85d2e1f4d0e718d67c19b1e6df7042865b133950b5c4c1456239d4fd6cf71aaaeb3fa1c15c36"], 0x20}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0xde35, 0xfffffffd, 0x0, 0x4, 0x1}, 0x14) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)=""/213, &(0x7f0000000200)=0xd5) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000001932febcca0f2a501ef71c339ccb2259d366f487720581fb07961c68e342773e7cced56369d5c32e1245beec836c5d1a78bb68a86becaaadeee48a590adcb43bbbb914d9e6db2cd242decf916ff10d02defa174b684381e4a4aae0e66f1ae9988ee6567c464adcf91db3dab0825ec621e679f8baf862d365939c5c399b3", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf2503000000140002007369743000000000000000000000000005000400010000000900030073797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x5891}, 0x20001) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) 03:37:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) 03:37:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 12) 03:37:12 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "81d9a4", 0x48, 0x2b, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x2b00, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "e7bf5af1d2ecf3a758822c653c9ae92f53463b60a6deb644", "0f3b1955677cf6cc7fc510a2fbb80c58d5f33b1a9e99dde982700624d561a250"}}}}}}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(r0, &(0x7f0000000200), 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x14, 0x9, 0x7, 0x4, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x3f, 0x0, 0x0, 0x70bd25, 0x3501}]}, 0x20}}, 0x2000090) r3 = accept4$tipc(r2, &(0x7f0000000200)=@name, &(0x7f0000000240)=0x10, 0xc0000) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) [ 2725.807917][T29866] ? security_file_ioctl+0x9d/0xb0 [ 2725.813013][T29866] __x64_sys_ioctl+0xd4/0x110 [ 2725.817666][T29866] do_syscall_64+0xcb/0x1c0 [ 2725.822145][T29866] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2725.853375][T29878] FAULT_INJECTION: forcing a failure. [ 2725.853375][T29878] name failslab, interval 1, probability 0, space 0, times 0 [ 2725.870252][T29878] CPU: 0 PID: 29878 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2725.880505][T29878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2725.890543][T29878] Call Trace: [ 2725.893813][T29878] dump_stack+0x1d8/0x241 [ 2725.898116][T29878] ? panic+0x73e/0x73e [ 2725.902163][T29878] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2725.907944][T29878] should_fail+0x709/0x870 [ 2725.912333][T29878] ? setup_fault_attr+0x3d0/0x3d0 [ 2725.917333][T29878] ? mempool_init_node+0x131/0x500 [ 2725.922422][T29878] should_failslab+0x5/0x20 [ 2725.926898][T29878] __kmalloc+0x51/0x2b0 [ 2725.931042][T29878] mempool_init_node+0x131/0x500 [ 2725.935954][T29878] ? mempool_free+0x380/0x380 [ 2725.940617][T29878] ? mempool_alloc_slab+0x20/0x20 [ 2725.945618][T29878] mempool_init+0x35/0x50 [ 2725.949929][T29878] bioset_init+0x41a/0x620 [ 2725.954331][T29878] blk_alloc_queue_node+0xc4/0x580 [ 2725.959432][T29878] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2725.964782][T29878] blk_mq_init_queue+0x33/0xa0 [ 2725.969522][T29878] loop_add+0x256/0x710 [ 2725.973664][T29878] ? radix_tree_lookup+0x17a/0x1d0 [ 2725.978756][T29878] loop_control_ioctl+0x564/0x740 [ 2725.983758][T29878] ? loop_remove+0xa0/0xa0 [ 2725.988153][T29878] ? __lru_cache_add+0x1bf/0x210 [ 2725.993152][T29878] ? memset+0x1f/0x40 [ 2725.997107][T29878] ? fsnotify+0x1332/0x13f0 [ 2726.001590][T29878] ? loop_remove+0xa0/0xa0 [ 2726.005998][T29878] do_vfs_ioctl+0x744/0x1730 [ 2726.010581][T29878] ? selinux_file_ioctl+0x723/0x970 [ 2726.015756][T29878] ? ioctl_preallocate+0x250/0x250 [ 2726.020843][T29878] ? __fget+0x40c/0x4a0 [ 2726.024974][T29878] ? fget_many+0x20/0x20 [ 2726.029190][T29878] ? check_preemption_disabled+0x154/0x330 [ 2726.034984][T29878] ? debug_smp_processor_id+0x20/0x20 [ 2726.040328][T29878] ? security_file_ioctl+0x9d/0xb0 [ 2726.045410][T29878] __x64_sys_ioctl+0xd4/0x110 03:37:12 executing program 0: socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000000000000000000000b1200b0fb3ba3a8b4186c7d13e94ea12bbaedba113748af1742e6c5400870be161b0457a95c49a301802730c10dd619bae5f71435ee66eda7f61dc9cc867899898ad01c982db05a55dc7c78f931e4b2d40fdb2b6de5316b5829ac35507cc6dfb50968a7fdd4591a4ab22f4fb95fc9efb737f9a131efbba85d2e1f4d0e718d67c19b1e6df7042865b133950b5c4c1456239d4fd6cf71aaaeb3fa1c15c36"], 0x20}}, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0xde35, 0xfffffffd, 0x0, 0x4, 0x1}, 0x14) (async, rerun: 64) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)=""/213, &(0x7f0000000200)=0xd5) (async, rerun: 32) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000001932febcca0f2a501ef71c339ccb2259d366f487720581fb07961c68e342773e7cced56369d5c32e1245beec836c5d1a78bb68a86becaaadeee48a590adcb43bbbb914d9e6db2cd242decf916ff10d02defa174b684381e4a4aae0e66f1ae9988ee6567c464adcf91db3dab0825ec621e679f8baf862d365939c5c399b3", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf2503000000140002007369743000000000000000000000000005000400010000000900030073797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x5891}, 0x20001) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) 03:37:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:12 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "81d9a4", 0x48, 0x2b, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x2b00, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "e7bf5af1d2ecf3a758822c653c9ae92f53463b60a6deb644", "0f3b1955677cf6cc7fc510a2fbb80c58d5f33b1a9e99dde982700624d561a250"}}}}}}}, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(r0, &(0x7f0000000200), 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x14, 0x9, 0x7, 0x4, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x3f, 0x0, 0x0, 0x70bd25, 0x3501}]}, 0x20}}, 0x2000090) r3 = accept4$tipc(r2, &(0x7f0000000200)=@name, &(0x7f0000000240)=0x10, 0xc0000) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) (async) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) (async) 03:37:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 13) 03:37:12 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000000000000000000000b1200b0fb3ba3a8b4186c7d13e94ea12bbaedba113748af1742e6c5400870be161b0457a95c49a301802730c10dd619bae5f71435ee66eda7f61dc9cc867899898ad01c982db05a55dc7c78f931e4b2d40fdb2b6de5316b5829ac35507cc6dfb50968a7fdd4591a4ab22f4fb95fc9efb737f9a131efbba85d2e1f4d0e718d67c19b1e6df7042865b133950b5c4c1456239d4fd6cf71aaaeb3fa1c15c36"], 0x20}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0xde35, 0xfffffffd, 0x0, 0x4, 0x1}, 0x14) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)=""/213, &(0x7f0000000200)=0xd5) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000001932febcca0f2a501ef71c339ccb2259d366f487720581fb07961c68e342773e7cced56369d5c32e1245beec836c5d1a78bb68a86becaaadeee48a590adcb43bbbb914d9e6db2cd242decf916ff10d02defa174b684381e4a4aae0e66f1ae9988ee6567c464adcf91db3dab0825ec621e679f8baf862d365939c5c399b3", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf2503000000140002007369743000000000000000000000000005000400010000000900030073797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x5891}, 0x20001) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000000000000000000000b1200b0fb3ba3a8b4186c7d13e94ea12bbaedba113748af1742e6c5400870be161b0457a95c49a301802730c10dd619bae5f71435ee66eda7f61dc9cc867899898ad01c982db05a55dc7c78f931e4b2d40fdb2b6de5316b5829ac35507cc6dfb50968a7fdd4591a4ab22f4fb95fc9efb737f9a131efbba85d2e1f4d0e718d67c19b1e6df7042865b133950b5c4c1456239d4fd6cf71aaaeb3fa1c15c36"], 0x20}}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0xde35, 0xfffffffd, 0x0, 0x4, 0x1}, 0x14) (async) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)=""/213, &(0x7f0000000200)=0xd5) (async) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000001932febcca0f2a501ef71c339ccb2259d366f487720581fb07961c68e342773e7cced56369d5c32e1245beec836c5d1a78bb68a86becaaadeee48a590adcb43bbbb914d9e6db2cd242decf916ff10d02defa174b684381e4a4aae0e66f1ae9988ee6567c464adcf91db3dab0825ec621e679f8baf862d365939c5c399b3", @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf2503000000140002007369743000000000000000000000000005000400010000000900030073797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x5891}, 0x20001) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) 03:37:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2726.050148][T29878] do_syscall_64+0xcb/0x1c0 [ 2726.054626][T29878] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x93, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9, 0x4, 0x14}]}, 0x38}}, 0x4004) [ 2726.099830][T29905] FAULT_INJECTION: forcing a failure. [ 2726.099830][T29905] name failslab, interval 1, probability 0, space 0, times 0 [ 2726.112825][T29905] CPU: 1 PID: 29905 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2726.123069][T29905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2726.133107][T29905] Call Trace: [ 2726.136381][T29905] dump_stack+0x1d8/0x241 [ 2726.140690][T29905] ? panic+0x73e/0x73e [ 2726.144741][T29905] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2726.150526][T29905] should_fail+0x709/0x870 [ 2726.154950][T29905] ? setup_fault_attr+0x3d0/0x3d0 [ 2726.159991][T29905] ? mempool_init_node+0x1f6/0x500 [ 2726.165077][T29905] should_failslab+0x5/0x20 [ 2726.169641][T29905] kmem_cache_alloc+0x24/0x210 [ 2726.174392][T29905] ? mempool_free+0x380/0x380 [ 2726.179049][T29905] mempool_init_node+0x1f6/0x500 [ 2726.183963][T29905] ? mempool_free+0x380/0x380 [ 2726.188611][T29905] ? mempool_alloc_slab+0x20/0x20 [ 2726.193611][T29905] mempool_init+0x35/0x50 [ 2726.197927][T29905] bioset_init+0x41a/0x620 [ 2726.202333][T29905] blk_alloc_queue_node+0xc4/0x580 [ 2726.207420][T29905] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2726.212766][T29905] blk_mq_init_queue+0x33/0xa0 [ 2726.217942][T29905] loop_add+0x256/0x710 [ 2726.222082][T29905] ? radix_tree_lookup+0x17a/0x1d0 [ 2726.227170][T29905] loop_control_ioctl+0x564/0x740 [ 2726.232169][T29905] ? loop_remove+0xa0/0xa0 [ 2726.236557][T29905] ? __lru_cache_add+0x1bf/0x210 [ 2726.241475][T29905] ? memset+0x1f/0x40 [ 2726.245431][T29905] ? fsnotify+0x1332/0x13f0 [ 2726.249907][T29905] ? loop_remove+0xa0/0xa0 [ 2726.254296][T29905] do_vfs_ioctl+0x744/0x1730 [ 2726.258870][T29905] ? selinux_file_ioctl+0x723/0x970 [ 2726.264041][T29905] ? ioctl_preallocate+0x250/0x250 [ 2726.269139][T29905] ? __fget+0x40c/0x4a0 [ 2726.273273][T29905] ? fget_many+0x20/0x20 [ 2726.277496][T29905] ? check_preemption_disabled+0x154/0x330 [ 2726.283275][T29905] ? debug_smp_processor_id+0x20/0x20 [ 2726.288629][T29905] ? security_file_ioctl+0x9d/0xb0 [ 2726.293717][T29905] __x64_sys_ioctl+0xd4/0x110 03:37:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:12 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "81d9a4", 0x48, 0x2b, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x2b00, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "e7bf5af1d2ecf3a758822c653c9ae92f53463b60a6deb644", "0f3b1955677cf6cc7fc510a2fbb80c58d5f33b1a9e99dde982700624d561a250"}}}}}}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(r0, &(0x7f0000000200), 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x14, 0x9, 0x7, 0x4, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x3f, 0x0, 0x0, 0x70bd25, 0x3501}]}, 0x20}}, 0x2000090) (async) r3 = accept4$tipc(r2, &(0x7f0000000200)=@name, &(0x7f0000000240)=0x10, 0xc0000) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 14) 03:37:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x4000, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:12 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x45, 0x6, 0x6, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) 03:37:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x93, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9, 0x4, 0x14}]}, 0x38}}, 0x4004) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x93, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9, 0x4, 0x14}]}, 0x38}}, 0x4004) (async) [ 2726.298368][T29905] do_syscall_64+0xcb/0x1c0 [ 2726.302854][T29905] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2726.335550][T29927] FAULT_INJECTION: forcing a failure. [ 2726.335550][T29927] name failslab, interval 1, probability 0, space 0, times 0 03:37:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x38000, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) [ 2726.350228][T29927] CPU: 1 PID: 29927 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2726.360469][T29927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2726.370599][T29927] Call Trace: [ 2726.373869][T29927] dump_stack+0x1d8/0x241 [ 2726.378176][T29927] ? panic+0x73e/0x73e [ 2726.382220][T29927] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2726.388181][T29927] should_fail+0x709/0x870 [ 2726.392584][T29927] ? setup_fault_attr+0x3d0/0x3d0 [ 2726.397591][T29927] ? mempool_init_node+0x1f6/0x500 [ 2726.402762][T29927] should_failslab+0x5/0x20 [ 2726.407238][T29927] kmem_cache_alloc+0x24/0x210 [ 2726.411979][T29927] ? mempool_free+0x380/0x380 [ 2726.416648][T29927] mempool_init_node+0x1f6/0x500 [ 2726.421562][T29927] ? mempool_free+0x380/0x380 [ 2726.426231][T29927] ? mempool_alloc_slab+0x20/0x20 [ 2726.431345][T29927] mempool_init+0x35/0x50 [ 2726.435655][T29927] bioset_init+0x41a/0x620 [ 2726.440058][T29927] blk_alloc_queue_node+0xc4/0x580 [ 2726.445150][T29927] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2726.450552][T29927] blk_mq_init_queue+0x33/0xa0 [ 2726.455288][T29927] loop_add+0x256/0x710 [ 2726.459420][T29927] ? radix_tree_lookup+0x17a/0x1d0 [ 2726.464509][T29927] loop_control_ioctl+0x564/0x740 [ 2726.469596][T29927] ? loop_remove+0xa0/0xa0 [ 2726.474018][T29927] ? __lru_cache_add+0x1bf/0x210 [ 2726.478932][T29927] ? memset+0x1f/0x40 [ 2726.482887][T29927] ? fsnotify+0x1332/0x13f0 [ 2726.487376][T29927] ? loop_remove+0xa0/0xa0 [ 2726.491768][T29927] do_vfs_ioctl+0x744/0x1730 [ 2726.496331][T29927] ? selinux_file_ioctl+0x723/0x970 03:37:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x45, 0x6, 0x6, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x45, 0x6, 0x6, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x4000800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) (async) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) (async) 03:37:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x800300, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:13 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 15) 03:37:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x45, 0x6, 0x6, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) (async) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) 03:37:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) [ 2726.501499][T29927] ? ioctl_preallocate+0x250/0x250 [ 2726.506618][T29927] ? __fget+0x40c/0x4a0 [ 2726.510749][T29927] ? fget_many+0x20/0x20 [ 2726.514964][T29927] ? check_preemption_disabled+0x154/0x330 [ 2726.520772][T29927] ? debug_smp_processor_id+0x20/0x20 [ 2726.526117][T29927] ? security_file_ioctl+0x9d/0xb0 [ 2726.531206][T29927] __x64_sys_ioctl+0xd4/0x110 [ 2726.535856][T29927] do_syscall_64+0xcb/0x1c0 [ 2726.540337][T29927] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x93, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9, 0x4, 0x14}]}, 0x38}}, 0x4004) 03:37:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'w\x00'}, 0x8) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 03:37:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'w\x00'}, 0x8) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 03:37:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 03:37:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2726.614267][T29965] FAULT_INJECTION: forcing a failure. [ 2726.614267][T29965] name failslab, interval 1, probability 0, space 0, times 0 [ 2726.629278][T29965] CPU: 1 PID: 29965 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2726.639516][T29965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2726.649567][T29965] Call Trace: [ 2726.652858][T29965] dump_stack+0x1d8/0x241 [ 2726.657185][T29965] ? panic+0x73e/0x73e 03:37:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='xprtrdma_post_recvs_err\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}}, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c001}, 0x880) [ 2726.661252][T29965] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2726.667053][T29965] should_fail+0x709/0x870 [ 2726.671463][T29965] ? setup_fault_attr+0x3d0/0x3d0 [ 2726.676484][T29965] ? mempool_init_node+0x131/0x500 [ 2726.681586][T29965] should_failslab+0x5/0x20 [ 2726.686079][T29965] __kmalloc+0x51/0x2b0 [ 2726.690233][T29965] ? kmem_cache_alloc+0xd0/0x210 [ 2726.695179][T29965] mempool_init_node+0x131/0x500 [ 2726.700109][T29965] ? mempool_free+0x380/0x380 [ 2726.704771][T29965] ? mempool_alloc_slab+0x20/0x20 [ 2726.709779][T29965] mempool_init+0x35/0x50 [ 2726.714087][T29965] bioset_init+0x4ec/0x620 [ 2726.718483][T29965] blk_alloc_queue_node+0xc4/0x580 [ 2726.723569][T29965] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2726.728912][T29965] blk_mq_init_queue+0x33/0xa0 [ 2726.733650][T29965] loop_add+0x256/0x710 [ 2726.737781][T29965] ? radix_tree_lookup+0x17a/0x1d0 [ 2726.742876][T29965] loop_control_ioctl+0x564/0x740 [ 2726.747876][T29965] ? loop_remove+0xa0/0xa0 [ 2726.752264][T29965] ? __lru_cache_add+0x1bf/0x210 [ 2726.757174][T29965] ? memset+0x1f/0x40 [ 2726.761130][T29965] ? fsnotify+0x1332/0x13f0 [ 2726.765608][T29965] ? loop_remove+0xa0/0xa0 [ 2726.769997][T29965] do_vfs_ioctl+0x744/0x1730 [ 2726.774560][T29965] ? selinux_file_ioctl+0x723/0x970 [ 2726.779735][T29965] ? ioctl_preallocate+0x250/0x250 [ 2726.784832][T29965] ? __fget+0x40c/0x4a0 [ 2726.788964][T29965] ? fget_many+0x20/0x20 [ 2726.793185][T29965] ? check_preemption_disabled+0x154/0x330 [ 2726.799065][T29965] ? debug_smp_processor_id+0x20/0x20 [ 2726.804414][T29965] ? security_file_ioctl+0x9d/0xb0 [ 2726.809499][T29965] __x64_sys_ioctl+0xd4/0x110 03:37:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'w\x00'}, 0x8) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 03:37:13 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 16) 03:37:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='xprtrdma_post_recvs_err\x00', r2}, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}}, 0x0) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c001}, 0x880) 03:37:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x6, @loopback}}]}, 0x38}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x15, 0x6, 0x9, 0xf, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x23}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_x_sec_ctx={0x8, 0x18, 0x3, 0xff, 0x32, "f4dda666663bb13e853775b0b1c1d0ba2021973e6df2d64186e0b670602143a000300f7a373321ad5555f9bf69e150cab446"}]}, 0x78}}, 0x40000) [ 2726.814151][T29965] do_syscall_64+0xcb/0x1c0 [ 2726.818634][T29965] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x6, @loopback}}]}, 0x38}}, 0x40) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x15, 0x6, 0x9, 0xf, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x23}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_x_sec_ctx={0x8, 0x18, 0x3, 0xff, 0x32, "f4dda666663bb13e853775b0b1c1d0ba2021973e6df2d64186e0b670602143a000300f7a373321ad5555f9bf69e150cab446"}]}, 0x78}}, 0x40000) 03:37:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000100)={@id={0x2, 0x0, @auto="f68f65f66f4ad03ecf7c84e3d814faaa"}}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 32) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='xprtrdma_post_recvs_err\x00', r2}, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}}, 0x0) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c001}, 0x880) [ 2726.859654][T29989] FAULT_INJECTION: forcing a failure. [ 2726.859654][T29989] name failslab, interval 1, probability 0, space 0, times 0 [ 2726.876913][T29989] CPU: 0 PID: 29989 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2726.887162][T29989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2726.897297][T29989] Call Trace: [ 2726.900575][T29989] dump_stack+0x1d8/0x241 [ 2726.904884][T29989] ? panic+0x73e/0x73e [ 2726.908930][T29989] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2726.914710][T29989] should_fail+0x709/0x870 [ 2726.919102][T29989] ? setup_fault_attr+0x3d0/0x3d0 [ 2726.924099][T29989] ? mempool_init_node+0x1f6/0x500 [ 2726.929200][T29989] should_failslab+0x5/0x20 [ 2726.933682][T29989] kmem_cache_alloc+0x24/0x210 [ 2726.938421][T29989] ? mempool_free+0x380/0x380 [ 2726.943070][T29989] mempool_init_node+0x1f6/0x500 [ 2726.948113][T29989] ? mempool_free+0x380/0x380 [ 2726.952762][T29989] ? mempool_alloc_slab+0x20/0x20 [ 2726.957758][T29989] mempool_init+0x35/0x50 [ 2726.962074][T29989] bioset_init+0x4ec/0x620 [ 2726.966465][T29989] blk_alloc_queue_node+0xc4/0x580 [ 2726.971547][T29989] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2726.976896][T29989] blk_mq_init_queue+0x33/0xa0 [ 2726.981641][T29989] loop_add+0x256/0x710 [ 2726.985776][T29989] ? radix_tree_lookup+0x17a/0x1d0 [ 2726.990861][T29989] loop_control_ioctl+0x564/0x740 [ 2726.995861][T29989] ? loop_remove+0xa0/0xa0 [ 2727.000263][T29989] ? __lru_cache_add+0x1bf/0x210 [ 2727.005172][T29989] ? memset+0x1f/0x40 [ 2727.009127][T29989] ? fsnotify+0x1332/0x13f0 [ 2727.013608][T29989] ? loop_remove+0xa0/0xa0 [ 2727.018002][T29989] do_vfs_ioctl+0x744/0x1730 [ 2727.022575][T29989] ? selinux_file_ioctl+0x723/0x970 [ 2727.027756][T29989] ? ioctl_preallocate+0x250/0x250 [ 2727.032841][T29989] ? __fget+0x40c/0x4a0 [ 2727.036969][T29989] ? fget_many+0x20/0x20 [ 2727.041184][T29989] ? check_preemption_disabled+0x154/0x330 [ 2727.046970][T29989] ? debug_smp_processor_id+0x20/0x20 [ 2727.052317][T29989] ? security_file_ioctl+0x9d/0xb0 03:37:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x40000000, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:13 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 17) 03:37:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000100)={@id={0x2, 0x0, @auto="f68f65f66f4ad03ecf7c84e3d814faaa"}}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000100)={@id={0x2, 0x0, @auto="f68f65f66f4ad03ecf7c84e3d814faaa"}}) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x6, @loopback}}]}, 0x38}}, 0x40) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x15, 0x6, 0x9, 0xf, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x23}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_x_sec_ctx={0x8, 0x18, 0x3, 0xff, 0x32, "f4dda666663bb13e853775b0b1c1d0ba2021973e6df2d64186e0b670602143a000300f7a373321ad5555f9bf69e150cab446"}]}, 0x78}}, 0x40000) 03:37:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x7fffefe0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2727.057405][T29989] __x64_sys_ioctl+0xd4/0x110 [ 2727.062056][T29989] do_syscall_64+0xcb/0x1c0 [ 2727.066542][T29989] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2727.093371][T30004] FAULT_INJECTION: forcing a failure. [ 2727.093371][T30004] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.121229][T30004] CPU: 0 PID: 30004 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2727.131479][T30004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2727.141548][T30004] Call Trace: [ 2727.144839][T30004] dump_stack+0x1d8/0x241 [ 2727.149197][T30004] ? panic+0x73e/0x73e [ 2727.153252][T30004] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2727.159038][T30004] should_fail+0x709/0x870 [ 2727.163431][T30004] ? setup_fault_attr+0x3d0/0x3d0 [ 2727.168435][T30004] ? mempool_init_node+0x1f6/0x500 [ 2727.173526][T30004] should_failslab+0x5/0x20 [ 2727.178015][T30004] kmem_cache_alloc+0x24/0x210 [ 2727.182753][T30004] ? mempool_free+0x380/0x380 [ 2727.187410][T30004] mempool_init_node+0x1f6/0x500 [ 2727.192330][T30004] ? mempool_free+0x380/0x380 [ 2727.197107][T30004] ? mempool_alloc_slab+0x20/0x20 [ 2727.202121][T30004] mempool_init+0x35/0x50 [ 2727.206431][T30004] bioset_init+0x4ec/0x620 [ 2727.210825][T30004] blk_alloc_queue_node+0xc4/0x580 [ 2727.215918][T30004] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2727.221263][T30004] blk_mq_init_queue+0x33/0xa0 [ 2727.226124][T30004] loop_add+0x256/0x710 [ 2727.230257][T30004] ? radix_tree_lookup+0x17a/0x1d0 [ 2727.235341][T30004] loop_control_ioctl+0x564/0x740 [ 2727.240336][T30004] ? loop_remove+0xa0/0xa0 [ 2727.244725][T30004] ? __lru_cache_add+0x1bf/0x210 [ 2727.249634][T30004] ? memset+0x1f/0x40 [ 2727.253593][T30004] ? fsnotify+0x1332/0x13f0 [ 2727.258073][T30004] ? loop_remove+0xa0/0xa0 [ 2727.262462][T30004] do_vfs_ioctl+0x744/0x1730 [ 2727.267028][T30004] ? selinux_file_ioctl+0x723/0x970 03:37:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:13 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="02130000020000400000000000000000"], 0x10}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x11, 0x3, 0x31, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1c, 0x18, 0x74, 0x8, 0xd6, "6427bf6f5fac17ee5cdec0011ca56ec0ed615d584bb16a5b012e83fd231db26569812aa12c055f4943e33939a96a35c11032a21fabe1f6223f3a2ce746d1fc01013b1977a866854cab7070347d90e8ce7e8a4c015323d728795a53685bb826c03b27e64c658d2d2f113e5f921973dd8e214f12da414ef16f81963a6e5cad9a9f81824cde6d32a4f1bc57374ec58852ea60f282565d8ea3dd550bc9ae4ecb4f9a2c7820774c66de143080339b869a85d4bf125bd87bc742507cef469a661f317b11f8016ccfc451953ba1da9a57db584ec2e79e375be8"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x6000, @loopback}, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x3, 0x32, 0xa0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd27}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x3, 0x7, 0xff, 0x80, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_key={0x3, 0x9, 0x50, 0x0, "0aea9217682f23f2abaf"}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}]}, 0x188}}, 0x4004040) 03:37:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0xe0efff7f, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000100)={@id={0x2, 0x0, @auto="f68f65f66f4ad03ecf7c84e3d814faaa"}}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000100)={@id={0x2, 0x0, @auto="f68f65f66f4ad03ecf7c84e3d814faaa"}}) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:13 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="02130000020000400000000000000000"], 0x10}}, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x11, 0x3, 0x31, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1c, 0x18, 0x74, 0x8, 0xd6, "6427bf6f5fac17ee5cdec0011ca56ec0ed615d584bb16a5b012e83fd231db26569812aa12c055f4943e33939a96a35c11032a21fabe1f6223f3a2ce746d1fc01013b1977a866854cab7070347d90e8ce7e8a4c015323d728795a53685bb826c03b27e64c658d2d2f113e5f921973dd8e214f12da414ef16f81963a6e5cad9a9f81824cde6d32a4f1bc57374ec58852ea60f282565d8ea3dd550bc9ae4ecb4f9a2c7820774c66de143080339b869a85d4bf125bd87bc742507cef469a661f317b11f8016ccfc451953ba1da9a57db584ec2e79e375be8"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x6000, @loopback}, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x3, 0x32, 0xa0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd27}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x3, 0x7, 0xff, 0x80, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_key={0x3, 0x9, 0x50, 0x0, "0aea9217682f23f2abaf"}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}]}, 0x188}}, 0x4004040) 03:37:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2727.272203][T30004] ? ioctl_preallocate+0x250/0x250 [ 2727.277292][T30004] ? __fget+0x40c/0x4a0 [ 2727.281429][T30004] ? fget_many+0x20/0x20 [ 2727.285651][T30004] ? check_preemption_disabled+0x154/0x330 [ 2727.291433][T30004] ? debug_smp_processor_id+0x20/0x20 [ 2727.296780][T30004] ? security_file_ioctl+0x9d/0xb0 [ 2727.301870][T30004] __x64_sys_ioctl+0xd4/0x110 [ 2727.306524][T30004] do_syscall_64+0xcb/0x1c0 [ 2727.311004][T30004] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:37:13 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 18) 03:37:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r2, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0214000007000000000000000000000500170000e000000a0000000000000000000000000000000000000000000001000000000000000000"], 0x38}}, 0x0) 03:37:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:37:13 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="02130000020000400000000000000000"], 0x10}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async, rerun: 64) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x11, 0x3, 0x31, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1c, 0x18, 0x74, 0x8, 0xd6, "6427bf6f5fac17ee5cdec0011ca56ec0ed615d584bb16a5b012e83fd231db26569812aa12c055f4943e33939a96a35c11032a21fabe1f6223f3a2ce746d1fc01013b1977a866854cab7070347d90e8ce7e8a4c015323d728795a53685bb826c03b27e64c658d2d2f113e5f921973dd8e214f12da414ef16f81963a6e5cad9a9f81824cde6d32a4f1bc57374ec58852ea60f282565d8ea3dd550bc9ae4ecb4f9a2c7820774c66de143080339b869a85d4bf125bd87bc742507cef469a661f317b11f8016ccfc451953ba1da9a57db584ec2e79e375be8"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x6000, @loopback}, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, @sadb_address={0x3, 0x3, 0x32, 0xa0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd27}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x3, 0x7, 0xff, 0x80, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_key={0x3, 0x9, 0x50, 0x0, "0aea9217682f23f2abaf"}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}]}, 0x188}}, 0x4004040) (rerun: 64) [ 2727.366969][T30045] FAULT_INJECTION: forcing a failure. [ 2727.366969][T30045] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.382282][T30045] CPU: 1 PID: 30045 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2727.392674][T30045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2727.402716][T30045] Call Trace: [ 2727.405989][T30045] dump_stack+0x1d8/0x241 [ 2727.410384][T30045] ? panic+0x73e/0x73e [ 2727.414431][T30045] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2727.420207][T30045] ? mempool_init_node+0x1f6/0x500 [ 2727.425286][T30045] should_fail+0x709/0x870 [ 2727.429948][T30045] ? setup_fault_attr+0x3d0/0x3d0 [ 2727.434951][T30045] ? mempool_free+0x380/0x380 [ 2727.439597][T30045] ? mempool_alloc_slab+0x20/0x20 [ 2727.444677][T30045] ? mempool_init+0x35/0x50 [ 2727.449157][T30045] ? bdi_alloc_node+0x69/0xd0 [ 2727.453804][T30045] should_failslab+0x5/0x20 [ 2727.458287][T30045] kmem_cache_alloc_trace+0x28/0x240 [ 2727.463670][T30045] bdi_alloc_node+0x69/0xd0 [ 2727.468269][T30045] blk_alloc_queue_node+0x10b/0x580 [ 2727.473442][T30045] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2727.478795][T30045] blk_mq_init_queue+0x33/0xa0 [ 2727.483533][T30045] loop_add+0x256/0x710 [ 2727.487664][T30045] ? radix_tree_lookup+0x17a/0x1d0 [ 2727.492836][T30045] loop_control_ioctl+0x564/0x740 [ 2727.497831][T30045] ? loop_remove+0xa0/0xa0 [ 2727.502247][T30045] ? __lru_cache_add+0x1bf/0x210 [ 2727.507157][T30045] ? memset+0x1f/0x40 [ 2727.511113][T30045] ? fsnotify+0x1332/0x13f0 [ 2727.515590][T30045] ? loop_remove+0xa0/0xa0 [ 2727.519982][T30045] do_vfs_ioctl+0x744/0x1730 [ 2727.524548][T30045] ? selinux_file_ioctl+0x723/0x970 [ 2727.529734][T30045] ? ioctl_preallocate+0x250/0x250 [ 2727.534829][T30045] ? __fget+0x40c/0x4a0 [ 2727.538958][T30045] ? fget_many+0x20/0x20 [ 2727.543177][T30045] ? check_preemption_disabled+0x154/0x330 [ 2727.548970][T30045] ? debug_smp_processor_id+0x20/0x20 [ 2727.554316][T30045] ? security_file_ioctl+0x9d/0xb0 [ 2727.559409][T30045] __x64_sys_ioctl+0xd4/0x110 03:37:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:14 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 19) 03:37:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:37:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0214000007000000000000000000000500170000e000000a0000000000000000000000000000000000000000000001000000000000000000"], 0x38}}, 0x0) 03:37:14 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02130000020000000000000000000000fc584a634bb1d89758e4db99d477c6b9894a7cb497e1", @ANYRES8=r0], 0x10}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 03:37:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0214000007000000000000000000000500170000e000000a0000000000000000000000000000000000000000000001000000000000000000"], 0x38}}, 0x0) 03:37:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r2, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2727.564062][T30045] do_syscall_64+0xcb/0x1c0 [ 2727.568539][T30045] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:14 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02130000020000000000000000000000fc584a634bb1d89758e4db99d477c6b9894a7cb497e1", @ANYRES8=r0], 0x10}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) [ 2727.616633][T30064] FAULT_INJECTION: forcing a failure. [ 2727.616633][T30064] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.629285][T30064] CPU: 1 PID: 30064 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2727.639590][T30064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2727.649624][T30064] Call Trace: [ 2727.652895][T30064] dump_stack+0x1d8/0x241 [ 2727.657194][T30064] ? panic+0x73e/0x73e [ 2727.661235][T30064] ? blk_mq_init_queue+0x33/0xa0 [ 2727.666144][T30064] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2727.671918][T30064] ? __x64_sys_ioctl+0xd4/0x110 [ 2727.676746][T30064] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2727.682791][T30064] should_fail+0x709/0x870 [ 2727.687176][T30064] ? setup_fault_attr+0x3d0/0x3d0 [ 2727.692174][T30064] ? bdi_init+0x19a/0xa90 [ 2727.696472][T30064] should_failslab+0x5/0x20 [ 2727.700946][T30064] kmem_cache_alloc_trace+0x28/0x240 [ 2727.706219][T30064] bdi_init+0x19a/0xa90 [ 2727.710353][T30064] ? kmem_cache_alloc_trace+0xd8/0x240 [ 2727.715903][T30064] ? bdi_alloc_node+0x69/0xd0 [ 2727.720550][T30064] bdi_alloc_node+0x79/0xd0 [ 2727.725024][T30064] blk_alloc_queue_node+0x10b/0x580 [ 2727.730201][T30064] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2727.735580][T30064] blk_mq_init_queue+0x33/0xa0 [ 2727.740319][T30064] loop_add+0x256/0x710 [ 2727.744448][T30064] ? radix_tree_lookup+0x17a/0x1d0 [ 2727.749531][T30064] loop_control_ioctl+0x564/0x740 [ 2727.754525][T30064] ? loop_remove+0xa0/0xa0 [ 2727.758919][T30064] ? __lru_cache_add+0x1bf/0x210 [ 2727.763824][T30064] ? memset+0x1f/0x40 [ 2727.767777][T30064] ? fsnotify+0x1332/0x13f0 [ 2727.772250][T30064] ? loop_remove+0xa0/0xa0 [ 2727.776634][T30064] do_vfs_ioctl+0x744/0x1730 [ 2727.781198][T30064] ? selinux_file_ioctl+0x723/0x970 [ 2727.786368][T30064] ? ioctl_preallocate+0x250/0x250 [ 2727.791453][T30064] ? __fget+0x40c/0x4a0 [ 2727.795578][T30064] ? fget_many+0x20/0x20 [ 2727.799791][T30064] ? check_preemption_disabled+0x154/0x330 [ 2727.805568][T30064] ? debug_smp_processor_id+0x20/0x20 [ 2727.810916][T30064] ? security_file_ioctl+0x9d/0xb0 03:37:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 03:37:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 03:37:14 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 20) 03:37:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 03:37:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r2, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r2, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) (async) pipe(&(0x7f0000000140)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) [ 2727.816004][T30064] __x64_sys_ioctl+0xd4/0x110 [ 2727.820652][T30064] do_syscall_64+0xcb/0x1c0 [ 2727.825146][T30064] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8, 0x9) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="021400000700000000000000000000000500170000a000000a000000000000000000000000010000000000000000149f0d731d131c1f107619e042ae2a892766bc9a568f41f97b7ddf37a4d66eeeb1e70c2bdb9413c3dfc9de6ccf65e663464c80b7b6938515361a03430a042c3a67c2b0346675a7cdc07975fd56b88e2e4dcc5e81a1865e020931a7515bdc"], 0x38}}, 0x0) 03:37:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2727.872407][T30089] FAULT_INJECTION: forcing a failure. [ 2727.872407][T30089] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.887111][T30089] CPU: 0 PID: 30089 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2727.897346][T30089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2727.907379][T30089] Call Trace: [ 2727.910651][T30089] dump_stack+0x1d8/0x241 [ 2727.914953][T30089] ? panic+0x73e/0x73e [ 2727.918988][T30089] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2727.924943][T30089] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 2727.930374][T30089] ? cpumask_next+0xc/0x20 [ 2727.934761][T30089] should_fail+0x709/0x870 [ 2727.939160][T30089] ? setup_fault_attr+0x3d0/0x3d0 [ 2727.944155][T30089] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 2727.949933][T30089] ? blk_alloc_queue_stats+0x48/0x100 [ 2727.955274][T30089] should_failslab+0x5/0x20 [ 2727.959773][T30089] kmem_cache_alloc_trace+0x28/0x240 [ 2727.965067][T30089] blk_alloc_queue_stats+0x48/0x100 [ 2727.970235][T30089] blk_alloc_queue_node+0x150/0x580 [ 2727.975401][T30089] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2727.980739][T30089] blk_mq_init_queue+0x33/0xa0 [ 2727.985476][T30089] loop_add+0x256/0x710 [ 2727.989695][T30089] ? radix_tree_lookup+0x17a/0x1d0 [ 2727.994777][T30089] loop_control_ioctl+0x564/0x740 [ 2727.999787][T30089] ? loop_remove+0xa0/0xa0 [ 2728.004173][T30089] ? __lru_cache_add+0x1bf/0x210 [ 2728.009106][T30089] ? memset+0x1f/0x40 [ 2728.013057][T30089] ? fsnotify+0x1332/0x13f0 [ 2728.017527][T30089] ? loop_remove+0xa0/0xa0 [ 2728.021913][T30089] do_vfs_ioctl+0x744/0x1730 [ 2728.026476][T30089] ? selinux_file_ioctl+0x723/0x970 [ 2728.031642][T30089] ? ioctl_preallocate+0x250/0x250 [ 2728.036722][T30089] ? __fget+0x40c/0x4a0 [ 2728.040848][T30089] ? fget_many+0x20/0x20 [ 2728.045061][T30089] ? check_preemption_disabled+0x154/0x330 [ 2728.050835][T30089] ? debug_smp_processor_id+0x20/0x20 [ 2728.056176][T30089] ? security_file_ioctl+0x9d/0xb0 [ 2728.061259][T30089] __x64_sys_ioctl+0xd4/0x110 [ 2728.065908][T30089] do_syscall_64+0xcb/0x1c0 03:37:14 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02130000020000000000000000000000fc584a634bb1d89758e4db99d477c6b9894a7cb497e1", @ANYRES8=r0], 0x10}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 03:37:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x10) 03:37:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:14 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 21) 03:37:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x10) [ 2728.070382][T30089] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:14 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getgid() syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x40, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}], [{@appraise_type}, {@euid_eq}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '\\.,!@'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_gt}, {@seclabel}]}}, 0x0, 0x0, &(0x7f0000000680)="96bd19f3da145e33d0cc3288428cda3594fbc5515bc60999") fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee01, r1, 0x1000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 2728.100992][T30117] FAULT_INJECTION: forcing a failure. [ 2728.100992][T30117] name failslab, interval 1, probability 0, space 0, times 0 [ 2728.113742][T30117] CPU: 1 PID: 30117 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2728.123959][T30117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2728.134000][T30117] Call Trace: [ 2728.137275][T30117] dump_stack+0x1d8/0x241 [ 2728.141576][T30117] ? panic+0x73e/0x73e [ 2728.145623][T30117] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2728.151407][T30117] ? pcpu_chunk_relocate+0xe5/0x3a0 [ 2728.156578][T30117] should_fail+0x709/0x870 [ 2728.160973][T30117] ? setup_fault_attr+0x3d0/0x3d0 [ 2728.165971][T30117] ? find_next_bit+0xc6/0x110 [ 2728.170706][T30117] ? cpumask_next+0xc/0x20 [ 2728.175093][T30117] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 2728.180444][T30117] ? blk_stat_alloc_callback+0x5c/0x210 [ 2728.185974][T30117] should_failslab+0x5/0x20 [ 2728.190448][T30117] kmem_cache_alloc_trace+0x28/0x240 [ 2728.195706][T30117] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 2728.201049][T30117] ? blk_mq_free_tag_set+0x480/0x480 [ 2728.206307][T30117] blk_stat_alloc_callback+0x5c/0x210 [ 2728.211650][T30117] blk_mq_init_allocated_queue+0x86/0x16c0 [ 2728.217430][T30117] ? blk_alloc_queue_node+0x4e7/0x580 [ 2728.222785][T30117] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2728.228130][T30117] blk_mq_init_queue+0x48/0xa0 [ 2728.232868][T30117] loop_add+0x256/0x710 [ 2728.236994][T30117] ? radix_tree_lookup+0x17a/0x1d0 [ 2728.242227][T30117] loop_control_ioctl+0x564/0x740 [ 2728.247234][T30117] ? loop_remove+0xa0/0xa0 [ 2728.251632][T30117] ? __lru_cache_add+0x1bf/0x210 [ 2728.256545][T30117] ? memset+0x1f/0x40 [ 2728.260502][T30117] ? fsnotify+0x1332/0x13f0 [ 2728.265066][T30117] ? loop_remove+0xa0/0xa0 [ 2728.269454][T30117] do_vfs_ioctl+0x744/0x1730 [ 2728.274131][T30117] ? selinux_file_ioctl+0x723/0x970 [ 2728.279308][T30117] ? ioctl_preallocate+0x250/0x250 [ 2728.284416][T30117] ? __fget+0x40c/0x4a0 [ 2728.288542][T30117] ? fget_many+0x20/0x20 [ 2728.292759][T30117] ? check_preemption_disabled+0x154/0x330 03:37:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8, 0x9) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="021400000700000000000000000000000500170000a000000a000000000000000000000000010000000000000000149f0d731d131c1f107619e042ae2a892766bc9a568f41f97b7ddf37a4d66eeeb1e70c2bdb9413c3dfc9de6ccf65e663464c80b7b6938515361a03430a042c3a67c2b0346675a7cdc07975fd56b88e2e4dcc5e81a1865e020931a7515bdc"], 0x38}}, 0x0) 03:37:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x10) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x10) (async) 03:37:14 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 22) 03:37:14 executing program 5: socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8, 0x9) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="021400000700000000000000000000000500170000a000000a000000000000000000000000010000000000000000149f0d731d131c1f107619e042ae2a892766bc9a568f41f97b7ddf37a4d66eeeb1e70c2bdb9413c3dfc9de6ccf65e663464c80b7b6938515361a03430a042c3a67c2b0346675a7cdc07975fd56b88e2e4dcc5e81a1865e020931a7515bdc"], 0x38}}, 0x0) 03:37:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2728.298534][T30117] ? debug_smp_processor_id+0x20/0x20 [ 2728.303974][T30117] ? security_file_ioctl+0x9d/0xb0 [ 2728.309079][T30117] __x64_sys_ioctl+0xd4/0x110 [ 2728.313740][T30117] do_syscall_64+0xcb/0x1c0 [ 2728.318238][T30117] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:14 executing program 5: socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="021400000700000000000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000000"], 0x38}}, 0x0) 03:37:14 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getgid() syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x40, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}], [{@appraise_type}, {@euid_eq}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '\\.,!@'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_gt}, {@seclabel}]}}, 0x0, 0x0, &(0x7f0000000680)="96bd19f3da145e33d0cc3288428cda3594fbc5515bc60999") fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee01, r1, 0x1000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) getgid() (async) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x40, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}], [{@appraise_type}, {@euid_eq}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '\\.,!@'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_gt}, {@seclabel}]}}, 0x0, 0x0, &(0x7f0000000680)="96bd19f3da145e33d0cc3288428cda3594fbc5515bc60999") (async) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee01, r1, 0x1000) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) 03:37:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02050000040000000100000000000000020000000000e70002f25cb4a10330387d0000cefb1ed393f262a660a7b60100000000000000fcb368fe5082300aedb600bc8735a2aa1f8cc55c67bb3d3b2ebad1b5126831b8087cdcd55f85adb1f06124ed925c7a00007d5ed7491ac5f1a9f1a9e2d57fa34a960000"], 0x20}}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x1ff, 0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7fff, 0xffffffff, 0x4, 0x2}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) [ 2728.365233][T30128] fuse: blksize only supported for fuseblk [ 2728.369665][T30141] FAULT_INJECTION: forcing a failure. [ 2728.369665][T30141] name failslab, interval 1, probability 0, space 0, times 0 [ 2728.384821][T30141] CPU: 1 PID: 30141 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2728.395061][T30141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2728.405106][T30141] Call Trace: [ 2728.408400][T30141] dump_stack+0x1d8/0x241 [ 2728.412729][T30141] ? panic+0x73e/0x73e [ 2728.416798][T30141] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2728.419890][T30150] tipc: Enabling of bearer rejected, failed to enable media [ 2728.422600][T30141] ? pcpu_chunk_relocate+0xe5/0x3a0 [ 2728.422610][T30141] should_fail+0x709/0x870 [ 2728.422623][T30141] ? setup_fault_attr+0x3d0/0x3d0 [ 2728.445388][T30141] ? find_next_bit+0xc6/0x110 [ 2728.450034][T30141] ? cpumask_next+0xc/0x20 [ 2728.454425][T30141] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 2728.459769][T30141] ? blk_stat_alloc_callback+0x5c/0x210 [ 2728.465287][T30141] should_failslab+0x5/0x20 [ 2728.469763][T30141] kmem_cache_alloc_trace+0x28/0x240 [ 2728.475052][T30141] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 2728.480397][T30141] ? blk_mq_free_tag_set+0x480/0x480 [ 2728.485652][T30141] blk_stat_alloc_callback+0x5c/0x210 [ 2728.491006][T30141] blk_mq_init_allocated_queue+0x86/0x16c0 [ 2728.496793][T30141] ? blk_alloc_queue_node+0x4e7/0x580 [ 2728.502138][T30141] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2728.507486][T30141] blk_mq_init_queue+0x48/0xa0 [ 2728.512222][T30141] loop_add+0x256/0x710 [ 2728.516352][T30141] ? radix_tree_lookup+0x17a/0x1d0 [ 2728.521435][T30141] loop_control_ioctl+0x564/0x740 [ 2728.526429][T30141] ? loop_remove+0xa0/0xa0 [ 2728.530817][T30141] ? __lru_cache_add+0x1bf/0x210 [ 2728.535797][T30141] ? memset+0x1f/0x40 [ 2728.539783][T30141] ? fsnotify+0x1332/0x13f0 [ 2728.544265][T30141] ? loop_remove+0xa0/0xa0 [ 2728.548659][T30141] do_vfs_ioctl+0x744/0x1730 [ 2728.553225][T30141] ? selinux_file_ioctl+0x723/0x970 [ 2728.558398][T30141] ? ioctl_preallocate+0x250/0x250 03:37:15 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 23) 03:37:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:15 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02050000040000000100000000000000020000000000e70002f25cb4a10330387d0000cefb1ed393f262a660a7b60100000000000000fcb368fe5082300aedb600bc8735a2aa1f8cc55c67bb3d3b2ebad1b5126831b8087cdcd55f85adb1f06124ed925c7a00007d5ed7491ac5f1a9f1a9e2d57fa34a960000"], 0x20}}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x1ff, 0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7fff, 0xffffffff, 0x4, 0x2}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) socket$key(0xf, 0x3, 0x2) (async) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02050000040000000100000000000000020000000000e70002f25cb4a10330387d0000cefb1ed393f262a660a7b60100000000000000fcb368fe5082300aedb600bc8735a2aa1f8cc55c67bb3d3b2ebad1b5126831b8087cdcd55f85adb1f06124ed925c7a00007d5ed7491ac5f1a9f1a9e2d57fa34a960000"], 0x20}}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x1ff, 0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7fff, 0xffffffff, 0x4, 0x2}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) (async) 03:37:15 executing program 5: socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2728.563483][T30141] ? __fget+0x40c/0x4a0 [ 2728.567613][T30141] ? fget_many+0x20/0x20 [ 2728.571949][T30141] ? check_preemption_disabled+0x154/0x330 [ 2728.577734][T30141] ? debug_smp_processor_id+0x20/0x20 [ 2728.583078][T30141] ? security_file_ioctl+0x9d/0xb0 [ 2728.588159][T30141] __x64_sys_ioctl+0xd4/0x110 [ 2728.592811][T30141] do_syscall_64+0xcb/0x1c0 [ 2728.597288][T30141] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="021400000700000000000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000000"], 0x38}}, 0x0) [ 2728.630434][T30159] tipc: Enabling of bearer rejected, failed to enable media [ 2728.642556][T30154] fuse: blksize only supported for fuseblk [ 2728.649085][T30161] FAULT_INJECTION: forcing a failure. [ 2728.649085][T30161] name failslab, interval 1, probability 0, space 0, times 0 [ 2728.651437][T30179] fuse: Bad value for 'blksize' [ 2728.666849][T30161] CPU: 1 PID: 30161 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2728.677083][T30161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2728.687117][T30161] Call Trace: [ 2728.690387][T30161] dump_stack+0x1d8/0x241 [ 2728.694702][T30161] ? panic+0x73e/0x73e [ 2728.698753][T30161] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2728.704529][T30161] should_fail+0x709/0x870 [ 2728.708918][T30161] ? setup_fault_attr+0x3d0/0x3d0 [ 2728.713914][T30161] ? blk_mq_init_allocated_queue+0xef/0x16c0 [ 2728.719864][T30161] should_failslab+0x5/0x20 [ 2728.724341][T30161] kmem_cache_alloc_trace+0x28/0x240 [ 2728.729728][T30161] blk_mq_init_allocated_queue+0xef/0x16c0 [ 2728.735509][T30161] ? blk_alloc_queue_node+0x4e7/0x580 [ 2728.740853][T30161] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2728.746197][T30161] blk_mq_init_queue+0x48/0xa0 [ 2728.750943][T30161] loop_add+0x256/0x710 [ 2728.755075][T30161] ? radix_tree_lookup+0x17a/0x1d0 [ 2728.760160][T30161] loop_control_ioctl+0x564/0x740 [ 2728.765155][T30161] ? loop_remove+0xa0/0xa0 [ 2728.769542][T30161] ? __lru_cache_add+0x1bf/0x210 [ 2728.774459][T30161] ? memset+0x1f/0x40 [ 2728.778419][T30161] ? fsnotify+0x1332/0x13f0 [ 2728.782901][T30161] ? loop_remove+0xa0/0xa0 [ 2728.787297][T30161] do_vfs_ioctl+0x744/0x1730 [ 2728.791862][T30161] ? selinux_file_ioctl+0x723/0x970 [ 2728.797029][T30161] ? ioctl_preallocate+0x250/0x250 [ 2728.802115][T30161] ? __fget+0x40c/0x4a0 [ 2728.806244][T30161] ? fget_many+0x20/0x20 [ 2728.810498][T30161] ? check_preemption_disabled+0x154/0x330 [ 2728.816277][T30161] ? debug_smp_processor_id+0x20/0x20 [ 2728.821620][T30161] ? security_file_ioctl+0x9d/0xb0 [ 2728.826701][T30161] __x64_sys_ioctl+0xd4/0x110 03:37:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="021400000700000000000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000000"], 0x38}}, 0x0) 03:37:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:15 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 24) 03:37:15 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:15 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = getgid() syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x40, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}], [{@appraise_type}, {@euid_eq}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '\\.,!@'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_gt}, {@seclabel}]}}, 0x0, 0x0, &(0x7f0000000680)="96bd19f3da145e33d0cc3288428cda3594fbc5515bc60999") fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee01, r1, 0x1000) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:15 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02050000040000000100000000000000020000000000e70002f25cb4a10330387d0000cefb1ed393f262a660a7b60100000000000000fcb368fe5082300aedb600bc8735a2aa1f8cc55c67bb3d3b2ebad1b5126831b8087cdcd55f85adb1f06124ed925c7a00007d5ed7491ac5f1a9f1a9e2d57fa34a960000"], 0x20}}, 0x40) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x1ff, 0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7fff, 0xffffffff, 0x4, 0x2}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 03:37:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2728.831438][T30161] do_syscall_64+0xcb/0x1c0 [ 2728.835924][T30161] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2728.868700][T30186] fuse: blksize only supported for fuseblk [ 2728.879192][T30195] FAULT_INJECTION: forcing a failure. [ 2728.879192][T30195] name failslab, interval 1, probability 0, space 0, times 0 [ 2728.880666][T30199] tipc: Enabling of bearer rejected, failed to enable media [ 2728.892844][T30195] CPU: 1 PID: 30195 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2728.910343][T30195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2728.920371][T30195] Call Trace: [ 2728.923643][T30195] dump_stack+0x1d8/0x241 [ 2728.927947][T30195] ? panic+0x73e/0x73e [ 2728.932010][T30195] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2728.937789][T30195] ? pcpu_alloc_area+0x696/0x790 [ 2728.942697][T30195] should_fail+0x709/0x870 [ 2728.947090][T30195] ? setup_fault_attr+0x3d0/0x3d0 [ 2728.952084][T30195] ? find_next_bit+0xc6/0x110 [ 2728.956741][T30195] ? cpumask_next+0xc/0x20 [ 2728.961128][T30195] ? kobject_init+0x7d/0x1d0 [ 2728.965689][T30195] ? find_next_bit+0xc6/0x110 [ 2728.970336][T30195] ? blk_mq_init_allocated_queue+0x427/0x16c0 [ 2728.976372][T30195] should_failslab+0x5/0x20 [ 2728.980852][T30195] __kmalloc+0x51/0x2b0 [ 2728.984980][T30195] blk_mq_init_allocated_queue+0x427/0x16c0 [ 2728.990848][T30195] ? blk_alloc_queue_node+0x4e7/0x580 [ 2728.996191][T30195] ? blk_mq_alloc_tag_set+0x68b/0x890 [ 2729.001533][T30195] blk_mq_init_queue+0x48/0xa0 [ 2729.006269][T30195] loop_add+0x256/0x710 [ 2729.010399][T30195] ? radix_tree_lookup+0x17a/0x1d0 [ 2729.015481][T30195] loop_control_ioctl+0x564/0x740 [ 2729.020486][T30195] ? loop_remove+0xa0/0xa0 [ 2729.024970][T30195] ? __lru_cache_add+0x1bf/0x210 [ 2729.029881][T30195] ? memset+0x1f/0x40 [ 2729.033838][T30195] ? fsnotify+0x1332/0x13f0 [ 2729.038318][T30195] ? loop_remove+0xa0/0xa0 [ 2729.042704][T30195] do_vfs_ioctl+0x744/0x1730 [ 2729.047297][T30195] ? selinux_file_ioctl+0x723/0x970 [ 2729.052467][T30195] ? ioctl_preallocate+0x250/0x250 [ 2729.057550][T30195] ? __fget+0x40c/0x4a0 [ 2729.061684][T30195] ? fget_many+0x20/0x20 [ 2729.065994][T30195] ? check_preemption_disabled+0x154/0x330 [ 2729.071777][T30195] ? debug_smp_processor_id+0x20/0x20 [ 2729.077120][T30195] ? security_file_ioctl+0x9d/0xb0 03:37:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:15 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:15 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020f00000b000000ffffff0000000000090008400001000094ffc663d64fb65527c46770ffe706d5f705721e93189be981e7f88b938c7bf80a04a35dc8f83877fe601b6046bddec67337d59099fa4da3073412ccd76de9f0"], 0x58}}, 0x0) 03:37:15 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="021700020b0000002abd7000fedbdf2501001400070000000400040009feffff0000000000000000010000000000000001000100000000000400020001000000ff0f00000900000001009948fe5f00000000000007000000000000009fb760b2b36a1b0f87602499d1df241afdc548a8c2aea7684b8bc7f334c88295e28e3ec44c46a04a2e121a50c21ea82224bd35f1f46c871979912c1026333affce89485ac0e1264962e607e845065b6b89c3ff8ad3745deb8ccf071fa4f746b94e2a38ec8d13672cff10f4e527292041e6945fefe15070dacb8e54db1119bfa19cb2a76063fac37106bcfe384b77f225b6f21030cf18deb32df07d593d143b913418c6cdae1e17ee35ad205b8894b4a70d8d552579007f0460a38b4f9549b93d5645521cdfa48df2704ca1c6cc014b44c8582b0ce9b731f345c5795d5a3f434702ffbae659742356f2afff37"], 0x58}}, 0x20000090) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0200000000ffffffffffffffe2000000"], 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="35b304bba10167495ad4eea27d9f3816841dd32f3bb9f449d077dbc1f6bcff55bf2f26c8099c838c02787cd31b7e5a07dfd810a8453698596cfcd744f5a520cc89f3921ff94b8f1b2ffdfd7ffcd45ff8b3aeebc741aabb70a3fcf21a799aff785d55111bbfd7", @ANYRESDEC=r2, @ANYBLOB="00042dbd7000fcdbdf25020000000900030073797a31000000000900030073797a31000000001400020069703665727370616e300000000000000500040002000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xac820020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x34, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24040001}, 0x80) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x2, 0xb, 0x3, 0x9, 0x1f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb1, 0x80000000, {0x1d1, 0x6c, 0x1, 0x8, 0x0, 0x6, 0x0, @in6=@mcast1, @in6=@loopback}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x3, @private1, 0xff}, @in={0x2, 0x4e24, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x34ff}, @sadb_address={0x3, 0x6, 0xff, 0xe0, 0x0, @in={0x2, 0x5e21, @private=0xa010101}}, @sadb_address={0x3, 0x7, 0x19, 0xfb05169bd83da658, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_lifetime={0x4, 0x3, 0x3ff, 0x27fff, 0x1, 0x6}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}]}, 0xf8}}, 0x8801) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000380)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x1) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, r3) socket(0x6, 0x1, 0x0) 03:37:15 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 25) 03:37:15 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x600, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:15 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 2729.082200][T30195] __x64_sys_ioctl+0xd4/0x110 [ 2729.086853][T30195] do_syscall_64+0xcb/0x1c0 [ 2729.091338][T30195] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x4000, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:15 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2729.146933][T30215] FAULT_INJECTION: forcing a failure. [ 2729.146933][T30215] name failslab, interval 1, probability 0, space 0, times 0 [ 2729.161931][T30215] CPU: 0 PID: 30215 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2729.172172][T30215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2729.182205][T30215] Call Trace: [ 2729.185478][T30215] dump_stack+0x1d8/0x241 [ 2729.189781][T30215] ? panic+0x73e/0x73e [ 2729.193836][T30215] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2729.199637][T30215] should_fail+0x709/0x870 [ 2729.204037][T30215] ? blk_mq_init_queue+0x48/0xa0 [ 2729.208959][T30215] ? loop_add+0x256/0x710 [ 2729.213268][T30215] ? __x64_sys_ioctl+0xd4/0x110 [ 2729.218102][T30215] ? setup_fault_attr+0x3d0/0x3d0 [ 2729.223135][T30215] ? _raw_spin_lock+0xa3/0x1b0 [ 2729.227877][T30215] ? blk_mq_realloc_hw_ctxs+0x3b9/0x1450 [ 2729.233627][T30215] should_failslab+0x5/0x20 [ 2729.238106][T30215] __kmalloc+0x51/0x2b0 [ 2729.242270][T30215] ? blk_mq_hw_queue_to_node+0xeb/0x100 [ 2729.247800][T30215] blk_mq_realloc_hw_ctxs+0x3b9/0x1450 [ 2729.253236][T30215] blk_mq_init_allocated_queue+0x4d6/0x16c0 [ 2729.259106][T30215] ? blk_alloc_queue_node+0x4e7/0x580 [ 2729.264453][T30215] blk_mq_init_queue+0x48/0xa0 [ 2729.269192][T30215] loop_add+0x256/0x710 [ 2729.273320][T30215] ? radix_tree_lookup+0x17a/0x1d0 [ 2729.278405][T30215] loop_control_ioctl+0x564/0x740 [ 2729.283401][T30215] ? loop_remove+0xa0/0xa0 [ 2729.287790][T30215] ? __lru_cache_add+0x1bf/0x210 [ 2729.292788][T30215] ? memset+0x1f/0x40 [ 2729.296754][T30215] ? fsnotify+0x1332/0x13f0 [ 2729.301245][T30215] ? loop_remove+0xa0/0xa0 [ 2729.305722][T30215] do_vfs_ioctl+0x744/0x1730 [ 2729.310292][T30215] ? selinux_file_ioctl+0x723/0x970 [ 2729.315463][T30215] ? ioctl_preallocate+0x250/0x250 [ 2729.320546][T30215] ? __fget+0x40c/0x4a0 [ 2729.324678][T30215] ? fget_many+0x20/0x20 [ 2729.328893][T30215] ? check_preemption_disabled+0x154/0x330 [ 2729.334684][T30215] ? debug_smp_processor_id+0x20/0x20 [ 2729.340027][T30215] ? security_file_ioctl+0x9d/0xb0 03:37:15 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (rerun: 64) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 64) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:15 executing program 2: socket$key(0xf, 0x3, 0x2) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020f00000b000000ffffff0000000000090008400001000094ffc663d64fb65527c46770ffe706d5f705721e93189be981e7f88b938c7bf80a04a35dc8f83877fe601b6046bddec67337d59099fa4da3073412ccd76de9f0"], 0x58}}, 0x0) 03:37:15 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="021700020b0000002abd7000fedbdf2501001400070000000400040009feffff0000000000000000010000000000000001000100000000000400020001000000ff0f00000900000001009948fe5f00000000000007000000000000009fb760b2b36a1b0f87602499d1df241afdc548a8c2aea7684b8bc7f334c88295e28e3ec44c46a04a2e121a50c21ea82224bd35f1f46c871979912c1026333affce89485ac0e1264962e607e845065b6b89c3ff8ad3745deb8ccf071fa4f746b94e2a38ec8d13672cff10f4e527292041e6945fefe15070dacb8e54db1119bfa19cb2a76063fac37106bcfe384b77f225b6f21030cf18deb32df07d593d143b913418c6cdae1e17ee35ad205b8894b4a70d8d552579007f0460a38b4f9549b93d5645521cdfa48df2704ca1c6cc014b44c8582b0ce9b731f345c5795d5a3f434702ffbae659742356f2afff37"], 0x58}}, 0x20000090) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0200000000ffffffffffffffe2000000"], 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="35b304bba10167495ad4eea27d9f3816841dd32f3bb9f449d077dbc1f6bcff55bf2f26c8099c838c02787cd31b7e5a07dfd810a8453698596cfcd744f5a520cc89f3921ff94b8f1b2ffdfd7ffcd45ff8b3aeebc741aabb70a3fcf21a799aff785d55111bbfd7", @ANYRESDEC=r2, @ANYBLOB="00042dbd7000fcdbdf25020000000900030073797a31000000000900030073797a31000000001400020069703665727370616e300000000000000500040002000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xac820020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x34, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24040001}, 0x80) (async, rerun: 64) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x2, 0xb, 0x3, 0x9, 0x1f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb1, 0x80000000, {0x1d1, 0x6c, 0x1, 0x8, 0x0, 0x6, 0x0, @in6=@mcast1, @in6=@loopback}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x3, @private1, 0xff}, @in={0x2, 0x4e24, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x34ff}, @sadb_address={0x3, 0x6, 0xff, 0xe0, 0x0, @in={0x2, 0x5e21, @private=0xa010101}}, @sadb_address={0x3, 0x7, 0x19, 0xfb05169bd83da658, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_lifetime={0x4, 0x3, 0x3ff, 0x27fff, 0x1, 0x6}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}]}, 0xf8}}, 0x8801) (rerun: 64) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000380)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x1) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, r3) (async, rerun: 64) socket(0x6, 0x1, 0x0) (rerun: 64) 03:37:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:15 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 26) 03:37:15 executing program 2: socket$key(0xf, 0x3, 0x2) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020f00000b000000ffffff0000000000090008400001000094ffc663d64fb65527c46770ffe706d5f705721e93189be981e7f88b938c7bf80a04a35dc8f83877fe601b6046bddec67337d59099fa4da3073412ccd76de9f0"], 0x58}}, 0x0) [ 2729.345112][T30215] __x64_sys_ioctl+0xd4/0x110 [ 2729.349761][T30215] do_syscall_64+0xcb/0x1c0 [ 2729.354237][T30215] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x16, 0x0, 0xd, 0x2, 0x0, 0xfffffffc, 0xfffffffc}, 0x10}}, 0x0) [ 2729.393163][T30239] FAULT_INJECTION: forcing a failure. [ 2729.393163][T30239] name failslab, interval 1, probability 0, space 0, times 0 [ 2729.407783][T30239] CPU: 1 PID: 30239 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2729.418447][T30239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2729.428480][T30239] Call Trace: [ 2729.431751][T30239] dump_stack+0x1d8/0x241 [ 2729.436055][T30239] ? panic+0x73e/0x73e [ 2729.440100][T30239] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2729.445962][T30239] should_fail+0x709/0x870 [ 2729.450351][T30239] ? setup_fault_attr+0x3d0/0x3d0 [ 2729.455346][T30239] ? blk_mq_realloc_hw_ctxs+0x68a/0x1450 [ 2729.460964][T30239] should_failslab+0x5/0x20 [ 2729.465442][T30239] __kmalloc+0x51/0x2b0 [ 2729.469567][T30239] ? init_timer_key+0x23/0x1c0 [ 2729.474299][T30239] blk_mq_realloc_hw_ctxs+0x68a/0x1450 [ 2729.479731][T30239] blk_mq_init_allocated_queue+0x4d6/0x16c0 [ 2729.485595][T30239] ? blk_alloc_queue_node+0x4e7/0x580 [ 2729.490941][T30239] blk_mq_init_queue+0x48/0xa0 [ 2729.495675][T30239] loop_add+0x256/0x710 [ 2729.499807][T30239] ? radix_tree_lookup+0x17a/0x1d0 [ 2729.504893][T30239] loop_control_ioctl+0x564/0x740 [ 2729.509893][T30239] ? loop_remove+0xa0/0xa0 [ 2729.514278][T30239] ? __lru_cache_add+0x1bf/0x210 [ 2729.519185][T30239] ? memset+0x1f/0x40 [ 2729.523135][T30239] ? fsnotify+0x1332/0x13f0 [ 2729.527605][T30239] ? loop_remove+0xa0/0xa0 [ 2729.531992][T30239] do_vfs_ioctl+0x744/0x1730 [ 2729.536555][T30239] ? selinux_file_ioctl+0x723/0x970 03:37:16 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x16, 0x0, 0xd, 0x2, 0x0, 0xfffffffc, 0xfffffffc}, 0x10}}, 0x0) 03:37:16 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) pipe2$watch_queue(&(0x7f0000000000), 0x80) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x11) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:16 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 27) 03:37:16 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x58}}, 0x20000090) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0200000000ffffffffffffffe2000000"], 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="35b304bba10167495ad4eea27d9f3816841dd32f3bb9f449d077dbc1f6bcff55bf2f26c8099c838c02787cd31b7e5a07dfd810a8453698596cfcd744f5a520cc89f3921ff94b8f1b2ffdfd7ffcd45ff8b3aeebc741aabb70a3fcf21a799aff785d55111bbfd7", @ANYRESDEC=r2, @ANYBLOB="00042dbd7000fcdbdf25020000000900030073797a31000000000900030073797a31000000001400020069703665727370616e300000000000000500040002000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xac820020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x34, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24040001}, 0x80) (async) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x2, 0xb, 0x3, 0x9, 0x1f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb1, 0x80000000, {0x1d1, 0x6c, 0x1, 0x8, 0x0, 0x6, 0x0, @in6=@mcast1, @in6=@loopback}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x3, @private1, 0xff}, @in={0x2, 0x4e24, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x34ff}, @sadb_address={0x3, 0x6, 0xff, 0xe0, 0x0, @in={0x2, 0x5e21, @private=0xa010101}}, @sadb_address={0x3, 0x7, 0x19, 0xfb05169bd83da658, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_lifetime={0x4, 0x3, 0x3ff, 0x27fff, 0x1, 0x6}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}]}, 0xf8}}, 0x8801) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000380)) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x1) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, r3) (async) socket(0x6, 0x1, 0x0) [ 2729.542243][T30239] ? ioctl_preallocate+0x250/0x250 [ 2729.547416][T30239] ? __fget+0x40c/0x4a0 [ 2729.551545][T30239] ? fget_many+0x20/0x20 [ 2729.555757][T30239] ? check_preemption_disabled+0x154/0x330 [ 2729.561530][T30239] ? debug_smp_processor_id+0x20/0x20 [ 2729.566880][T30239] ? security_file_ioctl+0x9d/0xb0 [ 2729.571962][T30239] __x64_sys_ioctl+0xd4/0x110 [ 2729.576630][T30239] do_syscall_64+0xcb/0x1c0 [ 2729.581111][T30239] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x16, 0x0, 0xd, 0x2, 0x0, 0xfffffffc, 0xfffffffc}, 0x10}}, 0x0) 03:37:16 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x11) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 2729.624117][T30256] FAULT_INJECTION: forcing a failure. [ 2729.624117][T30256] name failslab, interval 1, probability 0, space 0, times 0 [ 2729.644610][T30256] CPU: 1 PID: 30256 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2729.654861][T30256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2729.664896][T30256] Call Trace: [ 2729.668166][T30256] dump_stack+0x1d8/0x241 [ 2729.672469][T30256] ? panic+0x73e/0x73e [ 2729.676514][T30256] ? blk_mq_realloc_hw_ctxs+0x68a/0x1450 [ 2729.682122][T30256] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2729.687899][T30256] ? loop_control_ioctl+0x564/0x740 [ 2729.693070][T30256] ? __x64_sys_ioctl+0xd4/0x110 [ 2729.697890][T30256] ? do_syscall_64+0xcb/0x1c0 [ 2729.702536][T30256] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2729.708570][T30256] should_fail+0x709/0x870 [ 2729.712960][T30256] ? setup_fault_attr+0x3d0/0x3d0 [ 2729.718044][T30256] ? sbitmap_init_node+0x14e/0x3a0 [ 2729.723121][T30256] should_failslab+0x5/0x20 [ 2729.727592][T30256] __kmalloc+0x51/0x2b0 [ 2729.731720][T30256] sbitmap_init_node+0x14e/0x3a0 [ 2729.736680][T30256] blk_mq_realloc_hw_ctxs+0x6f0/0x1450 [ 2729.742112][T30256] blk_mq_init_allocated_queue+0x4d6/0x16c0 [ 2729.747977][T30256] ? blk_alloc_queue_node+0x4e7/0x580 [ 2729.753418][T30256] blk_mq_init_queue+0x48/0xa0 [ 2729.758159][T30256] loop_add+0x256/0x710 [ 2729.762283][T30256] ? radix_tree_lookup+0x17a/0x1d0 [ 2729.767369][T30256] loop_control_ioctl+0x564/0x740 [ 2729.772362][T30256] ? loop_remove+0xa0/0xa0 [ 2729.776750][T30256] ? __lru_cache_add+0x1bf/0x210 [ 2729.781742][T30256] ? memset+0x1f/0x40 [ 2729.785716][T30256] ? fsnotify+0x1332/0x13f0 [ 2729.790186][T30256] ? loop_remove+0xa0/0xa0 [ 2729.794570][T30256] do_vfs_ioctl+0x744/0x1730 [ 2729.799129][T30256] ? selinux_file_ioctl+0x723/0x970 [ 2729.804295][T30256] ? ioctl_preallocate+0x250/0x250 [ 2729.809381][T30256] ? __fget+0x40c/0x4a0 [ 2729.813510][T30256] ? fget_many+0x20/0x20 [ 2729.817723][T30256] ? check_preemption_disabled+0x154/0x330 03:37:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x20}]}, 0x20}}, 0x0) 03:37:16 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x20}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x20}]}, 0x20}}, 0x0) (async) 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x600, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:16 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 28) 03:37:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x20}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x20}]}, 0x20}}, 0x0) (async) [ 2729.823496][T30256] ? debug_smp_processor_id+0x20/0x20 [ 2729.828849][T30256] ? security_file_ioctl+0x9d/0xb0 [ 2729.833938][T30256] __x64_sys_ioctl+0xd4/0x110 [ 2729.838593][T30256] do_syscall_64+0xcb/0x1c0 [ 2729.843076][T30256] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:16 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:16 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) pipe2$watch_queue(&(0x7f0000000000), 0x80) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x11) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x11) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02050000c4e154c80400"/22], 0x20}}, 0x0) 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x38000, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2729.901744][T30287] FAULT_INJECTION: forcing a failure. [ 2729.901744][T30287] name failslab, interval 1, probability 0, space 0, times 0 [ 2729.915396][T30287] CPU: 0 PID: 30287 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2729.925629][T30287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2729.935685][T30287] Call Trace: [ 2729.938959][T30287] dump_stack+0x1d8/0x241 [ 2729.943327][T30287] ? panic+0x73e/0x73e [ 2729.947377][T30287] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2729.953155][T30287] should_fail+0x709/0x870 [ 2729.957541][T30287] ? setup_fault_attr+0x3d0/0x3d0 [ 2729.962537][T30287] ? blk_alloc_flush_queue+0x70/0x230 [ 2729.967963][T30287] should_failslab+0x5/0x20 [ 2729.972443][T30287] kmem_cache_alloc_trace+0x28/0x240 [ 2729.977701][T30287] blk_alloc_flush_queue+0x70/0x230 [ 2729.982868][T30287] blk_mq_realloc_hw_ctxs+0x8b5/0x1450 [ 2729.988324][T30287] blk_mq_init_allocated_queue+0x4d6/0x16c0 [ 2729.994192][T30287] ? blk_alloc_queue_node+0x4e7/0x580 [ 2729.999538][T30287] blk_mq_init_queue+0x48/0xa0 [ 2730.004270][T30287] loop_add+0x256/0x710 [ 2730.008399][T30287] ? radix_tree_lookup+0x17a/0x1d0 [ 2730.013485][T30287] loop_control_ioctl+0x564/0x740 [ 2730.018482][T30287] ? loop_remove+0xa0/0xa0 [ 2730.022869][T30287] ? __lru_cache_add+0x1bf/0x210 [ 2730.027788][T30287] ? memset+0x1f/0x40 [ 2730.031756][T30287] ? fsnotify+0x1332/0x13f0 [ 2730.036238][T30287] ? loop_remove+0xa0/0xa0 [ 2730.040637][T30287] do_vfs_ioctl+0x744/0x1730 [ 2730.045209][T30287] ? selinux_file_ioctl+0x723/0x970 03:37:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02050000c4e154c80400"/22], 0x20}}, 0x0) 03:37:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000545d9fb6bd4f2d2c97db6e2356f8c2691504d2fb7f5f9f788ff043e9aca218aa2da1deb17c4220b4e2fbc8390fabd57b2f8c1706c97641766bb3a71a5f9d5a754179d6f1ee6a7b87742bdd2dcf6dcdc60db1b30ce7c69535239047df4906efe4ba80cfec2c432e81cbb9cda136b8429c202366de01e36009e0c12fb698ad156899691d581718a26fa8d21f5bff319231a901e12a834f1b", @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x40) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000026da0000014100000018001700000000000000007564703a73797a3200"/46], 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4084) sendmsg$key(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:16 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 29) 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x800300, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2730.050378][T30287] ? ioctl_preallocate+0x250/0x250 [ 2730.055456][T30287] ? __fget+0x40c/0x4a0 [ 2730.059580][T30287] ? fget_many+0x20/0x20 [ 2730.063877][T30287] ? check_preemption_disabled+0x154/0x330 [ 2730.069654][T30287] ? debug_smp_processor_id+0x20/0x20 [ 2730.074995][T30287] ? security_file_ioctl+0x9d/0xb0 [ 2730.080076][T30287] __x64_sys_ioctl+0xd4/0x110 [ 2730.084729][T30287] do_syscall_64+0xcb/0x1c0 [ 2730.089294][T30287] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02050000c4e154c80400"/22], 0x20}}, 0x0) 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x1000000, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) (async, rerun: 32) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (rerun: 32) 03:37:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000545d9fb6bd4f2d2c97db6e2356f8c2691504d2fb7f5f9f788ff043e9aca218aa2da1deb17c4220b4e2fbc8390fabd57b2f8c1706c97641766bb3a71a5f9d5a754179d6f1ee6a7b87742bdd2dcf6dcdc60db1b30ce7c69535239047df4906efe4ba80cfec2c432e81cbb9cda136b8429c202366de01e36009e0c12fb698ad156899691d581718a26fa8d21f5bff319231a901e12a834f1b", @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x40) r2 = socket$key(0xf, 0x3, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000026da0000014100000018001700000000000000007564703a73797a3200"/46], 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4084) (async) sendmsg$key(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:37:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="022700000400000000000000fedbdf2502000100000000000000008d00000000"], 0x20}}, 0x2000c885) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) remap_file_pages(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x2000000, 0xfffffffffffffffd, 0x20) 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x2000000, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000545d9fb6bd4f2d2c97db6e2356f8c2691504d2fb7f5f9f788ff043e9aca218aa2da1deb17c4220b4e2fbc8390fabd57b2f8c1706c97641766bb3a71a5f9d5a754179d6f1ee6a7b87742bdd2dcf6dcdc60db1b30ce7c69535239047df4906efe4ba80cfec2c432e81cbb9cda136b8429c202366de01e36009e0c12fb698ad156899691d581718a26fa8d21f5bff319231a901e12a834f1b", @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000026da0000014100000018001700000000000000007564703a73797a3200"/46], 0x34}}, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4084) sendmsg$key(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 2730.159032][T30325] FAULT_INJECTION: forcing a failure. [ 2730.159032][T30325] name failslab, interval 1, probability 0, space 0, times 0 [ 2730.181018][T30325] CPU: 0 PID: 30325 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2730.191262][T30325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2730.201297][T30325] Call Trace: [ 2730.204564][T30325] dump_stack+0x1d8/0x241 [ 2730.208951][T30325] ? panic+0x73e/0x73e [ 2730.213005][T30325] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2730.218796][T30325] should_fail+0x709/0x870 [ 2730.223193][T30325] ? setup_fault_attr+0x3d0/0x3d0 [ 2730.228198][T30325] ? blk_alloc_flush_queue+0xd0/0x230 [ 2730.233544][T30325] should_failslab+0x5/0x20 [ 2730.238021][T30325] __kmalloc+0x51/0x2b0 [ 2730.242153][T30325] ? blk_alloc_flush_queue+0x70/0x230 [ 2730.247493][T30325] blk_alloc_flush_queue+0xd0/0x230 [ 2730.252714][T30325] blk_mq_realloc_hw_ctxs+0x8b5/0x1450 [ 2730.258170][T30325] blk_mq_init_allocated_queue+0x4d6/0x16c0 [ 2730.264058][T30325] ? blk_alloc_queue_node+0x4e7/0x580 [ 2730.269407][T30325] blk_mq_init_queue+0x48/0xa0 [ 2730.274143][T30325] loop_add+0x256/0x710 [ 2730.278273][T30325] ? radix_tree_lookup+0x17a/0x1d0 [ 2730.283355][T30325] loop_control_ioctl+0x564/0x740 [ 2730.288353][T30325] ? loop_remove+0xa0/0xa0 [ 2730.292751][T30325] ? __lru_cache_add+0x1bf/0x210 [ 2730.297664][T30325] ? memset+0x1f/0x40 [ 2730.301621][T30325] ? fsnotify+0x1332/0x13f0 [ 2730.306099][T30325] ? loop_remove+0xa0/0xa0 [ 2730.310514][T30325] do_vfs_ioctl+0x744/0x1730 [ 2730.315098][T30325] ? selinux_file_ioctl+0x723/0x970 [ 2730.320277][T30325] ? ioctl_preallocate+0x250/0x250 [ 2730.325363][T30325] ? __fget+0x40c/0x4a0 [ 2730.329493][T30325] ? fget_many+0x20/0x20 [ 2730.333715][T30325] ? check_preemption_disabled+0x154/0x330 [ 2730.339503][T30325] ? debug_smp_processor_id+0x20/0x20 [ 2730.344850][T30325] ? security_file_ioctl+0x9d/0xb0 [ 2730.349946][T30325] __x64_sys_ioctl+0xd4/0x110 [ 2730.354710][T30325] do_syscall_64+0xcb/0x1c0 03:37:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc004064}, 0x8010) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380)={0x0, r1}, 0x10) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000980)=0x3) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="021400000607fbb000000000000000000000000400050002000000f7b62b640087fed65df5d9aa2bcf00"/51], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xbc, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048801}, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r7, 0x801, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8, 0xa, 0x80000001, 0x2}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x400c044) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x8000, 0x3, 0xffffffce, 0x0, 0x9}, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a80)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xc9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000812) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x831d) write$char_usb(r12, &(0x7f00000004c0)="a935c3d02c2b22329151a97f8c6906a40a8571415e66e0d9134f494f7ea777c184582d0b64f5eed41add8a5027f7103e6052715c8c928b9a9d7207a49b396bcbbaff74bce76d3ad5f763", 0x4a) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000080000008100000000000100b49c42936f2b000000000900000000000000ff0f002acc0000000200000000000400007187000005000000070000000101000003000000f7ffffff8100"]) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000340)=0xb9) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r7, 0x300, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r13, 0x4004743b, 0x0) ioctl$PPPIOCSCOMPRESS(r13, 0x4010744d) [ 2730.359190][T30325] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:16 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 30) 03:37:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="022700000400000000000000fedbdf2502000100000000000000008d00000000"], 0x20}}, 0x2000c885) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) remap_file_pages(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x2000000, 0xfffffffffffffffd, 0x20) 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x4000000, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x6000000, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc004064}, 0x8010) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380)={0x0, r1}, 0x10) (async) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000980)=0x3) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="021400000607fbb000000000000000000000000400050002000000f7b62b640087fed65df5d9aa2bcf00"/51], 0x30}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xbc, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048801}, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r7, 0x801, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8, 0xa, 0x80000001, 0x2}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x400c044) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x8000, 0x3, 0xffffffce, 0x0, 0x9}, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a80)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xc9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000812) (async) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x831d) write$char_usb(r12, &(0x7f00000004c0)="a935c3d02c2b22329151a97f8c6906a40a8571415e66e0d9134f494f7ea777c184582d0b64f5eed41add8a5027f7103e6052715c8c928b9a9d7207a49b396bcbbaff74bce76d3ad5f763", 0x4a) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000080000008100000000000100b49c42936f2b000000000900000000000000ff0f002acc0000000200000000000400007187000005000000070000000101000003000000f7ffffff8100"]) (async) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000340)=0xb9) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r7, 0x300, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) (async) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r13, 0x4004743b, 0x0) (async) ioctl$PPPIOCSCOMPRESS(r13, 0x4010744d) 03:37:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="022700000400000000000000fedbdf2502000100000000000000008d00000000"], 0x20}}, 0x2000c885) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) remap_file_pages(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x2000000, 0xfffffffffffffffd, 0x20) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="022700000400000000000000fedbdf2502000100000000000000008d00000000"], 0x20}}, 0x2000c885) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) remap_file_pages(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x2000000, 0xfffffffffffffffd, 0x20) (async) 03:37:16 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000080)=0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) 03:37:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2730.386374][T30344] tipc: Enabling of bearer rejected, failed to enable media 03:37:16 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000080)=0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) 03:37:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x40000000, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2730.426908][T30357] FAULT_INJECTION: forcing a failure. [ 2730.426908][T30357] name failslab, interval 1, probability 0, space 0, times 0 [ 2730.445025][T30357] CPU: 1 PID: 30357 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2730.455274][T30357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2730.465482][T30357] Call Trace: [ 2730.468757][T30357] dump_stack+0x1d8/0x241 [ 2730.473059][T30357] ? panic+0x73e/0x73e [ 2730.477097][T30357] ? find_next_and_bit+0x17b/0x1a0 [ 2730.482183][T30357] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2730.487967][T30357] ? blk_mq_map_swqueue+0x16f6/0x1850 [ 2730.493319][T30357] should_fail+0x709/0x870 [ 2730.497794][T30357] ? setup_fault_attr+0x3d0/0x3d0 [ 2730.502789][T30357] ? blk_mq_init_allocated_queue+0x1416/0x16c0 [ 2730.508974][T30357] ? __alloc_disk_node+0x72/0x380 [ 2730.513975][T30357] should_failslab+0x5/0x20 [ 2730.518450][T30357] kmem_cache_alloc_trace+0x28/0x240 [ 2730.523714][T30357] __alloc_disk_node+0x72/0x380 [ 2730.528546][T30357] loop_add+0x323/0x710 [ 2730.532688][T30357] loop_control_ioctl+0x564/0x740 [ 2730.537729][T30357] ? loop_remove+0xa0/0xa0 [ 2730.542118][T30357] ? __lru_cache_add+0x1bf/0x210 [ 2730.547026][T30357] ? memset+0x1f/0x40 [ 2730.550982][T30357] ? fsnotify+0x1332/0x13f0 [ 2730.555457][T30357] ? loop_remove+0xa0/0xa0 [ 2730.559857][T30357] do_vfs_ioctl+0x744/0x1730 [ 2730.564428][T30357] ? selinux_file_ioctl+0x723/0x970 [ 2730.569717][T30357] ? ioctl_preallocate+0x250/0x250 03:37:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc004064}, 0x8010) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380)={0x0, r1}, 0x10) (async) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000980)=0x3) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="021400000607fbb000000000000000000000000400050002000000f7b62b640087fed65df5d9aa2bcf00"/51], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xbc, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048801}, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r7, 0x801, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8, 0xa, 0x80000001, 0x2}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x400c044) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x8000, 0x3, 0xffffffce, 0x0, 0x9}, 0x14) (rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a80)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xc9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000812) (async) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x831d) write$char_usb(r12, &(0x7f00000004c0)="a935c3d02c2b22329151a97f8c6906a40a8571415e66e0d9134f494f7ea777c184582d0b64f5eed41add8a5027f7103e6052715c8c928b9a9d7207a49b396bcbbaff74bce76d3ad5f763", 0x4a) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000080000008100000000000100b49c42936f2b000000000900000000000000ff0f002acc0000000200000000000400007187000005000000070000000101000003000000f7ffffff8100"]) (async) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000340)=0xb9) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r7, 0x300, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) (async) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r13, 0x4004743b, 0x0) ioctl$PPPIOCSCOMPRESS(r13, 0x4010744d) 03:37:17 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 31) 03:37:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x7fffefe0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4040801) 03:37:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2730.574803][T30357] ? __fget+0x40c/0x4a0 [ 2730.579016][T30357] ? fget_many+0x20/0x20 [ 2730.583233][T30357] ? check_preemption_disabled+0x154/0x330 [ 2730.589019][T30357] ? debug_smp_processor_id+0x20/0x20 [ 2730.594362][T30357] ? security_file_ioctl+0x9d/0xb0 [ 2730.599450][T30357] __x64_sys_ioctl+0xd4/0x110 [ 2730.604108][T30357] do_syscall_64+0xcb/0x1c0 [ 2730.608588][T30357] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0xe0efff7f, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:17 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000080)=0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000080)=0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) (async) 03:37:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0xffffff7f, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async, rerun: 64) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4040801) (rerun: 64) [ 2730.657074][T30391] FAULT_INJECTION: forcing a failure. [ 2730.657074][T30391] name failslab, interval 1, probability 0, space 0, times 0 [ 2730.676218][T30379] tipc: Enabling of bearer rejected, failed to enable media [ 2730.686417][T30391] CPU: 1 PID: 30391 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2730.696653][T30391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2730.706690][T30391] Call Trace: [ 2730.709963][T30391] dump_stack+0x1d8/0x241 [ 2730.714272][T30391] ? panic+0x73e/0x73e [ 2730.718317][T30391] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2730.724096][T30391] ? pcpu_chunk_relocate+0xe5/0x3a0 [ 2730.729265][T30391] should_fail+0x709/0x870 [ 2730.733656][T30391] ? setup_fault_attr+0x3d0/0x3d0 [ 2730.738737][T30391] ? find_next_bit+0xc6/0x110 [ 2730.743384][T30391] ? cpumask_next+0xc/0x20 [ 2730.747771][T30391] ? disk_expand_part_tbl+0x195/0x3b0 [ 2730.753214][T30391] should_failslab+0x5/0x20 [ 2730.757695][T30391] __kmalloc+0x51/0x2b0 [ 2730.761868][T30391] disk_expand_part_tbl+0x195/0x3b0 [ 2730.767070][T30391] __alloc_disk_node+0x10b/0x380 [ 2730.771979][T30391] loop_add+0x323/0x710 [ 2730.776285][T30391] loop_control_ioctl+0x564/0x740 [ 2730.781277][T30391] ? loop_remove+0xa0/0xa0 [ 2730.785686][T30391] ? __lru_cache_add+0x1bf/0x210 [ 2730.790595][T30391] ? memset+0x1f/0x40 [ 2730.794613][T30391] ? fsnotify+0x1332/0x13f0 [ 2730.799095][T30391] ? loop_remove+0xa0/0xa0 [ 2730.803494][T30391] do_vfs_ioctl+0x744/0x1730 03:37:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4040801) 03:37:17 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 32) [ 2730.808067][T30391] ? selinux_file_ioctl+0x723/0x970 [ 2730.813245][T30391] ? ioctl_preallocate+0x250/0x250 [ 2730.818333][T30391] ? __fget+0x40c/0x4a0 [ 2730.822465][T30391] ? fget_many+0x20/0x20 [ 2730.826702][T30391] ? check_preemption_disabled+0x154/0x330 [ 2730.832487][T30391] ? debug_smp_processor_id+0x20/0x20 [ 2730.837840][T30391] ? security_file_ioctl+0x9d/0xb0 [ 2730.842921][T30391] __x64_sys_ioctl+0xd4/0x110 [ 2730.847568][T30391] do_syscall_64+0xcb/0x1c0 [ 2730.852129][T30391] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="021400000700170000a000000a000000000000000000000100"/44], 0x38}}, 0x0) 03:37:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x24560c785d33ec7b, 0x2}, 0x10}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0xf6) 03:37:17 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:37:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x24560c785d33ec7b, 0x2}, 0x10}}, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0xf6) [ 2730.883508][T30413] FAULT_INJECTION: forcing a failure. [ 2730.883508][T30413] name failslab, interval 1, probability 0, space 0, times 0 [ 2730.897946][T30413] CPU: 1 PID: 30413 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2730.908180][T30413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2730.918215][T30413] Call Trace: [ 2730.921486][T30413] dump_stack+0x1d8/0x241 [ 2730.925797][T30413] ? panic+0x73e/0x73e [ 2730.929837][T30413] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2730.935620][T30413] ? pcpu_alloc_area+0x696/0x790 [ 2730.940533][T30413] should_fail+0x709/0x870 [ 2730.944927][T30413] ? setup_fault_attr+0x3d0/0x3d0 [ 2730.949927][T30413] ? rand_initialize_disk+0x4b/0xa3 [ 2730.955115][T30413] should_failslab+0x5/0x20 [ 2730.959602][T30413] kmem_cache_alloc_trace+0x28/0x240 [ 2730.964948][T30413] rand_initialize_disk+0x4b/0xa3 [ 2730.969950][T30413] __alloc_disk_node+0x2cd/0x380 [ 2730.974858][T30413] loop_add+0x323/0x710 [ 2730.979006][T30413] loop_control_ioctl+0x564/0x740 [ 2730.983999][T30413] ? loop_remove+0xa0/0xa0 [ 2730.988409][T30413] ? __lru_cache_add+0x1bf/0x210 [ 2730.993322][T30413] ? memset+0x1f/0x40 [ 2730.997274][T30413] ? fsnotify+0x1332/0x13f0 [ 2731.001855][T30413] ? loop_remove+0xa0/0xa0 [ 2731.006258][T30413] do_vfs_ioctl+0x744/0x1730 [ 2731.010827][T30413] ? selinux_file_ioctl+0x723/0x970 [ 2731.016003][T30413] ? ioctl_preallocate+0x250/0x250 [ 2731.021097][T30413] ? __fget+0x40c/0x4a0 [ 2731.025227][T30413] ? fget_many+0x20/0x20 03:37:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2731.029453][T30413] ? check_preemption_disabled+0x154/0x330 [ 2731.035230][T30413] ? debug_smp_processor_id+0x20/0x20 [ 2731.040666][T30413] ? security_file_ioctl+0x9d/0xb0 [ 2731.045753][T30413] __x64_sys_ioctl+0xd4/0x110 [ 2731.050405][T30413] do_syscall_64+0xcb/0x1c0 [ 2731.054880][T30413] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x24560c785d33ec7b, 0x2}, 0x10}}, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0xf6) 03:37:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="021400000700170000a000000a000000000000000000000100"/44], 0x38}}, 0x0) 03:37:17 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 33) 03:37:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2731.094393][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2731.110511][T30433] FAULT_INJECTION: forcing a failure. [ 2731.110511][T30433] name failslab, interval 1, probability 0, space 0, times 0 [ 2731.123146][T30433] CPU: 0 PID: 30433 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2731.133360][T30433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2731.143389][T30433] Call Trace: [ 2731.146660][T30433] dump_stack+0x1d8/0x241 [ 2731.150973][T30433] ? panic+0x73e/0x73e [ 2731.155012][T30433] ? stack_trace_save+0x200/0x200 [ 2731.160013][T30433] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2731.165795][T30433] ? arch_stack_walk+0x114/0x140 [ 2731.170713][T30433] should_fail+0x709/0x870 [ 2731.175100][T30433] ? setup_fault_attr+0x3d0/0x3d0 [ 2731.180093][T30433] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 2731.185870][T30433] ? init_wait_entry+0xd0/0xd0 [ 2731.190626][T30433] ? blk_mq_init_tags+0x74/0x290 [ 2731.195542][T30433] should_failslab+0x5/0x20 [ 2731.200017][T30433] kmem_cache_alloc_trace+0x28/0x240 [ 2731.205274][T30433] blk_mq_init_tags+0x74/0x290 [ 2731.210007][T30433] ? blk_mq_hw_queue_to_node+0xeb/0x100 [ 2731.215522][T30433] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2731.220517][T30433] blk_mq_init_sched+0x1f2/0xaf0 [ 2731.225430][T30433] elevator_init_mq+0x2cd/0x3f0 [ 2731.230252][T30433] __device_add_disk+0xf1/0x1200 [ 2731.235165][T30433] ? sprintf+0xd6/0x120 [ 2731.239301][T30433] ? device_add_disk+0x30/0x30 [ 2731.244036][T30433] ? vsprintf+0x30/0x30 [ 2731.248164][T30433] ? device_initialize+0x1c7/0x3d0 [ 2731.253248][T30433] ? __alloc_disk_node+0x326/0x380 [ 2731.258327][T30433] loop_add+0x554/0x710 [ 2731.262456][T30433] loop_control_ioctl+0x564/0x740 [ 2731.267458][T30433] ? loop_remove+0xa0/0xa0 [ 2731.271864][T30433] ? __lru_cache_add+0x1bf/0x210 [ 2731.276774][T30433] ? memset+0x1f/0x40 [ 2731.280729][T30433] ? fsnotify+0x1332/0x13f0 [ 2731.285200][T30433] ? loop_remove+0xa0/0xa0 [ 2731.289676][T30433] do_vfs_ioctl+0x744/0x1730 [ 2731.294237][T30433] ? selinux_file_ioctl+0x723/0x970 [ 2731.299406][T30433] ? ioctl_preallocate+0x250/0x250 [ 2731.304503][T30433] ? __fget+0x40c/0x4a0 [ 2731.308652][T30433] ? fget_many+0x20/0x20 [ 2731.312977][T30433] ? check_preemption_disabled+0x154/0x330 [ 2731.318768][T30433] ? debug_smp_processor_id+0x20/0x20 [ 2731.324125][T30433] ? security_file_ioctl+0x9d/0xb0 [ 2731.329212][T30433] __x64_sys_ioctl+0xd4/0x110 [ 2731.333878][T30433] do_syscall_64+0xcb/0x1c0 [ 2731.338355][T30433] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="021400000700170000a000000a000000000000000000000100"/44], 0x38}}, 0x0) 03:37:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:17 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:37:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x10201, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 03:37:17 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 34) 03:37:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x600, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x0) (async) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x10201, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) [ 2731.344428][T30433] "mq-deadline" elevator initialization failed, falling back to "none" 03:37:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x0) (async) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x10201, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 03:37:17 executing program 2: socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x16, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x0, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e24}]}, 0x18}}, 0x1) openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) [ 2731.391147][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2731.415042][T30458] FAULT_INJECTION: forcing a failure. [ 2731.415042][T30458] name failslab, interval 1, probability 0, space 0, times 0 [ 2731.428102][T30458] CPU: 0 PID: 30458 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2731.438336][T30458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2731.448371][T30458] Call Trace: [ 2731.451640][T30458] dump_stack+0x1d8/0x241 [ 2731.455940][T30458] ? panic+0x73e/0x73e [ 2731.459987][T30458] ? __kasan_kmalloc+0x1a5/0x1e0 [ 2731.464905][T30458] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2731.470680][T30458] ? blk_mq_init_tags+0x74/0x290 [ 2731.475590][T30458] ? blk_mq_alloc_rq_map+0x93/0x1a0 [ 2731.480755][T30458] ? blk_mq_init_sched+0x1f2/0xaf0 [ 2731.485836][T30458] ? __device_add_disk+0xf1/0x1200 [ 2731.490918][T30458] ? loop_add+0x554/0x710 [ 2731.495221][T30458] ? loop_control_ioctl+0x564/0x740 [ 2731.500391][T30458] ? do_vfs_ioctl+0x744/0x1730 [ 2731.505136][T30458] should_fail+0x709/0x870 [ 2731.509526][T30458] ? setup_fault_attr+0x3d0/0x3d0 [ 2731.514569][T30458] ? sbitmap_queue_init_node+0x15e/0xf70 [ 2731.520172][T30458] should_failslab+0x5/0x20 [ 2731.524646][T30458] __kmalloc+0x51/0x2b0 [ 2731.528773][T30458] sbitmap_queue_init_node+0x15e/0xf70 [ 2731.534202][T30458] ? blk_mq_init_tags+0x74/0x290 [ 2731.539131][T30458] blk_mq_init_tags+0xef/0x290 [ 2731.543866][T30458] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2731.548861][T30458] blk_mq_init_sched+0x1f2/0xaf0 [ 2731.553770][T30458] elevator_init_mq+0x2cd/0x3f0 [ 2731.558590][T30458] __device_add_disk+0xf1/0x1200 [ 2731.563494][T30458] ? sprintf+0xd6/0x120 [ 2731.567638][T30458] ? device_add_disk+0x30/0x30 [ 2731.572374][T30458] ? vsprintf+0x30/0x30 [ 2731.576500][T30458] ? device_initialize+0x1c7/0x3d0 [ 2731.581580][T30458] ? __alloc_disk_node+0x326/0x380 [ 2731.586660][T30458] loop_add+0x554/0x710 [ 2731.590788][T30458] loop_control_ioctl+0x564/0x740 [ 2731.595783][T30458] ? loop_remove+0xa0/0xa0 [ 2731.600171][T30458] ? __lru_cache_add+0x1bf/0x210 [ 2731.605078][T30458] ? memset+0x1f/0x40 [ 2731.609037][T30458] ? fsnotify+0x1332/0x13f0 [ 2731.613524][T30458] ? loop_remove+0xa0/0xa0 [ 2731.617912][T30458] do_vfs_ioctl+0x744/0x1730 [ 2731.622473][T30458] ? selinux_file_ioctl+0x723/0x970 [ 2731.627641][T30458] ? ioctl_preallocate+0x250/0x250 [ 2731.632725][T30458] ? __fget+0x40c/0x4a0 [ 2731.636853][T30458] ? fget_many+0x20/0x20 03:37:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x38000, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706ffe3f145417418d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:37:18 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x480c4) 03:37:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800300, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:18 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 35) 03:37:18 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x480c4) [ 2731.641064][T30458] ? check_preemption_disabled+0x154/0x330 [ 2731.646843][T30458] ? debug_smp_processor_id+0x20/0x20 [ 2731.652185][T30458] ? security_file_ioctl+0x9d/0xb0 [ 2731.657306][T30458] __x64_sys_ioctl+0xd4/0x110 [ 2731.661956][T30458] do_syscall_64+0xcb/0x1c0 [ 2731.666434][T30458] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2731.677621][T30458] "mq-deadline" elevator initialization failed, falling back to "none" 03:37:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:18 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x480c4) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x480c4) (async) 03:37:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000000, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:18 executing program 2: socket$key(0xf, 0x3, 0x2) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x16, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x0, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e24}]}, 0x18}}, 0x1) (async) openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) [ 2731.711369][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2731.731711][T30481] FAULT_INJECTION: forcing a failure. [ 2731.731711][T30481] name failslab, interval 1, probability 0, space 0, times 0 [ 2731.749539][T30481] CPU: 0 PID: 30481 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2731.759789][T30481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2731.769821][T30481] Call Trace: [ 2731.773093][T30481] dump_stack+0x1d8/0x241 [ 2731.777403][T30481] ? panic+0x73e/0x73e [ 2731.781460][T30481] ? __kasan_kmalloc+0x1a5/0x1e0 [ 2731.786406][T30481] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2731.792192][T30481] ? blk_mq_init_tags+0x74/0x290 [ 2731.797189][T30481] ? blk_mq_alloc_rq_map+0x93/0x1a0 [ 2731.802365][T30481] ? blk_mq_init_sched+0x1f2/0xaf0 [ 2731.807451][T30481] ? __device_add_disk+0xf1/0x1200 [ 2731.812567][T30481] ? loop_add+0x554/0x710 [ 2731.816883][T30481] ? loop_control_ioctl+0x564/0x740 [ 2731.822051][T30481] ? do_vfs_ioctl+0x744/0x1730 [ 2731.826790][T30481] should_fail+0x709/0x870 [ 2731.831193][T30481] ? setup_fault_attr+0x3d0/0x3d0 [ 2731.836196][T30481] ? sbitmap_queue_init_node+0x15e/0xf70 [ 2731.841798][T30481] should_failslab+0x5/0x20 [ 2731.846312][T30481] __kmalloc+0x51/0x2b0 [ 2731.850557][T30481] sbitmap_queue_init_node+0x15e/0xf70 [ 2731.855989][T30481] ? blk_mq_init_tags+0x74/0x290 [ 2731.860895][T30481] blk_mq_init_tags+0xef/0x290 [ 2731.865631][T30481] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2731.870627][T30481] blk_mq_init_sched+0x1f2/0xaf0 [ 2731.875536][T30481] elevator_init_mq+0x2cd/0x3f0 [ 2731.880373][T30481] __device_add_disk+0xf1/0x1200 [ 2731.885287][T30481] ? sprintf+0xd6/0x120 [ 2731.889414][T30481] ? device_add_disk+0x30/0x30 [ 2731.894144][T30481] ? vsprintf+0x30/0x30 [ 2731.898270][T30481] ? device_initialize+0x1c7/0x3d0 [ 2731.903353][T30481] ? __alloc_disk_node+0x326/0x380 [ 2731.908435][T30481] loop_add+0x554/0x710 [ 2731.912563][T30481] loop_control_ioctl+0x564/0x740 [ 2731.917571][T30481] ? loop_remove+0xa0/0xa0 [ 2731.921961][T30481] ? __lru_cache_add+0x1bf/0x210 [ 2731.926866][T30481] ? memset+0x1f/0x40 [ 2731.930818][T30481] ? fsnotify+0x1332/0x13f0 [ 2731.935292][T30481] ? loop_remove+0xa0/0xa0 [ 2731.939675][T30481] do_vfs_ioctl+0x744/0x1730 [ 2731.944237][T30481] ? selinux_file_ioctl+0x723/0x970 [ 2731.949404][T30481] ? ioctl_preallocate+0x250/0x250 [ 2731.954507][T30481] ? __fget+0x40c/0x4a0 03:37:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:18 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:18 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:18 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 36) 03:37:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6000000, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:18 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40000000, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) [ 2731.958632][T30481] ? fget_many+0x20/0x20 [ 2731.962844][T30481] ? check_preemption_disabled+0x154/0x330 [ 2731.968621][T30481] ? debug_smp_processor_id+0x20/0x20 [ 2731.974050][T30481] ? security_file_ioctl+0x9d/0xb0 [ 2731.979131][T30481] __x64_sys_ioctl+0xd4/0x110 [ 2731.983778][T30481] do_syscall_64+0xcb/0x1c0 [ 2731.988261][T30481] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2731.997709][T30481] "mq-deadline" elevator initialization failed, falling back to "none" 03:37:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffefe0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:18 executing program 0: pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8820) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="0205000004000000000000000000000000000000000000000000000000000000f24afd377de1f61bda267e231868a0d2e37203ee9ba36bd8120c09fd2d14112c91a70b9ca46d1d543369186a9714ea62d17904c3555c82e715dd714c7a6f6e1a5960257537467b0273104c35cccb3abd68639ea2e94d271b848dc093f5877d929895535d3ced1346a9ffe0"], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) 03:37:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2732.053611][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2732.063372][T30510] FAULT_INJECTION: forcing a failure. [ 2732.063372][T30510] name failslab, interval 1, probability 0, space 0, times 0 [ 2732.082059][T30510] CPU: 1 PID: 30510 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2732.092308][T30510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2732.102428][T30510] Call Trace: [ 2732.105710][T30510] dump_stack+0x1d8/0x241 [ 2732.110017][T30510] ? panic+0x73e/0x73e [ 2732.114069][T30510] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2732.119853][T30510] should_fail+0x709/0x870 [ 2732.124261][T30510] ? setup_fault_attr+0x3d0/0x3d0 [ 2732.129257][T30510] ? pcpu_alloc+0xb62/0x1060 [ 2732.133819][T30510] ? sbitmap_queue_init_node+0x69c/0xf70 [ 2732.139430][T30510] should_failslab+0x5/0x20 [ 2732.143911][T30510] kmem_cache_alloc_trace+0x28/0x240 [ 2732.149296][T30510] sbitmap_queue_init_node+0x69c/0xf70 [ 2732.154757][T30510] blk_mq_init_tags+0xef/0x290 [ 2732.159521][T30510] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2732.164548][T30510] blk_mq_init_sched+0x1f2/0xaf0 [ 2732.169557][T30510] elevator_init_mq+0x2cd/0x3f0 [ 2732.174391][T30510] __device_add_disk+0xf1/0x1200 [ 2732.179302][T30510] ? sprintf+0xd6/0x120 [ 2732.183541][T30510] ? device_add_disk+0x30/0x30 [ 2732.188284][T30510] ? vsprintf+0x30/0x30 [ 2732.192417][T30510] ? device_initialize+0x1c7/0x3d0 [ 2732.197507][T30510] ? __alloc_disk_node+0x326/0x380 [ 2732.202595][T30510] loop_add+0x554/0x710 [ 2732.206724][T30510] loop_control_ioctl+0x564/0x740 [ 2732.211720][T30510] ? loop_remove+0xa0/0xa0 [ 2732.216110][T30510] ? __lru_cache_add+0x1bf/0x210 [ 2732.221016][T30510] ? memset+0x1f/0x40 [ 2732.224969][T30510] ? fsnotify+0x1332/0x13f0 [ 2732.229448][T30510] ? loop_remove+0xa0/0xa0 [ 2732.233838][T30510] do_vfs_ioctl+0x744/0x1730 [ 2732.238401][T30510] ? selinux_file_ioctl+0x723/0x970 [ 2732.243570][T30510] ? ioctl_preallocate+0x250/0x250 [ 2732.248654][T30510] ? __fget+0x40c/0x4a0 [ 2732.252778][T30510] ? fget_many+0x20/0x20 [ 2732.256992][T30510] ? check_preemption_disabled+0x154/0x330 [ 2732.262769][T30510] ? debug_smp_processor_id+0x20/0x20 [ 2732.268110][T30510] ? security_file_ioctl+0x9d/0xb0 [ 2732.273199][T30510] __x64_sys_ioctl+0xd4/0x110 [ 2732.277852][T30510] do_syscall_64+0xcb/0x1c0 [ 2732.282333][T30510] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2732.288689][T30510] "mq-deadline" elevator initialization failed, falling back to "none" 03:37:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe0efff7f, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:18 executing program 0: pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8820) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="0205000004000000000000000000000000000000000000000000000000000000f24afd377de1f61bda267e231868a0d2e37203ee9ba36bd8120c09fd2d14112c91a70b9ca46d1d543369186a9714ea62d17904c3555c82e715dd714c7a6f6e1a5960257537467b0273104c35cccb3abd68639ea2e94d271b848dc093f5877d929895535d3ced1346a9ffe0"], 0x20}}, 0x0) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (rerun: 64) 03:37:18 executing program 2: socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x16, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x0, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e24}]}, 0x18}}, 0x1) (async) openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 03:37:18 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 37) 03:37:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff7f, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2732.330266][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2732.365732][T30530] FAULT_INJECTION: forcing a failure. [ 2732.365732][T30530] name failslab, interval 1, probability 0, space 0, times 0 [ 2732.379502][T30530] CPU: 0 PID: 30530 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2732.389727][T30530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2732.399762][T30530] Call Trace: [ 2732.403036][T30530] dump_stack+0x1d8/0x241 [ 2732.407341][T30530] ? panic+0x73e/0x73e [ 2732.411386][T30530] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2732.417162][T30530] should_fail+0x709/0x870 [ 2732.421562][T30530] ? sbitmap_queue_init_node+0x69c/0xf70 [ 2732.427165][T30530] ? setup_fault_attr+0x3d0/0x3d0 [ 2732.432160][T30530] ? sbitmap_queue_init_node+0xb3d/0xf70 [ 2732.437765][T30530] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2732.442937][T30530] should_failslab+0x5/0x20 [ 2732.447411][T30530] __kmalloc+0x51/0x2b0 [ 2732.451625][T30530] blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2732.456626][T30530] blk_mq_init_sched+0x1f2/0xaf0 [ 2732.461544][T30530] elevator_init_mq+0x2cd/0x3f0 [ 2732.466365][T30530] __device_add_disk+0xf1/0x1200 [ 2732.471279][T30530] ? sprintf+0xd6/0x120 [ 2732.475411][T30530] ? device_add_disk+0x30/0x30 [ 2732.480148][T30530] ? vsprintf+0x30/0x30 [ 2732.484274][T30530] ? device_initialize+0x1c7/0x3d0 [ 2732.489357][T30530] ? __alloc_disk_node+0x326/0x380 [ 2732.494447][T30530] loop_add+0x554/0x710 [ 2732.498580][T30530] loop_control_ioctl+0x564/0x740 [ 2732.503578][T30530] ? loop_remove+0xa0/0xa0 [ 2732.507969][T30530] ? __lru_cache_add+0x1bf/0x210 [ 2732.512882][T30530] ? memset+0x1f/0x40 [ 2732.516834][T30530] ? fsnotify+0x1332/0x13f0 [ 2732.521310][T30530] ? loop_remove+0xa0/0xa0 [ 2732.525697][T30530] do_vfs_ioctl+0x744/0x1730 [ 2732.530258][T30530] ? selinux_file_ioctl+0x723/0x970 [ 2732.535430][T30530] ? ioctl_preallocate+0x250/0x250 [ 2732.540509][T30530] ? __fget+0x40c/0x4a0 [ 2732.544637][T30530] ? fget_many+0x20/0x20 [ 2732.548849][T30530] ? check_preemption_disabled+0x154/0x330 [ 2732.554623][T30530] ? debug_smp_processor_id+0x20/0x20 [ 2732.559967][T30530] ? security_file_ioctl+0x9d/0xb0 [ 2732.565050][T30530] __x64_sys_ioctl+0xd4/0x110 [ 2732.569702][T30530] do_syscall_64+0xcb/0x1c0 [ 2732.574180][T30530] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x600}]}, 0x20}, 0x6}, 0x0) 03:37:19 executing program 2: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{r1, r2/1000+10000}, {0x0, 0xea60}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140008edffffff00000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000000"], 0x38}}, 0x0) 03:37:19 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 38) 03:37:19 executing program 0: pipe(&(0x7f0000000000)) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8820) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="0205000004000000000000000000000000000000000000000000000000000000f24afd377de1f61bda267e231868a0d2e37203ee9ba36bd8120c09fd2d14112c91a70b9ca46d1d543369186a9714ea62d17904c3555c82e715dd714c7a6f6e1a5960257537467b0273104c35cccb3abd68639ea2e94d271b848dc093f5877d929895535d3ced1346a9ffe0"], 0x20}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x2}]}, 0x20}, 0x6}, 0x0) 03:37:19 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:19 executing program 2: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{r1, r2/1000+10000}, {0x0, 0xea60}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140008edffffff00000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000000"], 0x38}}, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) utimensat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{r1, r2/1000+10000}, {0x0, 0xea60}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140008edffffff00000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000000"], 0x38}}, 0x0) (async) 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x5}]}, 0x20}, 0x6}, 0x0) [ 2732.580273][T30530] "mq-deadline" elevator initialization failed, falling back to "none" [ 2732.620150][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x6}]}, 0x20}, 0x6}, 0x0) [ 2732.650745][T30550] FAULT_INJECTION: forcing a failure. [ 2732.650745][T30550] name failslab, interval 1, probability 0, space 0, times 0 [ 2732.668012][T30550] CPU: 1 PID: 30550 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2732.678243][T30550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2732.688281][T30550] Call Trace: [ 2732.691565][T30550] dump_stack+0x1d8/0x241 [ 2732.695965][T30550] ? panic+0x73e/0x73e [ 2732.700004][T30550] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2732.705778][T30550] should_fail+0x709/0x870 [ 2732.710176][T30550] ? setup_fault_attr+0x3d0/0x3d0 [ 2732.715176][T30550] ? blk_mq_alloc_rq_map+0xe9/0x1a0 [ 2732.720342][T30550] should_failslab+0x5/0x20 [ 2732.724816][T30550] __kmalloc+0x51/0x2b0 [ 2732.728948][T30550] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2732.734126][T30550] blk_mq_alloc_rq_map+0xe9/0x1a0 [ 2732.739167][T30550] blk_mq_init_sched+0x1f2/0xaf0 [ 2732.744090][T30550] elevator_init_mq+0x2cd/0x3f0 [ 2732.748928][T30550] __device_add_disk+0xf1/0x1200 [ 2732.753850][T30550] ? sprintf+0xd6/0x120 [ 2732.757993][T30550] ? device_add_disk+0x30/0x30 [ 2732.762758][T30550] ? vsprintf+0x30/0x30 [ 2732.766899][T30550] ? device_initialize+0x1c7/0x3d0 [ 2732.771985][T30550] ? __alloc_disk_node+0x326/0x380 [ 2732.777073][T30550] loop_add+0x554/0x710 [ 2732.781202][T30550] loop_control_ioctl+0x564/0x740 [ 2732.786236][T30550] ? loop_remove+0xa0/0xa0 [ 2732.790635][T30550] ? __lru_cache_add+0x1bf/0x210 [ 2732.795546][T30550] ? memset+0x1f/0x40 [ 2732.799502][T30550] ? fsnotify+0x1332/0x13f0 [ 2732.803975][T30550] ? loop_remove+0xa0/0xa0 [ 2732.808362][T30550] do_vfs_ioctl+0x744/0x1730 [ 2732.812928][T30550] ? selinux_file_ioctl+0x723/0x970 [ 2732.818096][T30550] ? ioctl_preallocate+0x250/0x250 [ 2732.823179][T30550] ? __fget+0x40c/0x4a0 [ 2732.827305][T30550] ? fget_many+0x20/0x20 [ 2732.831524][T30550] ? check_preemption_disabled+0x154/0x330 [ 2732.837308][T30550] ? debug_smp_processor_id+0x20/0x20 [ 2732.842652][T30550] ? security_file_ioctl+0x9d/0xb0 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x7}]}, 0x20}, 0x6}, 0x0) 03:37:19 executing program 2: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{r1, r2/1000+10000}, {0x0, 0xea60}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140008edffffff00000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000000"], 0x38}}, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) utimensat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{r1, r2/1000+10000}, {0x0, 0xea60}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02140008edffffff00000000000000000500170000a000000a00000000000000000000000000000000000000000000010000000000000000"], 0x38}}, 0x0) (async) 03:37:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x6, 0x4, 0x0, 0x0, 0x200000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1}]}, 0x20}}, 0x40) 03:37:19 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 39) 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x8}]}, 0x20}, 0x6}, 0x0) 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x9}]}, 0x20}, 0x6}, 0x0) 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}, 0x6}, 0x0) [ 2732.847744][T30550] __x64_sys_ioctl+0xd4/0x110 [ 2732.852393][T30550] do_syscall_64+0xcb/0x1c0 [ 2732.856878][T30550] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2732.865391][T30550] "mq-deadline" elevator initialization failed, falling back to "none" 03:37:19 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x18}]}, 0x20}, 0x6}, 0x0) 03:37:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2732.920973][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2732.933424][T30578] FAULT_INJECTION: forcing a failure. [ 2732.933424][T30578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2732.947159][T30578] CPU: 1 PID: 30578 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2732.957387][T30578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2732.967429][T30578] Call Trace: [ 2732.970697][T30578] dump_stack+0x1d8/0x241 [ 2732.974996][T30578] ? panic+0x73e/0x73e [ 2732.979035][T30578] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2732.984810][T30578] ? sbitmap_queue_init_node+0x69c/0xf70 [ 2732.990409][T30578] should_fail+0x709/0x870 [ 2732.994799][T30578] ? elevator_init_mq+0x2cd/0x3f0 [ 2732.999792][T30578] ? setup_fault_attr+0x3d0/0x3d0 [ 2733.004784][T30578] ? elevator_init_mq+0x2cd/0x3f0 [ 2733.009777][T30578] ? __device_add_disk+0xf1/0x1200 [ 2733.014858][T30578] ? loop_add+0x554/0x710 [ 2733.019155][T30578] ? loop_control_ioctl+0x564/0x740 [ 2733.024323][T30578] ? do_vfs_ioctl+0x744/0x1730 [ 2733.029119][T30578] ? do_syscall_64+0xcb/0x1c0 [ 2733.033766][T30578] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2733.039802][T30578] __alloc_pages_nodemask+0x1b6/0x860 [ 2733.045144][T30578] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2733.050657][T30578] ? find_next_bit+0xe5/0x110 [ 2733.055302][T30578] ? blk_mq_hw_queue_to_node+0xeb/0x100 [ 2733.060816][T30578] blk_mq_alloc_rqs+0x252/0x6d0 [ 2733.065638][T30578] blk_mq_init_sched+0x256/0xaf0 [ 2733.070548][T30578] elevator_init_mq+0x2cd/0x3f0 [ 2733.075368][T30578] __device_add_disk+0xf1/0x1200 [ 2733.080276][T30578] ? sprintf+0xd6/0x120 [ 2733.084411][T30578] ? device_add_disk+0x30/0x30 [ 2733.089142][T30578] ? vsprintf+0x30/0x30 [ 2733.093267][T30578] ? device_initialize+0x1c7/0x3d0 [ 2733.098349][T30578] ? __alloc_disk_node+0x326/0x380 [ 2733.103431][T30578] loop_add+0x554/0x710 [ 2733.107557][T30578] loop_control_ioctl+0x564/0x740 [ 2733.112550][T30578] ? loop_remove+0xa0/0xa0 [ 2733.116938][T30578] ? __lru_cache_add+0x1bf/0x210 [ 2733.121844][T30578] ? memset+0x1f/0x40 [ 2733.125795][T30578] ? fsnotify+0x1332/0x13f0 [ 2733.130272][T30578] ? loop_remove+0xa0/0xa0 [ 2733.134658][T30578] do_vfs_ioctl+0x744/0x1730 [ 2733.139218][T30578] ? selinux_file_ioctl+0x723/0x970 [ 2733.144406][T30578] ? ioctl_preallocate+0x250/0x250 [ 2733.149500][T30578] ? __fget+0x40c/0x4a0 [ 2733.153624][T30578] ? fget_many+0x20/0x20 [ 2733.157835][T30578] ? check_preemption_disabled+0x154/0x330 [ 2733.163610][T30578] ? debug_smp_processor_id+0x20/0x20 03:37:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x5, 0x7c59e1611531dd18, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_ident={0x2, 0xa, 0xffe1, 0x0, 0x5}]}, 0x48}}, 0x0) 03:37:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x6, 0x4, 0x0, 0x0, 0x200000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1}]}, 0x20}}, 0x40) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x6, 0x4, 0x0, 0x0, 0x200000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1}]}, 0x20}}, 0x40) (async) 03:37:19 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 40) 03:37:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x6, 0x4, 0x0, 0x0, 0x200000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1}]}, 0x20}}, 0x40) 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1b}]}, 0x20}, 0x6}, 0x0) 03:37:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x5, 0x7c59e1611531dd18, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_ident={0x2, 0xa, 0xffe1, 0x0, 0x5}]}, 0x48}}, 0x0) 03:37:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x13, 0x2, 0x7, 0x5, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x32}, @sadb_ident={0x2, 0xb}]}, 0x28}}, 0x40010) prctl$PR_SVE_GET_VL(0x33, 0x17807) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x808c}, 0x20000004) 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x300}]}, 0x20}, 0x6}, 0x0) [ 2733.169083][T30578] ? security_file_ioctl+0x9d/0xb0 [ 2733.174170][T30578] __x64_sys_ioctl+0xd4/0x110 [ 2733.178823][T30578] do_syscall_64+0xcb/0x1c0 [ 2733.183302][T30578] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x13, 0x2, 0x7, 0x5, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x32}, @sadb_ident={0x2, 0xb}]}, 0x28}}, 0x40010) (async) prctl$PR_SVE_GET_VL(0x33, 0x17807) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x808c}, 0x20000004) 03:37:19 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919b"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x13, 0x2, 0x7, 0x5, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x32}, @sadb_ident={0x2, 0xb}]}, 0x28}}, 0x40010) (async) prctl$PR_SVE_GET_VL(0x33, 0x17807) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x808c}, 0x20000004) (rerun: 32) 03:37:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x5, 0x7c59e1611531dd18, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_ident={0x2, 0xa, 0xffe1, 0x0, 0x5}]}, 0x48}}, 0x0) [ 2733.260712][T30611] FAULT_INJECTION: forcing a failure. [ 2733.260712][T30611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2733.276514][T30611] CPU: 1 PID: 30611 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2733.286840][T30611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2733.296960][T30611] Call Trace: [ 2733.300232][T30611] dump_stack+0x1d8/0x241 [ 2733.304535][T30611] ? panic+0x73e/0x73e [ 2733.308574][T30611] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2733.314348][T30611] ? preempt_count_add+0x8d/0x180 [ 2733.319342][T30611] should_fail+0x709/0x870 [ 2733.323731][T30611] ? setup_fault_attr+0x3d0/0x3d0 [ 2733.328730][T30611] __alloc_pages_nodemask+0x1b6/0x860 [ 2733.334075][T30611] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2733.339590][T30611] ? find_next_bit+0xe5/0x110 [ 2733.344235][T30611] ? memset+0x1f/0x40 [ 2733.348186][T30611] blk_mq_alloc_rqs+0x252/0x6d0 [ 2733.353007][T30611] blk_mq_init_sched+0x256/0xaf0 [ 2733.357917][T30611] elevator_init_mq+0x2cd/0x3f0 [ 2733.362743][T30611] __device_add_disk+0xf1/0x1200 [ 2733.367651][T30611] ? sprintf+0xd6/0x120 [ 2733.371776][T30611] ? device_add_disk+0x30/0x30 [ 2733.376509][T30611] ? vsprintf+0x30/0x30 [ 2733.380639][T30611] ? device_initialize+0x1c7/0x3d0 [ 2733.385731][T30611] ? __alloc_disk_node+0x326/0x380 [ 2733.390818][T30611] loop_add+0x554/0x710 [ 2733.394944][T30611] loop_control_ioctl+0x564/0x740 [ 2733.399937][T30611] ? loop_remove+0xa0/0xa0 [ 2733.404346][T30611] ? __lru_cache_add+0x1bf/0x210 [ 2733.409251][T30611] ? memset+0x1f/0x40 [ 2733.413202][T30611] ? fsnotify+0x1332/0x13f0 [ 2733.417674][T30611] ? loop_remove+0xa0/0xa0 [ 2733.422058][T30611] do_vfs_ioctl+0x744/0x1730 [ 2733.426626][T30611] ? selinux_file_ioctl+0x723/0x970 [ 2733.431830][T30611] ? ioctl_preallocate+0x250/0x250 [ 2733.436916][T30611] ? __fget+0x40c/0x4a0 [ 2733.441043][T30611] ? fget_many+0x20/0x20 [ 2733.445254][T30611] ? check_preemption_disabled+0x154/0x330 [ 2733.451058][T30611] ? debug_smp_processor_id+0x20/0x20 [ 2733.456414][T30611] ? security_file_ioctl+0x9d/0xb0 03:37:20 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 41) 03:37:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x2}]}, 0x20}, 0x6}, 0x0) 03:37:20 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2733.461500][T30611] __x64_sys_ioctl+0xd4/0x110 [ 2733.466155][T30611] do_syscall_64+0xcb/0x1c0 [ 2733.470630][T30611] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2733.489844][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 03:37:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x8, 0x1f, 0x3, 0x3, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}]}, 0x18}}, 0x50011) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x38}}, 0x0) 03:37:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919b"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4}]}, 0x20}, 0x6}, 0x0) [ 2733.509703][T30623] FAULT_INJECTION: forcing a failure. [ 2733.509703][T30623] name failslab, interval 1, probability 0, space 0, times 0 [ 2733.522489][T30623] CPU: 0 PID: 30623 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2733.532712][T30623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2733.542748][T30623] Call Trace: [ 2733.546021][T30623] dump_stack+0x1d8/0x241 [ 2733.550327][T30623] ? panic+0x73e/0x73e [ 2733.554367][T30623] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2733.560141][T30623] ? __alloc_pages_nodemask+0x372/0x860 [ 2733.565668][T30623] should_fail+0x709/0x870 [ 2733.570157][T30623] ? setup_fault_attr+0x3d0/0x3d0 [ 2733.575155][T30623] ? find_next_bit+0xe5/0x110 [ 2733.579809][T30623] ? memset+0x1f/0x40 [ 2733.583765][T30623] ? lo_complete_rq+0x2a0/0x2a0 [ 2733.588672][T30623] ? loop_init_request+0x31/0xa0 [ 2733.593580][T30623] ? elevator_alloc+0x4b/0xc0 [ 2733.598235][T30623] should_failslab+0x5/0x20 [ 2733.602716][T30623] kmem_cache_alloc_trace+0x28/0x240 [ 2733.607990][T30623] elevator_alloc+0x4b/0xc0 [ 2733.612565][T30623] dd_init_queue+0x1f/0x330 [ 2733.617042][T30623] blk_mq_init_sched+0x45c/0xaf0 [ 2733.621950][T30623] elevator_init_mq+0x2cd/0x3f0 [ 2733.626771][T30623] __device_add_disk+0xf1/0x1200 [ 2733.631679][T30623] ? sprintf+0xd6/0x120 [ 2733.635808][T30623] ? device_add_disk+0x30/0x30 [ 2733.640542][T30623] ? vsprintf+0x30/0x30 [ 2733.644677][T30623] ? device_initialize+0x1c7/0x3d0 [ 2733.649766][T30623] ? __alloc_disk_node+0x326/0x380 [ 2733.654849][T30623] loop_add+0x554/0x710 [ 2733.659072][T30623] loop_control_ioctl+0x564/0x740 [ 2733.664075][T30623] ? loop_remove+0xa0/0xa0 [ 2733.668463][T30623] ? __lru_cache_add+0x1bf/0x210 [ 2733.673367][T30623] ? memset+0x1f/0x40 [ 2733.677317][T30623] ? fsnotify+0x1332/0x13f0 [ 2733.681787][T30623] ? loop_remove+0xa0/0xa0 [ 2733.686173][T30623] do_vfs_ioctl+0x744/0x1730 [ 2733.690735][T30623] ? selinux_file_ioctl+0x723/0x970 [ 2733.695900][T30623] ? ioctl_preallocate+0x250/0x250 [ 2733.700984][T30623] ? __fget+0x40c/0x4a0 [ 2733.705200][T30623] ? fget_many+0x20/0x20 03:37:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x6}]}, 0x20}, 0x6}, 0x0) 03:37:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x600}]}, 0x20}, 0x6}, 0x0) 03:37:20 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 42) 03:37:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x8, 0x1f, 0x3, 0x3, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}]}, 0x18}}, 0x50011) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x38}}, 0x0) (rerun: 64) 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4000}]}, 0x20}, 0x6}, 0x0) 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x38000}]}, 0x20}, 0x6}, 0x0) [ 2733.709419][T30623] ? check_preemption_disabled+0x154/0x330 [ 2733.715191][T30623] ? debug_smp_processor_id+0x20/0x20 [ 2733.720536][T30623] ? security_file_ioctl+0x9d/0xb0 [ 2733.725626][T30623] __x64_sys_ioctl+0xd4/0x110 [ 2733.730288][T30623] do_syscall_64+0xcb/0x1c0 [ 2733.734762][T30623] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2733.744523][T30623] "mq-deadline" elevator initialization failed, falling back to "none" 03:37:20 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x800300}]}, 0x20}, 0x6}, 0x0) [ 2733.810187][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2733.820304][T30647] FAULT_INJECTION: forcing a failure. [ 2733.820304][T30647] name failslab, interval 1, probability 0, space 0, times 0 [ 2733.832941][T30647] CPU: 1 PID: 30647 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2733.843158][T30647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2733.853197][T30647] Call Trace: [ 2733.856486][T30647] dump_stack+0x1d8/0x241 [ 2733.860796][T30647] ? panic+0x73e/0x73e [ 2733.864845][T30647] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2733.870625][T30647] should_fail+0x709/0x870 [ 2733.875012][T30647] ? setup_fault_attr+0x3d0/0x3d0 [ 2733.880005][T30647] ? dd_init_queue+0x69/0x330 [ 2733.884743][T30647] should_failslab+0x5/0x20 [ 2733.889217][T30647] kmem_cache_alloc_trace+0x28/0x240 [ 2733.894517][T30647] dd_init_queue+0x69/0x330 [ 2733.899001][T30647] blk_mq_init_sched+0x45c/0xaf0 [ 2733.903937][T30647] elevator_init_mq+0x2cd/0x3f0 [ 2733.908763][T30647] __device_add_disk+0xf1/0x1200 [ 2733.913672][T30647] ? sprintf+0xd6/0x120 [ 2733.917798][T30647] ? device_add_disk+0x30/0x30 [ 2733.922533][T30647] ? vsprintf+0x30/0x30 [ 2733.926659][T30647] ? device_initialize+0x1c7/0x3d0 [ 2733.931747][T30647] ? __alloc_disk_node+0x326/0x380 [ 2733.936830][T30647] loop_add+0x554/0x710 [ 2733.940954][T30647] loop_control_ioctl+0x564/0x740 [ 2733.945949][T30647] ? loop_remove+0xa0/0xa0 [ 2733.950338][T30647] ? __lru_cache_add+0x1bf/0x210 [ 2733.955245][T30647] ? memset+0x1f/0x40 [ 2733.959285][T30647] ? fsnotify+0x1332/0x13f0 [ 2733.963758][T30647] ? loop_remove+0xa0/0xa0 [ 2733.968148][T30647] do_vfs_ioctl+0x744/0x1730 [ 2733.972710][T30647] ? selinux_file_ioctl+0x723/0x970 [ 2733.977880][T30647] ? ioctl_preallocate+0x250/0x250 [ 2733.982963][T30647] ? __fget+0x40c/0x4a0 [ 2733.987091][T30647] ? fget_many+0x20/0x20 [ 2733.991308][T30647] ? check_preemption_disabled+0x154/0x330 [ 2733.997087][T30647] ? debug_smp_processor_id+0x20/0x20 [ 2734.002454][T30647] ? security_file_ioctl+0x9d/0xb0 [ 2734.007542][T30647] __x64_sys_ioctl+0xd4/0x110 [ 2734.012194][T30647] do_syscall_64+0xcb/0x1c0 [ 2734.016671][T30647] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2734.023373][T30647] "mq-deadline" elevator initialization failed, falling back to "none" 03:37:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919b"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x1000000}]}, 0x20}, 0x6}, 0x0) 03:37:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6, 0x3e, 0x18}]}, 0x38}}, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000380)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7, 0xd75, 0x8, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x7}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x1, 0x1, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0xfcc, 0x77, &(0x7f0000000140)=""/119, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, r1, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) 03:37:20 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 43) 03:37:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x8, 0x1f, 0x3, 0x3, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}]}, 0x18}}, 0x50011) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x38}}, 0x0) 03:37:20 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x2000000}]}, 0x20}, 0x6}, 0x0) 03:37:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6, 0x3e, 0x18}]}, 0x38}}, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000380)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7, 0xd75, 0x8, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x7}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x1, 0x1, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0xfcc, 0x77, &(0x7f0000000140)=""/119, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, r1, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6, 0x3e, 0x18}]}, 0x38}}, 0x0) (async) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000380)=0x5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7, 0xd75, 0x8, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x7}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x1, 0x1, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0xfcc, 0x77, &(0x7f0000000140)=""/119, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, r1, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) (async) [ 2734.082381][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2734.106950][T30661] FAULT_INJECTION: forcing a failure. [ 2734.106950][T30661] name failslab, interval 1, probability 0, space 0, times 0 [ 2734.123669][T30661] CPU: 1 PID: 30661 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2734.133910][T30661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2734.143955][T30661] Call Trace: [ 2734.147227][T30661] dump_stack+0x1d8/0x241 [ 2734.151536][T30661] ? panic+0x73e/0x73e [ 2734.155589][T30661] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2734.161465][T30661] should_fail+0x709/0x870 [ 2734.165855][T30661] ? setup_fault_attr+0x3d0/0x3d0 [ 2734.170854][T30661] ? dd_init_queue+0x69/0x330 [ 2734.175503][T30661] should_failslab+0x5/0x20 [ 2734.180065][T30661] kmem_cache_alloc_trace+0x28/0x240 [ 2734.185323][T30661] dd_init_queue+0x69/0x330 [ 2734.189800][T30661] blk_mq_init_sched+0x45c/0xaf0 [ 2734.194715][T30661] elevator_init_mq+0x2cd/0x3f0 [ 2734.199539][T30661] __device_add_disk+0xf1/0x1200 [ 2734.204458][T30661] ? sprintf+0xd6/0x120 [ 2734.208593][T30661] ? device_add_disk+0x30/0x30 [ 2734.213334][T30661] ? vsprintf+0x30/0x30 [ 2734.217474][T30661] ? device_initialize+0x1c7/0x3d0 [ 2734.222577][T30661] ? __alloc_disk_node+0x326/0x380 [ 2734.227667][T30661] loop_add+0x554/0x710 [ 2734.231797][T30661] loop_control_ioctl+0x564/0x740 [ 2734.236795][T30661] ? loop_remove+0xa0/0xa0 [ 2734.241190][T30661] ? __lru_cache_add+0x1bf/0x210 [ 2734.246106][T30661] ? memset+0x1f/0x40 [ 2734.250071][T30661] ? fsnotify+0x1332/0x13f0 [ 2734.254544][T30661] ? loop_remove+0xa0/0xa0 [ 2734.258983][T30661] do_vfs_ioctl+0x744/0x1730 [ 2734.263555][T30661] ? selinux_file_ioctl+0x723/0x970 [ 2734.268739][T30661] ? ioctl_preallocate+0x250/0x250 [ 2734.273919][T30661] ? __fget+0x40c/0x4a0 [ 2734.278052][T30661] ? fget_many+0x20/0x20 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4000000}]}, 0x20}, 0x6}, 0x0) 03:37:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6, 0x3e, 0x18}]}, 0x38}}, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000380)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7, 0xd75, 0x8, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x7}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x1, 0x1, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0xfcc, 0x77, &(0x7f0000000140)=""/119, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, r1, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6, 0x3e, 0x18}]}, 0x38}}, 0x0) (async) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000380)=0x5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7, 0xd75, 0x8, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x7}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x1, 0x1, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0xfcc, 0x77, &(0x7f0000000140)=""/119, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, r1, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) (async) 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x6000000}]}, 0x20}, 0x6}, 0x0) 03:37:20 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 44) [ 2734.282274][T30661] ? check_preemption_disabled+0x154/0x330 [ 2734.288147][T30661] ? debug_smp_processor_id+0x20/0x20 [ 2734.293496][T30661] ? security_file_ioctl+0x9d/0xb0 [ 2734.298582][T30661] __x64_sys_ioctl+0xd4/0x110 [ 2734.303233][T30661] do_syscall_64+0xcb/0x1c0 [ 2734.307717][T30661] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2734.316367][T30661] "mq-deadline" elevator initialization failed, falling back to "none" 03:37:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x40000000}]}, 0x20}, 0x6}, 0x0) 03:37:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, r2, 0x582, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) 03:37:20 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2734.391085][T30692] FAULT_INJECTION: forcing a failure. [ 2734.391085][T30692] name failslab, interval 1, probability 0, space 0, times 0 [ 2734.392687][T30693] tipc: Enabling of bearer rejected, failed to enable media [ 2734.404683][T30692] CPU: 1 PID: 30692 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2734.422343][T30692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2734.432406][T30692] Call Trace: [ 2734.435677][T30692] dump_stack+0x1d8/0x241 [ 2734.439982][T30692] ? panic+0x73e/0x73e [ 2734.444029][T30692] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2734.449808][T30692] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2734.455847][T30692] should_fail+0x709/0x870 [ 2734.460238][T30692] ? setup_fault_attr+0x3d0/0x3d0 [ 2734.465235][T30692] ? device_create_vargs+0x7d/0x210 [ 2734.470412][T30692] should_failslab+0x5/0x20 [ 2734.474893][T30692] kmem_cache_alloc_trace+0x28/0x240 [ 2734.480151][T30692] device_create_vargs+0x7d/0x210 [ 2734.485152][T30692] device_create+0xea/0x130 [ 2734.489633][T30692] ? device_create_vargs+0x210/0x210 [ 2734.494903][T30692] bdi_register_va+0x89/0x5e0 [ 2734.499558][T30692] bdi_register+0xd1/0x120 [ 2734.503950][T30692] ? __device_add_disk+0x539/0x1200 [ 2734.509122][T30692] ? bdi_register_va+0x5e0/0x5e0 [ 2734.514051][T30692] ? percpu_ref_resurrect+0x113/0x190 [ 2734.519498][T30692] bdi_register_owner+0x56/0xf0 [ 2734.524329][T30692] __device_add_disk+0x5b8/0x1200 [ 2734.529330][T30692] ? device_add_disk+0x30/0x30 [ 2734.534067][T30692] ? vsprintf+0x30/0x30 [ 2734.538196][T30692] ? device_initialize+0x1c7/0x3d0 [ 2734.543280][T30692] ? __alloc_disk_node+0x326/0x380 [ 2734.548367][T30692] loop_add+0x554/0x710 [ 2734.552497][T30692] loop_control_ioctl+0x564/0x740 [ 2734.557505][T30692] ? loop_remove+0xa0/0xa0 [ 2734.561915][T30692] ? __lru_cache_add+0x1bf/0x210 [ 2734.566832][T30692] ? memset+0x1f/0x40 [ 2734.570819][T30692] ? fsnotify+0x1332/0x13f0 [ 2734.575294][T30692] ? loop_remove+0xa0/0xa0 [ 2734.580121][T30692] do_vfs_ioctl+0x744/0x1730 [ 2734.584717][T30692] ? selinux_file_ioctl+0x723/0x970 03:37:21 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x7fffefe0}]}, 0x20}, 0x6}, 0x0) [ 2734.590239][T30692] ? ioctl_preallocate+0x250/0x250 [ 2734.595333][T30692] ? __fget+0x40c/0x4a0 [ 2734.599552][T30692] ? fget_many+0x20/0x20 [ 2734.603765][T30692] ? check_preemption_disabled+0x154/0x330 [ 2734.609674][T30692] ? debug_smp_processor_id+0x20/0x20 [ 2734.615059][T30692] ? security_file_ioctl+0x9d/0xb0 [ 2734.620154][T30692] __x64_sys_ioctl+0xd4/0x110 [ 2734.624814][T30692] do_syscall_64+0xcb/0x1c0 [ 2734.629293][T30692] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, r2, 0x582, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) [ 2734.641600][T30692] ------------[ cut here ]------------ [ 2734.647081][T30692] WARNING: CPU: 0 PID: 30692 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2734.656165][T30692] Modules linked in: [ 2734.660045][T30692] CPU: 0 PID: 30692 Comm: syz-executor.4 Not tainted 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2734.670251][T30692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2734.680289][T30692] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2734.686072][T30692] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2734.705664][T30692] RSP: 0018:ffff8881e185fa00 EFLAGS: 00010246 [ 2734.711715][T30692] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2734.719659][T30692] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2734.727604][T30692] RBP: ffff8881e185fb40 R08: ffffffff821f8e93 R09: fffffbfff0bac467 [ 2734.735553][T30692] R10: fffffbfff0bac467 R11: 1ffffffff0bac466 R12: ffff8881f34f1000 [ 2734.743510][T30692] R13: dffffc0000000000 R14: ffff8881f34f1070 R15: 1ffff1103e69e29d [ 2734.751467][T30692] FS: 00007fc9d5138700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2734.760411][T30692] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2734.767095][T30692] CR2: 0000001b2f621000 CR3: 00000001e9932000 CR4: 00000000003406f0 [ 2734.775043][T30692] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2734.782989][T30692] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2734.790939][T30692] Call Trace: [ 2734.794223][T30692] ? device_add_disk+0x30/0x30 [ 2734.798961][T30692] ? vsprintf+0x30/0x30 [ 2734.803090][T30692] ? device_initialize+0x1c7/0x3d0 [ 2734.808175][T30692] ? __alloc_disk_node+0x326/0x380 [ 2734.813258][T30692] loop_add+0x554/0x710 [ 2734.817388][T30692] loop_control_ioctl+0x564/0x740 [ 2734.822420][T30692] ? loop_remove+0xa0/0xa0 [ 2734.826827][T30692] ? __lru_cache_add+0x1bf/0x210 [ 2734.831736][T30692] ? memset+0x1f/0x40 [ 2734.835693][T30692] ? fsnotify+0x1332/0x13f0 [ 2734.840166][T30692] ? loop_remove+0xa0/0xa0 [ 2734.844561][T30692] do_vfs_ioctl+0x744/0x1730 [ 2734.849132][T30692] ? selinux_file_ioctl+0x723/0x970 [ 2734.854303][T30692] ? ioctl_preallocate+0x250/0x250 [ 2734.859385][T30692] ? __fget+0x40c/0x4a0 [ 2734.863516][T30692] ? fget_many+0x20/0x20 [ 2734.867734][T30692] ? check_preemption_disabled+0x154/0x330 [ 2734.873535][T30692] ? debug_smp_processor_id+0x20/0x20 [ 2734.878887][T30692] ? security_file_ioctl+0x9d/0xb0 [ 2734.884063][T30692] __x64_sys_ioctl+0xd4/0x110 [ 2734.888800][T30692] do_syscall_64+0xcb/0x1c0 03:37:21 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000100)=0x2) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40880}, 0x8084) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x20}}, 0x0) 03:37:21 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0xe0efff7f}]}, 0x20}, 0x6}, 0x0) 03:37:21 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 45) 03:37:21 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000100)=0x2) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40880}, 0x8084) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x20}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000100)=0x2) (async) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40880}, 0x8084) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r0}, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x20}}, 0x0) (async) 03:37:21 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0xffffff7f}]}, 0x20}, 0x6}, 0x0) 03:37:21 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2734.893288][T30692] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2734.899150][T30692] ---[ end trace b61d2c152d24eb18 ]--- 03:37:21 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2734.972652][T30712] FAULT_INJECTION: forcing a failure. [ 2734.972652][T30712] name failslab, interval 1, probability 0, space 0, times 0 [ 2734.985375][T30712] CPU: 1 PID: 30712 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2734.996985][T30712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2735.007026][T30712] Call Trace: [ 2735.010298][T30712] dump_stack+0x1d8/0x241 [ 2735.014603][T30712] ? panic+0x73e/0x73e [ 2735.018650][T30712] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2735.024441][T30712] should_fail+0x709/0x870 [ 2735.028834][T30712] ? setup_fault_attr+0x3d0/0x3d0 [ 2735.033832][T30712] ? device_add+0xb6/0xbc0 [ 2735.038219][T30712] should_failslab+0x5/0x20 [ 2735.042694][T30712] kmem_cache_alloc_trace+0x28/0x240 [ 2735.048037][T30712] device_add+0xb6/0xbc0 [ 2735.052356][T30712] device_create_vargs+0x1b8/0x210 [ 2735.057441][T30712] device_create+0xea/0x130 [ 2735.061917][T30712] ? device_create_vargs+0x210/0x210 [ 2735.067177][T30712] bdi_register_va+0x89/0x5e0 [ 2735.071831][T30712] bdi_register+0xd1/0x120 [ 2735.076236][T30712] ? __device_add_disk+0x539/0x1200 [ 2735.081419][T30712] ? bdi_register_va+0x5e0/0x5e0 [ 2735.086325][T30712] ? percpu_ref_resurrect+0x113/0x190 [ 2735.091671][T30712] bdi_register_owner+0x56/0xf0 [ 2735.096498][T30712] __device_add_disk+0x5b8/0x1200 [ 2735.101495][T30712] ? device_add_disk+0x30/0x30 [ 2735.106229][T30712] ? vsprintf+0x30/0x30 [ 2735.110367][T30712] ? device_initialize+0x1c7/0x3d0 [ 2735.115456][T30712] ? __alloc_disk_node+0x326/0x380 [ 2735.120537][T30712] loop_add+0x554/0x710 [ 2735.124668][T30712] loop_control_ioctl+0x564/0x740 [ 2735.129663][T30712] ? loop_remove+0xa0/0xa0 [ 2735.134049][T30712] ? __lru_cache_add+0x1bf/0x210 [ 2735.138961][T30712] ? memset+0x1f/0x40 [ 2735.142917][T30712] ? fsnotify+0x1332/0x13f0 [ 2735.147395][T30712] ? loop_remove+0xa0/0xa0 [ 2735.151804][T30712] do_vfs_ioctl+0x744/0x1730 [ 2735.156395][T30712] ? selinux_file_ioctl+0x723/0x970 [ 2735.161573][T30712] ? ioctl_preallocate+0x250/0x250 [ 2735.166662][T30712] ? __fget+0x40c/0x4a0 03:37:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, r2, 0x582, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, r2, 0x582, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) (async) 03:37:21 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:21 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async, rerun: 32) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000100)=0x2) (async, rerun: 32) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40880}, 0x8084) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x20}}, 0x0) [ 2735.170792][T30712] ? fget_many+0x20/0x20 [ 2735.175151][T30712] ? check_preemption_disabled+0x154/0x330 [ 2735.180939][T30712] ? debug_smp_processor_id+0x20/0x20 [ 2735.186288][T30712] ? security_file_ioctl+0x9d/0xb0 [ 2735.191377][T30712] __x64_sys_ioctl+0xd4/0x110 [ 2735.196138][T30712] do_syscall_64+0xcb/0x1c0 [ 2735.200625][T30712] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2735.208259][T30712] ------------[ cut here ]------------ [ 2735.213733][T30712] WARNING: CPU: 1 PID: 30712 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2735.222821][T30712] Modules linked in: [ 2735.226712][T30712] CPU: 1 PID: 30712 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2735.238514][T30712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2735.248558][T30712] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2735.254340][T30712] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2735.273924][T30712] RSP: 0018:ffff8881e756fa00 EFLAGS: 00010246 [ 2735.279975][T30712] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2735.287931][T30712] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2735.295879][T30712] RBP: ffff8881e756fb40 R08: ffffffff821f8e93 R09: 0000000000000003 [ 2735.303832][T30712] R10: ffffed103ceade55 R11: 1ffff1103ceade54 R12: ffff8881e353b000 [ 2735.311783][T30712] R13: dffffc0000000000 R14: ffff8881e353b070 R15: 1ffff1103c6a769d [ 2735.319729][T30712] FS: 00007fc9d5138700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2735.328632][T30712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2735.335187][T30712] CR2: 00007ffc38d43d68 CR3: 00000001de781000 CR4: 00000000003406e0 [ 2735.343144][T30712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2735.351099][T30712] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2735.359046][T30712] Call Trace: [ 2735.362324][T30712] ? device_add_disk+0x30/0x30 [ 2735.367064][T30712] ? vsprintf+0x30/0x30 [ 2735.371192][T30712] ? device_initialize+0x1c7/0x3d0 [ 2735.376333][T30712] ? __alloc_disk_node+0x326/0x380 [ 2735.381425][T30712] loop_add+0x554/0x710 [ 2735.385563][T30712] loop_control_ioctl+0x564/0x740 [ 2735.390655][T30712] ? loop_remove+0xa0/0xa0 [ 2735.395063][T30712] ? __lru_cache_add+0x1bf/0x210 [ 2735.399982][T30712] ? memset+0x1f/0x40 [ 2735.403944][T30712] ? fsnotify+0x1332/0x13f0 [ 2735.408421][T30712] ? loop_remove+0xa0/0xa0 [ 2735.412825][T30712] do_vfs_ioctl+0x744/0x1730 [ 2735.417394][T30712] ? selinux_file_ioctl+0x723/0x970 03:37:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x2}]}, 0x20}, 0x6}, 0x0) 03:37:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:22 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 46) 03:37:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x4}]}, 0x20}, 0x6}, 0x0) 03:37:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x6}]}, 0x20}, 0x6}, 0x0) [ 2735.422569][T30712] ? ioctl_preallocate+0x250/0x250 [ 2735.427658][T30712] ? __fget+0x40c/0x4a0 [ 2735.431784][T30712] ? fget_many+0x20/0x20 [ 2735.435999][T30712] ? check_preemption_disabled+0x154/0x330 [ 2735.441775][T30712] ? debug_smp_processor_id+0x20/0x20 [ 2735.447118][T30712] ? security_file_ioctl+0x9d/0xb0 [ 2735.452206][T30712] __x64_sys_ioctl+0xd4/0x110 [ 2735.456854][T30712] do_syscall_64+0xcb/0x1c0 [ 2735.461330][T30712] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2735.467368][T30712] ---[ end trace b61d2c152d24eb19 ]--- 03:37:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2735.528607][T30752] FAULT_INJECTION: forcing a failure. [ 2735.528607][T30752] name failslab, interval 1, probability 0, space 0, times 0 [ 2735.533350][T30754] tipc: Enabling of bearer rejected, failed to enable media [ 2735.543933][T30752] CPU: 1 PID: 30752 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2735.561116][T30752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2735.571146][T30752] Call Trace: [ 2735.574415][T30752] dump_stack+0x1d8/0x241 [ 2735.578718][T30752] ? panic+0x73e/0x73e [ 2735.582759][T30752] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2735.588541][T30752] should_fail+0x709/0x870 [ 2735.592929][T30752] ? setup_fault_attr+0x3d0/0x3d0 [ 2735.597929][T30752] ? device_add+0xb6/0xbc0 [ 2735.602355][T30752] should_failslab+0x5/0x20 [ 2735.606848][T30752] kmem_cache_alloc_trace+0x28/0x240 [ 2735.612118][T30752] device_add+0xb6/0xbc0 [ 2735.616346][T30752] device_create_vargs+0x1b8/0x210 [ 2735.621442][T30752] device_create+0xea/0x130 [ 2735.625929][T30752] ? device_create_vargs+0x210/0x210 [ 2735.631200][T30752] bdi_register_va+0x89/0x5e0 [ 2735.635862][T30752] bdi_register+0xd1/0x120 [ 2735.640372][T30752] ? __device_add_disk+0x539/0x1200 [ 2735.645560][T30752] ? bdi_register_va+0x5e0/0x5e0 [ 2735.650474][T30752] ? percpu_ref_resurrect+0x113/0x190 [ 2735.655942][T30752] bdi_register_owner+0x56/0xf0 [ 2735.660868][T30752] __device_add_disk+0x5b8/0x1200 [ 2735.665870][T30752] ? device_add_disk+0x30/0x30 [ 2735.670651][T30752] ? vsprintf+0x30/0x30 [ 2735.674782][T30752] ? device_initialize+0x1c7/0x3d0 [ 2735.679868][T30752] ? __alloc_disk_node+0x326/0x380 [ 2735.684963][T30752] loop_add+0x554/0x710 [ 2735.689098][T30752] loop_control_ioctl+0x564/0x740 [ 2735.694095][T30752] ? loop_remove+0xa0/0xa0 [ 2735.698483][T30752] ? __lru_cache_add+0x1bf/0x210 [ 2735.703389][T30752] ? memset+0x1f/0x40 [ 2735.707345][T30752] ? fsnotify+0x1332/0x13f0 [ 2735.711830][T30752] ? loop_remove+0xa0/0xa0 [ 2735.716223][T30752] do_vfs_ioctl+0x744/0x1730 [ 2735.720795][T30752] ? selinux_file_ioctl+0x723/0x970 [ 2735.725970][T30752] ? ioctl_preallocate+0x250/0x250 [ 2735.731054][T30752] ? __fget+0x40c/0x4a0 [ 2735.735190][T30752] ? fget_many+0x20/0x20 [ 2735.739418][T30752] ? check_preemption_disabled+0x154/0x330 [ 2735.745207][T30752] ? debug_smp_processor_id+0x20/0x20 [ 2735.750570][T30752] ? security_file_ioctl+0x9d/0xb0 [ 2735.755667][T30752] __x64_sys_ioctl+0xd4/0x110 [ 2735.760427][T30752] do_syscall_64+0xcb/0x1c0 [ 2735.764918][T30752] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2735.772345][T30752] ------------[ cut here ]------------ [ 2735.777930][T30752] WARNING: CPU: 1 PID: 30752 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2735.787437][T30752] Modules linked in: [ 2735.791353][T30752] CPU: 1 PID: 30752 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2735.802999][T30752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2735.813054][T30752] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2735.818849][T30752] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2735.838433][T30752] RSP: 0018:ffff8881f00d7a00 EFLAGS: 00010246 [ 2735.844479][T30752] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2735.852429][T30752] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2735.860381][T30752] RBP: ffff8881f00d7b40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2735.868333][T30752] R10: ffffffff84800000 R11: 1ffff1103e01ae00 R12: ffff8881e2468000 [ 2735.876427][T30752] R13: dffffc0000000000 R14: ffff8881e2468070 R15: 1ffff1103c48d09d [ 2735.884377][T30752] FS: 00007fc9d5138700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2735.893275][T30752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2735.899827][T30752] CR2: 00007f7d6dc94988 CR3: 00000001e82be000 CR4: 00000000003406e0 [ 2735.907790][T30752] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2735.915787][T30752] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2735.923733][T30752] Call Trace: [ 2735.927007][T30752] ? device_add_disk+0x30/0x30 [ 2735.931745][T30752] ? vsprintf+0x30/0x30 [ 2735.935873][T30752] ? device_initialize+0x1c7/0x3d0 [ 2735.941066][T30752] ? __alloc_disk_node+0x326/0x380 [ 2735.946154][T30752] loop_add+0x554/0x710 [ 2735.950291][T30752] loop_control_ioctl+0x564/0x740 [ 2735.955290][T30752] ? loop_remove+0xa0/0xa0 [ 2735.959676][T30752] ? __lru_cache_add+0x1bf/0x210 [ 2735.964596][T30752] ? memset+0x1f/0x40 [ 2735.968562][T30752] ? fsnotify+0x1332/0x13f0 [ 2735.973058][T30752] ? loop_remove+0xa0/0xa0 [ 2735.977453][T30752] do_vfs_ioctl+0x744/0x1730 [ 2735.982029][T30752] ? selinux_file_ioctl+0x723/0x970 [ 2735.987385][T30752] ? ioctl_preallocate+0x250/0x250 [ 2735.992473][T30752] ? __fget+0x40c/0x4a0 [ 2735.996612][T30752] ? fget_many+0x20/0x20 [ 2736.000836][T30752] ? check_preemption_disabled+0x154/0x330 [ 2736.006706][T30752] ? debug_smp_processor_id+0x20/0x20 [ 2736.012162][T30752] ? security_file_ioctl+0x9d/0xb0 [ 2736.017248][T30752] __x64_sys_ioctl+0xd4/0x110 [ 2736.021900][T30752] do_syscall_64+0xcb/0x1c0 03:37:22 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x20, 0x54, 0x1, 0x80000000}]}, 0x20}}, 0x0) 03:37:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2}]}, 0x20}, 0x6}, 0x0) 03:37:22 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 47) 03:37:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x20, 0x54, 0x1, 0x80000000}]}, 0x20}}, 0x0) 03:37:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x4}]}, 0x20}, 0x6}, 0x0) 03:37:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x20, 0x54, 0x1, 0x80000000}]}, 0x20}}, 0x0) 03:37:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c328000196"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:22 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2736.026378][T30752] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2736.032251][T30752] ---[ end trace b61d2c152d24eb1a ]--- 03:37:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x6}]}, 0x20}, 0x6}, 0x0) 03:37:22 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="02dd00000400ecff00000000000000000207000100"/32, @ANYRES16], 0x20}}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x6, 0x3f) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000007c0)={@any, 0x8d4a}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r2 = getuid() ioprio_set$uid(0x3, r2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x5, &(0x7f00000005c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, 0x20, r0, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x1, 0x1, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000006c0)=[r0, r0, r3]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={r4, r5, 0x4, r6}, 0x10) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000280), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x920040, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@default_permissions}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, ',('}}, {@appraise_type}]}}, 0x0, 0x0, &(0x7f0000000140)="45e28529bb9c13095fa5d1b93a82c7e1b57babb74fc516c94e08258e59042ce702df48e5dec565c0c914c9bab337d779490d7a8265b40194e31b52f8ee3bf03528ce8696519952122a9d177b95805c925a7a56d4d9a612e900cbfc5304ace9bbd60781855eda1a1f2317aa2061fa3035d965c75c869bc0f460480609efd9d9326f94d3bc6a1f27e85fb5e671475045f2cfed84ecb79b5a593e34840a29dbe6f85c7c674db234f56ded5b3c421eee9dde8bc34dae6e0cb9f747a43d262300528d33409b19f2ca84205e6c8a85354cc065c9c7b847c63db12ca3a65b9b3ca477116d8b9917bfbd22ea89cfaf35042cdc6f156bb2") [ 2736.094580][T30778] FAULT_INJECTION: forcing a failure. [ 2736.094580][T30778] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.111166][T30778] CPU: 1 PID: 30778 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2736.122793][T30778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2736.132838][T30778] Call Trace: [ 2736.136128][T30778] dump_stack+0x1d8/0x241 [ 2736.140455][T30778] ? panic+0x73e/0x73e 03:37:22 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="02dd00000400ecff00000000000000000207000100"/32, @ANYRES16], 0x20}}, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket(0x10, 0x6, 0x3f) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000007c0)={@any, 0x8d4a}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) r2 = getuid() ioprio_set$uid(0x3, r2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) (async, rerun: 64) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$PPPIOCSMRRU(r5, 0x4004743b, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x5, &(0x7f00000005c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, 0x20, r0, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x1, 0x1, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000006c0)=[r0, r0, r3]}, 0x80) (rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={r4, r5, 0x4, r6}, 0x10) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000280), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r7) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x920040, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@default_permissions}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, ',('}}, {@appraise_type}]}}, 0x0, 0x0, &(0x7f0000000140)="45e28529bb9c13095fa5d1b93a82c7e1b57babb74fc516c94e08258e59042ce702df48e5dec565c0c914c9bab337d779490d7a8265b40194e31b52f8ee3bf03528ce8696519952122a9d177b95805c925a7a56d4d9a612e900cbfc5304ace9bbd60781855eda1a1f2317aa2061fa3035d965c75c869bc0f460480609efd9d9326f94d3bc6a1f27e85fb5e671475045f2cfed84ecb79b5a593e34840a29dbe6f85c7c674db234f56ded5b3c421eee9dde8bc34dae6e0cb9f747a43d262300528d33409b19f2ca84205e6c8a85354cc065c9c7b847c63db12ca3a65b9b3ca477116d8b9917bfbd22ea89cfaf35042cdc6f156bb2") [ 2736.144522][T30778] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2736.150330][T30778] should_fail+0x709/0x870 [ 2736.154743][T30778] ? setup_fault_attr+0x3d0/0x3d0 [ 2736.159757][T30778] ? __kernfs_new_node+0xdb/0x6d0 [ 2736.164856][T30778] should_failslab+0x5/0x20 [ 2736.169341][T30778] kmem_cache_alloc+0x24/0x210 [ 2736.174088][T30778] __kernfs_new_node+0xdb/0x6d0 [ 2736.178919][T30778] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2736.184960][T30778] ? kernfs_new_node+0x160/0x160 [ 2736.189968][T30778] ? stack_trace_save+0x132/0x200 03:37:22 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="02dd00000400ecff00000000000000000207000100"/32, @ANYRES16], 0x20}}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x6, 0x3f) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000007c0)={@any, 0x8d4a}) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r2 = getuid() ioprio_set$uid(0x3, r2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x5, &(0x7f00000005c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, 0x20, r0, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x1, 0x1, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000006c0)=[r0, r0, r3]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={r4, r5, 0x4, r6}, 0x10) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000280), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x920040, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@default_permissions}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, ',('}}, {@appraise_type}]}}, 0x0, 0x0, &(0x7f0000000140)="45e28529bb9c13095fa5d1b93a82c7e1b57babb74fc516c94e08258e59042ce702df48e5dec565c0c914c9bab337d779490d7a8265b40194e31b52f8ee3bf03528ce8696519952122a9d177b95805c925a7a56d4d9a612e900cbfc5304ace9bbd60781855eda1a1f2317aa2061fa3035d965c75c869bc0f460480609efd9d9326f94d3bc6a1f27e85fb5e671475045f2cfed84ecb79b5a593e34840a29dbe6f85c7c674db234f56ded5b3c421eee9dde8bc34dae6e0cb9f747a43d262300528d33409b19f2ca84205e6c8a85354cc065c9c7b847c63db12ca3a65b9b3ca477116d8b9917bfbd22ea89cfaf35042cdc6f156bb2") sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="02dd00000400ecff00000000000000000207000100"/32, @ANYRES16], 0x20}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket(0x10, 0x6, 0x3f) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000007c0)={@any, 0x8d4a}) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) getuid() (async) ioprio_set$uid(0x3, r2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r3}, 0x8) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r5, 0x4004743b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x5, &(0x7f00000005c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, 0x20, r0, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x1, 0x1, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f00000006c0)=[r0, r0, r3]}, 0x80) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={r4, r5, 0x4, r6}, 0x10) (async) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000280), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r7) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x920040, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@default_permissions}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, ',('}}, {@appraise_type}]}}, 0x0, 0x0, &(0x7f0000000140)="45e28529bb9c13095fa5d1b93a82c7e1b57babb74fc516c94e08258e59042ce702df48e5dec565c0c914c9bab337d779490d7a8265b40194e31b52f8ee3bf03528ce8696519952122a9d177b95805c925a7a56d4d9a612e900cbfc5304ace9bbd60781855eda1a1f2317aa2061fa3035d965c75c869bc0f460480609efd9d9326f94d3bc6a1f27e85fb5e671475045f2cfed84ecb79b5a593e34840a29dbe6f85c7c674db234f56ded5b3c421eee9dde8bc34dae6e0cb9f747a43d262300528d33409b19f2ca84205e6c8a85354cc065c9c7b847c63db12ca3a65b9b3ca477116d8b9917bfbd22ea89cfaf35042cdc6f156bb2") (async) [ 2736.194969][T30778] ? stack_trace_snprint+0x170/0x170 [ 2736.200225][T30778] ? stack_trace_save+0x132/0x200 [ 2736.205236][T30778] kernfs_create_dir_ns+0x90/0x220 [ 2736.210335][T30778] sysfs_create_dir_ns+0x181/0x390 [ 2736.215420][T30778] ? sysfs_warn_dup+0xa0/0xa0 [ 2736.220074][T30778] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2736.226113][T30778] kobject_add_internal+0x6ba/0xcb0 [ 2736.231297][T30778] kobject_add+0x14c/0x210 [ 2736.235708][T30778] ? _raw_spin_lock+0xa3/0x1b0 [ 2736.240469][T30778] ? kobject_init+0x1d0/0x1d0 [ 2736.245133][T30778] ? mutex_unlock+0x19/0x40 [ 2736.249615][T30778] ? get_device_parent+0x2bd/0x420 [ 2736.254808][T30778] device_add+0x3fc/0xbc0 [ 2736.259129][T30778] device_create_vargs+0x1b8/0x210 [ 2736.264316][T30778] device_create+0xea/0x130 [ 2736.268798][T30778] ? device_create_vargs+0x210/0x210 [ 2736.274068][T30778] bdi_register_va+0x89/0x5e0 [ 2736.278857][T30778] bdi_register+0xd1/0x120 [ 2736.283255][T30778] ? __device_add_disk+0x539/0x1200 [ 2736.288522][T30778] ? bdi_register_va+0x5e0/0x5e0 [ 2736.293455][T30778] ? percpu_ref_resurrect+0x113/0x190 [ 2736.298822][T30778] bdi_register_owner+0x56/0xf0 [ 2736.303667][T30778] __device_add_disk+0x5b8/0x1200 [ 2736.308706][T30778] ? device_add_disk+0x30/0x30 [ 2736.313467][T30778] ? vsprintf+0x30/0x30 [ 2736.317596][T30778] ? device_initialize+0x1c7/0x3d0 [ 2736.322682][T30778] ? __alloc_disk_node+0x326/0x380 [ 2736.327766][T30778] loop_add+0x554/0x710 [ 2736.331906][T30778] loop_control_ioctl+0x564/0x740 [ 2736.336903][T30778] ? loop_remove+0xa0/0xa0 [ 2736.341291][T30778] ? __lru_cache_add+0x1bf/0x210 [ 2736.346199][T30778] ? memset+0x1f/0x40 [ 2736.350157][T30778] ? fsnotify+0x1332/0x13f0 [ 2736.354635][T30778] ? loop_remove+0xa0/0xa0 [ 2736.359024][T30778] do_vfs_ioctl+0x744/0x1730 [ 2736.363588][T30778] ? selinux_file_ioctl+0x723/0x970 [ 2736.368760][T30778] ? ioctl_preallocate+0x250/0x250 [ 2736.373842][T30778] ? __fget+0x40c/0x4a0 [ 2736.377980][T30778] ? fget_many+0x20/0x20 [ 2736.382207][T30778] ? check_preemption_disabled+0x154/0x330 [ 2736.388007][T30778] ? debug_smp_processor_id+0x20/0x20 [ 2736.394144][T30778] ? security_file_ioctl+0x9d/0xb0 [ 2736.399235][T30778] __x64_sys_ioctl+0xd4/0x110 [ 2736.404088][T30778] do_syscall_64+0xcb/0x1c0 [ 2736.408568][T30778] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2736.414548][T30778] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 2736.422217][T30778] ------------[ cut here ]------------ [ 2736.427670][T30778] WARNING: CPU: 1 PID: 30778 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2736.436743][T30778] Modules linked in: [ 2736.440614][T30778] CPU: 1 PID: 30778 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2736.452202][T30778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2736.462240][T30778] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2736.468018][T30778] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2736.487597][T30778] RSP: 0018:ffff8881ef62fa00 EFLAGS: 00010246 [ 2736.493634][T30778] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2736.501589][T30778] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2736.509542][T30778] RBP: ffff8881ef62fb40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2736.517494][T30778] R10: ffffffff84800000 R11: 1ffff1103dec5e00 R12: ffff8881cf3be000 [ 2736.525437][T30778] R13: dffffc0000000000 R14: ffff8881cf3be070 R15: 1ffff11039e77c9d [ 2736.533383][T30778] FS: 00007fc9d5138700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2736.542290][T30778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2736.548849][T30778] CR2: 0000555555f95728 CR3: 00000001e7095000 CR4: 00000000003406e0 [ 2736.556798][T30778] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2736.564743][T30778] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2736.572687][T30778] Call Trace: [ 2736.576127][T30778] ? device_add_disk+0x30/0x30 [ 2736.580869][T30778] ? vsprintf+0x30/0x30 [ 2736.585001][T30778] ? device_initialize+0x1c7/0x3d0 [ 2736.590084][T30778] ? __alloc_disk_node+0x326/0x380 [ 2736.595171][T30778] loop_add+0x554/0x710 [ 2736.599298][T30778] loop_control_ioctl+0x564/0x740 [ 2736.604378][T30778] ? loop_remove+0xa0/0xa0 [ 2736.608765][T30778] ? __lru_cache_add+0x1bf/0x210 [ 2736.613680][T30778] ? memset+0x1f/0x40 [ 2736.617641][T30778] ? fsnotify+0x1332/0x13f0 [ 2736.622116][T30778] ? loop_remove+0xa0/0xa0 [ 2736.626500][T30778] do_vfs_ioctl+0x744/0x1730 [ 2736.631059][T30778] ? selinux_file_ioctl+0x723/0x970 [ 2736.636228][T30778] ? ioctl_preallocate+0x250/0x250 [ 2736.641309][T30778] ? __fget+0x40c/0x4a0 03:37:23 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 48) 03:37:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="020500000400000000000000000000000200010000e700"/32], 0x20}}, 0x0) 03:37:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}]}, 0x20}, 0x6}, 0x0) 03:37:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="020500000400000000000000000000000200010000e700"/32], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="020500000400000000000000000000000200010000e700"/32], 0x20}}, 0x0) (async) [ 2736.645436][T30778] ? fget_many+0x20/0x20 [ 2736.649651][T30778] ? check_preemption_disabled+0x154/0x330 [ 2736.655434][T30778] ? debug_smp_processor_id+0x20/0x20 [ 2736.660777][T30778] ? security_file_ioctl+0x9d/0xb0 [ 2736.665859][T30778] __x64_sys_ioctl+0xd4/0x110 [ 2736.670508][T30778] do_syscall_64+0xcb/0x1c0 [ 2736.674991][T30778] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2736.680852][T30778] ---[ end trace b61d2c152d24eb1b ]--- 03:37:23 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c328000196"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:23 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:23 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x4}]}, 0x20}, 0x6}, 0x0) 03:37:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="020500000400000000000000000000000200010000e700"/32], 0x20}}, 0x0) [ 2736.715657][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2736.740842][T30827] FAULT_INJECTION: forcing a failure. [ 2736.740842][T30827] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.754457][T30827] CPU: 0 PID: 30827 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2736.766072][T30827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2736.776111][T30827] Call Trace: [ 2736.779393][T30827] dump_stack+0x1d8/0x241 [ 2736.783713][T30827] ? panic+0x73e/0x73e [ 2736.787764][T30827] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2736.793552][T30827] should_fail+0x709/0x870 [ 2736.797955][T30827] ? setup_fault_attr+0x3d0/0x3d0 [ 2736.802954][T30827] ? __kernfs_new_node+0xdb/0x6d0 [ 2736.807948][T30827] should_failslab+0x5/0x20 [ 2736.812424][T30827] kmem_cache_alloc+0x24/0x210 [ 2736.817162][T30827] __kernfs_new_node+0xdb/0x6d0 [ 2736.822018][T30827] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2736.828072][T30827] ? kernfs_new_node+0x160/0x160 [ 2736.833083][T30827] ? stack_trace_save+0x132/0x200 [ 2736.838092][T30827] ? stack_trace_snprint+0x170/0x170 [ 2736.843370][T30827] ? stack_trace_save+0x132/0x200 [ 2736.848464][T30827] kernfs_create_dir_ns+0x90/0x220 [ 2736.853558][T30827] sysfs_create_dir_ns+0x181/0x390 [ 2736.858647][T30827] ? sysfs_warn_dup+0xa0/0xa0 [ 2736.863296][T30827] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2736.869351][T30827] kobject_add_internal+0x6ba/0xcb0 [ 2736.874532][T30827] kobject_add+0x14c/0x210 [ 2736.878924][T30827] ? _raw_spin_lock+0xa3/0x1b0 [ 2736.883662][T30827] ? kobject_init+0x1d0/0x1d0 [ 2736.888578][T30827] ? mutex_unlock+0x19/0x40 [ 2736.893052][T30827] ? get_device_parent+0x2bd/0x420 [ 2736.898131][T30827] device_add+0x3fc/0xbc0 [ 2736.902433][T30827] device_create_vargs+0x1b8/0x210 [ 2736.907603][T30827] device_create+0xea/0x130 [ 2736.912087][T30827] ? device_create_vargs+0x210/0x210 [ 2736.917342][T30827] bdi_register_va+0x89/0x5e0 [ 2736.921995][T30827] bdi_register+0xd1/0x120 [ 2736.926386][T30827] ? __device_add_disk+0x539/0x1200 [ 2736.931572][T30827] ? bdi_register_va+0x5e0/0x5e0 [ 2736.936488][T30827] ? percpu_ref_resurrect+0x113/0x190 [ 2736.941847][T30827] bdi_register_owner+0x56/0xf0 [ 2736.946674][T30827] __device_add_disk+0x5b8/0x1200 [ 2736.951670][T30827] ? device_add_disk+0x30/0x30 [ 2736.956402][T30827] ? vsprintf+0x30/0x30 [ 2736.960538][T30827] ? device_initialize+0x1c7/0x3d0 [ 2736.965621][T30827] ? __alloc_disk_node+0x326/0x380 [ 2736.970706][T30827] loop_add+0x554/0x710 [ 2736.974831][T30827] loop_control_ioctl+0x564/0x740 [ 2736.979826][T30827] ? loop_remove+0xa0/0xa0 [ 2736.984215][T30827] ? __lru_cache_add+0x1bf/0x210 [ 2736.989121][T30827] ? memset+0x1f/0x40 [ 2736.993073][T30827] ? fsnotify+0x1332/0x13f0 [ 2736.997544][T30827] ? loop_remove+0xa0/0xa0 [ 2737.001935][T30827] do_vfs_ioctl+0x744/0x1730 [ 2737.006506][T30827] ? selinux_file_ioctl+0x723/0x970 [ 2737.011673][T30827] ? ioctl_preallocate+0x250/0x250 03:37:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) getrandom(&(0x7f0000000100)=""/118, 0x76, 0x1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) [ 2737.016760][T30827] ? __fget+0x40c/0x4a0 [ 2737.020898][T30827] ? fget_many+0x20/0x20 [ 2737.025116][T30827] ? check_preemption_disabled+0x154/0x330 [ 2737.030983][T30827] ? debug_smp_processor_id+0x20/0x20 [ 2737.036328][T30827] ? security_file_ioctl+0x9d/0xb0 [ 2737.041418][T30827] __x64_sys_ioctl+0xd4/0x110 [ 2737.046069][T30827] do_syscall_64+0xcb/0x1c0 [ 2737.050547][T30827] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2737.059869][T30827] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) 03:37:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}]}, 0x20}, 0x6}, 0x0) [ 2737.067624][T30827] ------------[ cut here ]------------ [ 2737.073098][T30827] WARNING: CPU: 0 PID: 30827 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2737.082175][T30827] Modules linked in: [ 2737.086048][T30827] CPU: 0 PID: 30827 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2737.097637][T30827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2737.107674][T30827] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2737.113451][T30827] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2737.133113][T30827] RSP: 0018:ffff8881d3807a00 EFLAGS: 00010246 [ 2737.139158][T30827] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2737.147101][T30827] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2737.155046][T30827] RBP: ffff8881d3807b40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2737.162988][T30827] R10: ffffffff84800000 R11: 1ffff1103a700e00 R12: ffff8881f0474000 [ 2737.170935][T30827] R13: dffffc0000000000 R14: ffff8881f0474070 R15: 1ffff1103e08e89d [ 2737.178895][T30827] FS: 00007fc9d5138700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2737.187801][T30827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2737.194363][T30827] CR2: 0000001b2e321000 CR3: 00000001e05ad000 CR4: 00000000003406f0 [ 2737.202310][T30827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2737.210257][T30827] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2737.218206][T30827] Call Trace: [ 2737.221479][T30827] ? device_add_disk+0x30/0x30 [ 2737.226215][T30827] ? vsprintf+0x30/0x30 [ 2737.230347][T30827] ? device_initialize+0x1c7/0x3d0 [ 2737.235459][T30827] ? __alloc_disk_node+0x326/0x380 [ 2737.240538][T30827] loop_add+0x554/0x710 [ 2737.244674][T30827] loop_control_ioctl+0x564/0x740 [ 2737.249680][T30827] ? loop_remove+0xa0/0xa0 [ 2737.254067][T30827] ? __lru_cache_add+0x1bf/0x210 [ 2737.258988][T30827] ? memset+0x1f/0x40 [ 2737.262960][T30827] ? fsnotify+0x1332/0x13f0 [ 2737.267441][T30827] ? loop_remove+0xa0/0xa0 [ 2737.271839][T30827] do_vfs_ioctl+0x744/0x1730 [ 2737.276407][T30827] ? selinux_file_ioctl+0x723/0x970 [ 2737.281700][T30827] ? ioctl_preallocate+0x250/0x250 [ 2737.286793][T30827] ? __fget+0x40c/0x4a0 [ 2737.290925][T30827] ? fget_many+0x20/0x20 [ 2737.295138][T30827] ? check_preemption_disabled+0x154/0x330 [ 2737.300917][T30827] ? debug_smp_processor_id+0x20/0x20 [ 2737.306264][T30827] ? security_file_ioctl+0x9d/0xb0 [ 2737.311355][T30827] __x64_sys_ioctl+0xd4/0x110 03:37:23 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 49) 03:37:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) getrandom(&(0x7f0000000100)=""/118, 0x76, 0x1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) getrandom(&(0x7f0000000100)=""/118, 0x76, 0x1) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x20}, 0x6}, 0x0) 03:37:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x20}, 0x6}, 0x0) [ 2737.316018][T30827] do_syscall_64+0xcb/0x1c0 [ 2737.320507][T30827] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2737.326371][T30827] ---[ end trace b61d2c152d24eb1c ]--- 03:37:23 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c328000196"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2737.365811][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2737.389091][T30851] FAULT_INJECTION: forcing a failure. [ 2737.389091][T30851] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.401864][T30851] CPU: 0 PID: 30851 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2737.413461][T30851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2737.423488][T30851] Call Trace: [ 2737.426753][T30851] dump_stack+0x1d8/0x241 [ 2737.431061][T30851] ? panic+0x73e/0x73e [ 2737.435106][T30851] ? arch_stack_walk+0x114/0x140 [ 2737.440020][T30851] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2737.445802][T30851] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2737.451843][T30851] should_fail+0x709/0x870 [ 2737.456231][T30851] ? setup_fault_attr+0x3d0/0x3d0 [ 2737.461242][T30851] ? radix_tree_node_alloc+0x18c/0x370 [ 2737.466675][T30851] should_failslab+0x5/0x20 [ 2737.471153][T30851] kmem_cache_alloc+0x24/0x210 [ 2737.475889][T30851] radix_tree_node_alloc+0x18c/0x370 [ 2737.481144][T30851] ? sysfs_create_dir_ns+0x181/0x390 [ 2737.486416][T30851] ? kobject_add_internal+0x6ba/0xcb0 [ 2737.491754][T30851] ? kobject_add+0x14c/0x210 [ 2737.496325][T30851] ? device_add+0x3fc/0xbc0 [ 2737.500799][T30851] idr_get_free+0x299/0x840 [ 2737.505278][T30851] idr_alloc_cyclic+0x1f3/0x5e0 [ 2737.510096][T30851] ? idr_alloc+0x2f0/0x2f0 [ 2737.514488][T30851] ? _raw_spin_lock+0xa3/0x1b0 [ 2737.519230][T30851] ? __kernfs_new_node+0xdb/0x6d0 [ 2737.524229][T30851] __kernfs_new_node+0x122/0x6d0 [ 2737.529138][T30851] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2737.535177][T30851] ? kernfs_new_node+0x160/0x160 [ 2737.540085][T30851] ? stack_trace_save+0x132/0x200 [ 2737.545080][T30851] ? stack_trace_snprint+0x170/0x170 [ 2737.550334][T30851] ? stack_trace_save+0x132/0x200 [ 2737.555328][T30851] kernfs_create_dir_ns+0x90/0x220 [ 2737.560421][T30851] sysfs_create_dir_ns+0x181/0x390 [ 2737.565507][T30851] ? sysfs_warn_dup+0xa0/0xa0 [ 2737.570158][T30851] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2737.576203][T30851] kobject_add_internal+0x6ba/0xcb0 [ 2737.581372][T30851] kobject_add+0x14c/0x210 [ 2737.585844][T30851] ? _raw_spin_lock+0xa3/0x1b0 [ 2737.590575][T30851] ? kobject_init+0x1d0/0x1d0 [ 2737.595229][T30851] ? mutex_unlock+0x19/0x40 [ 2737.599708][T30851] ? get_device_parent+0x2bd/0x420 [ 2737.604789][T30851] device_add+0x3fc/0xbc0 [ 2737.609087][T30851] device_create_vargs+0x1b8/0x210 [ 2737.614173][T30851] device_create+0xea/0x130 [ 2737.618647][T30851] ? device_create_vargs+0x210/0x210 [ 2737.623901][T30851] bdi_register_va+0x89/0x5e0 [ 2737.628546][T30851] bdi_register+0xd1/0x120 [ 2737.632941][T30851] ? __device_add_disk+0x539/0x1200 [ 2737.638129][T30851] ? bdi_register_va+0x5e0/0x5e0 [ 2737.643061][T30851] ? percpu_ref_resurrect+0x113/0x190 [ 2737.648416][T30851] bdi_register_owner+0x56/0xf0 [ 2737.653240][T30851] __device_add_disk+0x5b8/0x1200 [ 2737.658244][T30851] ? device_add_disk+0x30/0x30 [ 2737.662991][T30851] ? vsprintf+0x30/0x30 [ 2737.667152][T30851] ? device_initialize+0x1c7/0x3d0 [ 2737.672235][T30851] ? __alloc_disk_node+0x326/0x380 [ 2737.677323][T30851] loop_add+0x554/0x710 [ 2737.681454][T30851] loop_control_ioctl+0x564/0x740 [ 2737.686465][T30851] ? loop_remove+0xa0/0xa0 [ 2737.690868][T30851] ? __lru_cache_add+0x1bf/0x210 [ 2737.695776][T30851] ? memset+0x1f/0x40 [ 2737.699729][T30851] ? fsnotify+0x1332/0x13f0 [ 2737.704202][T30851] ? loop_remove+0xa0/0xa0 [ 2737.708589][T30851] do_vfs_ioctl+0x744/0x1730 [ 2737.713151][T30851] ? selinux_file_ioctl+0x723/0x970 [ 2737.718321][T30851] ? ioctl_preallocate+0x250/0x250 [ 2737.723412][T30851] ? __fget+0x40c/0x4a0 [ 2737.727667][T30851] ? fget_many+0x20/0x20 [ 2737.731893][T30851] ? check_preemption_disabled+0x154/0x330 [ 2737.737693][T30851] ? debug_smp_processor_id+0x20/0x20 [ 2737.743048][T30851] ? security_file_ioctl+0x9d/0xb0 [ 2737.748156][T30851] __x64_sys_ioctl+0xd4/0x110 [ 2737.752829][T30851] do_syscall_64+0xcb/0x1c0 [ 2737.757309][T30851] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x20}, 0x6}, 0x0) 03:37:24 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) getrandom(&(0x7f0000000100)=""/118, 0x76, 0x1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) getrandom(&(0x7f0000000100)=""/118, 0x76, 0x1) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:24 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 50) 03:37:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2737.819561][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2737.844139][T30864] FAULT_INJECTION: forcing a failure. [ 2737.844139][T30864] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.856823][T30864] CPU: 0 PID: 30864 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2737.868449][T30864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2737.878481][T30864] Call Trace: [ 2737.881750][T30864] dump_stack+0x1d8/0x241 [ 2737.886051][T30864] ? panic+0x73e/0x73e [ 2737.890094][T30864] ? arch_stack_walk+0x114/0x140 [ 2737.895002][T30864] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2737.900792][T30864] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2737.906833][T30864] should_fail+0x709/0x870 [ 2737.911236][T30864] ? setup_fault_attr+0x3d0/0x3d0 [ 2737.916243][T30864] ? radix_tree_node_alloc+0x18c/0x370 [ 2737.921681][T30864] should_failslab+0x5/0x20 [ 2737.926171][T30864] kmem_cache_alloc+0x24/0x210 [ 2737.931015][T30864] radix_tree_node_alloc+0x18c/0x370 [ 2737.936281][T30864] ? sysfs_create_dir_ns+0x181/0x390 [ 2737.941540][T30864] ? kobject_add_internal+0x6ba/0xcb0 [ 2737.947006][T30864] ? kobject_add+0x14c/0x210 [ 2737.951660][T30864] ? device_add+0x3fc/0xbc0 [ 2737.956320][T30864] idr_get_free+0x299/0x840 [ 2737.960813][T30864] idr_alloc_cyclic+0x1f3/0x5e0 [ 2737.965635][T30864] ? idr_alloc+0x2f0/0x2f0 [ 2737.970022][T30864] ? _raw_spin_lock+0xa3/0x1b0 [ 2737.974769][T30864] ? __kernfs_new_node+0xdb/0x6d0 [ 2737.979765][T30864] __kernfs_new_node+0x122/0x6d0 [ 2737.984673][T30864] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2737.990716][T30864] ? kernfs_new_node+0x160/0x160 [ 2737.995621][T30864] ? stack_trace_save+0x132/0x200 [ 2738.000616][T30864] ? stack_trace_snprint+0x170/0x170 [ 2738.005876][T30864] ? stack_trace_save+0x132/0x200 [ 2738.010872][T30864] kernfs_create_dir_ns+0x90/0x220 [ 2738.015953][T30864] sysfs_create_dir_ns+0x181/0x390 [ 2738.021033][T30864] ? sysfs_warn_dup+0xa0/0xa0 [ 2738.025693][T30864] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2738.031741][T30864] kobject_add_internal+0x6ba/0xcb0 [ 2738.036912][T30864] kobject_add+0x14c/0x210 [ 2738.041299][T30864] ? _raw_spin_lock+0xa3/0x1b0 [ 2738.046036][T30864] ? kobject_init+0x1d0/0x1d0 [ 2738.050685][T30864] ? mutex_unlock+0x19/0x40 [ 2738.055177][T30864] ? get_device_parent+0x2bd/0x420 [ 2738.060269][T30864] device_add+0x3fc/0xbc0 [ 2738.064573][T30864] device_create_vargs+0x1b8/0x210 [ 2738.069658][T30864] device_create+0xea/0x130 [ 2738.074139][T30864] ? device_create_vargs+0x210/0x210 [ 2738.079404][T30864] bdi_register_va+0x89/0x5e0 [ 2738.084083][T30864] bdi_register+0xd1/0x120 [ 2738.088477][T30864] ? __device_add_disk+0x539/0x1200 [ 2738.093647][T30864] ? bdi_register_va+0x5e0/0x5e0 [ 2738.098566][T30864] ? percpu_ref_resurrect+0x113/0x190 [ 2738.103915][T30864] bdi_register_owner+0x56/0xf0 [ 2738.108764][T30864] __device_add_disk+0x5b8/0x1200 [ 2738.113763][T30864] ? device_add_disk+0x30/0x30 [ 2738.118499][T30864] ? vsprintf+0x30/0x30 [ 2738.122649][T30864] ? device_initialize+0x1c7/0x3d0 [ 2738.127743][T30864] ? __alloc_disk_node+0x326/0x380 [ 2738.132831][T30864] loop_add+0x554/0x710 [ 2738.136963][T30864] loop_control_ioctl+0x564/0x740 [ 2738.141962][T30864] ? loop_remove+0xa0/0xa0 [ 2738.146353][T30864] ? __lru_cache_add+0x1bf/0x210 [ 2738.151266][T30864] ? memset+0x1f/0x40 [ 2738.155223][T30864] ? fsnotify+0x1332/0x13f0 [ 2738.159699][T30864] ? loop_remove+0xa0/0xa0 [ 2738.164102][T30864] do_vfs_ioctl+0x744/0x1730 03:37:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x20}, 0x6}, 0x0) 03:37:24 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 51) [ 2738.168675][T30864] ? selinux_file_ioctl+0x723/0x970 [ 2738.173848][T30864] ? ioctl_preallocate+0x250/0x250 [ 2738.178930][T30864] ? __fget+0x40c/0x4a0 [ 2738.183066][T30864] ? fget_many+0x20/0x20 [ 2738.187302][T30864] ? check_preemption_disabled+0x154/0x330 [ 2738.193083][T30864] ? debug_smp_processor_id+0x20/0x20 [ 2738.198568][T30864] ? security_file_ioctl+0x9d/0xb0 [ 2738.203701][T30864] __x64_sys_ioctl+0xd4/0x110 [ 2738.208359][T30864] do_syscall_64+0xcb/0x1c0 [ 2738.212937][T30864] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x20}, 0x6}, 0x0) 03:37:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x20}, 0x6}, 0x0) 03:37:24 executing program 0: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x20000000) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x6, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x16, 0x18, 0x1, 0x7f, 0xa8, "f6466d55850f3b0b3abf293f3d39aa0ed88100f306ea430a92eb977ceabdda5b9640a2bcc891db6b0b942497db7d645a86668d6fb96e3c5d6ee866174c553b9c331bbc91e0a9e755485820dac4184eaa3a10027a62468bae3295643763a2672baa39e06e932f02ea87284364a07b49e4b0de0571743103d8b49c433276a839e2198bc02bbdfcf82bdf2e9b9caf79b1413498aadbe7115dd9cc191d9f959bddfa6cbdd77fdf43e237"}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bbb, 0xfb, {0x6, 0x32, 0x5c, 0xff, 0x0, 0xffff3b3e, 0x0, @in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}]}, 0x100}}, 0x40001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="00082abd7000fcdbdf2503000000140003002001000000000000000000000000000014000300fe80000000000000000180000000000000000200fc0200000000000000000000000000012500070073797374656d5f753a6f626a6563745f723a67657474795f6c6f675f743a73300000000014000300fe80000000000000000000000000003c14000200fe8000000000000000000000000000bb"], 0xa0}, 0x1, 0x0, 0x0, 0x24040880}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r2, 0x24, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) 03:37:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:24 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}]}, 0x20}, 0x6}, 0x0) 03:37:24 executing program 0: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x20000000) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x6, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x16, 0x18, 0x1, 0x7f, 0xa8, "f6466d55850f3b0b3abf293f3d39aa0ed88100f306ea430a92eb977ceabdda5b9640a2bcc891db6b0b942497db7d645a86668d6fb96e3c5d6ee866174c553b9c331bbc91e0a9e755485820dac4184eaa3a10027a62468bae3295643763a2672baa39e06e932f02ea87284364a07b49e4b0de0571743103d8b49c433276a839e2198bc02bbdfcf82bdf2e9b9caf79b1413498aadbe7115dd9cc191d9f959bddfa6cbdd77fdf43e237"}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bbb, 0xfb, {0x6, 0x32, 0x5c, 0xff, 0x0, 0xffff3b3e, 0x0, @in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}]}, 0x100}}, 0x40001) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="00082abd7000fcdbdf2503000000140003002001000000000000000000000000000014000300fe80000000000000000180000000000000000200fc0200000000000000000000000000012500070073797374656d5f753a6f626a6563745f723a67657474795f6c6f675f743a73300000000014000300fe80000000000000000000000000003c14000200fe8000000000000000000000000000bb"], 0xa0}, 0x1, 0x0, 0x0, 0x24040880}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r2, 0x24, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) [ 2738.272216][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2738.287540][T30881] FAULT_INJECTION: forcing a failure. [ 2738.287540][T30881] name failslab, interval 1, probability 0, space 0, times 0 [ 2738.301976][T30881] CPU: 0 PID: 30881 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2738.313593][T30881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2738.323625][T30881] Call Trace: [ 2738.326899][T30881] dump_stack+0x1d8/0x241 [ 2738.331251][T30881] ? panic+0x73e/0x73e [ 2738.335299][T30881] ? idr_get_free+0x6a3/0x840 [ 2738.339960][T30881] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2738.345736][T30881] ? mutex_unlock+0x19/0x40 [ 2738.350211][T30881] ? kernfs_xattr_get+0x81/0x90 [ 2738.355035][T30881] should_fail+0x709/0x870 [ 2738.359434][T30881] ? setup_fault_attr+0x3d0/0x3d0 [ 2738.364437][T30881] ? idr_alloc+0x2f0/0x2f0 [ 2738.368914][T30881] ? __kernfs_new_node+0x99/0x6d0 [ 2738.373910][T30881] should_failslab+0x5/0x20 [ 2738.378387][T30881] __kmalloc_track_caller+0x4f/0x280 [ 2738.383650][T30881] kstrdup_const+0x51/0x90 [ 2738.388353][T30881] __kernfs_new_node+0x99/0x6d0 [ 2738.393193][T30881] ? mutex_lock+0xa6/0x110 [ 2738.397723][T30881] ? kernfs_new_node+0x160/0x160 [ 2738.402637][T30881] kernfs_new_node+0x95/0x160 [ 2738.407293][T30881] kernfs_create_link+0x9c/0x1f0 [ 2738.412207][T30881] sysfs_do_create_link_sd+0x85/0x100 [ 2738.417554][T30881] device_add_class_symlinks+0x211/0x2a0 [ 2738.423161][T30881] device_add+0x4e4/0xbc0 [ 2738.427462][T30881] device_create_vargs+0x1b8/0x210 [ 2738.432546][T30881] device_create+0xea/0x130 [ 2738.437030][T30881] ? device_create_vargs+0x210/0x210 [ 2738.442296][T30881] bdi_register_va+0x89/0x5e0 [ 2738.446943][T30881] bdi_register+0xd1/0x120 [ 2738.451329][T30881] ? __device_add_disk+0x539/0x1200 [ 2738.456496][T30881] ? bdi_register_va+0x5e0/0x5e0 [ 2738.461406][T30881] ? percpu_ref_resurrect+0x113/0x190 [ 2738.466754][T30881] bdi_register_owner+0x56/0xf0 [ 2738.471582][T30881] __device_add_disk+0x5b8/0x1200 [ 2738.476577][T30881] ? device_add_disk+0x30/0x30 [ 2738.481309][T30881] ? vsprintf+0x30/0x30 [ 2738.485435][T30881] ? device_initialize+0x1c7/0x3d0 [ 2738.490518][T30881] ? __alloc_disk_node+0x326/0x380 [ 2738.495721][T30881] loop_add+0x554/0x710 [ 2738.499850][T30881] loop_control_ioctl+0x564/0x740 [ 2738.504844][T30881] ? loop_remove+0xa0/0xa0 [ 2738.509231][T30881] ? __lru_cache_add+0x1bf/0x210 [ 2738.514192][T30881] ? memset+0x1f/0x40 [ 2738.518145][T30881] ? fsnotify+0x1332/0x13f0 [ 2738.522618][T30881] ? loop_remove+0xa0/0xa0 [ 2738.527004][T30881] do_vfs_ioctl+0x744/0x1730 [ 2738.531587][T30881] ? selinux_file_ioctl+0x723/0x970 [ 2738.536755][T30881] ? ioctl_preallocate+0x250/0x250 [ 2738.541836][T30881] ? __fget+0x40c/0x4a0 [ 2738.545962][T30881] ? fget_many+0x20/0x20 [ 2738.550211][T30881] ? check_preemption_disabled+0x154/0x330 [ 2738.555995][T30881] ? debug_smp_processor_id+0x20/0x20 [ 2738.561341][T30881] ? security_file_ioctl+0x9d/0xb0 [ 2738.566438][T30881] __x64_sys_ioctl+0xd4/0x110 03:37:25 executing program 0: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x20000000) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x6, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x16, 0x18, 0x1, 0x7f, 0xa8, "f6466d55850f3b0b3abf293f3d39aa0ed88100f306ea430a92eb977ceabdda5b9640a2bcc891db6b0b942497db7d645a86668d6fb96e3c5d6ee866174c553b9c331bbc91e0a9e755485820dac4184eaa3a10027a62468bae3295643763a2672baa39e06e932f02ea87284364a07b49e4b0de0571743103d8b49c433276a839e2198bc02bbdfcf82bdf2e9b9caf79b1413498aadbe7115dd9cc191d9f959bddfa6cbdd77fdf43e237"}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bbb, 0xfb, {0x6, 0x32, 0x5c, 0xff, 0x0, 0xffff3b3e, 0x0, @in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}]}, 0x100}}, 0x40001) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="00082abd7000fcdbdf2503000000140003002001000000000000000000000000000014000300fe80000000000000000180000000000000000200fc0200000000000000000000000000012500070073797374656d5f753a6f626a6563745f723a67657474795f6c6f675f743a73300000000014000300fe80000000000000000000000000003c14000200fe8000000000000000000000000000bb"], 0xa0}, 0x1, 0x0, 0x0, 0x24040880}, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r2, 0x24, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) 03:37:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}]}, 0x20}, 0x6}, 0x0) [ 2738.571093][T30881] do_syscall_64+0xcb/0x1c0 [ 2738.575605][T30881] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2738.587318][T30881] ------------[ cut here ]------------ [ 2738.593078][T30881] WARNING: CPU: 0 PID: 30881 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2738.602175][T30881] Modules linked in: [ 2738.606074][T30881] CPU: 0 PID: 30881 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2738.617685][T30881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2738.627734][T30881] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2738.633510][T30881] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2738.653082][T30881] RSP: 0018:ffff8881ea487a00 EFLAGS: 00010246 [ 2738.659142][T30881] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2738.667084][T30881] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2738.675027][T30881] RBP: ffff8881ea487b40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2738.682974][T30881] R10: ffffffff84800000 R11: 1ffff1103d490e00 R12: ffff8881eaaf3000 [ 2738.690938][T30881] R13: dffffc0000000000 R14: ffff8881eaaf3070 R15: 1ffff1103d55e69d [ 2738.698882][T30881] FS: 00007fc9d5138700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2738.707782][T30881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2738.714334][T30881] CR2: 00007fff3386c968 CR3: 00000001e82c9000 CR4: 00000000003406f0 [ 2738.722279][T30881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2738.730225][T30881] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2738.738167][T30881] Call Trace: [ 2738.741446][T30881] ? device_add_disk+0x30/0x30 [ 2738.746181][T30881] ? vsprintf+0x30/0x30 [ 2738.750307][T30881] ? device_initialize+0x1c7/0x3d0 [ 2738.755441][T30881] ? __alloc_disk_node+0x326/0x380 [ 2738.760525][T30881] loop_add+0x554/0x710 [ 2738.764670][T30881] loop_control_ioctl+0x564/0x740 [ 2738.769666][T30881] ? loop_remove+0xa0/0xa0 [ 2738.774055][T30881] ? __lru_cache_add+0x1bf/0x210 [ 2738.778961][T30881] ? memset+0x1f/0x40 [ 2738.782912][T30881] ? fsnotify+0x1332/0x13f0 [ 2738.787387][T30881] ? loop_remove+0xa0/0xa0 [ 2738.791774][T30881] do_vfs_ioctl+0x744/0x1730 [ 2738.796338][T30881] ? selinux_file_ioctl+0x723/0x970 [ 2738.801510][T30881] ? ioctl_preallocate+0x250/0x250 [ 2738.806590][T30881] ? __fget+0x40c/0x4a0 [ 2738.810717][T30881] ? fget_many+0x20/0x20 [ 2738.814931][T30881] ? check_preemption_disabled+0x154/0x330 03:37:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r1, 0x4) 03:37:25 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 52) 03:37:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38000}]}, 0x20}, 0x6}, 0x0) 03:37:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r1, 0x4) 03:37:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800300}]}, 0x20}, 0x6}, 0x0) [ 2738.820708][T30881] ? debug_smp_processor_id+0x20/0x20 [ 2738.826067][T30881] ? security_file_ioctl+0x9d/0xb0 [ 2738.831148][T30881] __x64_sys_ioctl+0xd4/0x110 [ 2738.835799][T30881] do_syscall_64+0xcb/0x1c0 [ 2738.840272][T30881] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2738.846137][T30881] ---[ end trace b61d2c152d24eb1d ]--- 03:37:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r1, 0x4) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r1, 0x4) (async) 03:37:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x20}, 0x6}, 0x0) 03:37:25 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2738.900681][T30907] FAULT_INJECTION: forcing a failure. [ 2738.900681][T30907] name failslab, interval 1, probability 0, space 0, times 0 [ 2738.915140][T30907] CPU: 1 PID: 30907 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2738.926754][T30907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2738.936785][T30907] Call Trace: [ 2738.940055][T30907] dump_stack+0x1d8/0x241 [ 2738.944356][T30907] ? panic+0x73e/0x73e [ 2738.948398][T30907] ? idr_get_free+0x6a3/0x840 [ 2738.953056][T30907] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2738.958830][T30907] ? mutex_unlock+0x19/0x40 [ 2738.963305][T30907] ? kernfs_xattr_get+0x81/0x90 [ 2738.968124][T30907] should_fail+0x709/0x870 [ 2738.972512][T30907] ? setup_fault_attr+0x3d0/0x3d0 [ 2738.977507][T30907] ? idr_alloc+0x2f0/0x2f0 [ 2738.981894][T30907] ? __kernfs_new_node+0x99/0x6d0 [ 2738.986886][T30907] should_failslab+0x5/0x20 [ 2738.991357][T30907] __kmalloc_track_caller+0x4f/0x280 [ 2738.996612][T30907] kstrdup_const+0x51/0x90 [ 2739.000999][T30907] __kernfs_new_node+0x99/0x6d0 [ 2739.005819][T30907] ? mutex_lock+0xa6/0x110 [ 2739.010204][T30907] ? kernfs_new_node+0x160/0x160 [ 2739.015114][T30907] kernfs_new_node+0x95/0x160 [ 2739.019771][T30907] kernfs_create_link+0x9c/0x1f0 [ 2739.024683][T30907] sysfs_do_create_link_sd+0x85/0x100 [ 2739.030038][T30907] device_add_class_symlinks+0x211/0x2a0 [ 2739.035638][T30907] device_add+0x4e4/0xbc0 [ 2739.039938][T30907] device_create_vargs+0x1b8/0x210 [ 2739.045022][T30907] device_create+0xea/0x130 [ 2739.049494][T30907] ? device_create_vargs+0x210/0x210 [ 2739.054749][T30907] bdi_register_va+0x89/0x5e0 [ 2739.059401][T30907] bdi_register+0xd1/0x120 [ 2739.063800][T30907] ? __device_add_disk+0x539/0x1200 [ 2739.068967][T30907] ? bdi_register_va+0x5e0/0x5e0 [ 2739.073872][T30907] ? percpu_ref_resurrect+0x113/0x190 [ 2739.079213][T30907] bdi_register_owner+0x56/0xf0 [ 2739.084033][T30907] __device_add_disk+0x5b8/0x1200 [ 2739.089027][T30907] ? device_add_disk+0x30/0x30 [ 2739.093761][T30907] ? vsprintf+0x30/0x30 [ 2739.097885][T30907] ? device_initialize+0x1c7/0x3d0 [ 2739.102974][T30907] ? __alloc_disk_node+0x326/0x380 [ 2739.108084][T30907] loop_add+0x554/0x710 [ 2739.112213][T30907] loop_control_ioctl+0x564/0x740 [ 2739.117208][T30907] ? loop_remove+0xa0/0xa0 [ 2739.121604][T30907] ? __lru_cache_add+0x1bf/0x210 [ 2739.126521][T30907] ? memset+0x1f/0x40 [ 2739.130483][T30907] ? fsnotify+0x1332/0x13f0 [ 2739.134959][T30907] ? loop_remove+0xa0/0xa0 [ 2739.139350][T30907] do_vfs_ioctl+0x744/0x1730 [ 2739.143920][T30907] ? selinux_file_ioctl+0x723/0x970 [ 2739.149104][T30907] ? ioctl_preallocate+0x250/0x250 [ 2739.154280][T30907] ? __fget+0x40c/0x4a0 [ 2739.158418][T30907] ? fget_many+0x20/0x20 [ 2739.162644][T30907] ? check_preemption_disabled+0x154/0x330 [ 2739.168437][T30907] ? debug_smp_processor_id+0x20/0x20 [ 2739.173793][T30907] ? security_file_ioctl+0x9d/0xb0 [ 2739.178874][T30907] __x64_sys_ioctl+0xd4/0x110 [ 2739.183526][T30907] do_syscall_64+0xcb/0x1c0 [ 2739.188045][T30907] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x20}, 0x6}, 0x0) 03:37:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205090000000000000000000000000002000100"/32], 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) [ 2739.198035][T30907] ------------[ cut here ]------------ [ 2739.203516][T30907] WARNING: CPU: 1 PID: 30907 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2739.212597][T30907] Modules linked in: [ 2739.216482][T30907] CPU: 1 PID: 30907 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2739.228071][T30907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2739.238114][T30907] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2739.243888][T30907] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2739.263655][T30907] RSP: 0018:ffff8881df4ffa00 EFLAGS: 00010246 [ 2739.269691][T30907] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2739.277632][T30907] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2739.285573][T30907] RBP: ffff8881df4ffb40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2739.293516][T30907] R10: ffffffff84800000 R11: 1ffff1103be9fe00 R12: ffff8881cdcdb000 [ 2739.301457][T30907] R13: dffffc0000000000 R14: ffff8881cdcdb070 R15: 1ffff11039b9b69d [ 2739.309401][T30907] FS: 00007fc9d5138700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2739.318309][T30907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2739.324953][T30907] CR2: 00007fffecf90d58 CR3: 00000001ec26b000 CR4: 00000000003406e0 [ 2739.332900][T30907] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2739.340848][T30907] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2739.348807][T30907] Call Trace: [ 2739.352079][T30907] ? device_add_disk+0x30/0x30 [ 2739.356812][T30907] ? vsprintf+0x30/0x30 [ 2739.360938][T30907] ? device_initialize+0x1c7/0x3d0 [ 2739.366033][T30907] ? __alloc_disk_node+0x326/0x380 [ 2739.371124][T30907] loop_add+0x554/0x710 [ 2739.375253][T30907] loop_control_ioctl+0x564/0x740 [ 2739.380251][T30907] ? loop_remove+0xa0/0xa0 [ 2739.384646][T30907] ? __lru_cache_add+0x1bf/0x210 [ 2739.389553][T30907] ? memset+0x1f/0x40 [ 2739.393510][T30907] ? fsnotify+0x1332/0x13f0 [ 2739.397988][T30907] ? loop_remove+0xa0/0xa0 [ 2739.402379][T30907] do_vfs_ioctl+0x744/0x1730 [ 2739.406942][T30907] ? selinux_file_ioctl+0x723/0x970 [ 2739.412123][T30907] ? ioctl_preallocate+0x250/0x250 [ 2739.417235][T30907] ? __fget+0x40c/0x4a0 [ 2739.421362][T30907] ? fget_many+0x20/0x20 [ 2739.425577][T30907] ? check_preemption_disabled+0x154/0x330 [ 2739.431353][T30907] ? debug_smp_processor_id+0x20/0x20 [ 2739.436692][T30907] ? security_file_ioctl+0x9d/0xb0 [ 2739.441772][T30907] __x64_sys_ioctl+0xd4/0x110 [ 2739.446427][T30907] do_syscall_64+0xcb/0x1c0 03:37:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}]}, 0x20}, 0x6}, 0x0) 03:37:26 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 53) 03:37:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205090000000000000000000000000002000100"/32], 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205090000000000000000000000000002000100"/32], 0x20}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) (async) 03:37:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}]}, 0x20}, 0x6}, 0x0) 03:37:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706f"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2739.450908][T30907] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2739.456767][T30907] ---[ end trace b61d2c152d24eb1e ]--- 03:37:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205090000000000000000000000000002000100"/32], 0x20}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 03:37:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}]}, 0x20}, 0x6}, 0x0) [ 2739.508574][T30942] FAULT_INJECTION: forcing a failure. [ 2739.508574][T30942] name failslab, interval 1, probability 0, space 0, times 0 [ 2739.524142][T30942] CPU: 1 PID: 30942 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2739.535761][T30942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2739.545794][T30942] Call Trace: [ 2739.549076][T30942] dump_stack+0x1d8/0x241 [ 2739.553378][T30942] ? panic+0x73e/0x73e [ 2739.557420][T30942] ? mutex_unlock+0x19/0x40 [ 2739.561898][T30942] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2739.567684][T30942] ? selinux_kernfs_init_security+0x155/0x760 [ 2739.573736][T30942] ? idr_alloc_cyclic+0x36e/0x5e0 [ 2739.578731][T30942] should_fail+0x709/0x870 [ 2739.583120][T30942] ? setup_fault_attr+0x3d0/0x3d0 [ 2739.588204][T30942] ? _raw_spin_lock+0xa3/0x1b0 [ 2739.592940][T30942] ? __kernfs_new_node+0xdb/0x6d0 [ 2739.597934][T30942] should_failslab+0x5/0x20 [ 2739.602415][T30942] kmem_cache_alloc+0x24/0x210 [ 2739.607157][T30942] __kernfs_new_node+0xdb/0x6d0 [ 2739.612000][T30942] ? mutex_lock+0xa6/0x110 [ 2739.616390][T30942] ? kernfs_new_node+0x160/0x160 [ 2739.621299][T30942] kernfs_new_node+0x95/0x160 [ 2739.625952][T30942] __kernfs_create_file+0x45/0x260 [ 2739.631031][T30942] sysfs_add_file_mode_ns+0x292/0x340 [ 2739.636377][T30942] internal_create_group+0x55e/0xf50 [ 2739.641634][T30942] ? mutex_unlock+0x19/0x40 [ 2739.646104][T30942] ? sysfs_create_group+0x20/0x20 [ 2739.651097][T30942] sysfs_create_groups+0x5d/0x130 [ 2739.656094][T30942] device_add_attrs+0x87/0x370 [ 2739.660827][T30942] device_add+0x505/0xbc0 [ 2739.665127][T30942] device_create_vargs+0x1b8/0x210 [ 2739.670209][T30942] device_create+0xea/0x130 [ 2739.674682][T30942] ? device_create_vargs+0x210/0x210 [ 2739.679937][T30942] bdi_register_va+0x89/0x5e0 [ 2739.684592][T30942] bdi_register+0xd1/0x120 [ 2739.688981][T30942] ? __device_add_disk+0x539/0x1200 [ 2739.694153][T30942] ? bdi_register_va+0x5e0/0x5e0 [ 2739.699060][T30942] ? percpu_ref_resurrect+0x113/0x190 [ 2739.704421][T30942] bdi_register_owner+0x56/0xf0 [ 2739.709252][T30942] __device_add_disk+0x5b8/0x1200 [ 2739.714254][T30942] ? device_add_disk+0x30/0x30 [ 2739.718988][T30942] ? vsprintf+0x30/0x30 [ 2739.723113][T30942] ? device_initialize+0x1c7/0x3d0 [ 2739.728283][T30942] ? __alloc_disk_node+0x326/0x380 [ 2739.733374][T30942] loop_add+0x554/0x710 [ 2739.737507][T30942] loop_control_ioctl+0x564/0x740 [ 2739.742504][T30942] ? loop_remove+0xa0/0xa0 [ 2739.746891][T30942] ? __lru_cache_add+0x1bf/0x210 [ 2739.751800][T30942] ? memset+0x1f/0x40 [ 2739.755755][T30942] ? fsnotify+0x1332/0x13f0 [ 2739.760247][T30942] ? loop_remove+0xa0/0xa0 [ 2739.764636][T30942] do_vfs_ioctl+0x744/0x1730 [ 2739.769199][T30942] ? selinux_file_ioctl+0x723/0x970 [ 2739.774370][T30942] ? ioctl_preallocate+0x250/0x250 [ 2739.779453][T30942] ? __fget+0x40c/0x4a0 [ 2739.783581][T30942] ? fget_many+0x20/0x20 [ 2739.787796][T30942] ? check_preemption_disabled+0x154/0x330 [ 2739.793662][T30942] ? debug_smp_processor_id+0x20/0x20 [ 2739.799013][T30942] ? security_file_ioctl+0x9d/0xb0 [ 2739.804105][T30942] __x64_sys_ioctl+0xd4/0x110 03:37:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffefe0}]}, 0x20}, 0x6}, 0x0) [ 2739.808755][T30942] do_syscall_64+0xcb/0x1c0 [ 2739.813249][T30942] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2739.820369][T30942] ------------[ cut here ]------------ [ 2739.825837][T30942] WARNING: CPU: 1 PID: 30942 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2739.834916][T30942] Modules linked in: [ 2739.839053][T30942] CPU: 1 PID: 30942 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2739.850666][T30942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2739.860711][T30942] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2739.866490][T30942] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2739.886069][T30942] RSP: 0018:ffff8881edf1fa00 EFLAGS: 00010246 [ 2739.892111][T30942] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2739.900153][T30942] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2739.908135][T30942] RBP: ffff8881edf1fb40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2739.916095][T30942] R10: ffffffff84800000 R11: 1ffff1103dbe3e00 R12: ffff8881eaaf0000 [ 2739.924042][T30942] R13: dffffc0000000000 R14: ffff8881eaaf0070 R15: 1ffff1103d55e09d [ 2739.931988][T30942] FS: 00007fc9d5138700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2739.940887][T30942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2739.947444][T30942] CR2: 00000000200000c0 CR3: 00000001cf58a000 CR4: 00000000003406e0 [ 2739.955388][T30942] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2739.963330][T30942] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2739.971282][T30942] Call Trace: [ 2739.974567][T30942] ? device_add_disk+0x30/0x30 [ 2739.979305][T30942] ? vsprintf+0x30/0x30 [ 2739.983441][T30942] ? device_initialize+0x1c7/0x3d0 [ 2739.988631][T30942] ? __alloc_disk_node+0x326/0x380 [ 2739.993844][T30942] loop_add+0x554/0x710 [ 2739.997984][T30942] loop_control_ioctl+0x564/0x740 [ 2740.002991][T30942] ? loop_remove+0xa0/0xa0 [ 2740.007415][T30942] ? __lru_cache_add+0x1bf/0x210 [ 2740.012346][T30942] ? memset+0x1f/0x40 [ 2740.016301][T30942] ? fsnotify+0x1332/0x13f0 [ 2740.020778][T30942] ? loop_remove+0xa0/0xa0 [ 2740.025172][T30942] do_vfs_ioctl+0x744/0x1730 [ 2740.029754][T30942] ? selinux_file_ioctl+0x723/0x970 [ 2740.034933][T30942] ? ioctl_preallocate+0x250/0x250 [ 2740.040030][T30942] ? __fget+0x40c/0x4a0 [ 2740.044165][T30942] ? fget_many+0x20/0x20 [ 2740.048384][T30942] ? check_preemption_disabled+0x154/0x330 [ 2740.054172][T30942] ? debug_smp_processor_id+0x20/0x20 [ 2740.059643][T30942] ? security_file_ioctl+0x9d/0xb0 [ 2740.064732][T30942] __x64_sys_ioctl+0xd4/0x110 [ 2740.069386][T30942] do_syscall_64+0xcb/0x1c0 [ 2740.073874][T30942] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2740.079832][T30942] ---[ end trace b61d2c152d24eb1f ]--- 03:37:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) uname(&(0x7f0000000100)=""/133) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:26 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 54) 03:37:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0efff7f}]}, 0x20}, 0x6}, 0x0) 03:37:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706f"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}]}, 0x20}, 0x6}, 0x0) 03:37:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) uname(&(0x7f0000000100)=""/133) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2740.129986][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2740.175750][T30967] FAULT_INJECTION: forcing a failure. [ 2740.175750][T30967] name failslab, interval 1, probability 0, space 0, times 0 [ 2740.188928][T30967] CPU: 1 PID: 30967 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2740.200635][T30967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2740.210672][T30967] Call Trace: [ 2740.213945][T30967] dump_stack+0x1d8/0x241 [ 2740.218272][T30967] ? panic+0x73e/0x73e [ 2740.222314][T30967] ? mutex_unlock+0x19/0x40 [ 2740.226788][T30967] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2740.232568][T30967] ? selinux_kernfs_init_security+0x155/0x760 [ 2740.238609][T30967] ? idr_alloc_cyclic+0x36e/0x5e0 [ 2740.243629][T30967] should_fail+0x709/0x870 [ 2740.248021][T30967] ? setup_fault_attr+0x3d0/0x3d0 [ 2740.253104][T30967] ? _raw_spin_lock+0xa3/0x1b0 [ 2740.257870][T30967] ? __kernfs_new_node+0xdb/0x6d0 [ 2740.262869][T30967] should_failslab+0x5/0x20 [ 2740.267345][T30967] kmem_cache_alloc+0x24/0x210 [ 2740.272086][T30967] __kernfs_new_node+0xdb/0x6d0 [ 2740.276913][T30967] ? mutex_lock+0xa6/0x110 [ 2740.281300][T30967] ? kernfs_new_node+0x160/0x160 [ 2740.286212][T30967] kernfs_new_node+0x95/0x160 [ 2740.290862][T30967] __kernfs_create_file+0x45/0x260 [ 2740.295945][T30967] sysfs_add_file_mode_ns+0x292/0x340 [ 2740.301290][T30967] internal_create_group+0x55e/0xf50 [ 2740.306546][T30967] ? mutex_unlock+0x19/0x40 [ 2740.311018][T30967] ? sysfs_create_group+0x20/0x20 [ 2740.316014][T30967] sysfs_create_groups+0x5d/0x130 [ 2740.321024][T30967] device_add_attrs+0x87/0x370 [ 2740.325773][T30967] device_add+0x505/0xbc0 [ 2740.330092][T30967] device_create_vargs+0x1b8/0x210 [ 2740.335198][T30967] device_create+0xea/0x130 [ 2740.339679][T30967] ? device_create_vargs+0x210/0x210 [ 2740.344941][T30967] bdi_register_va+0x89/0x5e0 [ 2740.349592][T30967] bdi_register+0xd1/0x120 [ 2740.353988][T30967] ? __device_add_disk+0x539/0x1200 [ 2740.359170][T30967] ? bdi_register_va+0x5e0/0x5e0 [ 2740.364087][T30967] ? percpu_ref_resurrect+0x113/0x190 [ 2740.369436][T30967] bdi_register_owner+0x56/0xf0 [ 2740.374262][T30967] __device_add_disk+0x5b8/0x1200 [ 2740.379259][T30967] ? device_add_disk+0x30/0x30 [ 2740.384023][T30967] ? vsprintf+0x30/0x30 [ 2740.388170][T30967] ? device_initialize+0x1c7/0x3d0 [ 2740.393308][T30967] ? __alloc_disk_node+0x326/0x380 [ 2740.398403][T30967] loop_add+0x554/0x710 [ 2740.402657][T30967] loop_control_ioctl+0x564/0x740 [ 2740.407657][T30967] ? loop_remove+0xa0/0xa0 [ 2740.412049][T30967] ? __lru_cache_add+0x1bf/0x210 [ 2740.416965][T30967] ? memset+0x1f/0x40 [ 2740.420927][T30967] ? fsnotify+0x1332/0x13f0 [ 2740.425403][T30967] ? loop_remove+0xa0/0xa0 [ 2740.429878][T30967] do_vfs_ioctl+0x744/0x1730 [ 2740.434441][T30967] ? selinux_file_ioctl+0x723/0x970 [ 2740.439616][T30967] ? ioctl_preallocate+0x250/0x250 [ 2740.444704][T30967] ? __fget+0x40c/0x4a0 [ 2740.448834][T30967] ? fget_many+0x20/0x20 [ 2740.453052][T30967] ? check_preemption_disabled+0x154/0x330 [ 2740.458831][T30967] ? debug_smp_processor_id+0x20/0x20 [ 2740.464179][T30967] ? security_file_ioctl+0x9d/0xb0 [ 2740.469264][T30967] __x64_sys_ioctl+0xd4/0x110 03:37:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) (async) uname(&(0x7f0000000100)=""/133) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) [ 2740.473918][T30967] do_syscall_64+0xcb/0x1c0 [ 2740.478396][T30967] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2740.488941][T30967] ------------[ cut here ]------------ [ 2740.494430][T30967] WARNING: CPU: 0 PID: 30967 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2740.503523][T30967] Modules linked in: [ 2740.507415][T30967] CPU: 0 PID: 30967 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2740.519009][T30967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2740.529047][T30967] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2740.534825][T30967] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2740.554401][T30967] RSP: 0018:ffff8881d16bfa00 EFLAGS: 00010246 [ 2740.560443][T30967] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2740.568394][T30967] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2740.576337][T30967] RBP: ffff8881d16bfb40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2740.584282][T30967] R10: ffffffff84800000 R11: 1ffff1103a2d7e00 R12: ffff8881cef12000 [ 2740.592227][T30967] R13: dffffc0000000000 R14: ffff8881cef12070 R15: 1ffff11039de249d [ 2740.600176][T30967] FS: 00007fc9d5138700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2740.609075][T30967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2740.615633][T30967] CR2: 00000000200000c0 CR3: 00000001e18df000 CR4: 00000000003406f0 [ 2740.623580][T30967] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2740.631527][T30967] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2740.639481][T30967] Call Trace: [ 2740.642752][T30967] ? device_add_disk+0x30/0x30 [ 2740.647490][T30967] ? vsprintf+0x30/0x30 [ 2740.651649][T30967] ? device_initialize+0x1c7/0x3d0 [ 2740.656820][T30967] ? __alloc_disk_node+0x326/0x380 [ 2740.661902][T30967] loop_add+0x554/0x710 [ 2740.666037][T30967] loop_control_ioctl+0x564/0x740 [ 2740.671038][T30967] ? loop_remove+0xa0/0xa0 [ 2740.675431][T30967] ? __lru_cache_add+0x1bf/0x210 [ 2740.680338][T30967] ? memset+0x1f/0x40 [ 2740.684301][T30967] ? fsnotify+0x1332/0x13f0 [ 2740.688797][T30967] ? loop_remove+0xa0/0xa0 [ 2740.693205][T30967] do_vfs_ioctl+0x744/0x1730 [ 2740.697769][T30967] ? selinux_file_ioctl+0x723/0x970 [ 2740.703041][T30967] ? ioctl_preallocate+0x250/0x250 [ 2740.708125][T30967] ? __fget+0x40c/0x4a0 [ 2740.712254][T30967] ? fget_many+0x20/0x20 [ 2740.716470][T30967] ? check_preemption_disabled+0x154/0x330 [ 2740.722246][T30967] ? debug_smp_processor_id+0x20/0x20 03:37:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x26}, 0x6}, 0x0) 03:37:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x3f, 0x0, 0x4, 0x0, 0x70bd2b, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x17, 0x6, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8004) 03:37:27 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 55) 03:37:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20000060}, 0x6}, 0x0) [ 2740.727592][T30967] ? security_file_ioctl+0x9d/0xb0 [ 2740.732674][T30967] __x64_sys_ioctl+0xd4/0x110 [ 2740.737321][T30967] do_syscall_64+0xcb/0x1c0 [ 2740.741799][T30967] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2740.747660][T30967] ---[ end trace b61d2c152d24eb20 ]--- [ 2740.800141][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2740.810827][T30988] FAULT_INJECTION: forcing a failure. [ 2740.810827][T30988] name failslab, interval 1, probability 0, space 0, times 0 [ 2740.823751][T30988] CPU: 0 PID: 30988 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2740.835364][T30988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2740.845394][T30988] Call Trace: [ 2740.848663][T30988] dump_stack+0x1d8/0x241 [ 2740.852969][T30988] ? panic+0x73e/0x73e [ 2740.857008][T30988] ? mutex_unlock+0x19/0x40 [ 2740.861485][T30988] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2740.867270][T30988] ? selinux_kernfs_init_security+0x155/0x760 [ 2740.873308][T30988] ? idr_alloc_cyclic+0x36e/0x5e0 [ 2740.878302][T30988] should_fail+0x709/0x870 [ 2740.882693][T30988] ? setup_fault_attr+0x3d0/0x3d0 [ 2740.887688][T30988] ? _raw_spin_lock+0xa3/0x1b0 [ 2740.892424][T30988] ? __kernfs_new_node+0xdb/0x6d0 [ 2740.897420][T30988] should_failslab+0x5/0x20 [ 2740.901894][T30988] kmem_cache_alloc+0x24/0x210 [ 2740.906628][T30988] __kernfs_new_node+0xdb/0x6d0 [ 2740.911451][T30988] ? mutex_lock+0xa6/0x110 [ 2740.915844][T30988] ? kernfs_new_node+0x160/0x160 [ 2740.920763][T30988] kernfs_new_node+0x95/0x160 [ 2740.925411][T30988] __kernfs_create_file+0x45/0x260 [ 2740.930493][T30988] sysfs_add_file_mode_ns+0x292/0x340 [ 2740.935833][T30988] internal_create_group+0x55e/0xf50 [ 2740.941093][T30988] ? mutex_unlock+0x19/0x40 [ 2740.945566][T30988] ? sysfs_create_group+0x20/0x20 [ 2740.950560][T30988] sysfs_create_groups+0x5d/0x130 [ 2740.955556][T30988] device_add_attrs+0x87/0x370 [ 2740.960302][T30988] device_add+0x505/0xbc0 [ 2740.964613][T30988] device_create_vargs+0x1b8/0x210 [ 2740.969695][T30988] device_create+0xea/0x130 [ 2740.974173][T30988] ? device_create_vargs+0x210/0x210 [ 2740.979427][T30988] bdi_register_va+0x89/0x5e0 [ 2740.984084][T30988] bdi_register+0xd1/0x120 [ 2740.988476][T30988] ? __device_add_disk+0x539/0x1200 [ 2740.993646][T30988] ? bdi_register_va+0x5e0/0x5e0 [ 2740.998554][T30988] ? percpu_ref_resurrect+0x113/0x190 [ 2741.003989][T30988] bdi_register_owner+0x56/0xf0 [ 2741.008819][T30988] __device_add_disk+0x5b8/0x1200 [ 2741.013851][T30988] ? device_add_disk+0x30/0x30 [ 2741.018584][T30988] ? vsprintf+0x30/0x30 [ 2741.022710][T30988] ? device_initialize+0x1c7/0x3d0 [ 2741.027790][T30988] ? __alloc_disk_node+0x326/0x380 [ 2741.032872][T30988] loop_add+0x554/0x710 [ 2741.037006][T30988] loop_control_ioctl+0x564/0x740 [ 2741.042009][T30988] ? loop_remove+0xa0/0xa0 [ 2741.046396][T30988] ? __lru_cache_add+0x1bf/0x210 [ 2741.051309][T30988] ? memset+0x1f/0x40 [ 2741.055277][T30988] ? fsnotify+0x1332/0x13f0 [ 2741.059760][T30988] ? loop_remove+0xa0/0xa0 [ 2741.064163][T30988] do_vfs_ioctl+0x744/0x1730 [ 2741.068748][T30988] ? selinux_file_ioctl+0x723/0x970 [ 2741.074015][T30988] ? ioctl_preallocate+0x250/0x250 [ 2741.079101][T30988] ? __fget+0x40c/0x4a0 [ 2741.083233][T30988] ? fget_many+0x20/0x20 [ 2741.087448][T30988] ? check_preemption_disabled+0x154/0x330 [ 2741.093320][T30988] ? debug_smp_processor_id+0x20/0x20 03:37:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e18144706f"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x3f, 0x0, 0x4, 0x0, 0x70bd2b, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x17, 0x6, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8004) 03:37:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x7ffff000}, 0x6}, 0x0) 03:37:27 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2741.098677][T30988] ? security_file_ioctl+0x9d/0xb0 [ 2741.103769][T30988] __x64_sys_ioctl+0xd4/0x110 [ 2741.108422][T30988] do_syscall_64+0xcb/0x1c0 [ 2741.112909][T30988] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2741.125098][T30988] ------------[ cut here ]------------ [ 2741.130586][T30988] WARNING: CPU: 0 PID: 30988 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2741.139670][T30988] Modules linked in: [ 2741.143577][T30988] CPU: 0 PID: 30988 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2741.155177][T30988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2741.165243][T30988] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2741.171030][T30988] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2741.190612][T30988] RSP: 0018:ffff8881dd0cfa00 EFLAGS: 00010246 [ 2741.196670][T30988] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2741.204706][T30988] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2741.212735][T30988] RBP: ffff8881dd0cfb40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2741.220698][T30988] R10: ffffffff84800000 R11: 1ffff1103ba19e00 R12: ffff8881ef6a0000 [ 2741.228646][T30988] R13: dffffc0000000000 R14: ffff8881ef6a0070 R15: 1ffff1103ded409d [ 2741.236590][T30988] FS: 00007fc9d5138700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2741.245501][T30988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2741.252063][T30988] CR2: 00007ffde35d8de8 CR3: 00000001e1496000 CR4: 00000000003406f0 [ 2741.260008][T30988] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2741.267950][T30988] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2741.275901][T30988] Call Trace: [ 2741.279169][T30988] ? device_add_disk+0x30/0x30 [ 2741.283901][T30988] ? vsprintf+0x30/0x30 [ 2741.288028][T30988] ? device_initialize+0x1c7/0x3d0 [ 2741.293107][T30988] ? __alloc_disk_node+0x326/0x380 [ 2741.298201][T30988] loop_add+0x554/0x710 [ 2741.302336][T30988] loop_control_ioctl+0x564/0x740 [ 2741.307370][T30988] ? loop_remove+0xa0/0xa0 [ 2741.311949][T30988] ? __lru_cache_add+0x1bf/0x210 [ 2741.316868][T30988] ? memset+0x1f/0x40 [ 2741.320825][T30988] ? fsnotify+0x1332/0x13f0 [ 2741.325303][T30988] ? loop_remove+0xa0/0xa0 [ 2741.329775][T30988] do_vfs_ioctl+0x744/0x1730 [ 2741.334337][T30988] ? selinux_file_ioctl+0x723/0x970 [ 2741.339500][T30988] ? ioctl_preallocate+0x250/0x250 [ 2741.344581][T30988] ? __fget+0x40c/0x4a0 [ 2741.348703][T30988] ? fget_many+0x20/0x20 03:37:27 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 56) 03:37:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x3f, 0x0, 0x4, 0x0, 0x70bd2b, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x17, 0x6, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8004) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x3f, 0x0, 0x4, 0x0, 0x70bd2b, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) pipe(&(0x7f0000000000)) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x17, 0x6, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8004) (async) [ 2741.352919][T30988] ? check_preemption_disabled+0x154/0x330 [ 2741.358692][T30988] ? debug_smp_processor_id+0x20/0x20 [ 2741.364034][T30988] ? security_file_ioctl+0x9d/0xb0 [ 2741.369112][T30988] __x64_sys_ioctl+0xd4/0x110 [ 2741.373770][T30988] do_syscall_64+0xcb/0x1c0 [ 2741.378455][T30988] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2741.384313][T30988] ---[ end trace b61d2c152d24eb21 ]--- 03:37:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x4}, 0x0) 03:37:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x8}, 0x0) [ 2741.412486][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 03:37:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:37:28 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) [ 2741.457206][T31005] FAULT_INJECTION: forcing a failure. [ 2741.457206][T31005] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.472795][T31005] CPU: 0 PID: 31005 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2741.484419][T31005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2741.494455][T31005] Call Trace: [ 2741.497730][T31005] dump_stack+0x1d8/0x241 [ 2741.502044][T31005] ? panic+0x73e/0x73e [ 2741.506123][T31005] ? mutex_unlock+0x19/0x40 [ 2741.510607][T31005] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2741.516392][T31005] ? selinux_kernfs_init_security+0x155/0x760 [ 2741.522621][T31005] ? idr_alloc_cyclic+0x36e/0x5e0 [ 2741.527627][T31005] should_fail+0x709/0x870 [ 2741.532024][T31005] ? setup_fault_attr+0x3d0/0x3d0 [ 2741.537028][T31005] ? _raw_spin_lock+0xa3/0x1b0 [ 2741.541772][T31005] ? __kernfs_new_node+0xdb/0x6d0 [ 2741.546775][T31005] should_failslab+0x5/0x20 [ 2741.551260][T31005] kmem_cache_alloc+0x24/0x210 [ 2741.556003][T31005] __kernfs_new_node+0xdb/0x6d0 [ 2741.560832][T31005] ? mutex_lock+0xa6/0x110 [ 2741.565229][T31005] ? kernfs_new_node+0x160/0x160 [ 2741.570151][T31005] kernfs_new_node+0x95/0x160 [ 2741.574810][T31005] __kernfs_create_file+0x45/0x260 [ 2741.579901][T31005] sysfs_add_file_mode_ns+0x292/0x340 [ 2741.585254][T31005] internal_create_group+0x55e/0xf50 [ 2741.590519][T31005] ? mutex_unlock+0x19/0x40 [ 2741.595006][T31005] ? sysfs_create_group+0x20/0x20 [ 2741.600011][T31005] sysfs_create_groups+0x5d/0x130 [ 2741.605014][T31005] device_add_attrs+0x87/0x370 [ 2741.609756][T31005] device_add+0x505/0xbc0 [ 2741.614068][T31005] device_create_vargs+0x1b8/0x210 [ 2741.619161][T31005] device_create+0xea/0x130 [ 2741.623645][T31005] ? device_create_vargs+0x210/0x210 [ 2741.628916][T31005] bdi_register_va+0x89/0x5e0 [ 2741.633572][T31005] bdi_register+0xd1/0x120 [ 2741.637979][T31005] ? __device_add_disk+0x539/0x1200 [ 2741.643243][T31005] ? bdi_register_va+0x5e0/0x5e0 [ 2741.648163][T31005] ? percpu_ref_resurrect+0x113/0x190 [ 2741.653513][T31005] bdi_register_owner+0x56/0xf0 [ 2741.658352][T31005] __device_add_disk+0x5b8/0x1200 [ 2741.663360][T31005] ? device_add_disk+0x30/0x30 [ 2741.668124][T31005] ? vsprintf+0x30/0x30 [ 2741.672262][T31005] ? device_initialize+0x1c7/0x3d0 [ 2741.677353][T31005] ? __alloc_disk_node+0x326/0x380 [ 2741.682449][T31005] loop_add+0x554/0x710 [ 2741.686583][T31005] loop_control_ioctl+0x564/0x740 [ 2741.691588][T31005] ? loop_remove+0xa0/0xa0 [ 2741.695985][T31005] ? __lru_cache_add+0x1bf/0x210 [ 2741.700901][T31005] ? memset+0x1f/0x40 [ 2741.704861][T31005] ? fsnotify+0x1332/0x13f0 [ 2741.709343][T31005] ? loop_remove+0xa0/0xa0 [ 2741.713740][T31005] do_vfs_ioctl+0x744/0x1730 [ 2741.718309][T31005] ? selinux_file_ioctl+0x723/0x970 [ 2741.723485][T31005] ? ioctl_preallocate+0x250/0x250 [ 2741.728578][T31005] ? __fget+0x40c/0x4a0 [ 2741.732713][T31005] ? fget_many+0x20/0x20 [ 2741.736934][T31005] ? check_preemption_disabled+0x154/0x330 [ 2741.742717][T31005] ? debug_smp_processor_id+0x20/0x20 [ 2741.748069][T31005] ? security_file_ioctl+0x9d/0xb0 [ 2741.753158][T31005] __x64_sys_ioctl+0xd4/0x110 [ 2741.757813][T31005] do_syscall_64+0xcb/0x1c0 [ 2741.762301][T31005] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2741.768744][T31005] ------------[ cut here ]------------ [ 2741.774207][T31005] WARNING: CPU: 0 PID: 31005 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2741.783286][T31005] Modules linked in: [ 2741.787163][T31005] CPU: 0 PID: 31005 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2741.798751][T31005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2741.808782][T31005] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2741.814554][T31005] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2741.834134][T31005] RSP: 0018:ffff8881f04f7a00 EFLAGS: 00010246 [ 2741.840175][T31005] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2741.848117][T31005] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2741.856057][T31005] RBP: ffff8881f04f7b40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2741.863997][T31005] R10: ffffffff84800000 R11: 1ffff1103e09ee00 R12: ffff8881dd37c000 [ 2741.871937][T31005] R13: dffffc0000000000 R14: ffff8881dd37c070 R15: 1ffff1103ba6f89d [ 2741.879883][T31005] FS: 00007fc9d5138700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2741.888778][T31005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2741.895334][T31005] CR2: 00007ffde35d8de8 CR3: 00000001ecade000 CR4: 00000000003406f0 [ 2741.903275][T31005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2741.911213][T31005] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2741.919150][T31005] Call Trace: [ 2741.922412][T31005] ? device_add_disk+0x30/0x30 [ 2741.927142][T31005] ? vsprintf+0x30/0x30 [ 2741.931264][T31005] ? device_initialize+0x1c7/0x3d0 [ 2741.936343][T31005] ? __alloc_disk_node+0x326/0x380 [ 2741.941419][T31005] loop_add+0x554/0x710 [ 2741.945550][T31005] loop_control_ioctl+0x564/0x740 [ 2741.950548][T31005] ? loop_remove+0xa0/0xa0 [ 2741.954930][T31005] ? __lru_cache_add+0x1bf/0x210 [ 2741.959835][T31005] ? memset+0x1f/0x40 [ 2741.963784][T31005] ? fsnotify+0x1332/0x13f0 [ 2741.968270][T31005] ? loop_remove+0xa0/0xa0 [ 2741.972660][T31005] do_vfs_ioctl+0x744/0x1730 [ 2741.977216][T31005] ? selinux_file_ioctl+0x723/0x970 [ 2741.982384][T31005] ? ioctl_preallocate+0x250/0x250 [ 2741.987461][T31005] ? __fget+0x40c/0x4a0 [ 2741.991581][T31005] ? fget_many+0x20/0x20 [ 2741.995788][T31005] ? check_preemption_disabled+0x154/0x330 [ 2742.001557][T31005] ? debug_smp_processor_id+0x20/0x20 03:37:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x20000086}, 0x0) 03:37:28 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 57) 03:37:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x7fffefe0}, 0x0) 03:37:28 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2742.006895][T31005] ? security_file_ioctl+0x9d/0xb0 [ 2742.011975][T31005] __x64_sys_ioctl+0xd4/0x110 [ 2742.016620][T31005] do_syscall_64+0xcb/0x1c0 [ 2742.021095][T31005] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2742.026955][T31005] ---[ end trace b61d2c152d24eb22 ]--- 03:37:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x2}, 0x0) 03:37:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:37:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x80) [ 2742.089954][T31025] FAULT_INJECTION: forcing a failure. [ 2742.089954][T31025] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.103039][T31025] CPU: 0 PID: 31025 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2742.114740][T31025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2742.124779][T31025] Call Trace: [ 2742.128058][T31025] dump_stack+0x1d8/0x241 [ 2742.132570][T31025] ? panic+0x73e/0x73e [ 2742.136717][T31025] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2742.142502][T31025] ? idr_alloc+0x2f0/0x2f0 [ 2742.146916][T31025] should_fail+0x709/0x870 [ 2742.151322][T31025] ? setup_fault_attr+0x3d0/0x3d0 [ 2742.156318][T31025] ? security_kernfs_init_security+0x9a/0xb0 [ 2742.162271][T31025] ? __kernfs_new_node+0x465/0x6d0 [ 2742.167351][T31025] ? __kernfs_new_node+0xdb/0x6d0 [ 2742.172340][T31025] should_failslab+0x5/0x20 [ 2742.176820][T31025] kmem_cache_alloc+0x24/0x210 [ 2742.181558][T31025] __kernfs_new_node+0xdb/0x6d0 [ 2742.186376][T31025] ? kernfs_new_node+0x160/0x160 [ 2742.191281][T31025] ? kernfs_activate+0x3fc/0x420 [ 2742.196184][T31025] ? mutex_unlock+0x19/0x40 [ 2742.200661][T31025] ? kernfs_add_one+0x4a3/0x5c0 [ 2742.205492][T31025] kernfs_new_node+0x95/0x160 [ 2742.210173][T31025] __kernfs_create_file+0x45/0x260 [ 2742.215252][T31025] sysfs_add_file_mode_ns+0x292/0x340 [ 2742.220602][T31025] sysfs_create_file_ns+0x191/0x2a0 [ 2742.225774][T31025] ? sysfs_create_group+0x20/0x20 [ 2742.230764][T31025] ? sysfs_add_file_mode_ns+0x340/0x340 [ 2742.236279][T31025] ? device_create_file+0xe8/0x1b0 [ 2742.241354][T31025] device_add_attrs+0x2be/0x370 [ 2742.246172][T31025] device_add+0x505/0xbc0 [ 2742.250470][T31025] device_create_vargs+0x1b8/0x210 [ 2742.255705][T31025] device_create+0xea/0x130 [ 2742.260188][T31025] ? device_create_vargs+0x210/0x210 [ 2742.265447][T31025] bdi_register_va+0x89/0x5e0 [ 2742.270092][T31025] bdi_register+0xd1/0x120 [ 2742.274477][T31025] ? __device_add_disk+0x539/0x1200 [ 2742.279643][T31025] ? bdi_register_va+0x5e0/0x5e0 [ 2742.284555][T31025] ? percpu_ref_resurrect+0x113/0x190 [ 2742.289912][T31025] bdi_register_owner+0x56/0xf0 [ 2742.294746][T31025] __device_add_disk+0x5b8/0x1200 [ 2742.299741][T31025] ? device_add_disk+0x30/0x30 [ 2742.304478][T31025] ? vsprintf+0x30/0x30 [ 2742.308613][T31025] ? device_initialize+0x1c7/0x3d0 [ 2742.313696][T31025] ? __alloc_disk_node+0x326/0x380 [ 2742.318775][T31025] loop_add+0x554/0x710 [ 2742.322912][T31025] loop_control_ioctl+0x564/0x740 [ 2742.327908][T31025] ? loop_remove+0xa0/0xa0 [ 2742.332297][T31025] ? __lru_cache_add+0x1bf/0x210 [ 2742.337210][T31025] ? memset+0x1f/0x40 [ 2742.341160][T31025] ? fsnotify+0x1332/0x13f0 [ 2742.345633][T31025] ? loop_remove+0xa0/0xa0 [ 2742.350019][T31025] do_vfs_ioctl+0x744/0x1730 [ 2742.354579][T31025] ? selinux_file_ioctl+0x723/0x970 [ 2742.359751][T31025] ? ioctl_preallocate+0x250/0x250 [ 2742.364829][T31025] ? __fget+0x40c/0x4a0 [ 2742.368956][T31025] ? fget_many+0x20/0x20 [ 2742.373165][T31025] ? check_preemption_disabled+0x154/0x330 [ 2742.378936][T31025] ? debug_smp_processor_id+0x20/0x20 [ 2742.384277][T31025] ? security_file_ioctl+0x9d/0xb0 [ 2742.389357][T31025] __x64_sys_ioctl+0xd4/0x110 [ 2742.394005][T31025] do_syscall_64+0xcb/0x1c0 [ 2742.398494][T31025] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2742.404682][T31025] ------------[ cut here ]------------ [ 2742.410137][T31025] WARNING: CPU: 0 PID: 31025 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2742.419204][T31025] Modules linked in: [ 2742.423069][T31025] CPU: 0 PID: 31025 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2742.434653][T31025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2742.444692][T31025] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2742.450473][T31025] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2742.470050][T31025] RSP: 0018:ffff8881eec07a00 EFLAGS: 00010246 [ 2742.476083][T31025] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2742.484025][T31025] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2742.491963][T31025] RBP: ffff8881eec07b40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2742.499902][T31025] R10: ffffffff84800000 R11: 1ffff1103dd80e00 R12: ffff8881e3417000 [ 2742.507848][T31025] R13: dffffc0000000000 R14: ffff8881e3417070 R15: 1ffff1103c682e9d [ 2742.515796][T31025] FS: 00007fc9d5138700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2742.524698][T31025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2742.531250][T31025] CR2: 00007fc9d5137ff8 CR3: 00000001cf31c000 CR4: 00000000003406f0 [ 2742.539199][T31025] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2742.547150][T31025] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2742.555092][T31025] Call Trace: [ 2742.558354][T31025] ? device_add_disk+0x30/0x30 [ 2742.563091][T31025] ? vsprintf+0x30/0x30 [ 2742.567216][T31025] ? device_initialize+0x1c7/0x3d0 [ 2742.572298][T31025] ? __alloc_disk_node+0x326/0x380 [ 2742.577386][T31025] loop_add+0x554/0x710 [ 2742.581519][T31025] loop_control_ioctl+0x564/0x740 [ 2742.586508][T31025] ? loop_remove+0xa0/0xa0 [ 2742.590893][T31025] ? __lru_cache_add+0x1bf/0x210 [ 2742.595795][T31025] ? memset+0x1f/0x40 [ 2742.599743][T31025] ? fsnotify+0x1332/0x13f0 [ 2742.604215][T31025] ? loop_remove+0xa0/0xa0 [ 2742.608613][T31025] do_vfs_ioctl+0x744/0x1730 [ 2742.613259][T31025] ? selinux_file_ioctl+0x723/0x970 [ 2742.618430][T31025] ? ioctl_preallocate+0x250/0x250 [ 2742.623535][T31025] ? __fget+0x40c/0x4a0 [ 2742.627668][T31025] ? fget_many+0x20/0x20 [ 2742.631878][T31025] ? check_preemption_disabled+0x154/0x330 [ 2742.637650][T31025] ? debug_smp_processor_id+0x20/0x20 [ 2742.642989][T31025] ? security_file_ioctl+0x9d/0xb0 [ 2742.648066][T31025] __x64_sys_ioctl+0xd4/0x110 [ 2742.652710][T31025] do_syscall_64+0xcb/0x1c0 [ 2742.657184][T31025] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2742.663038][T31025] ---[ end trace b61d2c152d24eb23 ]--- 03:37:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x4}, 0x0) 03:37:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x80) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x80) (async) 03:37:29 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 58) 03:37:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) [ 2742.693279][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2742.718629][T31044] FAULT_INJECTION: forcing a failure. [ 2742.718629][T31044] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.731332][T31044] CPU: 0 PID: 31044 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2742.742943][T31044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2742.752977][T31044] Call Trace: [ 2742.756263][T31044] dump_stack+0x1d8/0x241 [ 2742.760572][T31044] ? panic+0x73e/0x73e [ 2742.764619][T31044] ? mutex_unlock+0x19/0x40 [ 2742.769106][T31044] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2742.774878][T31044] ? selinux_kernfs_init_security+0x155/0x760 [ 2742.780923][T31044] ? idr_alloc_cyclic+0x36e/0x5e0 [ 2742.785920][T31044] should_fail+0x709/0x870 [ 2742.790303][T31044] ? setup_fault_attr+0x3d0/0x3d0 [ 2742.795306][T31044] ? _raw_spin_lock+0xa3/0x1b0 [ 2742.800036][T31044] ? __kernfs_new_node+0xdb/0x6d0 [ 2742.805030][T31044] should_failslab+0x5/0x20 [ 2742.809500][T31044] kmem_cache_alloc+0x24/0x210 [ 2742.814241][T31044] __kernfs_new_node+0xdb/0x6d0 [ 2742.819061][T31044] ? mutex_lock+0xa6/0x110 [ 2742.823453][T31044] ? kernfs_new_node+0x160/0x160 [ 2742.828358][T31044] kernfs_new_node+0x95/0x160 [ 2742.833027][T31044] __kernfs_create_file+0x45/0x260 [ 2742.838106][T31044] sysfs_add_file_mode_ns+0x292/0x340 [ 2742.843447][T31044] internal_create_group+0x55e/0xf50 [ 2742.848700][T31044] ? mutex_unlock+0x19/0x40 [ 2742.853172][T31044] ? sysfs_create_group+0x20/0x20 [ 2742.858169][T31044] sysfs_create_groups+0x5d/0x130 [ 2742.863171][T31044] device_add_attrs+0x87/0x370 [ 2742.867910][T31044] device_add+0x505/0xbc0 [ 2742.872217][T31044] device_create_vargs+0x1b8/0x210 [ 2742.877300][T31044] device_create+0xea/0x130 [ 2742.881772][T31044] ? device_create_vargs+0x210/0x210 [ 2742.887026][T31044] bdi_register_va+0x89/0x5e0 [ 2742.891676][T31044] bdi_register+0xd1/0x120 [ 2742.896077][T31044] ? __device_add_disk+0x539/0x1200 [ 2742.901259][T31044] ? bdi_register_va+0x5e0/0x5e0 [ 2742.906165][T31044] ? percpu_ref_resurrect+0x113/0x190 [ 2742.911503][T31044] bdi_register_owner+0x56/0xf0 [ 2742.916320][T31044] __device_add_disk+0x5b8/0x1200 [ 2742.921324][T31044] ? device_add_disk+0x30/0x30 [ 2742.926064][T31044] ? vsprintf+0x30/0x30 [ 2742.930192][T31044] ? device_initialize+0x1c7/0x3d0 [ 2742.935271][T31044] ? __alloc_disk_node+0x326/0x380 [ 2742.940351][T31044] loop_add+0x554/0x710 [ 2742.944477][T31044] loop_control_ioctl+0x564/0x740 [ 2742.949468][T31044] ? loop_remove+0xa0/0xa0 [ 2742.953859][T31044] ? __lru_cache_add+0x1bf/0x210 [ 2742.958772][T31044] ? memset+0x1f/0x40 [ 2742.962721][T31044] ? fsnotify+0x1332/0x13f0 [ 2742.967193][T31044] ? loop_remove+0xa0/0xa0 [ 2742.971574][T31044] do_vfs_ioctl+0x744/0x1730 [ 2742.976133][T31044] ? selinux_file_ioctl+0x723/0x970 [ 2742.981297][T31044] ? ioctl_preallocate+0x250/0x250 [ 2742.986373][T31044] ? __fget+0x40c/0x4a0 [ 2742.990495][T31044] ? fget_many+0x20/0x20 03:37:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x6}, 0x0) [ 2742.994713][T31044] ? check_preemption_disabled+0x154/0x330 [ 2743.000492][T31044] ? debug_smp_processor_id+0x20/0x20 [ 2743.005831][T31044] ? security_file_ioctl+0x9d/0xb0 [ 2743.010913][T31044] __x64_sys_ioctl+0xd4/0x110 [ 2743.015563][T31044] do_syscall_64+0xcb/0x1c0 [ 2743.020034][T31044] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2743.030190][T31044] ------------[ cut here ]------------ [ 2743.035663][T31044] WARNING: CPU: 1 PID: 31044 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2743.044744][T31044] Modules linked in: [ 2743.048613][T31044] CPU: 1 PID: 31044 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2743.060200][T31044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2743.070232][T31044] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2743.076002][T31044] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2743.095575][T31044] RSP: 0018:ffff8881e7d4fa00 EFLAGS: 00010246 [ 2743.101622][T31044] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2743.109567][T31044] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2743.117510][T31044] RBP: ffff8881e7d4fb40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2743.125451][T31044] R10: ffffffff84800000 R11: 1ffff1103cfa9e00 R12: ffff8881e259b000 [ 2743.133390][T31044] R13: dffffc0000000000 R14: ffff8881e259b070 R15: 1ffff1103c4b369d [ 2743.141330][T31044] FS: 00007fc9d5138700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2743.150227][T31044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2743.156783][T31044] CR2: 0000001b2f621000 CR3: 00000001f0a46000 CR4: 00000000003406e0 [ 2743.164737][T31044] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2743.172697][T31044] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2743.180637][T31044] Call Trace: [ 2743.183904][T31044] ? device_add_disk+0x30/0x30 [ 2743.188639][T31044] ? vsprintf+0x30/0x30 [ 2743.192781][T31044] ? device_initialize+0x1c7/0x3d0 [ 2743.197867][T31044] ? __alloc_disk_node+0x326/0x380 [ 2743.202946][T31044] loop_add+0x554/0x710 [ 2743.207079][T31044] loop_control_ioctl+0x564/0x740 [ 2743.212090][T31044] ? loop_remove+0xa0/0xa0 [ 2743.216476][T31044] ? __lru_cache_add+0x1bf/0x210 [ 2743.221380][T31044] ? memset+0x1f/0x40 [ 2743.225333][T31044] ? fsnotify+0x1332/0x13f0 [ 2743.229804][T31044] ? loop_remove+0xa0/0xa0 [ 2743.234187][T31044] do_vfs_ioctl+0x744/0x1730 [ 2743.238763][T31044] ? selinux_file_ioctl+0x723/0x970 03:37:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x600}, 0x0) 03:37:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x80) 03:37:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x80c1) 03:37:29 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 59) [ 2743.243940][T31044] ? ioctl_preallocate+0x250/0x250 [ 2743.249019][T31044] ? __fget+0x40c/0x4a0 [ 2743.253146][T31044] ? fget_many+0x20/0x20 [ 2743.257361][T31044] ? check_preemption_disabled+0x154/0x330 [ 2743.263135][T31044] ? debug_smp_processor_id+0x20/0x20 [ 2743.268475][T31044] ? security_file_ioctl+0x9d/0xb0 [ 2743.273555][T31044] __x64_sys_ioctl+0xd4/0x110 [ 2743.278200][T31044] do_syscall_64+0xcb/0x1c0 [ 2743.282676][T31044] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2743.288537][T31044] ---[ end trace b61d2c152d24eb24 ]--- 03:37:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x4000}, 0x0) 03:37:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x80c1) 03:37:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d95e181"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2743.369841][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2743.380722][T31063] FAULT_INJECTION: forcing a failure. [ 2743.380722][T31063] name failslab, interval 1, probability 0, space 0, times 0 [ 2743.393621][T31063] CPU: 0 PID: 31063 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2743.405241][T31063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2743.415279][T31063] Call Trace: [ 2743.418545][T31063] dump_stack+0x1d8/0x241 [ 2743.422847][T31063] ? panic+0x73e/0x73e [ 2743.426884][T31063] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2743.432655][T31063] ? idr_get_free+0x6a3/0x840 [ 2743.437298][T31063] ? mutex_unlock+0x19/0x40 [ 2743.441767][T31063] should_fail+0x709/0x870 [ 2743.446157][T31063] ? setup_fault_attr+0x3d0/0x3d0 [ 2743.451149][T31063] ? idr_alloc+0x2f0/0x2f0 [ 2743.455533][T31063] ? __kernfs_new_node+0xdb/0x6d0 [ 2743.460520][T31063] should_failslab+0x5/0x20 [ 2743.464992][T31063] kmem_cache_alloc+0x24/0x210 [ 2743.469734][T31063] __kernfs_new_node+0xdb/0x6d0 [ 2743.474554][T31063] ? kernfs_new_node+0x160/0x160 [ 2743.479458][T31063] ? mutex_lock+0xa6/0x110 [ 2743.483847][T31063] ? mutex_trylock+0xa0/0xa0 [ 2743.488417][T31063] ? kernfs_activate+0x3fc/0x420 [ 2743.493328][T31063] kernfs_new_node+0x95/0x160 [ 2743.497980][T31063] __kernfs_create_file+0x45/0x260 [ 2743.503072][T31063] sysfs_add_file_mode_ns+0x292/0x340 [ 2743.508414][T31063] sysfs_merge_group+0x207/0x460 [ 2743.513319][T31063] ? sysfs_remove_groups+0xb0/0xb0 [ 2743.518403][T31063] ? device_create_file+0xe8/0x1b0 [ 2743.523480][T31063] ? bus_add_device+0x92/0x3f0 [ 2743.528211][T31063] dpm_sysfs_add+0xc0/0x260 [ 2743.532687][T31063] device_add+0x547/0xbc0 [ 2743.536986][T31063] device_create_vargs+0x1b8/0x210 [ 2743.542067][T31063] device_create+0xea/0x130 [ 2743.546535][T31063] ? device_create_vargs+0x210/0x210 [ 2743.551789][T31063] bdi_register_va+0x89/0x5e0 [ 2743.556430][T31063] bdi_register+0xd1/0x120 [ 2743.560814][T31063] ? __device_add_disk+0x539/0x1200 [ 2743.565979][T31063] ? bdi_register_va+0x5e0/0x5e0 [ 2743.570883][T31063] ? percpu_ref_resurrect+0x113/0x190 [ 2743.576229][T31063] bdi_register_owner+0x56/0xf0 [ 2743.581050][T31063] __device_add_disk+0x5b8/0x1200 [ 2743.586042][T31063] ? device_add_disk+0x30/0x30 [ 2743.590776][T31063] ? vsprintf+0x30/0x30 [ 2743.594900][T31063] ? device_initialize+0x1c7/0x3d0 [ 2743.599983][T31063] ? __alloc_disk_node+0x326/0x380 [ 2743.605058][T31063] loop_add+0x554/0x710 [ 2743.609183][T31063] loop_control_ioctl+0x564/0x740 [ 2743.614173][T31063] ? loop_remove+0xa0/0xa0 [ 2743.618557][T31063] ? __lru_cache_add+0x1bf/0x210 [ 2743.623467][T31063] ? memset+0x1f/0x40 [ 2743.627417][T31063] ? fsnotify+0x1332/0x13f0 [ 2743.631889][T31063] ? loop_remove+0xa0/0xa0 [ 2743.636281][T31063] do_vfs_ioctl+0x744/0x1730 [ 2743.640848][T31063] ? selinux_file_ioctl+0x723/0x970 [ 2743.646013][T31063] ? ioctl_preallocate+0x250/0x250 [ 2743.651098][T31063] ? __fget+0x40c/0x4a0 [ 2743.655220][T31063] ? fget_many+0x20/0x20 [ 2743.659430][T31063] ? check_preemption_disabled+0x154/0x330 [ 2743.665200][T31063] ? debug_smp_processor_id+0x20/0x20 03:37:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x80c1) 03:37:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x38000}, 0x0) [ 2743.670539][T31063] ? security_file_ioctl+0x9d/0xb0 [ 2743.675724][T31063] __x64_sys_ioctl+0xd4/0x110 [ 2743.680375][T31063] do_syscall_64+0xcb/0x1c0 [ 2743.684854][T31063] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2743.694150][T31063] ------------[ cut here ]------------ [ 2743.699622][T31063] WARNING: CPU: 0 PID: 31063 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2743.708703][T31063] Modules linked in: [ 2743.712584][T31063] CPU: 0 PID: 31063 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2743.724168][T31063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2743.734202][T31063] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2743.739981][T31063] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2743.759550][T31063] RSP: 0018:ffff8881cc9bfa00 EFLAGS: 00010246 [ 2743.765580][T31063] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2743.773523][T31063] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2743.781465][T31063] RBP: ffff8881cc9bfb40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2743.789404][T31063] R10: ffffffff84800000 R11: 1ffff11039937e00 R12: ffff8881e3026000 [ 2743.797342][T31063] R13: dffffc0000000000 R14: ffff8881e3026070 R15: 1ffff1103c604c9d [ 2743.805285][T31063] FS: 00007fc9d5138700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2743.814181][T31063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2743.820757][T31063] CR2: 0000555556394728 CR3: 00000001e2302000 CR4: 00000000003406f0 [ 2743.828722][T31063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2743.836663][T31063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2743.844599][T31063] Call Trace: [ 2743.847863][T31063] ? device_add_disk+0x30/0x30 [ 2743.852591][T31063] ? vsprintf+0x30/0x30 [ 2743.856738][T31063] ? device_initialize+0x1c7/0x3d0 [ 2743.861822][T31063] ? __alloc_disk_node+0x326/0x380 [ 2743.866902][T31063] loop_add+0x554/0x710 [ 2743.871030][T31063] loop_control_ioctl+0x564/0x740 [ 2743.876106][T31063] ? loop_remove+0xa0/0xa0 [ 2743.880492][T31063] ? __lru_cache_add+0x1bf/0x210 [ 2743.885396][T31063] ? memset+0x1f/0x40 [ 2743.889359][T31063] ? fsnotify+0x1332/0x13f0 [ 2743.893830][T31063] ? loop_remove+0xa0/0xa0 [ 2743.898211][T31063] do_vfs_ioctl+0x744/0x1730 [ 2743.902790][T31063] ? selinux_file_ioctl+0x723/0x970 [ 2743.907974][T31063] ? ioctl_preallocate+0x250/0x250 [ 2743.913060][T31063] ? __fget+0x40c/0x4a0 [ 2743.917183][T31063] ? fget_many+0x20/0x20 03:37:30 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x20000000, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x800300}, 0x0) 03:37:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x1000000}, 0x0) 03:37:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:30 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 60) [ 2743.921412][T31063] ? check_preemption_disabled+0x154/0x330 [ 2743.927189][T31063] ? debug_smp_processor_id+0x20/0x20 [ 2743.932527][T31063] ? security_file_ioctl+0x9d/0xb0 [ 2743.937602][T31063] __x64_sys_ioctl+0xd4/0x110 [ 2743.942247][T31063] do_syscall_64+0xcb/0x1c0 [ 2743.946723][T31063] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2743.952582][T31063] ---[ end trace b61d2c152d24eb25 ]--- 03:37:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x2000000}, 0x0) 03:37:30 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x20000000, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:30 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:30 executing program 3: socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:30 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x20000000, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x20000000, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, [@sadb_sa={0x2}]}, 0x20}}, 0x0) [ 2744.012994][T31086] FAULT_INJECTION: forcing a failure. [ 2744.012994][T31086] name failslab, interval 1, probability 0, space 0, times 0 [ 2744.028963][T31086] CPU: 0 PID: 31086 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2744.040582][T31086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2744.050611][T31086] Call Trace: [ 2744.053885][T31086] dump_stack+0x1d8/0x241 [ 2744.058183][T31086] ? panic+0x73e/0x73e [ 2744.062219][T31086] ? mutex_unlock+0x19/0x40 [ 2744.066688][T31086] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2744.072460][T31086] ? selinux_kernfs_init_security+0x155/0x760 [ 2744.078489][T31086] ? idr_alloc_cyclic+0x36e/0x5e0 [ 2744.083482][T31086] should_fail+0x709/0x870 [ 2744.087874][T31086] ? setup_fault_attr+0x3d0/0x3d0 [ 2744.092870][T31086] ? _raw_spin_lock+0xa3/0x1b0 [ 2744.097602][T31086] ? __kernfs_new_node+0xdb/0x6d0 [ 2744.102591][T31086] should_failslab+0x5/0x20 [ 2744.107063][T31086] kmem_cache_alloc+0x24/0x210 [ 2744.111826][T31086] __kernfs_new_node+0xdb/0x6d0 [ 2744.116666][T31086] ? mutex_lock+0xa6/0x110 [ 2744.121061][T31086] ? kernfs_new_node+0x160/0x160 [ 2744.125966][T31086] ? mutex_lock+0xa6/0x110 [ 2744.130349][T31086] ? mutex_trylock+0xa0/0xa0 [ 2744.134908][T31086] kernfs_new_node+0x95/0x160 [ 2744.139554][T31086] __kernfs_create_file+0x45/0x260 [ 2744.144666][T31086] sysfs_add_file_mode_ns+0x292/0x340 [ 2744.150013][T31086] sysfs_merge_group+0x207/0x460 [ 2744.154925][T31086] ? sysfs_remove_groups+0xb0/0xb0 [ 2744.160010][T31086] ? device_create_file+0xe8/0x1b0 [ 2744.165086][T31086] ? bus_add_device+0x92/0x3f0 [ 2744.169822][T31086] dpm_sysfs_add+0xc0/0x260 [ 2744.174292][T31086] device_add+0x547/0xbc0 [ 2744.178593][T31086] device_create_vargs+0x1b8/0x210 [ 2744.183673][T31086] device_create+0xea/0x130 [ 2744.188182][T31086] ? device_create_vargs+0x210/0x210 [ 2744.193438][T31086] bdi_register_va+0x89/0x5e0 [ 2744.198090][T31086] bdi_register+0xd1/0x120 [ 2744.202483][T31086] ? __device_add_disk+0x539/0x1200 [ 2744.207646][T31086] ? bdi_register_va+0x5e0/0x5e0 [ 2744.212550][T31086] ? percpu_ref_resurrect+0x113/0x190 [ 2744.217888][T31086] bdi_register_owner+0x56/0xf0 [ 2744.222708][T31086] __device_add_disk+0x5b8/0x1200 [ 2744.227700][T31086] ? device_add_disk+0x30/0x30 [ 2744.232430][T31086] ? vsprintf+0x30/0x30 [ 2744.236553][T31086] ? device_initialize+0x1c7/0x3d0 [ 2744.241640][T31086] ? __alloc_disk_node+0x326/0x380 [ 2744.246725][T31086] loop_add+0x554/0x710 [ 2744.250855][T31086] loop_control_ioctl+0x564/0x740 [ 2744.255851][T31086] ? loop_remove+0xa0/0xa0 [ 2744.260234][T31086] ? __lru_cache_add+0x1bf/0x210 [ 2744.265138][T31086] ? memset+0x1f/0x40 [ 2744.269085][T31086] ? fsnotify+0x1332/0x13f0 [ 2744.273556][T31086] ? loop_remove+0xa0/0xa0 [ 2744.277945][T31086] do_vfs_ioctl+0x744/0x1730 [ 2744.282503][T31086] ? selinux_file_ioctl+0x723/0x970 [ 2744.287695][T31086] ? ioctl_preallocate+0x250/0x250 [ 2744.292775][T31086] ? __fget+0x40c/0x4a0 [ 2744.296895][T31086] ? fget_many+0x20/0x20 [ 2744.301111][T31086] ? check_preemption_disabled+0x154/0x330 [ 2744.307019][T31086] ? debug_smp_processor_id+0x20/0x20 03:37:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x4000000}, 0x0) [ 2744.312366][T31086] ? security_file_ioctl+0x9d/0xb0 [ 2744.317453][T31086] __x64_sys_ioctl+0xd4/0x110 [ 2744.322106][T31086] do_syscall_64+0xcb/0x1c0 [ 2744.326583][T31086] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2744.341508][T31086] ------------[ cut here ]------------ [ 2744.346982][T31086] WARNING: CPU: 1 PID: 31086 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2744.356575][T31086] Modules linked in: [ 2744.360452][T31086] CPU: 1 PID: 31086 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2744.372046][T31086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2744.382080][T31086] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2744.387852][T31086] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2744.407444][T31086] RSP: 0018:ffff8881ea3afa00 EFLAGS: 00010246 [ 2744.413481][T31086] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2744.421422][T31086] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2744.429361][T31086] RBP: ffff8881ea3afb40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2744.437300][T31086] R10: ffffffff84800000 R11: 1ffff1103d475e00 R12: ffff8881e050f000 [ 2744.445239][T31086] R13: dffffc0000000000 R14: ffff8881e050f070 R15: 1ffff1103c0a1e9d [ 2744.453177][T31086] FS: 00007fc9d5138700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2744.462071][T31086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2744.468623][T31086] CR2: 00000000200000c0 CR3: 00000001edc6c000 CR4: 00000000003406e0 [ 2744.476565][T31086] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2744.484503][T31086] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2744.492463][T31086] Call Trace: [ 2744.495829][T31086] ? device_add_disk+0x30/0x30 [ 2744.500559][T31086] ? vsprintf+0x30/0x30 [ 2744.504699][T31086] ? device_initialize+0x1c7/0x3d0 [ 2744.509875][T31086] ? __alloc_disk_node+0x326/0x380 [ 2744.515038][T31086] loop_add+0x554/0x710 [ 2744.519163][T31086] loop_control_ioctl+0x564/0x740 [ 2744.524154][T31086] ? loop_remove+0xa0/0xa0 [ 2744.528537][T31086] ? __lru_cache_add+0x1bf/0x210 [ 2744.533442][T31086] ? memset+0x1f/0x40 [ 2744.537391][T31086] ? fsnotify+0x1332/0x13f0 [ 2744.541868][T31086] ? loop_remove+0xa0/0xa0 [ 2744.546263][T31086] do_vfs_ioctl+0x744/0x1730 [ 2744.550828][T31086] ? selinux_file_ioctl+0x723/0x970 [ 2744.555992][T31086] ? ioctl_preallocate+0x250/0x250 [ 2744.561076][T31086] ? __fget+0x40c/0x4a0 03:37:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x6000000}, 0x0) 03:37:31 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 61) 03:37:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x40000000}, 0x0) [ 2744.565198][T31086] ? fget_many+0x20/0x20 [ 2744.569409][T31086] ? check_preemption_disabled+0x154/0x330 [ 2744.575190][T31086] ? debug_smp_processor_id+0x20/0x20 [ 2744.580536][T31086] ? security_file_ioctl+0x9d/0xb0 [ 2744.585611][T31086] __x64_sys_ioctl+0xd4/0x110 [ 2744.590255][T31086] do_syscall_64+0xcb/0x1c0 [ 2744.594725][T31086] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2744.600583][T31086] ---[ end trace b61d2c152d24eb26 ]--- 03:37:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x7fffefe0}, 0x0) 03:37:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:31 executing program 3: socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0xe0efff7f}, 0x0) 03:37:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x4004840) [ 2744.688933][T31112] FAULT_INJECTION: forcing a failure. [ 2744.688933][T31112] name failslab, interval 1, probability 0, space 0, times 0 [ 2744.701810][T31112] CPU: 0 PID: 31112 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2744.713417][T31112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2744.723447][T31112] Call Trace: [ 2744.726714][T31112] dump_stack+0x1d8/0x241 [ 2744.731113][T31112] ? panic+0x73e/0x73e [ 2744.735161][T31112] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2744.740942][T31112] ? idr_get_free+0x6a3/0x840 [ 2744.745598][T31112] ? mutex_unlock+0x19/0x40 [ 2744.750086][T31112] should_fail+0x709/0x870 [ 2744.754494][T31112] ? setup_fault_attr+0x3d0/0x3d0 [ 2744.759494][T31112] ? idr_alloc+0x2f0/0x2f0 [ 2744.763895][T31112] ? __kernfs_new_node+0xdb/0x6d0 [ 2744.768896][T31112] should_failslab+0x5/0x20 [ 2744.773370][T31112] kmem_cache_alloc+0x24/0x210 [ 2744.778104][T31112] __kernfs_new_node+0xdb/0x6d0 [ 2744.782926][T31112] ? kernfs_new_node+0x160/0x160 [ 2744.787832][T31112] ? mutex_lock+0xa6/0x110 [ 2744.792215][T31112] ? mutex_trylock+0xa0/0xa0 [ 2744.796785][T31112] ? kernfs_activate+0x3fc/0x420 [ 2744.801693][T31112] kernfs_new_node+0x95/0x160 [ 2744.806458][T31112] __kernfs_create_file+0x45/0x260 [ 2744.811540][T31112] sysfs_add_file_mode_ns+0x292/0x340 [ 2744.816885][T31112] sysfs_merge_group+0x207/0x460 [ 2744.821816][T31112] ? sysfs_remove_groups+0xb0/0xb0 [ 2744.826901][T31112] ? device_create_file+0xe8/0x1b0 [ 2744.831981][T31112] ? bus_add_device+0x92/0x3f0 [ 2744.836713][T31112] dpm_sysfs_add+0xc0/0x260 [ 2744.841191][T31112] device_add+0x547/0xbc0 [ 2744.845493][T31112] device_create_vargs+0x1b8/0x210 [ 2744.850572][T31112] device_create+0xea/0x130 [ 2744.855042][T31112] ? device_create_vargs+0x210/0x210 [ 2744.860314][T31112] bdi_register_va+0x89/0x5e0 [ 2744.864972][T31112] bdi_register+0xd1/0x120 [ 2744.869383][T31112] ? __device_add_disk+0x539/0x1200 [ 2744.874557][T31112] ? bdi_register_va+0x5e0/0x5e0 [ 2744.879472][T31112] ? percpu_ref_resurrect+0x113/0x190 [ 2744.884817][T31112] bdi_register_owner+0x56/0xf0 [ 2744.889640][T31112] __device_add_disk+0x5b8/0x1200 [ 2744.894672][T31112] ? device_add_disk+0x30/0x30 [ 2744.899412][T31112] ? vsprintf+0x30/0x30 [ 2744.903540][T31112] ? device_initialize+0x1c7/0x3d0 [ 2744.908622][T31112] ? __alloc_disk_node+0x326/0x380 [ 2744.913707][T31112] loop_add+0x554/0x710 [ 2744.917846][T31112] loop_control_ioctl+0x564/0x740 [ 2744.922848][T31112] ? loop_remove+0xa0/0xa0 [ 2744.927235][T31112] ? __lru_cache_add+0x1bf/0x210 [ 2744.932140][T31112] ? memset+0x1f/0x40 [ 2744.936092][T31112] ? fsnotify+0x1332/0x13f0 [ 2744.940564][T31112] ? loop_remove+0xa0/0xa0 [ 2744.944951][T31112] do_vfs_ioctl+0x744/0x1730 [ 2744.949516][T31112] ? selinux_file_ioctl+0x723/0x970 [ 2744.954718][T31112] ? ioctl_preallocate+0x250/0x250 [ 2744.959810][T31112] ? __fget+0x40c/0x4a0 [ 2744.964041][T31112] ? fget_many+0x20/0x20 [ 2744.968254][T31112] ? check_preemption_disabled+0x154/0x330 [ 2744.974029][T31112] ? debug_smp_processor_id+0x20/0x20 [ 2744.979370][T31112] ? security_file_ioctl+0x9d/0xb0 [ 2744.984452][T31112] __x64_sys_ioctl+0xd4/0x110 03:37:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0xffffff7f}, 0x0) 03:37:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x4004840) [ 2744.989099][T31112] do_syscall_64+0xcb/0x1c0 [ 2744.993572][T31112] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2745.005604][T31112] ------------[ cut here ]------------ [ 2745.011089][T31112] WARNING: CPU: 0 PID: 31112 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2745.020175][T31112] Modules linked in: [ 2745.024063][T31112] CPU: 0 PID: 31112 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2745.035656][T31112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2745.045698][T31112] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2745.051480][T31112] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2745.071055][T31112] RSP: 0018:ffff8881cf3d7a00 EFLAGS: 00010246 [ 2745.077094][T31112] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2745.085041][T31112] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2745.092981][T31112] RBP: ffff8881cf3d7b40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2745.101007][T31112] R10: ffffffff84800000 R11: 1ffff11039e7ae00 R12: ffff8881cd0e9000 [ 2745.108949][T31112] R13: dffffc0000000000 R14: ffff8881cd0e9070 R15: 1ffff11039a1d29d [ 2745.116899][T31112] FS: 00007fc9d5138700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2745.125799][T31112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2745.132352][T31112] CR2: 00007fc9d5137ff8 CR3: 00000001e15a5000 CR4: 00000000003406f0 [ 2745.140299][T31112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2745.148248][T31112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2745.156188][T31112] Call Trace: [ 2745.159454][T31112] ? device_add_disk+0x30/0x30 [ 2745.164198][T31112] ? vsprintf+0x30/0x30 [ 2745.168356][T31112] ? device_initialize+0x1c7/0x3d0 [ 2745.173444][T31112] ? __alloc_disk_node+0x326/0x380 [ 2745.178525][T31112] loop_add+0x554/0x710 [ 2745.182655][T31112] loop_control_ioctl+0x564/0x740 [ 2745.187649][T31112] ? loop_remove+0xa0/0xa0 [ 2745.192033][T31112] ? __lru_cache_add+0x1bf/0x210 [ 2745.196942][T31112] ? memset+0x1f/0x40 [ 2745.200892][T31112] ? fsnotify+0x1332/0x13f0 [ 2745.205366][T31112] ? loop_remove+0xa0/0xa0 [ 2745.209751][T31112] do_vfs_ioctl+0x744/0x1730 [ 2745.214320][T31112] ? selinux_file_ioctl+0x723/0x970 [ 2745.219493][T31112] ? ioctl_preallocate+0x250/0x250 [ 2745.224574][T31112] ? __fget+0x40c/0x4a0 [ 2745.228701][T31112] ? fget_many+0x20/0x20 [ 2745.232914][T31112] ? check_preemption_disabled+0x154/0x330 03:37:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x7ffffffff000}, 0x0) 03:37:31 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 62) 03:37:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x4004840) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x4004840) (async) [ 2745.238691][T31112] ? debug_smp_processor_id+0x20/0x20 [ 2745.244033][T31112] ? security_file_ioctl+0x9d/0xb0 [ 2745.249112][T31112] __x64_sys_ioctl+0xd4/0x110 [ 2745.253760][T31112] do_syscall_64+0xcb/0x1c0 [ 2745.258244][T31112] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2745.264115][T31112] ---[ end trace b61d2c152d24eb27 ]--- 03:37:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x80030000000000}, 0x0) [ 2745.339645][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2745.350663][T31135] FAULT_INJECTION: forcing a failure. [ 2745.350663][T31135] name failslab, interval 1, probability 0, space 0, times 0 [ 2745.363292][T31135] CPU: 1 PID: 31135 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2745.374905][T31135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2745.384958][T31135] Call Trace: 03:37:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x8, 0x7, 0x100, 0x840, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2fd7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff742, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xda, &(0x7f00000001c0)=""/218, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x9, 0x9, 0xb19}, 0x10, 0xd551, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r1, r2]}, 0x80) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) 03:37:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc2d"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:31 executing program 3: socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2745.388247][T31135] dump_stack+0x1d8/0x241 [ 2745.392573][T31135] ? panic+0x73e/0x73e [ 2745.396659][T31135] ? mutex_unlock+0x19/0x40 [ 2745.401154][T31135] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2745.407058][T31135] ? selinux_kernfs_init_security+0x155/0x760 [ 2745.413227][T31135] ? idr_alloc_cyclic+0x36e/0x5e0 [ 2745.418230][T31135] should_fail+0x709/0x870 [ 2745.422620][T31135] ? setup_fault_attr+0x3d0/0x3d0 [ 2745.427616][T31135] ? _raw_spin_lock+0xa3/0x1b0 [ 2745.432357][T31135] ? __kernfs_new_node+0xdb/0x6d0 [ 2745.437362][T31135] should_failslab+0x5/0x20 [ 2745.441951][T31135] kmem_cache_alloc+0x24/0x210 [ 2745.446692][T31135] __kernfs_new_node+0xdb/0x6d0 [ 2745.451516][T31135] ? mutex_lock+0xa6/0x110 [ 2745.455910][T31135] ? kernfs_new_node+0x160/0x160 [ 2745.460818][T31135] ? mutex_lock+0xa6/0x110 [ 2745.465206][T31135] kernfs_new_node+0x95/0x160 [ 2745.469943][T31135] __kernfs_create_file+0x45/0x260 [ 2745.475030][T31135] sysfs_add_file_mode_ns+0x292/0x340 [ 2745.480372][T31135] sysfs_merge_group+0x207/0x460 [ 2745.485280][T31135] ? sysfs_remove_groups+0xb0/0xb0 [ 2745.490370][T31135] ? device_create_file+0xe8/0x1b0 [ 2745.495448][T31135] ? bus_add_device+0x92/0x3f0 [ 2745.500180][T31135] dpm_sysfs_add+0xc0/0x260 [ 2745.504654][T31135] device_add+0x547/0xbc0 [ 2745.508952][T31135] device_create_vargs+0x1b8/0x210 [ 2745.514034][T31135] device_create+0xea/0x130 [ 2745.518507][T31135] ? device_create_vargs+0x210/0x210 [ 2745.523763][T31135] bdi_register_va+0x89/0x5e0 [ 2745.528407][T31135] bdi_register+0xd1/0x120 [ 2745.532792][T31135] ? __device_add_disk+0x539/0x1200 [ 2745.537962][T31135] ? bdi_register_va+0x5e0/0x5e0 [ 2745.542877][T31135] ? percpu_ref_resurrect+0x113/0x190 [ 2745.548218][T31135] bdi_register_owner+0x56/0xf0 [ 2745.553038][T31135] __device_add_disk+0x5b8/0x1200 [ 2745.558031][T31135] ? device_add_disk+0x30/0x30 [ 2745.562786][T31135] ? vsprintf+0x30/0x30 [ 2745.566911][T31135] ? device_initialize+0x1c7/0x3d0 [ 2745.572022][T31135] ? __alloc_disk_node+0x326/0x380 [ 2745.577102][T31135] loop_add+0x554/0x710 [ 2745.581229][T31135] loop_control_ioctl+0x564/0x740 [ 2745.586226][T31135] ? loop_remove+0xa0/0xa0 [ 2745.590610][T31135] ? __lru_cache_add+0x1bf/0x210 [ 2745.595512][T31135] ? memset+0x1f/0x40 [ 2745.599460][T31135] ? fsnotify+0x1332/0x13f0 [ 2745.603931][T31135] ? loop_remove+0xa0/0xa0 [ 2745.608314][T31135] do_vfs_ioctl+0x744/0x1730 [ 2745.612872][T31135] ? selinux_file_ioctl+0x723/0x970 [ 2745.618042][T31135] ? ioctl_preallocate+0x250/0x250 [ 2745.623118][T31135] ? __fget+0x40c/0x4a0 [ 2745.627241][T31135] ? fget_many+0x20/0x20 [ 2745.631455][T31135] ? check_preemption_disabled+0x154/0x330 03:37:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0xf0ffffff7f0000}, 0x0) [ 2745.637230][T31135] ? debug_smp_processor_id+0x20/0x20 [ 2745.642575][T31135] ? security_file_ioctl+0x9d/0xb0 [ 2745.647653][T31135] __x64_sys_ioctl+0xd4/0x110 [ 2745.652298][T31135] do_syscall_64+0xcb/0x1c0 [ 2745.656771][T31135] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2745.665185][T31135] ------------[ cut here ]------------ [ 2745.670669][T31135] WARNING: CPU: 1 PID: 31135 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2745.679747][T31135] Modules linked in: [ 2745.683620][T31135] CPU: 1 PID: 31135 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2745.695207][T31135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2745.705247][T31135] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2745.711026][T31135] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2745.730619][T31135] RSP: 0018:ffff8881e3857a00 EFLAGS: 00010246 [ 2745.736653][T31135] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2745.744613][T31135] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2745.752555][T31135] RBP: ffff8881e3857b40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2745.760496][T31135] R10: ffffffff84800000 R11: 1ffff1103c70ae00 R12: ffff8881edd6e000 [ 2745.768438][T31135] R13: dffffc0000000000 R14: ffff8881edd6e070 R15: 1ffff1103dbadc9d [ 2745.776379][T31135] FS: 00007fc9d5138700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2745.785297][T31135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2745.791901][T31135] CR2: 0000555556394728 CR3: 00000001e4b91000 CR4: 00000000003406e0 [ 2745.799846][T31135] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2745.807788][T31135] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2745.815920][T31135] Call Trace: [ 2745.819186][T31135] ? device_add_disk+0x30/0x30 [ 2745.823918][T31135] ? vsprintf+0x30/0x30 [ 2745.828046][T31135] ? device_initialize+0x1c7/0x3d0 [ 2745.833130][T31135] ? __alloc_disk_node+0x326/0x380 [ 2745.838209][T31135] loop_add+0x554/0x710 [ 2745.842333][T31135] loop_control_ioctl+0x564/0x740 [ 2745.847325][T31135] ? loop_remove+0xa0/0xa0 [ 2745.851711][T31135] ? __lru_cache_add+0x1bf/0x210 [ 2745.856622][T31135] ? memset+0x1f/0x40 [ 2745.860573][T31135] ? fsnotify+0x1332/0x13f0 [ 2745.865045][T31135] ? loop_remove+0xa0/0xa0 [ 2745.869434][T31135] do_vfs_ioctl+0x744/0x1730 [ 2745.873999][T31135] ? selinux_file_ioctl+0x723/0x970 [ 2745.879167][T31135] ? ioctl_preallocate+0x250/0x250 [ 2745.884248][T31135] ? __fget+0x40c/0x4a0 03:37:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x8, 0x7, 0x100, 0x840, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2fd7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff742, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xda, &(0x7f00000001c0)=""/218, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x9, 0x9, 0xb19}, 0x10, 0xd551, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r1, r2]}, 0x80) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) socket$key(0xf, 0x3, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x8, 0x7, 0x100, 0x840, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) (async) bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2fd7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff742, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xda, &(0x7f00000001c0)=""/218, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x9, 0x9, 0xb19}, 0x10, 0xd551, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r1, r2]}, 0x80) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) pipe(&(0x7f0000000000)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) (async) 03:37:32 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 63) 03:37:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x100000000000000}, 0x0) 03:37:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x8, 0x7, 0x100, 0x840, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2fd7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff742, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xda, &(0x7f00000001c0)=""/218, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x9, 0x9, 0xb19}, 0x10, 0xd551, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r1, r2]}, 0x80) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) socket$key(0xf, 0x3, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x8, 0x7, 0x100, 0x840, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) (async) bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2fd7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff742, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xda, &(0x7f00000001c0)=""/218, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x9, 0x9, 0xb19}, 0x10, 0xd551, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r1, r2]}, 0x80) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) pipe(&(0x7f0000000000)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) (async) 03:37:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x200000000000000}, 0x0) [ 2745.888373][T31135] ? fget_many+0x20/0x20 [ 2745.892585][T31135] ? check_preemption_disabled+0x154/0x330 [ 2745.898359][T31135] ? debug_smp_processor_id+0x20/0x20 [ 2745.903711][T31135] ? security_file_ioctl+0x9d/0xb0 [ 2745.908791][T31135] __x64_sys_ioctl+0xd4/0x110 [ 2745.913439][T31135] do_syscall_64+0xcb/0x1c0 [ 2745.917914][T31135] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2745.923772][T31135] ---[ end trace b61d2c152d24eb28 ]--- 03:37:32 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:32 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d99"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x400000000000000}, 0x0) 03:37:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x600000000000000}, 0x0) [ 2745.981634][T31151] FAULT_INJECTION: forcing a failure. [ 2745.981634][T31151] name failslab, interval 1, probability 0, space 0, times 0 [ 2745.994547][T31151] CPU: 1 PID: 31151 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2746.006164][T31151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2746.016226][T31151] Call Trace: [ 2746.019495][T31151] dump_stack+0x1d8/0x241 [ 2746.023799][T31151] ? panic+0x73e/0x73e [ 2746.027835][T31151] ? mutex_unlock+0x19/0x40 [ 2746.032304][T31151] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2746.038166][T31151] ? selinux_kernfs_init_security+0x155/0x760 [ 2746.044197][T31151] ? idr_alloc_cyclic+0x36e/0x5e0 [ 2746.049198][T31151] should_fail+0x709/0x870 [ 2746.053586][T31151] ? setup_fault_attr+0x3d0/0x3d0 [ 2746.058576][T31151] ? _raw_spin_lock+0xa3/0x1b0 [ 2746.063309][T31151] ? __kernfs_new_node+0xdb/0x6d0 [ 2746.068299][T31151] should_failslab+0x5/0x20 [ 2746.072770][T31151] kmem_cache_alloc+0x24/0x210 [ 2746.077502][T31151] __kernfs_new_node+0xdb/0x6d0 [ 2746.082318][T31151] ? mutex_lock+0xa6/0x110 [ 2746.086703][T31151] ? kernfs_new_node+0x160/0x160 [ 2746.091604][T31151] ? mutex_lock+0xa6/0x110 [ 2746.095992][T31151] kernfs_new_node+0x95/0x160 [ 2746.100637][T31151] __kernfs_create_file+0x45/0x260 [ 2746.105744][T31151] sysfs_add_file_mode_ns+0x292/0x340 [ 2746.111083][T31151] sysfs_merge_group+0x207/0x460 [ 2746.115993][T31151] ? sysfs_remove_groups+0xb0/0xb0 [ 2746.121071][T31151] ? device_create_file+0xe8/0x1b0 [ 2746.126150][T31151] ? bus_add_device+0x92/0x3f0 [ 2746.130882][T31151] dpm_sysfs_add+0xc0/0x260 [ 2746.135352][T31151] device_add+0x547/0xbc0 [ 2746.139652][T31151] device_create_vargs+0x1b8/0x210 [ 2746.144734][T31151] device_create+0xea/0x130 [ 2746.149206][T31151] ? device_create_vargs+0x210/0x210 [ 2746.154463][T31151] bdi_register_va+0x89/0x5e0 [ 2746.159109][T31151] bdi_register+0xd1/0x120 [ 2746.163498][T31151] ? __device_add_disk+0x539/0x1200 [ 2746.168676][T31151] ? bdi_register_va+0x5e0/0x5e0 [ 2746.173584][T31151] ? percpu_ref_resurrect+0x113/0x190 [ 2746.178922][T31151] bdi_register_owner+0x56/0xf0 [ 2746.183742][T31151] __device_add_disk+0x5b8/0x1200 [ 2746.188733][T31151] ? device_add_disk+0x30/0x30 [ 2746.193467][T31151] ? vsprintf+0x30/0x30 [ 2746.197600][T31151] ? device_initialize+0x1c7/0x3d0 [ 2746.202694][T31151] ? __alloc_disk_node+0x326/0x380 [ 2746.207802][T31151] loop_add+0x554/0x710 [ 2746.211926][T31151] loop_control_ioctl+0x564/0x740 [ 2746.216930][T31151] ? loop_remove+0xa0/0xa0 [ 2746.221322][T31151] ? __lru_cache_add+0x1bf/0x210 [ 2746.226226][T31151] ? memset+0x1f/0x40 [ 2746.230177][T31151] ? fsnotify+0x1332/0x13f0 [ 2746.234648][T31151] ? loop_remove+0xa0/0xa0 [ 2746.239152][T31151] do_vfs_ioctl+0x744/0x1730 [ 2746.243732][T31151] ? selinux_file_ioctl+0x723/0x970 [ 2746.248913][T31151] ? ioctl_preallocate+0x250/0x250 [ 2746.253999][T31151] ? __fget+0x40c/0x4a0 [ 2746.258125][T31151] ? fget_many+0x20/0x20 [ 2746.262340][T31151] ? check_preemption_disabled+0x154/0x330 [ 2746.268118][T31151] ? debug_smp_processor_id+0x20/0x20 [ 2746.273467][T31151] ? security_file_ioctl+0x9d/0xb0 03:37:32 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rwm\x00'}, 0xa) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x110042, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}], [{@permit_directio}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}, 0x1, 0x0, &(0x7f0000000340)="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") getdents(r1, &(0x7f0000001340)=""/167, 0xa7) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={@none, 0x9, 0x8, 0x0, 0xff, 0x2d, "fcf8b900116cfd3d198ef3463eca63189590dd18ad4d9377bd908c68ff02066aa87be821c6c284f7f4e76c1a38b02b67b6bd296128ff7f5a20cbf928cb1b30d2ea264dd21360562f25ad2e0199c5b5615d6128b0b4ae56b2ae05106d5574a09417abcbdecd105973688b2a23cd5de79dd3874462d72f2eecb3f5364bbaaf3c39"}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) [ 2746.278549][T31151] __x64_sys_ioctl+0xd4/0x110 [ 2746.283204][T31151] do_syscall_64+0xcb/0x1c0 [ 2746.287690][T31151] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2746.299774][T31151] ------------[ cut here ]------------ [ 2746.305253][T31151] WARNING: CPU: 0 PID: 31151 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2746.314329][T31151] Modules linked in: [ 2746.318203][T31151] CPU: 0 PID: 31151 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2746.329791][T31151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2746.339832][T31151] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2746.345607][T31151] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2746.365209][T31151] RSP: 0018:ffff8881f2ac7a00 EFLAGS: 00010246 [ 2746.371243][T31151] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2746.379184][T31151] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2746.387125][T31151] RBP: ffff8881f2ac7b40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2746.395074][T31151] R10: ffffffff84800000 R11: 1ffff1103e558e00 R12: ffff8881d62b4000 [ 2746.403019][T31151] R13: dffffc0000000000 R14: ffff8881d62b4070 R15: 1ffff1103ac5689d [ 2746.410985][T31151] FS: 00007fc9d5138700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2746.420142][T31151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2746.426724][T31151] CR2: 00000000200000c0 CR3: 00000001e7095000 CR4: 00000000003406f0 [ 2746.434666][T31151] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2746.442614][T31151] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2746.450638][T31151] Call Trace: [ 2746.453904][T31151] ? device_add_disk+0x30/0x30 [ 2746.458634][T31151] ? vsprintf+0x30/0x30 [ 2746.462767][T31151] ? device_initialize+0x1c7/0x3d0 [ 2746.467854][T31151] ? __alloc_disk_node+0x326/0x380 [ 2746.472933][T31151] loop_add+0x554/0x710 [ 2746.477060][T31151] loop_control_ioctl+0x564/0x740 [ 2746.482051][T31151] ? loop_remove+0xa0/0xa0 [ 2746.486434][T31151] ? __lru_cache_add+0x1bf/0x210 [ 2746.491338][T31151] ? memset+0x1f/0x40 [ 2746.495318][T31151] ? fsnotify+0x1332/0x13f0 [ 2746.499790][T31151] ? loop_remove+0xa0/0xa0 [ 2746.504177][T31151] do_vfs_ioctl+0x744/0x1730 [ 2746.508752][T31151] ? selinux_file_ioctl+0x723/0x970 [ 2746.513920][T31151] ? ioctl_preallocate+0x250/0x250 [ 2746.518999][T31151] ? __fget+0x40c/0x4a0 [ 2746.523122][T31151] ? fget_many+0x20/0x20 [ 2746.527334][T31151] ? check_preemption_disabled+0x154/0x330 03:37:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x4000000000000000}, 0x0) 03:37:33 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rwm\x00'}, 0xa) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x110042, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}], [{@permit_directio}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}, 0x1, 0x0, &(0x7f0000000340)="2ffd03756613d2204aa8fa4e3705038c78b06d3018bb3bce2f01fba4c7cac52f9fa8df6f5414f4adbe994d83019056c45b15a505563a126ef68f26a0a0551d645551aa398165296a1bb4a4843e3c82d9ba0314689a2b6d6ad4518b851a7ea71d0b4fedd055b7b7e647f164ced06b80419b362f013910aea7374de37c08b66e01ae216a07652137efa06bf23e896b6c5ac671b893fb2574291a44019fc8f9fa7d724f15954fefa01f2a5794defc25bd3363dd58d449b699e00de63be36e634575b21f0fde0bd12b49bd4ed575d1b98fe961cc1e44d3b0b1684e641402bed1795e3b038b1c24b41ba96dfe6e98e6342b498f2dc9ef7aac523ce650debb1b22e8c70aadb5e514aa3e3588eaa5bee853574b7a22bdb2ba01cf0d2cf13ec3c405e5599d901b75b01ff2f76d8605ceac706f0ec982a622ffce13fd63dbbbf82fc0ecbfde3c3d04180dd1391b53330d04569b441a85cd6a5c0274105834780f8a0ec8287b24f55ec2d26ac8b82524ef5741f83e4dbd1eab93a7a860432cbd657da842dc3d94ef2f12a60eecc0c6402abad31a87963fff82b4b2b4aead31f75b3d8c71d6024159d95abdaa6b1e02b11cd879256134307977bd4e6efb3ff650bda917558f1d892b2be7a90dc905bb153c7c3418a7d31348c093b928def8c25e42cb455a24010d98fc12e30924d1da8f37d01cb81731c248eef353e3075c6235b9539670656f93dd525a12f89cdf180a32fd23d39760fe535ed79d6a86a8ab1bf23050064867230e9985c78cfa5bca476bb97bf1fa3232265f0f08023426064dc1d97f98af998239485c0c5009955c477b6581ce37b4e027d764d8f70d721433ed4b67fecb411efb347e2f22bfb95282b0148e9a40d8e9540e1afea09acab3caebba1d7198e72d2c72c0875466f990afbef5d36c9df2e399466a2514047be767e080d7386fd8417981e8dd1dd06352b53698c0652cd917a9f305c8287fbcaa88cb9a7f9630b12200ce2e7534b6eda4c421282959f1c64c8b653b96514416e9371ef3eb35c7c83d1aade1cba9c849eb01e8ad37a02095b9a19322860d2469d27a5831ca992b66475897dd94720e5ff14131df11c9d443c7672708f3f306821bfb7996439985b76fdc5f3003e727d47d21edacbf3a67148668e14a3730db5e70cc053d33d92cfebd4e4b132bb17032959f33f505c927dc6271b4f4ae4836597418639d4d48d9e569c53b82a20d7ff717d31c41a2b278edffd0b6354d3c4fb0f71547b6fae838d1f35e052d0cf50e20cf82765c292b3b1b8d502c41d485b742b589de7fe1924bda2fe7b1533b5e3058aff56b371b1c52f5a6abd5835cee7504dc61404460e9e150cf756cc66f90e1a4e199e00d93bde4edcfce9476d7d677e2aa0942c96a069785b67c9e0b4983120b5714f2f10d72cc07c7c0cf5f957a56f940463f741f0da362ee92fb51ccf12b271aef52d1562cce5bdfbe16e64c90b204b0aeeb4834a1e75d6ef34fd016bcf8c1975878adafea6c99ff2f701958e1e0ea33bfec3306e43b75ad827ac5545c01b6eea89d21f64a0aee46ab429ff6330dd3674ff2ca656a38babab5cbc7ec4b284e64a6168771e5a9d739c89dd9ec29b62b1309036d47ea1a9cfb99567ec2479819f763cfc2a7f51a6af8526e0d30401c156d905bf6f4d9c4bd54d6ac3992dd1a148a31ee5f4d19462b01074c894a48d0458b9d40d335e75e71f1da2905a51ba8c8878c76cfdfa1c1caa5dd8f6a670a5a946ecc53fd7e2ca5121a428e1bca3ed0089168ff153608f87a1ffce6c3204dfef9723794ca297d4b0d8048a8ad7d66dda9af77de00da4ce7ba0be297c47a4baed5afe689d16887ddf05caeed8b1b027d57c9d1d714a2266734e8d42ee5225ad3e1f9b54b63e376b3a9b4ad113bc2212acbec1b6d23d32779f51640a501d378c5d43046d968bb21b15247de89d7120492ff14982e039339ae0021e1bebfbaf3cd4349dd3c5920f69d18b498f9a0c014fd334d00b5c3a7afffa004dde38dae9da609e6fda0039cd3f3d8b9436699bea073b2b4a18660c01bb5272e09ca5b81c8368f2cedcf3ca826feb0f13d89ef97ca40e718a8dee285aed45d41a8107741f5cca0dece4270b71772b529aa0a9c60752a2a16e5297d29ba473362478462a18280859170e8e1a782e32862d04f222150a6aeefdd6fb0e77c73f1b956cb049cf36aba0aefbc3fe9bb9cb62f78a807545bf08f6f8ff31d8f4c74acbef025c56293e527600b9b421a39ac1db087df786834652af6eca759d6b07e7a69840da7b5191a6b112b908d3076896887129272f3ffa0e0c382183094897c91115dc5d668c40942aeffe163a47a971df470b2d47cb3b4659bc18beb448d909d4824b15181a0fe31f33934bca7e324ac237fa338eaaf5495b1831e964ea6c23a84fce25dcdcc73db01a66bebcbf8d66fddfad1b7a6aa179b354274402251fe37788e1676184df653f11c1525cda04ad0f79826d3bfda0fc303ad91ea66d2826a0897b73add7d8b98bb72db1d56ed779c090e80163fbc960ab77fd035faedaee52fae5a9a6bf295324b2fb0a59745ee65cce35b712044bbf24680be9be0ab864294bfe20f12afef5e5cc28d7249345e8fee4d0cef03329b76906020d14b13b4cb19974affc6672ed7628ab7d1d722befec312318a0d93c2c9e3f02c6ad91831954b1fd60cbda1d550c64d5480b7717ad840fee8e0d8e51bd313851484890bae80f12356d42e4f95ae1be7256e62f736444a595f7472ac6beb4d615d07e321d83bedc88076b1b08484db8bebdab8fff909190dd4f4615fcb88742faaff2579f9f8509bb98baa73ed6178729c9537bf6ab2d0712ed78a15814354a7dfbdd5cc414eaeda26d47166e3f5c0a4b12dbe59aa3cae6e3176db502f3f3a41d39b390b15a6a5d36902df764bc3f886bc795cf89e9f22b99df265abdaadda2a1236536ca32f0ddd5b9d67ece499c089f176b35360afed9f5c42853dd906438540b62c9067c1d672afad7284b82ce77841c8532e3b179c69ba6c506c161db5d13a9e4e4b1378558e17cd7d784dccb99f30152676ce610df4272b67ae3144e0ba6ae3cd2c1e38c865c34b73bd0d7cdeaec82fbe35295f07d19bbf08947a8b9bc341fc1fe172a0c85700148d8d187d17ddee8e7e6c8a604d803a737551914707f3bc806434910a66dee33cb96ba1798756924e79bd96ed68036f363e5fd98923035ee122c75cb2d681c3b0788947757c886387a1f97965ce51121083c5fb9479df3bffd480942f3890cbfe424e2c30e6a62d9f94107bf2a1768b0facf61181066dc6decb5b30172e392fb53f5cffcbcaf04fdfd79e3c9ac733b01a7776b0e8475274574835bd6946a5da39bf10d595791fa396a4a42c70cf5689ef6a098e6facb7ae3bb601136bc5f704255ee59e624c6677d2e33cb0e05bb0003712386a944d783a10c0acb86320ef0339da570d8d066d2db4182cbc0d85d555c77d0f349ddcff801442730143f752d06226366cdc155294181edde035b2fae10ea74f57fb6e4348c7a6af02d580248cf8154aa158945b7473f2de0dd1084fbfbc21d43eb5ff9cda1c5a283d8811bfd79e85d30df4714972c1d8590ca60c35f5365de47595d6da9046a97935672d4ec7c3c10749d72065baf3ffcd8aad3c0c852d5d0dd6a06090a552188e08cc8e5a0236839a588af4a302fd9d350d00895d10bacbc19f5372a9ad24ac18edeb75ee0721815a6c718cf87f32b1f3716cd8781bb58aee5010d64dbbdca2b94bd24439586866b5cd87f668300b3354a1362463e96ad13893798c5e9dca3e866cbebdb74e6724f7d22b1e3eeeee64215ba5037c328976b45e501346235a457fed92803582c74b363b1b161dc7d4427e8a9dacb1be21ce3d5422ae50f0e263325535c3c9c85f86f41c109a9e596e3d75100fc9a74ff4a6478e8212ff3f41a01016d636cc9b337a2e511d64c8cb985283884559ac7edf33ff5ea8b8b24591a24af9d5fe0c4a83c375618c72c4680eb333da83e768c23d15524f51cadce51e2890d7f18c20483e99ff875ef6f3df1f10af7b70cffd9140955c237b8e528424c5fae8e3824c0e884413361cdbd5314f1e267dbb3c87fe8be67cefe550c7f853b34522aafca3765d04b61f36b604ec4fed1dacec49d048045e7837d3f4bc47fb66646bcf6f541929c6d0045d69db3e74697b2033f26dd1c5ded4e0197d92963724228ba24addb6f29a4c49d870b6ddc7fe71f0bde90924edd1daa6e7d3c4587dd556e95094b0d71c066d9fa0882522d41f1412b1e6c401da97f1896a88d5af1a1af6d831ffcde02a4cb4d595ef3fb4576d5c1d9bab8b931942afcc2d1ce5dc0d0b53c67f972a0ea5169fdc73fb4ccb636f827facd0e01bf2d31a71cfcfbb8b0ebeb6095aa77461d888b7aae4ac3e50d7fc3561e0414bdd6a13d7b587fad10f39484d378d30a79b1614a35195c400145d7ed2a1f41977836b6cb9a80cf66b1cdac9538dab09044bbf9330530f4b0abbf7213ef35fb781d1d46bdb567fc75c5605ddf5ea3a474b06cc9fb7022b76f6bae5317364f42c7f0fe5ea652376071700eb8d56669522fa8f52204a456c12fdc4472a968e631a659340e1ea5c20252b937f81494435f641718ba39e619c5004d08cd2778c0eb37e1aa85599e72bff25f0605a8bd3cf69342c25d26a1da7a976c3133b769bdbae315756deaa05e8dc129af9d65aef9dd12e53df4f7ecbe24be3b91f8c96f17331554bdde26ac28ac4eb2f2f95c5b84375983fa2e7f02b0b6d2929c883cfc5d301f768081f1639bde4eb7ff1e7120c98addc7e589964f41a50c66a61bdd1939039ae86ce16724c09470992b6a777a79f0164fb47e1ce461bd05e7ad00ea3d77414cc426112e3811eec3029e387f82f808000bf6ad4f33a4d73a67c67b45966ba38d88b9b29c332917efa1b80df1957e6413a0853f82182fe4c38661f110a11a21d208676cf0f3096340a51778d4d408a0791c397f600211324117b809d2d358d053f46d004da715559970036f03d46fc62cda7e17959f750073e9a59db7bbfc53d3afa0afab2849b393faee735c619e6b96424f1a32882759fbad9986ac717d8a6f61b24b9f5669ea7a4618f7575e686240872514b820b4bb0e6bf4e43a7779e087773d793705ab3e01c4344be5c00c5a1e221b5bcf4ac28fd9843ed4d05aeb72440f6c107659211ff2cd376b584502aba48539d6ef2e64756126d02392724777f1c56ce61529e16d65c6d388618fe7ee976a4ca18bcc72e5d3d072519e9d871cc5e6ad3428a7a351e82e0c4b5ece69661d3ef9f3f7a58f69192579952810e715ec4a6750da02e786a69132f739fb61ba769e019a6231f7ba1ef0172b580adf70cd8652e724d80e8707b16587588687dd80b0be6870605e84c137c31aa5532737c71b292469cd0fe68082927af4211e1bfcd8d1a553f1f9698fd86d97dc32a344c4ca505dc0049a8a132395be2aefc0d1a1881bec21a92b6a37730330602839a043fb1c8eb32ae0b71a0471ada1777e0d3349c4541b017032aa4307fbb5a38aff6f8390060c1dd893b979119473da37fe57720453fd348ddf5b84b600ca6f8828006263608307daa33854103c8f26b9a10bebe3ebe8d5d0c3f0025f1084cecff75527ec4e15279ab1add2eef382581854e4bb6043737a4cafb88e49e95487d2044e8a205128b84a0002449ff11f9200fd5590c874353bcfed7e43a22d34a14cae7e9caf2fd28410caccad3896be5002df8cc433a21ac9bf38fece2cbb2dc42") getdents(r1, &(0x7f0000001340)=""/167, 0xa7) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={@none, 0x9, 0x8, 0x0, 0xff, 0x2d, "fcf8b900116cfd3d198ef3463eca63189590dd18ad4d9377bd908c68ff02066aa87be821c6c284f7f4e76c1a38b02b67b6bd296128ff7f5a20cbf928cb1b30d2ea264dd21360562f25ad2e0199c5b5615d6128b0b4ae56b2ae05106d5574a09417abcbdecd105973688b2a23cd5de79dd3874462d72f2eecb3f5364bbaaf3c39"}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rwm\x00'}, 0xa) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x110042, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}], [{@permit_directio}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}, 0x1, 0x0, &(0x7f0000000340)="2ffd03756613d2204aa8fa4e3705038c78b06d3018bb3bce2f01fba4c7cac52f9fa8df6f5414f4adbe994d83019056c45b15a505563a126ef68f26a0a0551d645551aa398165296a1bb4a4843e3c82d9ba0314689a2b6d6ad4518b851a7ea71d0b4fedd055b7b7e647f164ced06b80419b362f013910aea7374de37c08b66e01ae216a07652137efa06bf23e896b6c5ac671b893fb2574291a44019fc8f9fa7d724f15954fefa01f2a5794defc25bd3363dd58d449b699e00de63be36e634575b21f0fde0bd12b49bd4ed575d1b98fe961cc1e44d3b0b1684e641402bed1795e3b038b1c24b41ba96dfe6e98e6342b498f2dc9ef7aac523ce650debb1b22e8c70aadb5e514aa3e3588eaa5bee853574b7a22bdb2ba01cf0d2cf13ec3c405e5599d901b75b01ff2f76d8605ceac706f0ec982a622ffce13fd63dbbbf82fc0ecbfde3c3d04180dd1391b53330d04569b441a85cd6a5c0274105834780f8a0ec8287b24f55ec2d26ac8b82524ef5741f83e4dbd1eab93a7a860432cbd657da842dc3d94ef2f12a60eecc0c6402abad31a87963fff82b4b2b4aead31f75b3d8c71d6024159d95abdaa6b1e02b11cd879256134307977bd4e6efb3ff650bda917558f1d892b2be7a90dc905bb153c7c3418a7d31348c093b928def8c25e42cb455a24010d98fc12e30924d1da8f37d01cb81731c248eef353e3075c6235b9539670656f93dd525a12f89cdf180a32fd23d39760fe535ed79d6a86a8ab1bf23050064867230e9985c78cfa5bca476bb97bf1fa3232265f0f08023426064dc1d97f98af998239485c0c5009955c477b6581ce37b4e027d764d8f70d721433ed4b67fecb411efb347e2f22bfb95282b0148e9a40d8e9540e1afea09acab3caebba1d7198e72d2c72c0875466f990afbef5d36c9df2e399466a2514047be767e080d7386fd8417981e8dd1dd06352b53698c0652cd917a9f305c8287fbcaa88cb9a7f9630b12200ce2e7534b6eda4c421282959f1c64c8b653b96514416e9371ef3eb35c7c83d1aade1cba9c849eb01e8ad37a02095b9a19322860d2469d27a5831ca992b66475897dd94720e5ff14131df11c9d443c7672708f3f306821bfb7996439985b76fdc5f3003e727d47d21edacbf3a67148668e14a3730db5e70cc053d33d92cfebd4e4b132bb17032959f33f505c927dc6271b4f4ae4836597418639d4d48d9e569c53b82a20d7ff717d31c41a2b278edffd0b6354d3c4fb0f71547b6fae838d1f35e052d0cf50e20cf82765c292b3b1b8d502c41d485b742b589de7fe1924bda2fe7b1533b5e3058aff56b371b1c52f5a6abd5835cee7504dc61404460e9e150cf756cc66f90e1a4e199e00d93bde4edcfce9476d7d677e2aa0942c96a069785b67c9e0b4983120b5714f2f10d72cc07c7c0cf5f957a56f940463f741f0da362ee92fb51ccf12b271aef52d1562cce5bdfbe16e64c90b204b0aeeb4834a1e75d6ef34fd016bcf8c1975878adafea6c99ff2f701958e1e0ea33bfec3306e43b75ad827ac5545c01b6eea89d21f64a0aee46ab429ff6330dd3674ff2ca656a38babab5cbc7ec4b284e64a6168771e5a9d739c89dd9ec29b62b1309036d47ea1a9cfb99567ec2479819f763cfc2a7f51a6af8526e0d30401c156d905bf6f4d9c4bd54d6ac3992dd1a148a31ee5f4d19462b01074c894a48d0458b9d40d335e75e71f1da2905a51ba8c8878c76cfdfa1c1caa5dd8f6a670a5a946ecc53fd7e2ca5121a428e1bca3ed0089168ff153608f87a1ffce6c3204dfef9723794ca297d4b0d8048a8ad7d66dda9af77de00da4ce7ba0be297c47a4baed5afe689d16887ddf05caeed8b1b027d57c9d1d714a2266734e8d42ee5225ad3e1f9b54b63e376b3a9b4ad113bc2212acbec1b6d23d32779f51640a501d378c5d43046d968bb21b15247de89d7120492ff14982e039339ae0021e1bebfbaf3cd4349dd3c5920f69d18b498f9a0c014fd334d00b5c3a7afffa004dde38dae9da609e6fda0039cd3f3d8b9436699bea073b2b4a18660c01bb5272e09ca5b81c8368f2cedcf3ca826feb0f13d89ef97ca40e718a8dee285aed45d41a8107741f5cca0dece4270b71772b529aa0a9c60752a2a16e5297d29ba473362478462a18280859170e8e1a782e32862d04f222150a6aeefdd6fb0e77c73f1b956cb049cf36aba0aefbc3fe9bb9cb62f78a807545bf08f6f8ff31d8f4c74acbef025c56293e527600b9b421a39ac1db087df786834652af6eca759d6b07e7a69840da7b5191a6b112b908d3076896887129272f3ffa0e0c382183094897c91115dc5d668c40942aeffe163a47a971df470b2d47cb3b4659bc18beb448d909d4824b15181a0fe31f33934bca7e324ac237fa338eaaf5495b1831e964ea6c23a84fce25dcdcc73db01a66bebcbf8d66fddfad1b7a6aa179b354274402251fe37788e1676184df653f11c1525cda04ad0f79826d3bfda0fc303ad91ea66d2826a0897b73add7d8b98bb72db1d56ed779c090e80163fbc960ab77fd035faedaee52fae5a9a6bf295324b2fb0a59745ee65cce35b712044bbf24680be9be0ab864294bfe20f12afef5e5cc28d7249345e8fee4d0cef03329b76906020d14b13b4cb19974affc6672ed7628ab7d1d722befec312318a0d93c2c9e3f02c6ad91831954b1fd60cbda1d550c64d5480b7717ad840fee8e0d8e51bd313851484890bae80f12356d42e4f95ae1be7256e62f736444a595f7472ac6beb4d615d07e321d83bedc88076b1b08484db8bebdab8fff909190dd4f4615fcb88742faaff2579f9f8509bb98baa73ed6178729c9537bf6ab2d0712ed78a15814354a7dfbdd5cc414eaeda26d47166e3f5c0a4b12dbe59aa3cae6e3176db502f3f3a41d39b390b15a6a5d36902df764bc3f886bc795cf89e9f22b99df265abdaadda2a1236536ca32f0ddd5b9d67ece499c089f176b35360afed9f5c42853dd906438540b62c9067c1d672afad7284b82ce77841c8532e3b179c69ba6c506c161db5d13a9e4e4b1378558e17cd7d784dccb99f30152676ce610df4272b67ae3144e0ba6ae3cd2c1e38c865c34b73bd0d7cdeaec82fbe35295f07d19bbf08947a8b9bc341fc1fe172a0c85700148d8d187d17ddee8e7e6c8a604d803a737551914707f3bc806434910a66dee33cb96ba1798756924e79bd96ed68036f363e5fd98923035ee122c75cb2d681c3b0788947757c886387a1f97965ce51121083c5fb9479df3bffd480942f3890cbfe424e2c30e6a62d9f94107bf2a1768b0facf61181066dc6decb5b30172e392fb53f5cffcbcaf04fdfd79e3c9ac733b01a7776b0e8475274574835bd6946a5da39bf10d595791fa396a4a42c70cf5689ef6a098e6facb7ae3bb601136bc5f704255ee59e624c6677d2e33cb0e05bb0003712386a944d783a10c0acb86320ef0339da570d8d066d2db4182cbc0d85d555c77d0f349ddcff801442730143f752d06226366cdc155294181edde035b2fae10ea74f57fb6e4348c7a6af02d580248cf8154aa158945b7473f2de0dd1084fbfbc21d43eb5ff9cda1c5a283d8811bfd79e85d30df4714972c1d8590ca60c35f5365de47595d6da9046a97935672d4ec7c3c10749d72065baf3ffcd8aad3c0c852d5d0dd6a06090a552188e08cc8e5a0236839a588af4a302fd9d350d00895d10bacbc19f5372a9ad24ac18edeb75ee0721815a6c718cf87f32b1f3716cd8781bb58aee5010d64dbbdca2b94bd24439586866b5cd87f668300b3354a1362463e96ad13893798c5e9dca3e866cbebdb74e6724f7d22b1e3eeeee64215ba5037c328976b45e501346235a457fed92803582c74b363b1b161dc7d4427e8a9dacb1be21ce3d5422ae50f0e263325535c3c9c85f86f41c109a9e596e3d75100fc9a74ff4a6478e8212ff3f41a01016d636cc9b337a2e511d64c8cb985283884559ac7edf33ff5ea8b8b24591a24af9d5fe0c4a83c375618c72c4680eb333da83e768c23d15524f51cadce51e2890d7f18c20483e99ff875ef6f3df1f10af7b70cffd9140955c237b8e528424c5fae8e3824c0e884413361cdbd5314f1e267dbb3c87fe8be67cefe550c7f853b34522aafca3765d04b61f36b604ec4fed1dacec49d048045e7837d3f4bc47fb66646bcf6f541929c6d0045d69db3e74697b2033f26dd1c5ded4e0197d92963724228ba24addb6f29a4c49d870b6ddc7fe71f0bde90924edd1daa6e7d3c4587dd556e95094b0d71c066d9fa0882522d41f1412b1e6c401da97f1896a88d5af1a1af6d831ffcde02a4cb4d595ef3fb4576d5c1d9bab8b931942afcc2d1ce5dc0d0b53c67f972a0ea5169fdc73fb4ccb636f827facd0e01bf2d31a71cfcfbb8b0ebeb6095aa77461d888b7aae4ac3e50d7fc3561e0414bdd6a13d7b587fad10f39484d378d30a79b1614a35195c400145d7ed2a1f41977836b6cb9a80cf66b1cdac9538dab09044bbf9330530f4b0abbf7213ef35fb781d1d46bdb567fc75c5605ddf5ea3a474b06cc9fb7022b76f6bae5317364f42c7f0fe5ea652376071700eb8d56669522fa8f52204a456c12fdc4472a968e631a659340e1ea5c20252b937f81494435f641718ba39e619c5004d08cd2778c0eb37e1aa85599e72bff25f0605a8bd3cf69342c25d26a1da7a976c3133b769bdbae315756deaa05e8dc129af9d65aef9dd12e53df4f7ecbe24be3b91f8c96f17331554bdde26ac28ac4eb2f2f95c5b84375983fa2e7f02b0b6d2929c883cfc5d301f768081f1639bde4eb7ff1e7120c98addc7e589964f41a50c66a61bdd1939039ae86ce16724c09470992b6a777a79f0164fb47e1ce461bd05e7ad00ea3d77414cc426112e3811eec3029e387f82f808000bf6ad4f33a4d73a67c67b45966ba38d88b9b29c332917efa1b80df1957e6413a0853f82182fe4c38661f110a11a21d208676cf0f3096340a51778d4d408a0791c397f600211324117b809d2d358d053f46d004da715559970036f03d46fc62cda7e17959f750073e9a59db7bbfc53d3afa0afab2849b393faee735c619e6b96424f1a32882759fbad9986ac717d8a6f61b24b9f5669ea7a4618f7575e686240872514b820b4bb0e6bf4e43a7779e087773d793705ab3e01c4344be5c00c5a1e221b5bcf4ac28fd9843ed4d05aeb72440f6c107659211ff2cd376b584502aba48539d6ef2e64756126d02392724777f1c56ce61529e16d65c6d388618fe7ee976a4ca18bcc72e5d3d072519e9d871cc5e6ad3428a7a351e82e0c4b5ece69661d3ef9f3f7a58f69192579952810e715ec4a6750da02e786a69132f739fb61ba769e019a6231f7ba1ef0172b580adf70cd8652e724d80e8707b16587588687dd80b0be6870605e84c137c31aa5532737c71b292469cd0fe68082927af4211e1bfcd8d1a553f1f9698fd86d97dc32a344c4ca505dc0049a8a132395be2aefc0d1a1881bec21a92b6a37730330602839a043fb1c8eb32ae0b71a0471ada1777e0d3349c4541b017032aa4307fbb5a38aff6f8390060c1dd893b979119473da37fe57720453fd348ddf5b84b600ca6f8828006263608307daa33854103c8f26b9a10bebe3ebe8d5d0c3f0025f1084cecff75527ec4e15279ab1add2eef382581854e4bb6043737a4cafb88e49e95487d2044e8a205128b84a0002449ff11f9200fd5590c874353bcfed7e43a22d34a14cae7e9caf2fd28410caccad3896be5002df8cc433a21ac9bf38fece2cbb2dc42") (async) getdents(r1, &(0x7f0000001340)=""/167, 0xa7) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={@none, 0x9, 0x8, 0x0, 0xff, 0x2d, "fcf8b900116cfd3d198ef3463eca63189590dd18ad4d9377bd908c68ff02066aa87be821c6c284f7f4e76c1a38b02b67b6bd296128ff7f5a20cbf928cb1b30d2ea264dd21360562f25ad2e0199c5b5615d6128b0b4ae56b2ae05106d5574a09417abcbdecd105973688b2a23cd5de79dd3874462d72f2eecb3f5364bbaaf3c39"}) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:33 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 64) 03:37:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0xe0efff7f00000000}, 0x0) 03:37:33 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rwm\x00'}, 0xa) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x110042, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}], [{@permit_directio}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}, 0x1, 0x0, &(0x7f0000000340)="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") getdents(r1, &(0x7f0000001340)=""/167, 0xa7) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={@none, 0x9, 0x8, 0x0, 0xff, 0x2d, "fcf8b900116cfd3d198ef3463eca63189590dd18ad4d9377bd908c68ff02066aa87be821c6c284f7f4e76c1a38b02b67b6bd296128ff7f5a20cbf928cb1b30d2ea264dd21360562f25ad2e0199c5b5615d6128b0b4ae56b2ae05106d5574a09417abcbdecd105973688b2a23cd5de79dd3874462d72f2eecb3f5364bbaaf3c39"}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'c', ' *:* ', 'rwm\x00'}, 0xa) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x110042, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}], [{@permit_directio}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}, 0x1, 0x0, &(0x7f0000000340)="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") (async) getdents(r1, &(0x7f0000001340)=""/167, 0xa7) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={@none, 0x9, 0x8, 0x0, 0xff, 0x2d, "fcf8b900116cfd3d198ef3463eca63189590dd18ad4d9377bd908c68ff02066aa87be821c6c284f7f4e76c1a38b02b67b6bd296128ff7f5a20cbf928cb1b30d2ea264dd21360562f25ad2e0199c5b5615d6128b0b4ae56b2ae05106d5574a09417abcbdecd105973688b2a23cd5de79dd3874462d72f2eecb3f5364bbaaf3c39"}) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d99"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:33 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2746.533108][T31151] ? debug_smp_processor_id+0x20/0x20 [ 2746.538446][T31151] ? security_file_ioctl+0x9d/0xb0 [ 2746.543528][T31151] __x64_sys_ioctl+0xd4/0x110 [ 2746.548182][T31151] do_syscall_64+0xcb/0x1c0 [ 2746.552657][T31151] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2746.558515][T31151] ---[ end trace b61d2c152d24eb29 ]--- 03:37:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0xffffff7f00000000}, 0x0) [ 2746.622539][T31194] FAULT_INJECTION: forcing a failure. [ 2746.622539][T31194] name failslab, interval 1, probability 0, space 0, times 0 [ 2746.635287][T31194] CPU: 1 PID: 31194 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2746.646896][T31194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2746.656927][T31194] Call Trace: [ 2746.660193][T31194] dump_stack+0x1d8/0x241 [ 2746.664500][T31194] ? panic+0x73e/0x73e [ 2746.668540][T31194] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2746.674323][T31194] ? mutex_unlock+0x19/0x40 [ 2746.678805][T31194] ? kernfs_add_one+0x4a3/0x5c0 [ 2746.683632][T31194] should_fail+0x709/0x870 [ 2746.688031][T31194] ? setup_fault_attr+0x3d0/0x3d0 [ 2746.693035][T31194] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 2746.698463][T31194] ? _raw_spin_lock+0x1b0/0x1b0 [ 2746.703280][T31194] ? sysfs_merge_group+0x3bc/0x460 [ 2746.708369][T31194] ? kobject_uevent_env+0x26d/0x700 [ 2746.713537][T31194] should_failslab+0x5/0x20 [ 2746.718009][T31194] kmem_cache_alloc_trace+0x28/0x240 [ 2746.723270][T31194] ? dev_uevent_filter+0xb0/0xb0 [ 2746.728175][T31194] kobject_uevent_env+0x26d/0x700 [ 2746.733169][T31194] device_add+0x7a7/0xbc0 [ 2746.737465][T31194] device_create_vargs+0x1b8/0x210 [ 2746.742545][T31194] device_create+0xea/0x130 [ 2746.747022][T31194] ? device_create_vargs+0x210/0x210 [ 2746.752276][T31194] bdi_register_va+0x89/0x5e0 [ 2746.756922][T31194] bdi_register+0xd1/0x120 [ 2746.761306][T31194] ? __device_add_disk+0x539/0x1200 [ 2746.766480][T31194] ? bdi_register_va+0x5e0/0x5e0 [ 2746.771393][T31194] ? percpu_ref_resurrect+0x113/0x190 [ 2746.776732][T31194] bdi_register_owner+0x56/0xf0 [ 2746.781554][T31194] __device_add_disk+0x5b8/0x1200 [ 2746.786548][T31194] ? device_add_disk+0x30/0x30 [ 2746.791280][T31194] ? vsprintf+0x30/0x30 [ 2746.795405][T31194] ? device_initialize+0x1c7/0x3d0 [ 2746.800487][T31194] ? __alloc_disk_node+0x326/0x380 [ 2746.805568][T31194] loop_add+0x554/0x710 [ 2746.809695][T31194] loop_control_ioctl+0x564/0x740 [ 2746.814688][T31194] ? loop_remove+0xa0/0xa0 [ 2746.819078][T31194] ? __lru_cache_add+0x1bf/0x210 [ 2746.823983][T31194] ? memset+0x1f/0x40 [ 2746.827934][T31194] ? fsnotify+0x1332/0x13f0 [ 2746.832407][T31194] ? loop_remove+0xa0/0xa0 [ 2746.836791][T31194] do_vfs_ioctl+0x744/0x1730 [ 2746.841350][T31194] ? selinux_file_ioctl+0x723/0x970 [ 2746.846516][T31194] ? ioctl_preallocate+0x250/0x250 [ 2746.851761][T31194] ? __fget+0x40c/0x4a0 [ 2746.855884][T31194] ? fget_many+0x20/0x20 [ 2746.860181][T31194] ? check_preemption_disabled+0x154/0x330 [ 2746.865956][T31194] ? debug_smp_processor_id+0x20/0x20 03:37:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0xffffffff00000000}, 0x0) 03:37:33 executing program 0: socket$key(0xf, 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205000004000000000000000000000002e2861a00"/32], 0x20}}, 0x0) 03:37:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x2}, 0x0) 03:37:33 executing program 0: socket$key(0xf, 0x3, 0x2) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205000004000000000000000000000002e2861a00"/32], 0x20}}, 0x0) 03:37:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x4}, 0x0) 03:37:33 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 65) 03:37:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x6}, 0x0) 03:37:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x600}, 0x0) [ 2746.871298][T31194] ? security_file_ioctl+0x9d/0xb0 [ 2746.876378][T31194] __x64_sys_ioctl+0xd4/0x110 [ 2746.881149][T31194] do_syscall_64+0xcb/0x1c0 [ 2746.885637][T31194] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d99"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:33 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2746.932273][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2746.954547][T31225] FAULT_INJECTION: forcing a failure. [ 2746.954547][T31225] name failslab, interval 1, probability 0, space 0, times 0 [ 2746.967809][T31225] CPU: 0 PID: 31225 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2746.979545][T31225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2746.989575][T31225] Call Trace: [ 2746.992853][T31225] dump_stack+0x1d8/0x241 [ 2746.997155][T31225] ? panic+0x73e/0x73e [ 2747.001191][T31225] ? mutex_unlock+0x19/0x40 [ 2747.005664][T31225] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2747.011439][T31225] ? selinux_kernfs_init_security+0x155/0x760 [ 2747.017477][T31225] ? idr_alloc_cyclic+0x36e/0x5e0 [ 2747.022473][T31225] should_fail+0x709/0x870 [ 2747.026859][T31225] ? setup_fault_attr+0x3d0/0x3d0 [ 2747.031863][T31225] ? _raw_spin_lock+0xa3/0x1b0 [ 2747.036606][T31225] ? __kernfs_new_node+0xdb/0x6d0 [ 2747.041635][T31225] should_failslab+0x5/0x20 [ 2747.046114][T31225] kmem_cache_alloc+0x24/0x210 [ 2747.050847][T31225] __kernfs_new_node+0xdb/0x6d0 [ 2747.055670][T31225] ? mutex_lock+0xa6/0x110 [ 2747.060067][T31225] ? kernfs_new_node+0x160/0x160 [ 2747.064983][T31225] ? mutex_lock+0xa6/0x110 [ 2747.069378][T31225] kernfs_new_node+0x95/0x160 [ 2747.074043][T31225] __kernfs_create_file+0x45/0x260 [ 2747.079127][T31225] sysfs_add_file_mode_ns+0x292/0x340 [ 2747.084469][T31225] sysfs_merge_group+0x207/0x460 [ 2747.089408][T31225] ? sysfs_remove_groups+0xb0/0xb0 [ 2747.094512][T31225] ? device_create_file+0xe8/0x1b0 [ 2747.099592][T31225] ? bus_add_device+0x92/0x3f0 [ 2747.104325][T31225] dpm_sysfs_add+0xc0/0x260 [ 2747.108806][T31225] device_add+0x547/0xbc0 [ 2747.113113][T31225] device_create_vargs+0x1b8/0x210 [ 2747.118201][T31225] device_create+0xea/0x130 [ 2747.122688][T31225] ? device_create_vargs+0x210/0x210 [ 2747.127951][T31225] bdi_register_va+0x89/0x5e0 [ 2747.132613][T31225] bdi_register+0xd1/0x120 [ 2747.137009][T31225] ? __device_add_disk+0x539/0x1200 [ 2747.142176][T31225] ? bdi_register_va+0x5e0/0x5e0 [ 2747.147087][T31225] ? percpu_ref_resurrect+0x113/0x190 [ 2747.152435][T31225] bdi_register_owner+0x56/0xf0 [ 2747.157265][T31225] __device_add_disk+0x5b8/0x1200 [ 2747.162278][T31225] ? device_add_disk+0x30/0x30 [ 2747.167020][T31225] ? vsprintf+0x30/0x30 [ 2747.171361][T31225] ? device_initialize+0x1c7/0x3d0 [ 2747.176457][T31225] ? __alloc_disk_node+0x326/0x380 [ 2747.181547][T31225] loop_add+0x554/0x710 [ 2747.185682][T31225] loop_control_ioctl+0x564/0x740 [ 2747.190681][T31225] ? loop_remove+0xa0/0xa0 [ 2747.195067][T31225] ? __lru_cache_add+0x1bf/0x210 [ 2747.199980][T31225] ? memset+0x1f/0x40 [ 2747.203932][T31225] ? fsnotify+0x1332/0x13f0 [ 2747.208407][T31225] ? loop_remove+0xa0/0xa0 [ 2747.212800][T31225] do_vfs_ioctl+0x744/0x1730 [ 2747.217371][T31225] ? selinux_file_ioctl+0x723/0x970 [ 2747.222548][T31225] ? ioctl_preallocate+0x250/0x250 [ 2747.227651][T31225] ? __fget+0x40c/0x4a0 03:37:33 executing program 0: socket$key(0xf, 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205000004000000000000000000000002e2861a00"/32], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) (async) pipe(&(0x7f0000000000)) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0205000004000000000000000000000002e2861a00"/32], 0x20}}, 0x0) (async) 03:37:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x4000}, 0x0) [ 2747.231776][T31225] ? fget_many+0x20/0x20 [ 2747.236017][T31225] ? check_preemption_disabled+0x154/0x330 [ 2747.241812][T31225] ? debug_smp_processor_id+0x20/0x20 [ 2747.247165][T31225] ? security_file_ioctl+0x9d/0xb0 [ 2747.252255][T31225] __x64_sys_ioctl+0xd4/0x110 [ 2747.256906][T31225] do_syscall_64+0xcb/0x1c0 [ 2747.261383][T31225] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2747.267898][T31225] ------------[ cut here ]------------ [ 2747.273364][T31225] WARNING: CPU: 0 PID: 31225 at block/genhd.c:742 __device_add_disk+0xe83/0x1200 [ 2747.282450][T31225] Modules linked in: [ 2747.286333][T31225] CPU: 0 PID: 31225 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2747.297948][T31225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2747.307994][T31225] RIP: 0010:__device_add_disk+0xe83/0x1200 [ 2747.313778][T31225] Code: ff ff e8 f0 b3 45 ff 0f 0b e9 29 f3 ff ff e8 e4 b3 45 ff 0f 0b 42 80 3c 2b 00 0f 85 ae f8 ff ff e9 b1 f8 ff ff e8 cd b3 45 ff <0f> 0b e9 46 f7 ff ff e8 c1 b3 45 ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2747.333353][T31225] RSP: 0018:ffff8881ec147a00 EFLAGS: 00010246 [ 2747.339389][T31225] RAX: ffffffff821f9753 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2747.347331][T31225] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2747.355364][T31225] RBP: ffff8881ec147b40 R08: ffffffff821f8e93 R09: 0000000000000010 [ 2747.363314][T31225] R10: ffffffff84800000 R11: 1ffff1103d828e00 R12: ffff8881d3d6e000 [ 2747.371261][T31225] R13: dffffc0000000000 R14: ffff8881d3d6e070 R15: 1ffff1103a7adc9d [ 2747.379206][T31225] FS: 00007fc9d5138700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2747.388103][T31225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2747.394655][T31225] CR2: 00007fc9d5137ff8 CR3: 00000001eb5a4000 CR4: 00000000003406f0 [ 2747.402598][T31225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2747.410541][T31225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2747.418481][T31225] Call Trace: [ 2747.421771][T31225] ? device_add_disk+0x30/0x30 [ 2747.426556][T31225] ? vsprintf+0x30/0x30 [ 2747.430684][T31225] ? device_initialize+0x1c7/0x3d0 [ 2747.435776][T31225] ? __alloc_disk_node+0x326/0x380 [ 2747.440862][T31225] loop_add+0x554/0x710 [ 2747.444988][T31225] loop_control_ioctl+0x564/0x740 [ 2747.449983][T31225] ? loop_remove+0xa0/0xa0 [ 2747.454376][T31225] ? __lru_cache_add+0x1bf/0x210 [ 2747.459283][T31225] ? memset+0x1f/0x40 [ 2747.463269][T31225] ? fsnotify+0x1332/0x13f0 [ 2747.467740][T31225] ? loop_remove+0xa0/0xa0 [ 2747.472125][T31225] do_vfs_ioctl+0x744/0x1730 [ 2747.476692][T31225] ? selinux_file_ioctl+0x723/0x970 03:37:34 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 66) 03:37:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x38000}, 0x0) 03:37:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x1}]}, 0x20}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x10000000) 03:37:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x800300}, 0x0) 03:37:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x1}]}, 0x20}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x10000000) [ 2747.481857][T31225] ? ioctl_preallocate+0x250/0x250 [ 2747.486935][T31225] ? __fget+0x40c/0x4a0 [ 2747.491068][T31225] ? fget_many+0x20/0x20 [ 2747.495291][T31225] ? check_preemption_disabled+0x154/0x330 [ 2747.501068][T31225] ? debug_smp_processor_id+0x20/0x20 [ 2747.506421][T31225] ? security_file_ioctl+0x9d/0xb0 [ 2747.511510][T31225] __x64_sys_ioctl+0xd4/0x110 [ 2747.516162][T31225] do_syscall_64+0xcb/0x1c0 [ 2747.520645][T31225] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2747.526522][T31225] ---[ end trace b61d2c152d24eb2a ]--- 03:37:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x1000000}, 0x0) 03:37:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x1}]}, 0x20}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x10000000) 03:37:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:34 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:34 executing program 0: syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x48004) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r2) socket$key(0xf, 0x3, 0x2) 03:37:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x2000000}, 0x0) [ 2747.594573][T31252] FAULT_INJECTION: forcing a failure. [ 2747.594573][T31252] name failslab, interval 1, probability 0, space 0, times 0 [ 2747.607351][T31252] CPU: 0 PID: 31252 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2747.618958][T31252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2747.628986][T31252] Call Trace: [ 2747.632254][T31252] dump_stack+0x1d8/0x241 [ 2747.636556][T31252] ? panic+0x73e/0x73e [ 2747.642959][T31252] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2747.648730][T31252] ? vsnprintf+0x1bfd/0x1cd0 [ 2747.653289][T31252] ? bdi_register_va+0x89/0x5e0 [ 2747.658113][T31252] should_fail+0x709/0x870 [ 2747.662496][T31252] ? setup_fault_attr+0x3d0/0x3d0 [ 2747.667542][T31252] ? of_device_uevent+0xeb/0x2b0 [ 2747.672449][T31252] ? __alloc_skb+0x78/0x4d0 [ 2747.676924][T31252] should_failslab+0x5/0x20 [ 2747.681398][T31252] kmem_cache_alloc+0x24/0x210 [ 2747.686131][T31252] __alloc_skb+0x78/0x4d0 [ 2747.690428][T31252] ? mutex_lock+0xa6/0x110 [ 2747.694814][T31252] alloc_uevent_skb+0x73/0x220 [ 2747.699549][T31252] kobject_uevent_net_broadcast+0x2f3/0x570 [ 2747.705412][T31252] ? kobject_get_path+0x17b/0x1a0 [ 2747.710400][T31252] kobject_uevent_env+0x552/0x700 [ 2747.715395][T31252] device_add+0x7a7/0xbc0 [ 2747.719692][T31252] device_create_vargs+0x1b8/0x210 [ 2747.724770][T31252] device_create+0xea/0x130 [ 2747.729249][T31252] ? device_create_vargs+0x210/0x210 [ 2747.734501][T31252] bdi_register_va+0x89/0x5e0 [ 2747.739241][T31252] bdi_register+0xd1/0x120 [ 2747.743635][T31252] ? __device_add_disk+0x539/0x1200 [ 2747.748799][T31252] ? bdi_register_va+0x5e0/0x5e0 [ 2747.753705][T31252] ? percpu_ref_resurrect+0x113/0x190 [ 2747.759110][T31252] bdi_register_owner+0x56/0xf0 [ 2747.763926][T31252] __device_add_disk+0x5b8/0x1200 [ 2747.768918][T31252] ? device_add_disk+0x30/0x30 [ 2747.773652][T31252] ? vsprintf+0x30/0x30 [ 2747.777782][T31252] ? device_initialize+0x1c7/0x3d0 [ 2747.782858][T31252] ? __alloc_disk_node+0x326/0x380 [ 2747.787942][T31252] loop_add+0x554/0x710 [ 2747.792085][T31252] loop_control_ioctl+0x564/0x740 [ 2747.797091][T31252] ? loop_remove+0xa0/0xa0 [ 2747.801483][T31252] ? __lru_cache_add+0x1bf/0x210 [ 2747.806402][T31252] ? memset+0x1f/0x40 [ 2747.810349][T31252] ? fsnotify+0x1332/0x13f0 [ 2747.814817][T31252] ? loop_remove+0xa0/0xa0 [ 2747.819208][T31252] do_vfs_ioctl+0x744/0x1730 [ 2747.823766][T31252] ? selinux_file_ioctl+0x723/0x970 [ 2747.828931][T31252] ? ioctl_preallocate+0x250/0x250 [ 2747.834009][T31252] ? __fget+0x40c/0x4a0 [ 2747.838228][T31252] ? fget_many+0x20/0x20 03:37:34 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 67) 03:37:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x4000000}, 0x0) 03:37:34 executing program 0: syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x48004) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async, rerun: 32) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) (rerun: 32) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) (async) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r2) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (rerun: 64) 03:37:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x6000000}, 0x0) 03:37:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x40000000}, 0x0) [ 2747.842442][T31252] ? check_preemption_disabled+0x154/0x330 [ 2747.848219][T31252] ? debug_smp_processor_id+0x20/0x20 [ 2747.853645][T31252] ? security_file_ioctl+0x9d/0xb0 [ 2747.858741][T31252] __x64_sys_ioctl+0xd4/0x110 [ 2747.863403][T31252] do_syscall_64+0xcb/0x1c0 [ 2747.867876][T31252] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2747.907844][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2747.918701][T31266] FAULT_INJECTION: forcing a failure. [ 2747.918701][T31266] name failslab, interval 1, probability 0, space 0, times 0 [ 2747.933588][T31266] CPU: 1 PID: 31266 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2747.945196][T31266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2747.955219][T31266] Call Trace: [ 2747.958481][T31266] dump_stack+0x1d8/0x241 [ 2747.962778][T31266] ? panic+0x73e/0x73e [ 2747.966816][T31266] ? bdi_register_owner+0x56/0xf0 [ 2747.971806][T31266] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2747.977575][T31266] ? do_vfs_ioctl+0x744/0x1730 [ 2747.982306][T31266] ? do_syscall_64+0xcb/0x1c0 [ 2747.986947][T31266] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2747.992978][T31266] should_fail+0x709/0x870 [ 2747.997370][T31266] ? setup_fault_attr+0x3d0/0x3d0 [ 2748.002359][T31266] ? kobject_get_path+0xbb/0x1a0 [ 2748.007262][T31266] should_failslab+0x5/0x20 [ 2748.011731][T31266] __kmalloc+0x51/0x2b0 [ 2748.015861][T31266] kobject_get_path+0xbb/0x1a0 [ 2748.020599][T31266] kobject_uevent_env+0x284/0x700 [ 2748.025591][T31266] device_add+0x7a7/0xbc0 [ 2748.030088][T31266] device_create_vargs+0x1b8/0x210 [ 2748.035167][T31266] device_create+0xea/0x130 [ 2748.039636][T31266] ? device_create_vargs+0x210/0x210 [ 2748.044886][T31266] bdi_register_va+0x89/0x5e0 [ 2748.049535][T31266] bdi_register+0xd1/0x120 [ 2748.053929][T31266] ? __device_add_disk+0x539/0x1200 [ 2748.059091][T31266] ? bdi_register_va+0x5e0/0x5e0 [ 2748.064089][T31266] ? percpu_ref_resurrect+0x113/0x190 [ 2748.069428][T31266] bdi_register_owner+0x56/0xf0 [ 2748.074247][T31266] __device_add_disk+0x5b8/0x1200 [ 2748.079241][T31266] ? device_add_disk+0x30/0x30 [ 2748.083973][T31266] ? vsprintf+0x30/0x30 [ 2748.088104][T31266] ? device_initialize+0x1c7/0x3d0 [ 2748.093190][T31266] ? __alloc_disk_node+0x326/0x380 [ 2748.098271][T31266] loop_add+0x554/0x710 [ 2748.102413][T31266] loop_control_ioctl+0x564/0x740 [ 2748.107415][T31266] ? loop_remove+0xa0/0xa0 [ 2748.111865][T31266] ? __lru_cache_add+0x1bf/0x210 [ 2748.116781][T31266] ? memset+0x1f/0x40 [ 2748.120732][T31266] ? fsnotify+0x1332/0x13f0 [ 2748.125203][T31266] ? loop_remove+0xa0/0xa0 [ 2748.129589][T31266] do_vfs_ioctl+0x744/0x1730 [ 2748.134156][T31266] ? selinux_file_ioctl+0x723/0x970 [ 2748.139321][T31266] ? ioctl_preallocate+0x250/0x250 [ 2748.144521][T31266] ? __fget+0x40c/0x4a0 [ 2748.148649][T31266] ? fget_many+0x20/0x20 [ 2748.152861][T31266] ? check_preemption_disabled+0x154/0x330 03:37:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x7fffefe0}, 0x0) 03:37:34 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:34 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 68) 03:37:34 executing program 0: syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x48004) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (async, rerun: 64) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) (rerun: 64) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) (async, rerun: 32) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) (async) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r2) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (rerun: 32) 03:37:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0xe0efff7f}, 0x0) 03:37:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:37:34 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x5, 0x800, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2748.158634][T31266] ? debug_smp_processor_id+0x20/0x20 [ 2748.163973][T31266] ? security_file_ioctl+0x9d/0xb0 [ 2748.169051][T31266] __x64_sys_ioctl+0xd4/0x110 [ 2748.173695][T31266] do_syscall_64+0xcb/0x1c0 [ 2748.178164][T31266] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2748.196320][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 03:37:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0xffffff7f}, 0x0) [ 2748.240758][T31281] FAULT_INJECTION: forcing a failure. [ 2748.240758][T31281] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.257403][T31281] CPU: 1 PID: 31281 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2748.269025][T31281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2748.279053][T31281] Call Trace: [ 2748.282442][T31281] dump_stack+0x1d8/0x241 [ 2748.286759][T31281] ? panic+0x73e/0x73e [ 2748.290806][T31281] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2748.296584][T31281] should_fail+0x709/0x870 [ 2748.300974][T31281] ? setup_fault_attr+0x3d0/0x3d0 [ 2748.305968][T31281] ? alloc_uevent_skb+0x73/0x220 [ 2748.310879][T31281] should_failslab+0x5/0x20 [ 2748.315350][T31281] __kmalloc_track_caller+0x4f/0x280 [ 2748.320599][T31281] ? kmem_cache_alloc+0xd0/0x210 [ 2748.325505][T31281] ? alloc_uevent_skb+0x73/0x220 [ 2748.330412][T31281] __alloc_skb+0xb5/0x4d0 [ 2748.334709][T31281] alloc_uevent_skb+0x73/0x220 [ 2748.339448][T31281] kobject_uevent_net_broadcast+0x2f3/0x570 [ 2748.345312][T31281] ? kobject_get_path+0x17b/0x1a0 [ 2748.350303][T31281] kobject_uevent_env+0x552/0x700 [ 2748.355306][T31281] device_add+0x7a7/0xbc0 [ 2748.359605][T31281] device_create_vargs+0x1b8/0x210 [ 2748.364776][T31281] device_create+0xea/0x130 [ 2748.369260][T31281] ? device_create_vargs+0x210/0x210 [ 2748.374536][T31281] bdi_register_va+0x89/0x5e0 [ 2748.379187][T31281] bdi_register+0xd1/0x120 [ 2748.383571][T31281] ? __device_add_disk+0x539/0x1200 [ 2748.388743][T31281] ? bdi_register_va+0x5e0/0x5e0 [ 2748.393654][T31281] ? percpu_ref_resurrect+0x113/0x190 [ 2748.398990][T31281] bdi_register_owner+0x56/0xf0 [ 2748.403806][T31281] __device_add_disk+0x5b8/0x1200 [ 2748.408799][T31281] ? device_add_disk+0x30/0x30 [ 2748.413527][T31281] ? vsprintf+0x30/0x30 [ 2748.417649][T31281] ? device_initialize+0x1c7/0x3d0 [ 2748.422726][T31281] ? __alloc_disk_node+0x326/0x380 [ 2748.427803][T31281] loop_add+0x554/0x710 [ 2748.431925][T31281] loop_control_ioctl+0x564/0x740 [ 2748.436914][T31281] ? loop_remove+0xa0/0xa0 [ 2748.441297][T31281] ? __lru_cache_add+0x1bf/0x210 [ 2748.446202][T31281] ? memset+0x1f/0x40 [ 2748.450150][T31281] ? fsnotify+0x1332/0x13f0 [ 2748.454617][T31281] ? loop_remove+0xa0/0xa0 [ 2748.458997][T31281] do_vfs_ioctl+0x744/0x1730 [ 2748.463640][T31281] ? selinux_file_ioctl+0x723/0x970 [ 2748.468802][T31281] ? ioctl_preallocate+0x250/0x250 [ 2748.473880][T31281] ? __fget+0x40c/0x4a0 [ 2748.478007][T31281] ? fget_many+0x20/0x20 [ 2748.482228][T31281] ? check_preemption_disabled+0x154/0x330 03:37:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:37:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x7ffffffff000}, 0x0) [ 2748.488024][T31281] ? debug_smp_processor_id+0x20/0x20 [ 2748.493362][T31281] ? security_file_ioctl+0x9d/0xb0 [ 2748.498438][T31281] __x64_sys_ioctl+0xd4/0x110 [ 2748.503083][T31281] do_syscall_64+0xcb/0x1c0 [ 2748.507553][T31281] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:35 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 69) 03:37:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x80030000000000}, 0x0) 03:37:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 03:37:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0xf0ffffff7f0000}, 0x0) [ 2748.569438][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2748.600981][T31311] FAULT_INJECTION: forcing a failure. [ 2748.600981][T31311] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.617088][T31311] CPU: 1 PID: 31311 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2748.628704][T31311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2748.638734][T31311] Call Trace: [ 2748.641998][T31311] dump_stack+0x1d8/0x241 [ 2748.646300][T31311] ? panic+0x73e/0x73e [ 2748.650336][T31311] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2748.656108][T31311] should_fail+0x709/0x870 [ 2748.660497][T31311] ? setup_fault_attr+0x3d0/0x3d0 [ 2748.665487][T31311] ? alloc_uevent_skb+0x73/0x220 [ 2748.670403][T31311] should_failslab+0x5/0x20 [ 2748.674875][T31311] __kmalloc_track_caller+0x4f/0x280 [ 2748.680129][T31311] ? kmem_cache_alloc+0xd0/0x210 [ 2748.685032][T31311] ? alloc_uevent_skb+0x73/0x220 [ 2748.689933][T31311] __alloc_skb+0xb5/0x4d0 [ 2748.694228][T31311] alloc_uevent_skb+0x73/0x220 [ 2748.698961][T31311] kobject_uevent_net_broadcast+0x2f3/0x570 [ 2748.704820][T31311] ? kobject_get_path+0x17b/0x1a0 [ 2748.709808][T31311] kobject_uevent_env+0x552/0x700 [ 2748.714799][T31311] device_add+0x7a7/0xbc0 [ 2748.719096][T31311] device_create_vargs+0x1b8/0x210 [ 2748.724174][T31311] device_create+0xea/0x130 [ 2748.728645][T31311] ? device_create_vargs+0x210/0x210 [ 2748.733895][T31311] bdi_register_va+0x89/0x5e0 [ 2748.738538][T31311] bdi_register+0xd1/0x120 [ 2748.742922][T31311] ? __device_add_disk+0x539/0x1200 [ 2748.748085][T31311] ? bdi_register_va+0x5e0/0x5e0 [ 2748.752990][T31311] ? percpu_ref_resurrect+0x113/0x190 [ 2748.758327][T31311] bdi_register_owner+0x56/0xf0 [ 2748.763151][T31311] __device_add_disk+0x5b8/0x1200 [ 2748.768150][T31311] ? device_add_disk+0x30/0x30 [ 2748.772878][T31311] ? vsprintf+0x30/0x30 [ 2748.777004][T31311] ? device_initialize+0x1c7/0x3d0 [ 2748.782082][T31311] ? __alloc_disk_node+0x326/0x380 [ 2748.787167][T31311] loop_add+0x554/0x710 [ 2748.791298][T31311] loop_control_ioctl+0x564/0x740 [ 2748.796288][T31311] ? loop_remove+0xa0/0xa0 [ 2748.800670][T31311] ? __lru_cache_add+0x1bf/0x210 [ 2748.805573][T31311] ? memset+0x1f/0x40 [ 2748.809523][T31311] ? fsnotify+0x1332/0x13f0 [ 2748.813991][T31311] ? loop_remove+0xa0/0xa0 [ 2748.818392][T31311] do_vfs_ioctl+0x744/0x1730 [ 2748.822965][T31311] ? selinux_file_ioctl+0x723/0x970 [ 2748.828132][T31311] ? ioctl_preallocate+0x250/0x250 [ 2748.833307][T31311] ? __fget+0x40c/0x4a0 [ 2748.837440][T31311] ? fget_many+0x20/0x20 [ 2748.841648][T31311] ? check_preemption_disabled+0x154/0x330 [ 2748.847421][T31311] ? debug_smp_processor_id+0x20/0x20 [ 2748.852766][T31311] ? security_file_ioctl+0x9d/0xb0 [ 2748.857845][T31311] __x64_sys_ioctl+0xd4/0x110 [ 2748.862489][T31311] do_syscall_64+0xcb/0x1c0 03:37:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x100000000000000}, 0x0) 03:37:35 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 70) 03:37:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80d0}, 0x8000) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000002000000000000000daa94a257f8e2e23edcefddb210c4cadc3"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x14}}}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x202, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xffffffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) [ 2748.866963][T31311] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x200000000000000}, 0x0) 03:37:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80d0}, 0x8000) (async, rerun: 32) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000002000000000000000daa94a257f8e2e23edcefddb210c4cadc3"], 0x20}}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x14}}}, 0x30}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) (async, rerun: 64) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x202, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xffffffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) (rerun: 64) 03:37:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2748.909912][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2748.926718][T31325] FAULT_INJECTION: forcing a failure. [ 2748.926718][T31325] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.939655][T31325] CPU: 1 PID: 31325 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2748.951265][T31325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2748.961295][T31325] Call Trace: [ 2748.964559][T31325] dump_stack+0x1d8/0x241 [ 2748.968855][T31325] ? panic+0x73e/0x73e [ 2748.972911][T31325] ? check_preemption_disabled+0x154/0x330 [ 2748.978681][T31325] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2748.984455][T31325] ? debug_smp_processor_id+0x20/0x20 [ 2748.989795][T31325] ? stack_trace_snprint+0x170/0x170 [ 2748.995045][T31325] should_fail+0x709/0x870 [ 2748.999427][T31325] ? setup_fault_attr+0x3d0/0x3d0 [ 2749.004425][T31325] ? __kasan_slab_free+0x1fa/0x240 [ 2749.009504][T31325] ? __kasan_slab_free+0x178/0x240 [ 2749.014579][T31325] ? slab_free_freelist_hook+0x80/0x150 [ 2749.020092][T31325] ? kfree+0xc6/0x260 [ 2749.024038][T31325] ? kobject_uevent_env+0x352/0x700 [ 2749.029203][T31325] ? device_create_vargs+0x1b8/0x210 [ 2749.034475][T31325] ? device_create+0xea/0x130 [ 2749.039116][T31325] ? bdi_register_va+0x89/0x5e0 [ 2749.043930][T31325] ? bdi_register+0xd1/0x120 [ 2749.048482][T31325] ? bdi_register_owner+0x56/0xf0 [ 2749.053474][T31325] ? __d_alloc+0x2a/0x6a0 [ 2749.057769][T31325] should_failslab+0x5/0x20 [ 2749.062239][T31325] kmem_cache_alloc+0x24/0x210 [ 2749.066967][T31325] __d_alloc+0x2a/0x6a0 [ 2749.071089][T31325] d_alloc_parallel+0xe6/0x1310 [ 2749.075907][T31325] ? avc_has_perm_noaudit+0x30c/0x400 [ 2749.081243][T31325] ? avc_denied+0x1c0/0x1c0 [ 2749.085710][T31325] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2749.090792][T31325] ? slab_free_freelist_hook+0x80/0x150 [ 2749.096303][T31325] ? selinux_inode_permission+0x374/0x670 [ 2749.101985][T31325] ? selinux_inode_permission+0x438/0x670 [ 2749.107683][T31325] __lookup_slow+0x15a/0x450 [ 2749.112244][T31325] ? lookup_one_len+0x680/0x680 [ 2749.117064][T31325] lookup_one_len+0x426/0x680 [ 2749.121723][T31325] ? try_lookup_one_len+0x650/0x650 [ 2749.126950][T31325] start_creating+0xec/0x270 [ 2749.131515][T31325] debugfs_create_dir+0x24/0x380 [ 2749.136534][T31325] bdi_register_va+0x232/0x5e0 [ 2749.141267][T31325] bdi_register+0xd1/0x120 [ 2749.145658][T31325] ? __device_add_disk+0x539/0x1200 [ 2749.150843][T31325] ? bdi_register_va+0x5e0/0x5e0 [ 2749.155753][T31325] ? percpu_ref_resurrect+0x113/0x190 [ 2749.161103][T31325] bdi_register_owner+0x56/0xf0 [ 2749.165930][T31325] __device_add_disk+0x5b8/0x1200 [ 2749.170933][T31325] ? device_add_disk+0x30/0x30 [ 2749.175667][T31325] ? vsprintf+0x30/0x30 [ 2749.179791][T31325] ? device_initialize+0x1c7/0x3d0 [ 2749.184869][T31325] ? __alloc_disk_node+0x326/0x380 [ 2749.189948][T31325] loop_add+0x554/0x710 [ 2749.194075][T31325] loop_control_ioctl+0x564/0x740 [ 2749.199071][T31325] ? loop_remove+0xa0/0xa0 [ 2749.203455][T31325] ? __lru_cache_add+0x1bf/0x210 [ 2749.208358][T31325] ? memset+0x1f/0x40 [ 2749.212312][T31325] ? fsnotify+0x1332/0x13f0 [ 2749.216782][T31325] ? loop_remove+0xa0/0xa0 [ 2749.221163][T31325] do_vfs_ioctl+0x744/0x1730 [ 2749.225722][T31325] ? selinux_file_ioctl+0x723/0x970 [ 2749.230889][T31325] ? ioctl_preallocate+0x250/0x250 [ 2749.235967][T31325] ? __fget+0x40c/0x4a0 [ 2749.240088][T31325] ? fget_many+0x20/0x20 [ 2749.244385][T31325] ? check_preemption_disabled+0x154/0x330 [ 2749.250159][T31325] ? debug_smp_processor_id+0x20/0x20 [ 2749.255498][T31325] ? security_file_ioctl+0x9d/0xb0 03:37:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x400000000000000}, 0x0) 03:37:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80d0}, 0x8000) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000002000000000000000daa94a257f8e2e23edcefddb210c4cadc3"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x14}}}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x202, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xffffffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) socket$key(0xf, 0x3, 0x2) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80d0}, 0x8000) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="0205000004000000000000000000000002000100000000002000000000000000daa94a257f8e2e23edcefddb210c4cadc3"], 0x20}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x14}}}, 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x202, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xffffffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) (async) 03:37:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x600000000000000}, 0x0) 03:37:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x4000000000000000}, 0x0) 03:37:35 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 71) 03:37:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0xe0efff7f00000000}, 0x0) [ 2749.260579][T31325] __x64_sys_ioctl+0xd4/0x110 [ 2749.265228][T31325] do_syscall_64+0xcb/0x1c0 [ 2749.269709][T31325] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0xffffff7f00000000}, 0x0) 03:37:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0xffffffff00000000}, 0x0) 03:37:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) [ 2749.347886][T31366] FAULT_INJECTION: forcing a failure. [ 2749.347886][T31366] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.367890][T31366] CPU: 1 PID: 31366 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2749.379514][T31366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2749.389544][T31366] Call Trace: [ 2749.392811][T31366] dump_stack+0x1d8/0x241 [ 2749.397119][T31366] ? panic+0x73e/0x73e [ 2749.401164][T31366] ? check_preemption_disabled+0x154/0x330 [ 2749.406937][T31366] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2749.412716][T31366] ? debug_smp_processor_id+0x20/0x20 [ 2749.418066][T31366] ? stack_trace_snprint+0x170/0x170 [ 2749.423335][T31366] should_fail+0x709/0x870 [ 2749.427728][T31366] ? setup_fault_attr+0x3d0/0x3d0 [ 2749.432730][T31366] ? __kasan_slab_free+0x1fa/0x240 [ 2749.437807][T31366] ? __kasan_slab_free+0x178/0x240 [ 2749.442883][T31366] ? slab_free_freelist_hook+0x80/0x150 [ 2749.448395][T31366] ? kfree+0xc6/0x260 [ 2749.452346][T31366] ? kobject_uevent_env+0x352/0x700 [ 2749.457515][T31366] ? device_create_vargs+0x1b8/0x210 [ 2749.462775][T31366] ? device_create+0xea/0x130 [ 2749.467423][T31366] ? bdi_register_va+0x89/0x5e0 [ 2749.472265][T31366] ? bdi_register+0xd1/0x120 [ 2749.476826][T31366] ? bdi_register_owner+0x56/0xf0 [ 2749.481819][T31366] ? __d_alloc+0x2a/0x6a0 [ 2749.486114][T31366] should_failslab+0x5/0x20 [ 2749.490588][T31366] kmem_cache_alloc+0x24/0x210 [ 2749.495326][T31366] __d_alloc+0x2a/0x6a0 [ 2749.499468][T31366] d_alloc_parallel+0xe6/0x1310 [ 2749.504295][T31366] ? avc_has_perm_noaudit+0x30c/0x400 [ 2749.509645][T31366] ? avc_denied+0x1c0/0x1c0 [ 2749.514120][T31366] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2749.519205][T31366] ? slab_free_freelist_hook+0x80/0x150 [ 2749.524725][T31366] ? selinux_inode_permission+0x374/0x670 [ 2749.530420][T31366] ? selinux_inode_permission+0x438/0x670 [ 2749.536106][T31366] __lookup_slow+0x15a/0x450 [ 2749.540669][T31366] ? lookup_one_len+0x680/0x680 [ 2749.545574][T31366] lookup_one_len+0x426/0x680 [ 2749.550219][T31366] ? try_lookup_one_len+0x650/0x650 [ 2749.555388][T31366] start_creating+0xec/0x270 [ 2749.559946][T31366] debugfs_create_dir+0x24/0x380 [ 2749.564853][T31366] bdi_register_va+0x232/0x5e0 [ 2749.569585][T31366] bdi_register+0xd1/0x120 [ 2749.574077][T31366] ? __device_add_disk+0x539/0x1200 [ 2749.579246][T31366] ? bdi_register_va+0x5e0/0x5e0 [ 2749.584152][T31366] ? percpu_ref_resurrect+0x113/0x190 [ 2749.589496][T31366] bdi_register_owner+0x56/0xf0 [ 2749.594321][T31366] __device_add_disk+0x5b8/0x1200 [ 2749.599329][T31366] ? device_add_disk+0x30/0x30 [ 2749.604058][T31366] ? vsprintf+0x30/0x30 [ 2749.608188][T31366] ? device_initialize+0x1c7/0x3d0 [ 2749.613272][T31366] ? __alloc_disk_node+0x326/0x380 [ 2749.618350][T31366] loop_add+0x554/0x710 [ 2749.622475][T31366] loop_control_ioctl+0x564/0x740 [ 2749.627466][T31366] ? loop_remove+0xa0/0xa0 [ 2749.631852][T31366] ? __lru_cache_add+0x1bf/0x210 [ 2749.636761][T31366] ? memset+0x1f/0x40 [ 2749.640709][T31366] ? fsnotify+0x1332/0x13f0 [ 2749.645177][T31366] ? loop_remove+0xa0/0xa0 [ 2749.649558][T31366] do_vfs_ioctl+0x744/0x1730 [ 2749.654114][T31366] ? selinux_file_ioctl+0x723/0x970 [ 2749.659278][T31366] ? ioctl_preallocate+0x250/0x250 [ 2749.664359][T31366] ? __fget+0x40c/0x4a0 [ 2749.668481][T31366] ? fget_many+0x20/0x20 [ 2749.672690][T31366] ? check_preemption_disabled+0x154/0x330 [ 2749.678462][T31366] ? debug_smp_processor_id+0x20/0x20 [ 2749.683804][T31366] ? security_file_ioctl+0x9d/0xb0 [ 2749.688883][T31366] __x64_sys_ioctl+0xd4/0x110 [ 2749.693525][T31366] do_syscall_64+0xcb/0x1c0 03:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x0) 03:37:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x2}, 0x0) 03:37:36 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 72) [ 2749.698001][T31366] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:36 executing program 2: socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r2, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x14) 03:37:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x4}, 0x0) 03:37:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2749.735237][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2749.748146][T31386] FAULT_INJECTION: forcing a failure. [ 2749.748146][T31386] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.760763][T31386] CPU: 1 PID: 31386 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2749.772374][T31386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2749.782415][T31386] Call Trace: [ 2749.785680][T31386] dump_stack+0x1d8/0x241 [ 2749.789984][T31386] ? panic+0x73e/0x73e [ 2749.794029][T31386] ? do_vfs_ioctl+0x744/0x1730 [ 2749.798765][T31386] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2749.804543][T31386] should_fail+0x709/0x870 [ 2749.808931][T31386] ? setup_fault_attr+0x3d0/0x3d0 [ 2749.813923][T31386] ? make_kgid+0x215/0x710 [ 2749.818309][T31386] ? security_inode_alloc+0x24/0x130 [ 2749.823559][T31386] should_failslab+0x5/0x20 [ 2749.828112][T31386] kmem_cache_alloc+0x24/0x210 [ 2749.832847][T31386] security_inode_alloc+0x24/0x130 [ 2749.838011][T31386] inode_init_always+0x5db/0x800 [ 2749.842912][T31386] new_inode_pseudo+0x8f/0x210 [ 2749.847645][T31386] new_inode+0x25/0x1d0 [ 2749.851768][T31386] ? start_creating+0x183/0x270 [ 2749.856582][T31386] debugfs_create_dir+0x66/0x380 [ 2749.861484][T31386] bdi_register_va+0x232/0x5e0 [ 2749.866222][T31386] bdi_register+0xd1/0x120 [ 2749.870608][T31386] ? __device_add_disk+0x539/0x1200 [ 2749.875771][T31386] ? bdi_register_va+0x5e0/0x5e0 [ 2749.880673][T31386] ? percpu_ref_resurrect+0x113/0x190 [ 2749.886010][T31386] bdi_register_owner+0x56/0xf0 [ 2749.890826][T31386] __device_add_disk+0x5b8/0x1200 [ 2749.895816][T31386] ? device_add_disk+0x30/0x30 [ 2749.900543][T31386] ? vsprintf+0x30/0x30 [ 2749.904662][T31386] ? device_initialize+0x1c7/0x3d0 [ 2749.909738][T31386] ? __alloc_disk_node+0x326/0x380 [ 2749.914813][T31386] loop_add+0x554/0x710 [ 2749.918934][T31386] loop_control_ioctl+0x564/0x740 [ 2749.923923][T31386] ? loop_remove+0xa0/0xa0 [ 2749.928305][T31386] ? __lru_cache_add+0x1bf/0x210 [ 2749.933210][T31386] ? memset+0x1f/0x40 [ 2749.937159][T31386] ? fsnotify+0x1332/0x13f0 [ 2749.941627][T31386] ? loop_remove+0xa0/0xa0 [ 2749.946013][T31386] do_vfs_ioctl+0x744/0x1730 [ 2749.950571][T31386] ? selinux_file_ioctl+0x723/0x970 [ 2749.955733][T31386] ? ioctl_preallocate+0x250/0x250 [ 2749.960896][T31386] ? __fget+0x40c/0x4a0 [ 2749.965018][T31386] ? fget_many+0x20/0x20 [ 2749.969225][T31386] ? check_preemption_disabled+0x154/0x330 [ 2749.974994][T31386] ? debug_smp_processor_id+0x20/0x20 [ 2749.980335][T31386] ? security_file_ioctl+0x9d/0xb0 03:37:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r2, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (rerun: 64) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x14) 03:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x6}, 0x0) 03:37:36 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 73) 03:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x600}, 0x0) [ 2749.985419][T31386] __x64_sys_ioctl+0xd4/0x110 [ 2749.990062][T31386] do_syscall_64+0xcb/0x1c0 [ 2749.994541][T31386] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2750.001658][T31386] debugfs: out of free dentries, can not create directory '7:0' 03:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x4000}, 0x0) 03:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x38000}, 0x0) 03:37:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r2, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r2, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc9ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x28, 0xa, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) pipe(&(0x7f0000000140)) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x14) (async) 03:37:36 executing program 2: socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x800300}, 0x0) 03:37:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x1000000}, 0x0) [ 2750.081566][T31403] FAULT_INJECTION: forcing a failure. [ 2750.081566][T31403] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2750.096769][T31403] CPU: 1 PID: 31403 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2750.108384][T31403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2750.118411][T31403] Call Trace: [ 2750.121674][T31403] dump_stack+0x1d8/0x241 [ 2750.125969][T31403] ? panic+0x73e/0x73e [ 2750.130004][T31403] ? stack_trace_save+0x132/0x200 [ 2750.134998][T31403] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2750.140766][T31403] ? stack_trace_snprint+0x170/0x170 [ 2750.146019][T31403] should_fail+0x709/0x870 [ 2750.150400][T31403] ? setup_fault_attr+0x3d0/0x3d0 [ 2750.155389][T31403] ? __kasan_kmalloc+0x131/0x1e0 [ 2750.160298][T31403] ? kmem_cache_alloc+0xd0/0x210 [ 2750.165212][T31403] ? inode_init_always+0x5db/0x800 [ 2750.170296][T31403] ? new_inode_pseudo+0x8f/0x210 [ 2750.175205][T31403] __alloc_pages_nodemask+0x1b6/0x860 [ 2750.180544][T31403] ? __x64_sys_ioctl+0xd4/0x110 [ 2750.185371][T31403] ? do_syscall_64+0xcb/0x1c0 [ 2750.190032][T31403] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2750.195555][T31403] ? lockref_get+0x1b3/0x2a0 [ 2750.200113][T31403] ? asan.module_dtor+0x20/0x20 [ 2750.204930][T31403] __get_free_pages+0xa/0x30 [ 2750.209489][T31403] selinux_genfs_get_sid+0x55/0x250 [ 2750.214657][T31403] inode_doinit_with_dentry+0x87c/0x1020 [ 2750.220261][T31403] ? sb_finish_set_opts+0x7a0/0x7a0 [ 2750.225438][T31403] ? current_time+0x1c4/0x310 [ 2750.230087][T31403] ? atime_needs_update+0x580/0x580 [ 2750.235254][T31403] security_d_instantiate+0xa5/0x100 [ 2750.240516][T31403] d_instantiate+0x51/0x90 [ 2750.244904][T31403] debugfs_create_dir+0x1a1/0x380 [ 2750.249896][T31403] bdi_register_va+0x232/0x5e0 [ 2750.254630][T31403] bdi_register+0xd1/0x120 [ 2750.259036][T31403] ? __device_add_disk+0x539/0x1200 [ 2750.264216][T31403] ? bdi_register_va+0x5e0/0x5e0 [ 2750.269124][T31403] ? percpu_ref_resurrect+0x113/0x190 [ 2750.274480][T31403] bdi_register_owner+0x56/0xf0 [ 2750.279314][T31403] __device_add_disk+0x5b8/0x1200 [ 2750.284325][T31403] ? device_add_disk+0x30/0x30 [ 2750.289148][T31403] ? vsprintf+0x30/0x30 [ 2750.293283][T31403] ? device_initialize+0x1c7/0x3d0 [ 2750.298377][T31403] ? __alloc_disk_node+0x326/0x380 [ 2750.303465][T31403] loop_add+0x554/0x710 [ 2750.307593][T31403] loop_control_ioctl+0x564/0x740 [ 2750.312587][T31403] ? loop_remove+0xa0/0xa0 [ 2750.316969][T31403] ? __lru_cache_add+0x1bf/0x210 [ 2750.321875][T31403] ? memset+0x1f/0x40 [ 2750.325833][T31403] ? fsnotify+0x1332/0x13f0 [ 2750.330307][T31403] ? loop_remove+0xa0/0xa0 [ 2750.334691][T31403] do_vfs_ioctl+0x744/0x1730 [ 2750.339285][T31403] ? selinux_file_ioctl+0x723/0x970 [ 2750.344449][T31403] ? ioctl_preallocate+0x250/0x250 [ 2750.349532][T31403] ? __fget+0x40c/0x4a0 [ 2750.353655][T31403] ? fget_many+0x20/0x20 [ 2750.357866][T31403] ? check_preemption_disabled+0x154/0x330 [ 2750.363639][T31403] ? debug_smp_processor_id+0x20/0x20 [ 2750.368984][T31403] ? security_file_ioctl+0x9d/0xb0 [ 2750.374062][T31403] __x64_sys_ioctl+0xd4/0x110 03:37:36 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 74) 03:37:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500000400a7f0626e4abe3833f5702541071c0000000000000000000002000100000000000000000000000000456e9d0168f79dc4c74ea8ec046fd2b2734e0fb9bcf44c2137f80a97e7a9542b9cf0c1b1de009e460df620275cff81e43b1faadf58fbecbf4bd8012028f95db83d18fa3687f79a305c4ef082cc2105744f046cef4c1b6fb0d5adddfe159c40d252e480fffea674241c513c4a866f5c7e93217f42e155263d792f17679c89aba1fab82cff79a2038da34bc35bda3881bde0ca7f92e9b7911bf5d8ad2b52444476e6a32bb382afb73648e20371aaa7a8ffa0d96e6b1269309d9193cba60d"], 0x20}}, 0x0) 03:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x2000000}, 0x0) 03:37:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2750.378714][T31403] do_syscall_64+0xcb/0x1c0 [ 2750.383191][T31403] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2750.413132][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 03:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x4000000}, 0x0) [ 2750.430270][T31433] FAULT_INJECTION: forcing a failure. [ 2750.430270][T31433] name failslab, interval 1, probability 0, space 0, times 0 [ 2750.442875][T31433] CPU: 1 PID: 31433 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2750.454473][T31433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2750.464499][T31433] Call Trace: [ 2750.467760][T31433] dump_stack+0x1d8/0x241 [ 2750.472055][T31433] ? panic+0x73e/0x73e [ 2750.476089][T31433] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2750.481950][T31433] ? __lookup_slow+0x340/0x450 [ 2750.486678][T31433] should_fail+0x709/0x870 [ 2750.491061][T31433] ? setup_fault_attr+0x3d0/0x3d0 [ 2750.496053][T31433] ? lookup_one_len+0x426/0x680 [ 2750.500872][T31433] ? new_inode_pseudo+0x78/0x210 [ 2750.505774][T31433] should_failslab+0x5/0x20 [ 2750.510249][T31433] kmem_cache_alloc+0x24/0x210 [ 2750.514979][T31433] new_inode_pseudo+0x78/0x210 [ 2750.519717][T31433] new_inode+0x25/0x1d0 [ 2750.523841][T31433] ? start_creating+0x183/0x270 [ 2750.528660][T31433] __debugfs_create_file+0xb6/0x400 [ 2750.533822][T31433] ? debugfs_create_dir+0x2e6/0x380 [ 2750.538983][T31433] bdi_register_va+0x274/0x5e0 [ 2750.543723][T31433] bdi_register+0xd1/0x120 [ 2750.548107][T31433] ? __device_add_disk+0x539/0x1200 [ 2750.553283][T31433] ? bdi_register_va+0x5e0/0x5e0 [ 2750.558191][T31433] ? percpu_ref_resurrect+0x113/0x190 [ 2750.563531][T31433] bdi_register_owner+0x56/0xf0 [ 2750.568354][T31433] __device_add_disk+0x5b8/0x1200 [ 2750.573361][T31433] ? device_add_disk+0x30/0x30 [ 2750.578092][T31433] ? vsprintf+0x30/0x30 [ 2750.582215][T31433] ? device_initialize+0x1c7/0x3d0 [ 2750.587295][T31433] ? __alloc_disk_node+0x326/0x380 [ 2750.592374][T31433] loop_add+0x554/0x710 [ 2750.596496][T31433] loop_control_ioctl+0x564/0x740 [ 2750.601484][T31433] ? loop_remove+0xa0/0xa0 [ 2750.605877][T31433] ? __lru_cache_add+0x1bf/0x210 [ 2750.610783][T31433] ? memset+0x1f/0x40 [ 2750.614738][T31433] ? fsnotify+0x1332/0x13f0 [ 2750.619211][T31433] ? loop_remove+0xa0/0xa0 [ 2750.623670][T31433] do_vfs_ioctl+0x744/0x1730 [ 2750.628259][T31433] ? selinux_file_ioctl+0x723/0x970 [ 2750.633425][T31433] ? ioctl_preallocate+0x250/0x250 [ 2750.638523][T31433] ? __fget+0x40c/0x4a0 [ 2750.642645][T31433] ? fget_many+0x20/0x20 [ 2750.646853][T31433] ? check_preemption_disabled+0x154/0x330 [ 2750.652626][T31433] ? debug_smp_processor_id+0x20/0x20 [ 2750.657966][T31433] ? security_file_ioctl+0x9d/0xb0 [ 2750.663054][T31433] __x64_sys_ioctl+0xd4/0x110 [ 2750.667695][T31433] do_syscall_64+0xcb/0x1c0 [ 2750.672167][T31433] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500000400a7f0626e4abe3833f5702541071c0000000000000000000002000100000000000000000000000000456e9d0168f79dc4c74ea8ec046fd2b2734e0fb9bcf44c2137f80a97e7a9542b9cf0c1b1de009e460df620275cff81e43b1faadf58fbecbf4bd8012028f95db83d18fa3687f79a305c4ef082cc2105744f046cef4c1b6fb0d5adddfe159c40d252e480fffea674241c513c4a866f5c7e93217f42e155263d792f17679c89aba1fab82cff79a2038da34bc35bda3881bde0ca7f92e9b7911bf5d8ad2b52444476e6a32bb382afb73648e20371aaa7a8ffa0d96e6b1269309d9193cba60d"], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500000400a7f0626e4abe3833f5702541071c0000000000000000000002000100000000000000000000000000456e9d0168f79dc4c74ea8ec046fd2b2734e0fb9bcf44c2137f80a97e7a9542b9cf0c1b1de009e460df620275cff81e43b1faadf58fbecbf4bd8012028f95db83d18fa3687f79a305c4ef082cc2105744f046cef4c1b6fb0d5adddfe159c40d252e480fffea674241c513c4a866f5c7e93217f42e155263d792f17679c89aba1fab82cff79a2038da34bc35bda3881bde0ca7f92e9b7911bf5d8ad2b52444476e6a32bb382afb73648e20371aaa7a8ffa0d96e6b1269309d9193cba60d"], 0x20}}, 0x0) (async) [ 2750.678266][T31433] debugfs: out of free dentries, can not create file 'stats' 03:37:37 executing program 2: socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x6000000}, 0x0) 03:37:37 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 75) 03:37:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500000400a7f0626e4abe3833f5702541071c0000000000000000000002000100000000000000000000000000456e9d0168f79dc4c74ea8ec046fd2b2734e0fb9bcf44c2137f80a97e7a9542b9cf0c1b1de009e460df620275cff81e43b1faadf58fbecbf4bd8012028f95db83d18fa3687f79a305c4ef082cc2105744f046cef4c1b6fb0d5adddfe159c40d252e480fffea674241c513c4a866f5c7e93217f42e155263d792f17679c89aba1fab82cff79a2038da34bc35bda3881bde0ca7f92e9b7911bf5d8ad2b52444476e6a32bb382afb73648e20371aaa7a8ffa0d96e6b1269309d9193cba60d"], 0x20}}, 0x0) 03:37:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x40000000}, 0x0) 03:37:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:37 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2750.713253][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2750.747630][T31454] FAULT_INJECTION: forcing a failure. [ 2750.747630][T31454] name failslab, interval 1, probability 0, space 0, times 0 [ 2750.761629][T31454] CPU: 0 PID: 31454 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2750.773262][T31454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2750.783303][T31454] Call Trace: [ 2750.786577][T31454] dump_stack+0x1d8/0x241 [ 2750.790878][T31454] ? panic+0x73e/0x73e [ 2750.794918][T31454] ? do_vfs_ioctl+0x744/0x1730 [ 2750.799666][T31454] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2750.805441][T31454] should_fail+0x709/0x870 [ 2750.809839][T31454] ? setup_fault_attr+0x3d0/0x3d0 [ 2750.814836][T31454] ? make_kgid+0x215/0x710 [ 2750.819233][T31454] ? security_inode_alloc+0x24/0x130 [ 2750.824493][T31454] should_failslab+0x5/0x20 [ 2750.828968][T31454] kmem_cache_alloc+0x24/0x210 [ 2750.833706][T31454] security_inode_alloc+0x24/0x130 [ 2750.838786][T31454] inode_init_always+0x5db/0x800 [ 2750.843692][T31454] new_inode_pseudo+0x8f/0x210 [ 2750.848430][T31454] new_inode+0x25/0x1d0 [ 2750.852553][T31454] ? start_creating+0x183/0x270 [ 2750.857373][T31454] debugfs_create_dir+0x66/0x380 [ 2750.862288][T31454] bdi_register_va+0x232/0x5e0 [ 2750.867021][T31454] bdi_register+0xd1/0x120 [ 2750.871417][T31454] ? __device_add_disk+0x539/0x1200 [ 2750.876674][T31454] ? bdi_register_va+0x5e0/0x5e0 [ 2750.881576][T31454] ? percpu_ref_resurrect+0x113/0x190 [ 2750.886914][T31454] bdi_register_owner+0x56/0xf0 [ 2750.891742][T31454] __device_add_disk+0x5b8/0x1200 [ 2750.896739][T31454] ? device_add_disk+0x30/0x30 [ 2750.901470][T31454] ? vsprintf+0x30/0x30 [ 2750.905594][T31454] ? device_initialize+0x1c7/0x3d0 [ 2750.910687][T31454] ? __alloc_disk_node+0x326/0x380 [ 2750.915774][T31454] loop_add+0x554/0x710 [ 2750.919900][T31454] loop_control_ioctl+0x564/0x740 [ 2750.924892][T31454] ? loop_remove+0xa0/0xa0 [ 2750.929278][T31454] ? __lru_cache_add+0x1bf/0x210 [ 2750.934184][T31454] ? memset+0x1f/0x40 [ 2750.938142][T31454] ? fsnotify+0x1332/0x13f0 [ 2750.942617][T31454] ? loop_remove+0xa0/0xa0 [ 2750.946999][T31454] do_vfs_ioctl+0x744/0x1730 [ 2750.951556][T31454] ? selinux_file_ioctl+0x723/0x970 [ 2750.956717][T31454] ? ioctl_preallocate+0x250/0x250 [ 2750.961794][T31454] ? __fget+0x40c/0x4a0 [ 2750.965914][T31454] ? fget_many+0x20/0x20 [ 2750.970122][T31454] ? check_preemption_disabled+0x154/0x330 [ 2750.975894][T31454] ? debug_smp_processor_id+0x20/0x20 [ 2750.981245][T31454] ? security_file_ioctl+0x9d/0xb0 [ 2750.986331][T31454] __x64_sys_ioctl+0xd4/0x110 [ 2750.990977][T31454] do_syscall_64+0xcb/0x1c0 [ 2750.995457][T31454] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2751.003014][T31454] debugfs: out of free dentries, can not create directory '7:0' 03:37:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0x7fffefe0}, 0x0) 03:37:37 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 76) 03:37:37 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0xe0efff7f}, 0x0) [ 2751.029492][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2751.060951][T31479] FAULT_INJECTION: forcing a failure. [ 2751.060951][T31479] name failslab, interval 1, probability 0, space 0, times 0 [ 2751.073704][T31479] CPU: 1 PID: 31479 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2751.085316][T31479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2751.095342][T31479] Call Trace: [ 2751.098606][T31479] dump_stack+0x1d8/0x241 [ 2751.102905][T31479] ? panic+0x73e/0x73e [ 2751.107114][T31479] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2751.112892][T31479] ? __lookup_slow+0x340/0x450 [ 2751.117625][T31479] should_fail+0x709/0x870 [ 2751.122010][T31479] ? setup_fault_attr+0x3d0/0x3d0 [ 2751.127039][T31479] ? lookup_one_len+0x426/0x680 [ 2751.131861][T31479] ? new_inode_pseudo+0x78/0x210 [ 2751.136764][T31479] should_failslab+0x5/0x20 [ 2751.141234][T31479] kmem_cache_alloc+0x24/0x210 [ 2751.145967][T31479] new_inode_pseudo+0x78/0x210 [ 2751.150698][T31479] new_inode+0x25/0x1d0 [ 2751.154823][T31479] ? start_creating+0x183/0x270 [ 2751.159661][T31479] __debugfs_create_file+0xb6/0x400 [ 2751.164829][T31479] ? debugfs_create_dir+0x2e6/0x380 [ 2751.169994][T31479] bdi_register_va+0x274/0x5e0 [ 2751.174734][T31479] bdi_register+0xd1/0x120 [ 2751.179126][T31479] ? __device_add_disk+0x539/0x1200 [ 2751.184313][T31479] ? bdi_register_va+0x5e0/0x5e0 [ 2751.189234][T31479] ? percpu_ref_resurrect+0x113/0x190 [ 2751.194583][T31479] bdi_register_owner+0x56/0xf0 [ 2751.199403][T31479] __device_add_disk+0x5b8/0x1200 [ 2751.204398][T31479] ? device_add_disk+0x30/0x30 [ 2751.209129][T31479] ? vsprintf+0x30/0x30 [ 2751.213254][T31479] ? device_initialize+0x1c7/0x3d0 [ 2751.218339][T31479] ? __alloc_disk_node+0x326/0x380 [ 2751.223428][T31479] loop_add+0x554/0x710 [ 2751.227566][T31479] loop_control_ioctl+0x564/0x740 [ 2751.232567][T31479] ? loop_remove+0xa0/0xa0 [ 2751.236955][T31479] ? __lru_cache_add+0x1bf/0x210 [ 2751.241864][T31479] ? memset+0x1f/0x40 [ 2751.245821][T31479] ? fsnotify+0x1332/0x13f0 [ 2751.250295][T31479] ? loop_remove+0xa0/0xa0 [ 2751.254689][T31479] do_vfs_ioctl+0x744/0x1730 [ 2751.259252][T31479] ? selinux_file_ioctl+0x723/0x970 [ 2751.264422][T31479] ? ioctl_preallocate+0x250/0x250 [ 2751.269512][T31479] ? __fget+0x40c/0x4a0 [ 2751.273641][T31479] ? fget_many+0x20/0x20 03:37:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6, 0x0, 0x0, 0xffffff7f}, 0x0) 03:37:37 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 77) 03:37:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x2) [ 2751.277861][T31479] ? check_preemption_disabled+0x154/0x330 [ 2751.283647][T31479] ? debug_smp_processor_id+0x20/0x20 [ 2751.288988][T31479] ? security_file_ioctl+0x9d/0xb0 [ 2751.294096][T31479] __x64_sys_ioctl+0xd4/0x110 [ 2751.298757][T31479] do_syscall_64+0xcb/0x1c0 [ 2751.303291][T31479] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2751.312712][T31479] debugfs: out of free dentries, can not create file 'stats' 03:37:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x4000010, r1, 0x3) 03:37:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:37 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x4000010, r1, 0x3) [ 2751.340059][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2751.357887][T31518] FAULT_INJECTION: forcing a failure. [ 2751.357887][T31518] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2751.371331][T31518] CPU: 0 PID: 31518 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2751.382943][T31518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2751.393057][T31518] Call Trace: [ 2751.396327][T31518] dump_stack+0x1d8/0x241 [ 2751.400626][T31518] ? panic+0x73e/0x73e [ 2751.404664][T31518] ? stack_trace_save+0x132/0x200 [ 2751.409655][T31518] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2751.415428][T31518] ? stack_trace_snprint+0x170/0x170 [ 2751.420690][T31518] should_fail+0x709/0x870 [ 2751.425081][T31518] ? setup_fault_attr+0x3d0/0x3d0 [ 2751.430073][T31518] ? __kasan_kmalloc+0x131/0x1e0 [ 2751.434974][T31518] ? kmem_cache_alloc+0xd0/0x210 [ 2751.439875][T31518] ? inode_init_always+0x5db/0x800 [ 2751.444952][T31518] ? new_inode_pseudo+0x8f/0x210 [ 2751.449853][T31518] __alloc_pages_nodemask+0x1b6/0x860 [ 2751.455188][T31518] ? __x64_sys_ioctl+0xd4/0x110 [ 2751.460006][T31518] ? do_syscall_64+0xcb/0x1c0 [ 2751.464652][T31518] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2751.470165][T31518] ? lockref_get+0x1b3/0x2a0 [ 2751.474720][T31518] ? asan.module_dtor+0x20/0x20 [ 2751.479542][T31518] __get_free_pages+0xa/0x30 [ 2751.484098][T31518] selinux_genfs_get_sid+0x55/0x250 [ 2751.489278][T31518] inode_doinit_with_dentry+0x87c/0x1020 [ 2751.494886][T31518] ? sb_finish_set_opts+0x7a0/0x7a0 [ 2751.500052][T31518] ? current_time+0x1c4/0x310 [ 2751.504697][T31518] ? atime_needs_update+0x580/0x580 [ 2751.509864][T31518] security_d_instantiate+0xa5/0x100 [ 2751.515117][T31518] d_instantiate+0x51/0x90 [ 2751.519504][T31518] debugfs_create_dir+0x1a1/0x380 [ 2751.524494][T31518] bdi_register_va+0x232/0x5e0 [ 2751.529230][T31518] bdi_register+0xd1/0x120 [ 2751.533613][T31518] ? __device_add_disk+0x539/0x1200 [ 2751.538776][T31518] ? bdi_register_va+0x5e0/0x5e0 [ 2751.543694][T31518] ? percpu_ref_resurrect+0x113/0x190 [ 2751.549043][T31518] bdi_register_owner+0x56/0xf0 [ 2751.553867][T31518] __device_add_disk+0x5b8/0x1200 [ 2751.558864][T31518] ? device_add_disk+0x30/0x30 [ 2751.563595][T31518] ? vsprintf+0x30/0x30 [ 2751.567720][T31518] ? device_initialize+0x1c7/0x3d0 [ 2751.572797][T31518] ? __alloc_disk_node+0x326/0x380 [ 2751.577877][T31518] loop_add+0x554/0x710 [ 2751.582000][T31518] loop_control_ioctl+0x564/0x740 [ 2751.586991][T31518] ? loop_remove+0xa0/0xa0 [ 2751.591380][T31518] ? __lru_cache_add+0x1bf/0x210 [ 2751.596380][T31518] ? memset+0x1f/0x40 [ 2751.600327][T31518] ? fsnotify+0x1332/0x13f0 [ 2751.604795][T31518] ? loop_remove+0xa0/0xa0 [ 2751.609232][T31518] do_vfs_ioctl+0x744/0x1730 [ 2751.613793][T31518] ? selinux_file_ioctl+0x723/0x970 [ 2751.618956][T31518] ? ioctl_preallocate+0x250/0x250 [ 2751.624040][T31518] ? __fget+0x40c/0x4a0 [ 2751.628163][T31518] ? fget_many+0x20/0x20 [ 2751.632371][T31518] ? check_preemption_disabled+0x154/0x330 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x4) 03:37:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x4000010, r1, 0x3) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x4000010, r1, 0x3) (async) 03:37:38 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 78) 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x6) 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x600) [ 2751.638157][T31518] ? debug_smp_processor_id+0x20/0x20 [ 2751.643504][T31518] ? security_file_ioctl+0x9d/0xb0 [ 2751.648582][T31518] __x64_sys_ioctl+0xd4/0x110 [ 2751.653230][T31518] do_syscall_64+0xcb/0x1c0 [ 2751.657712][T31518] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:38 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x0, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:38 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x4000) 03:37:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, [@sadb_key={0x201, 0x8, 0x8000, 0x0, "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"}]}, 0x1018}}, 0x4040) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="02090406080000002be07100fddbdf2502000100000004d33f1f2e040000004004000400090000000008000000100000000000a30000000008000000e74c244399f57c31a39aa1c78610b954df5de1e105a0b29a9694a4acedbd8d2801f394afe9b3ffbe27d0b4abfb27deef24157c09033b0883ee6eb066e82bf4ec1a322dc7205e16ca17906d70c9d6c8ee8793a4d8bf8895446fabcedfd64a69cb05ea64e881a681f3ffc44ff3384534d254dcca29e4353b434a57"], 0x40}}, 0x8000) 03:37:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x0, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2751.741941][T31537] FAULT_INJECTION: forcing a failure. [ 2751.741941][T31537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2751.759033][T31537] CPU: 0 PID: 31537 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2751.770647][T31537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2751.780679][T31537] Call Trace: [ 2751.783943][T31537] dump_stack+0x1d8/0x241 [ 2751.788240][T31537] ? panic+0x73e/0x73e [ 2751.792277][T31537] ? stack_trace_save+0x132/0x200 [ 2751.797271][T31537] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2751.803054][T31537] ? stack_trace_snprint+0x170/0x170 [ 2751.808320][T31537] should_fail+0x709/0x870 [ 2751.812701][T31537] ? setup_fault_attr+0x3d0/0x3d0 [ 2751.817693][T31537] ? __kasan_kmalloc+0x131/0x1e0 [ 2751.822600][T31537] ? kmem_cache_alloc+0xd0/0x210 [ 2751.827512][T31537] ? inode_init_always+0x5db/0x800 [ 2751.832597][T31537] ? new_inode_pseudo+0x8f/0x210 [ 2751.837503][T31537] __alloc_pages_nodemask+0x1b6/0x860 [ 2751.842838][T31537] ? __x64_sys_ioctl+0xd4/0x110 [ 2751.847656][T31537] ? do_syscall_64+0xcb/0x1c0 [ 2751.852316][T31537] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2751.857831][T31537] ? lockref_get+0x1b3/0x2a0 [ 2751.862384][T31537] ? asan.module_dtor+0x20/0x20 [ 2751.867202][T31537] __get_free_pages+0xa/0x30 [ 2751.871761][T31537] selinux_genfs_get_sid+0x55/0x250 [ 2751.876924][T31537] inode_doinit_with_dentry+0x87c/0x1020 [ 2751.882524][T31537] ? sb_finish_set_opts+0x7a0/0x7a0 [ 2751.887687][T31537] ? current_time+0x1c4/0x310 [ 2751.892328][T31537] ? atime_needs_update+0x580/0x580 [ 2751.897495][T31537] security_d_instantiate+0xa5/0x100 [ 2751.902747][T31537] d_instantiate+0x51/0x90 [ 2751.907128][T31537] __debugfs_create_file+0x256/0x400 [ 2751.912385][T31537] bdi_register_va+0x274/0x5e0 [ 2751.917114][T31537] bdi_register+0xd1/0x120 [ 2751.921508][T31537] ? __device_add_disk+0x539/0x1200 [ 2751.926679][T31537] ? bdi_register_va+0x5e0/0x5e0 [ 2751.931585][T31537] ? percpu_ref_resurrect+0x113/0x190 [ 2751.936923][T31537] bdi_register_owner+0x56/0xf0 [ 2751.941750][T31537] __device_add_disk+0x5b8/0x1200 [ 2751.946742][T31537] ? device_add_disk+0x30/0x30 [ 2751.951470][T31537] ? vsprintf+0x30/0x30 [ 2751.955591][T31537] ? device_initialize+0x1c7/0x3d0 [ 2751.960671][T31537] ? __alloc_disk_node+0x326/0x380 [ 2751.965749][T31537] loop_add+0x554/0x710 [ 2751.969873][T31537] loop_control_ioctl+0x564/0x740 [ 2751.974863][T31537] ? loop_remove+0xa0/0xa0 [ 2751.979246][T31537] ? __lru_cache_add+0x1bf/0x210 [ 2751.984152][T31537] ? memset+0x1f/0x40 [ 2751.988100][T31537] ? fsnotify+0x1332/0x13f0 [ 2751.992567][T31537] ? loop_remove+0xa0/0xa0 [ 2751.996949][T31537] do_vfs_ioctl+0x744/0x1730 [ 2752.001514][T31537] ? selinux_file_ioctl+0x723/0x970 [ 2752.006679][T31537] ? ioctl_preallocate+0x250/0x250 [ 2752.011781][T31537] ? __fget+0x40c/0x4a0 [ 2752.015904][T31537] ? fget_many+0x20/0x20 [ 2752.020115][T31537] ? check_preemption_disabled+0x154/0x330 [ 2752.025888][T31537] ? debug_smp_processor_id+0x20/0x20 [ 2752.031251][T31537] ? security_file_ioctl+0x9d/0xb0 [ 2752.036335][T31537] __x64_sys_ioctl+0xd4/0x110 03:37:38 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 79) 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x38000) 03:37:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, [@sadb_key={0x201, 0x8, 0x8000, 0x0, "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"}]}, 0x1018}}, 0x4040) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="02090406080000002be07100fddbdf2502000100000004d33f1f2e040000004004000400090000000008000000100000000000a30000000008000000e74c244399f57c31a39aa1c78610b954df5de1e105a0b29a9694a4acedbd8d2801f394afe9b3ffbe27d0b4abfb27deef24157c09033b0883ee6eb066e82bf4ec1a322dc7205e16ca17906d70c9d6c8ee8793a4d8bf8895446fabcedfd64a69cb05ea64e881a681f3ffc44ff3384534d254dcca29e4353b434a57"], 0x40}}, 0x8000) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, [@sadb_key={0x201, 0x8, 0x8000, 0x0, "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"}]}, 0x1018}}, 0x4040) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="02090406080000002be07100fddbdf2502000100000004d33f1f2e040000004004000400090000000008000000100000000000a30000000008000000e74c244399f57c31a39aa1c78610b954df5de1e105a0b29a9694a4acedbd8d2801f394afe9b3ffbe27d0b4abfb27deef24157c09033b0883ee6eb066e82bf4ec1a322dc7205e16ca17906d70c9d6c8ee8793a4d8bf8895446fabcedfd64a69cb05ea64e881a681f3ffc44ff3384534d254dcca29e4353b434a57"], 0x40}}, 0x8000) (async) 03:37:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x800300) 03:37:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, [@sadb_key={0x201, 0x8, 0x8000, 0x0, "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"}]}, 0x1018}}, 0x4040) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="02090406080000002be07100fddbdf2502000100000004d33f1f2e040000004004000400090000000008000000100000000000a30000000008000000e74c244399f57c31a39aa1c78610b954df5de1e105a0b29a9694a4acedbd8d2801f394afe9b3ffbe27d0b4abfb27deef24157c09033b0883ee6eb066e82bf4ec1a322dc7205e16ca17906d70c9d6c8ee8793a4d8bf8895446fabcedfd64a69cb05ea64e881a681f3ffc44ff3384534d254dcca29e4353b434a57"], 0x40}}, 0x8000) 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x1000000) 03:37:38 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:37:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pkey_alloc(0x0, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x0, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2752.040978][T31537] do_syscall_64+0xcb/0x1c0 [ 2752.046317][T31537] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2752.082655][T30423] udevd[30423]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 03:37:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x2000000) [ 2752.107104][T31574] FAULT_INJECTION: forcing a failure. [ 2752.107104][T31574] name failslab, interval 1, probability 0, space 0, times 0 [ 2752.122044][T31574] CPU: 1 PID: 31574 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2752.133743][T31574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2752.143872][T31574] Call Trace: [ 2752.147136][T31574] dump_stack+0x1d8/0x241 [ 2752.151436][T31574] ? panic+0x73e/0x73e [ 2752.155470][T31574] ? do_vfs_ioctl+0x744/0x1730 [ 2752.160200][T31574] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2752.165976][T31574] should_fail+0x709/0x870 [ 2752.170361][T31574] ? setup_fault_attr+0x3d0/0x3d0 [ 2752.175360][T31574] ? make_kgid+0x215/0x710 [ 2752.179747][T31574] ? security_inode_alloc+0x24/0x130 [ 2752.184999][T31574] should_failslab+0x5/0x20 [ 2752.189470][T31574] kmem_cache_alloc+0x24/0x210 [ 2752.194204][T31574] security_inode_alloc+0x24/0x130 [ 2752.199282][T31574] inode_init_always+0x5db/0x800 [ 2752.204186][T31574] new_inode_pseudo+0x8f/0x210 [ 2752.208919][T31574] new_inode+0x25/0x1d0 [ 2752.213045][T31574] ? start_creating+0x183/0x270 [ 2752.217862][T31574] __debugfs_create_file+0xb6/0x400 [ 2752.223025][T31574] ? debugfs_create_dir+0x2e6/0x380 [ 2752.228201][T31574] bdi_register_va+0x274/0x5e0 [ 2752.232940][T31574] bdi_register+0xd1/0x120 [ 2752.237321][T31574] ? __device_add_disk+0x539/0x1200 [ 2752.242489][T31574] ? bdi_register_va+0x5e0/0x5e0 [ 2752.247391][T31574] ? percpu_ref_resurrect+0x113/0x190 [ 2752.252729][T31574] bdi_register_owner+0x56/0xf0 [ 2752.257556][T31574] __device_add_disk+0x5b8/0x1200 [ 2752.262555][T31574] ? device_add_disk+0x30/0x30 [ 2752.267287][T31574] ? vsprintf+0x30/0x30 [ 2752.271420][T31574] ? device_initialize+0x1c7/0x3d0 [ 2752.276500][T31574] ? __alloc_disk_node+0x326/0x380 [ 2752.281577][T31574] loop_add+0x554/0x710 [ 2752.285704][T31574] loop_control_ioctl+0x564/0x740 [ 2752.290695][T31574] ? loop_remove+0xa0/0xa0 [ 2752.295076][T31574] ? __lru_cache_add+0x1bf/0x210 [ 2752.299980][T31574] ? memset+0x1f/0x40 [ 2752.303929][T31574] ? fsnotify+0x1332/0x13f0 [ 2752.308401][T31574] ? loop_remove+0xa0/0xa0 [ 2752.312783][T31574] do_vfs_ioctl+0x744/0x1730 [ 2752.317354][T31574] ? selinux_file_ioctl+0x723/0x970 [ 2752.322533][T31574] ? ioctl_preallocate+0x250/0x250 [ 2752.327618][T31574] ? __fget+0x40c/0x4a0 [ 2752.331745][T31574] ? fget_many+0x20/0x20 [ 2752.335954][T31574] ? check_preemption_disabled+0x154/0x330 [ 2752.341729][T31574] ? debug_smp_processor_id+0x20/0x20 [ 2752.347072][T31574] ? security_file_ioctl+0x9d/0xb0 [ 2752.352162][T31574] __x64_sys_ioctl+0xd4/0x110 03:37:38 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 80) 03:37:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pkey_alloc(0x0, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) pkey_alloc(0x0, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async) 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x4000000) 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x6000000) 03:37:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pkey_alloc(0x0, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x40000000) 03:37:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0xfd, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x3}]}, 0x20}}, 0x0) [ 2752.356807][T31574] do_syscall_64+0xcb/0x1c0 [ 2752.361282][T31574] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2752.367648][T31574] debugfs: out of free dentries, can not create file 'stats' 03:37:38 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x7fffefe0) 03:37:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="021400000700000000000000ff00000005001700e1f49be1baa1070b5b47423e1d788b00a000000a000000000000000000001000000000000000000000000100000000000000000e2c68b00c6a80bf965919d4db4384adf02359fa0ef884fd8be017729cadd9f47f9465beafacf38a16ae6beb19f489bbc824919bcc3e2784a3344b847d465e965266c4e114aa521b82c524a5f6ab587ebf0b2d42a79a54c203214e52a4a7c2caf7c141767daadf6cd1edb334ba89fff4c719f7df863ece90f613dc344607663a4b9f0dd4b19df57b99293b37c32800019695eae25d17d0f65d8f7a19bd9d9912fc"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x0, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x5, 0x800, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@none, 0x10001}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0xfd, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x3}]}, 0x20}}, 0x0) [ 2752.434630][T31605] FAULT_INJECTION: forcing a failure. [ 2752.434630][T31605] name failslab, interval 1, probability 0, space 0, times 0 [ 2752.448072][T31605] CPU: 1 PID: 31605 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2752.459686][T31605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2752.469713][T31605] Call Trace: [ 2752.472982][T31605] dump_stack+0x1d8/0x241 [ 2752.477284][T31605] ? panic+0x73e/0x73e [ 2752.481316][T31605] ? nf_ct_l4proto_log_invalid+0x26c/0x26c [ 2752.487100][T31605] ? __kasan_kmalloc+0x1a5/0x1e0 [ 2752.492006][T31605] ? loop_add+0x554/0x710 [ 2752.496457][T31605] ? __kasan_kmalloc+0x131/0x1e0 [ 2752.501375][T31605] ? kobj_map+0x74/0x650 [ 2752.505597][T31605] ? __device_add_disk+0x63e/0x1200 [ 2752.510872][T31605] should_fail+0x709/0x870 [ 2752.515270][T31605] ? setup_fault_attr+0x3d0/0x3d0 [ 2752.520272][T31605] ? kobject_set_name_vargs+0x5d/0x110 [ 2752.525714][T31605] should_failslab+0x5/0x20 [ 2752.530190][T31605] __kmalloc_track_caller+0x4f/0x280 [ 2752.535446][T31605] kstrdup_const+0x51/0x90 [ 2752.539834][T31605] kobject_set_name_vargs+0x5d/0x110 [ 2752.545094][T31605] dev_set_name+0xd1/0x120 [ 2752.549479][T31605] ? get_device+0x30/0x30 [ 2752.553775][T31605] ? kobj_map+0x61f/0x650 [ 2752.558076][T31605] __device_add_disk+0x6c3/0x1200 [ 2752.563084][T31605] ? device_add_disk+0x30/0x30 [ 2752.567819][T31605] ? device_initialize+0x1c7/0x3d0 [ 2752.572896][T31605] ? __alloc_disk_node+0x326/0x380 [ 2752.577979][T31605] loop_add+0x554/0x710 [ 2752.582102][T31605] loop_control_ioctl+0x564/0x740 [ 2752.587104][T31605] ? loop_remove+0xa0/0xa0 [ 2752.591498][T31605] ? __lru_cache_add+0x1bf/0x210 [ 2752.596405][T31605] ? memset+0x1f/0x40 [ 2752.600361][T31605] ? fsnotify+0x1332/0x13f0 [ 2752.604835][T31605] ? loop_remove+0xa0/0xa0 [ 2752.609231][T31605] do_vfs_ioctl+0x744/0x1730 [ 2752.613798][T31605] ? selinux_file_ioctl+0x723/0x970 [ 2752.618966][T31605] ? ioctl_preallocate+0x250/0x250 [ 2752.624044][T31605] ? __fget+0x40c/0x4a0 [ 2752.628167][T31605] ? fget_many+0x20/0x20 [ 2752.632382][T31605] ? check_preemption_disabled+0x154/0x330 [ 2752.638165][T31605] ? debug_smp_processor_id+0x20/0x20 [ 2752.643508][T31605] ? security_file_ioctl+0x9d/0xb0 [ 2752.648592][T31605] __x64_sys_ioctl+0xd4/0x110 [ 2752.653249][T31605] do_syscall_64+0xcb/0x1c0 [ 2752.657732][T31605] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2752.669018][T31605] kobject_add_internal failed for queue (error: -2 parent: (null)) [ 2752.676991][T31605] ------------[ cut here ]------------ [ 2752.682429][T31605] WARNING: CPU: 1 PID: 31605 at fs/sysfs/file.c:328 sysfs_create_files+0x215/0x4a0 [ 2752.691684][T31605] Modules linked in: [ 2752.695565][T31605] CPU: 1 PID: 31605 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2752.707162][T31605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2752.717292][T31605] RIP: 0010:sysfs_create_files+0x215/0x4a0 [ 2752.723075][T31605] Code: 24 04 48 b9 00 00 00 00 00 fc ff df 48 8b 54 24 08 4c 8b 74 24 20 eb 2b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 8b 1c ab ff <0f> 0b c7 44 24 04 ea ff ff ff 48 b9 00 00 00 00 00 fc ff df 48 8b [ 2752.742655][T31605] RSP: 0018:ffff8881f53c7920 EFLAGS: 00010246 [ 2752.748696][T31605] RAX: ffffffff81ba2f11 RBX: ffff8881dd18f0a0 RCX: 0000000000040000 [ 2752.756639][T31605] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2752.764585][T31605] RBP: ffff8881f53c79f0 R08: ffffffff843e6101 R09: ffffed103e019796 [ 2752.772525][T31605] R10: ffffed103e019796 R11: 1ffff1103e019795 R12: 0000000000000000 [ 2752.780467][T31605] R13: ffffffff84fd70e0 R14: ffff8881dd18f070 R15: ffffffff85e45820 [ 2752.788412][T31605] FS: 00007fc9d5138700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2752.797308][T31605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2752.803886][T31605] CR2: 0000555556394728 CR3: 00000001e76bb000 CR4: 00000000003406e0 [ 2752.811830][T31605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2752.819772][T31605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2752.827712][T31605] Call Trace: [ 2752.830977][T31605] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 2752.836322][T31605] ? kobject_get+0xca/0x110 [ 2752.840795][T31605] __device_add_disk+0x92b/0x1200 [ 2752.845789][T31605] ? device_add_disk+0x30/0x30 [ 2752.850521][T31605] ? device_initialize+0x1c7/0x3d0 [ 2752.855601][T31605] ? __alloc_disk_node+0x326/0x380 [ 2752.860694][T31605] loop_add+0x554/0x710 [ 2752.864822][T31605] loop_control_ioctl+0x564/0x740 [ 2752.869818][T31605] ? loop_remove+0xa0/0xa0 [ 2752.874203][T31605] ? __lru_cache_add+0x1bf/0x210 [ 2752.879110][T31605] ? memset+0x1f/0x40 [ 2752.883084][T31605] ? fsnotify+0x1332/0x13f0 [ 2752.887561][T31605] ? loop_remove+0xa0/0xa0 [ 2752.891945][T31605] do_vfs_ioctl+0x744/0x1730 [ 2752.896530][T31605] ? selinux_file_ioctl+0x723/0x970 [ 2752.901698][T31605] ? ioctl_preallocate+0x250/0x250 [ 2752.906777][T31605] ? __fget+0x40c/0x4a0 [ 2752.910901][T31605] ? fget_many+0x20/0x20 [ 2752.915112][T31605] ? check_preemption_disabled+0x154/0x330 [ 2752.920888][T31605] ? debug_smp_processor_id+0x20/0x20 [ 2752.926237][T31605] ? security_file_ioctl+0x9d/0xb0 [ 2752.931351][T31605] __x64_sys_ioctl+0xd4/0x110 [ 2752.936005][T31605] do_syscall_64+0xcb/0x1c0 [ 2752.940493][T31605] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2752.946369][T31605] ---[ end trace b61d2c152d24eb2b ]--- [ 2752.952040][T31605] ------------[ cut here ]------------ [ 2752.957500][T31605] kernfs: can not remove 'events', no directory [ 2752.963804][T31605] WARNING: CPU: 1 PID: 31605 at fs/kernfs/dir.c:1511 kernfs_remove_by_name_ns+0x61/0x90 [ 2752.973490][T31605] Modules linked in: [ 2752.977357][T31605] CPU: 1 PID: 31605 Comm: syz-executor.4 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2752.988946][T31605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2752.998988][T31605] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2753.005108][T31605] Code: 48 89 c3 e8 61 79 ab ff 48 89 df e8 e9 ee ff ff 31 db eb 29 e8 50 79 ab ff 48 c7 c7 80 0d e8 84 4c 89 fe 31 c0 e8 4f 52 82 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 79 ab ff bb fe ff ff ff 48 c7 c7 [ 2753.024701][T31605] RSP: 0018:ffff8881f53c7900 EFLAGS: 00010246 [ 2753.030737][T31605] RAX: 38defdd3c8d91000 RBX: 0000000000000000 RCX: 0000000000040000 [ 2753.038678][T31605] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2753.046619][T31605] RBP: ffff8881f53c79f0 R08: ffffffff814e3a77 R09: 0000000000000003 [ 2753.054564][T31605] R10: ffffed103ea78e99 R11: 1ffff1103ea78e98 R12: ffffffff85e45820 [ 2753.062506][T31605] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff84fd71a0 [ 2753.070452][T31605] FS: 00007fc9d5138700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2753.079347][T31605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2753.085898][T31605] CR2: 0000555556394728 CR3: 00000001e76bb000 CR4: 00000000003406e0 [ 2753.093844][T31605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2753.101789][T31605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2753.109725][T31605] Call Trace: [ 2753.112989][T31605] sysfs_create_files+0x40a/0x4a0 [ 2753.117990][T31605] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 2753.123344][T31605] ? kobject_get+0xca/0x110 [ 2753.127832][T31605] __device_add_disk+0x92b/0x1200 [ 2753.132837][T31605] ? device_add_disk+0x30/0x30 [ 2753.137583][T31605] ? device_initialize+0x1c7/0x3d0 [ 2753.142672][T31605] ? __alloc_disk_node+0x326/0x380 [ 2753.147753][T31605] loop_add+0x554/0x710 [ 2753.151880][T31605] loop_control_ioctl+0x564/0x740 [ 2753.156892][T31605] ? loop_remove+0xa0/0xa0 [ 2753.161283][T31605] ? __lru_cache_add+0x1bf/0x210 [ 2753.166200][T31605] ? memset+0x1f/0x40 [ 2753.170159][T31605] ? fsnotify+0x1332/0x13f0 [ 2753.174646][T31605] ? loop_remove+0xa0/0xa0 [ 2753.179053][T31605] do_vfs_ioctl+0x744/0x1730 [ 2753.183632][T31605] ? selinux_file_ioctl+0x723/0x970 [ 2753.188802][T31605] ? ioctl_preallocate+0x250/0x250 [ 2753.193884][T31605] ? __fget+0x40c/0x4a0 [ 2753.198010][T31605] ? fget_many+0x20/0x20 [ 2753.202233][T31605] ? check_preemption_disabled+0x154/0x330 [ 2753.208019][T31605] ? debug_smp_processor_id+0x20/0x20 [ 2753.213377][T31605] ? security_file_ioctl+0x9d/0xb0 [ 2753.218471][T31605] __x64_sys_ioctl+0xd4/0x110 [ 2753.223143][T31605] do_syscall_64+0xcb/0x1c0 [ 2753.227623][T31605] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 03:37:39 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 81) 03:37:39 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0xe0efff7f) 03:37:39 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0xfd, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x3}]}, 0x20}}, 0x0) 03:37:39 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0xffffff7f) [ 2753.233482][T31605] ---[ end trace b61d2c152d24eb2c ]--- [ 2753.239404][T31605] loop0: failed to create sysfs files for events [ 2753.249912][T31611] ------------[ cut here ]------------ [ 2753.258979][T31611] kernfs: can not remove 'events', no directory [ 2753.265651][T31611] WARNING: CPU: 0 PID: 31611 at fs/kernfs/dir.c:1511 kernfs_remove_by_name_ns+0x61/0x90 [ 2753.275350][T31611] Modules linked in: [ 2753.279235][T31611] CPU: 0 PID: 31611 Comm: syz-executor.5 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2753.290825][T31611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2753.300865][T31611] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2753.306989][T31611] Code: 48 89 c3 e8 61 79 ab ff 48 89 df e8 e9 ee ff ff 31 db eb 29 e8 50 79 ab ff 48 c7 c7 80 0d e8 84 4c 89 fe 31 c0 e8 4f 52 82 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 79 ab ff bb fe ff ff ff 48 c7 c7 [ 2753.326568][T31611] RSP: 0018:ffff8881dd0afa20 EFLAGS: 00010246 [ 2753.332605][T31611] RAX: b4a5d20001f75d00 RBX: 0000000000000000 RCX: 0000000000040000 [ 2753.340549][T31611] RDX: ffffc900067f2000 RSI: 0000000000018e4b RDI: 0000000000018e4c [ 2753.348490][T31611] RBP: ffffffff85e45820 R08: ffffffff814e3a77 R09: ffffed103edcaa08 [ 2753.356433][T31611] R10: ffffed103edcaa08 R11: 1ffff1103edcaa07 R12: 0000000000000000 [ 2753.364375][T31611] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84fd71a0 [ 2753.372318][T31611] FS: 00007f50e753e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2753.381217][T31611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2753.387772][T31611] CR2: 0000555555b40728 CR3: 00000001e132a000 CR4: 00000000003406f0 [ 2753.395744][T31611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2753.403687][T31611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2753.411651][T31611] Call Trace: [ 2753.414919][T31611] sysfs_remove_files+0x99/0xf0 [ 2753.419762][T31611] del_gendisk+0x26e/0xbf0 [ 2753.424149][T31611] ? device_add_disk_no_queue_reg+0x20/0x20 [ 2753.430013][T31611] loop_remove+0x42/0xa0 [ 2753.434235][T31611] loop_control_ioctl+0x67f/0x740 [ 2753.439241][T31611] ? loop_remove+0xa0/0xa0 [ 2753.443633][T31611] ? loop_remove+0xa0/0xa0 [ 2753.448016][T31611] do_vfs_ioctl+0x744/0x1730 [ 2753.452577][T31611] ? selinux_file_ioctl+0x723/0x970 [ 2753.457742][T31611] ? ioctl_preallocate+0x250/0x250 [ 2753.462822][T31611] ? __fget+0x40c/0x4a0 [ 2753.466945][T31611] ? fget_many+0x20/0x20 [ 2753.471191][T31611] ? __fpregs_load_activate+0x1d7/0x3c0 [ 2753.476709][T31611] ? security_file_ioctl+0x9d/0xb0 [ 2753.481790][T31611] __x64_sys_ioctl+0xd4/0x110 03:37:40 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020e00026c435a4cfe93f8"], 0x20}}, 0x0) 03:37:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x5, 0x800, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:37:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x7ffffffff000) 03:37:40 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020e00026c435a4cfe93f8"], 0x20}}, 0x0) [ 2753.486437][T31611] do_syscall_64+0xcb/0x1c0 [ 2753.490913][T31611] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2753.496774][T31611] ---[ end trace b61d2c152d24eb2d ]--- [ 2753.511979][T31611] ------------[ cut here ]------------ [ 2753.517570][T31611] kernfs: can not remove 'events_async', no directory [ 2753.524473][T31611] WARNING: CPU: 0 PID: 31611 at fs/kernfs/dir.c:1511 kernfs_remove_by_name_ns+0x61/0x90 [ 2753.534160][T31611] Modules linked in: [ 2753.538037][T31611] CPU: 0 PID: 31611 Comm: syz-executor.5 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2753.549634][T31611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2753.559674][T31611] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2753.565796][T31611] Code: 48 89 c3 e8 61 79 ab ff 48 89 df e8 e9 ee ff ff 31 db eb 29 e8 50 79 ab ff 48 c7 c7 80 0d e8 84 4c 89 fe 31 c0 e8 4f 52 82 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 79 ab ff bb fe ff ff ff 48 c7 c7 [ 2753.585458][T31611] RSP: 0018:ffff8881dd0afa20 EFLAGS: 00010246 [ 2753.591492][T31611] RAX: b4a5d20001f75d00 RBX: 0000000000000000 RCX: 0000000000040000 [ 2753.599456][T31611] RDX: ffffc900067f2000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2753.607405][T31611] RBP: ffffffff85e45820 R08: ffffffff814e3a77 R09: 0000000000000003 [ 2753.615349][T31611] R10: ffffed103ba15ea9 R11: 1ffff1103ba15ea8 R12: 0000000000000000 [ 2753.623296][T31611] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84fd7240 [ 2753.631242][T31611] FS: 00007f50e753e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2753.640144][T31611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2753.646701][T31611] CR2: 00007ffc38d43d68 CR3: 00000001e132a000 CR4: 00000000003406f0 [ 2753.654642][T31611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2753.662583][T31611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2753.670527][T31611] Call Trace: [ 2753.673810][T31611] sysfs_remove_files+0x99/0xf0 [ 2753.678634][T31611] del_gendisk+0x26e/0xbf0 [ 2753.683029][T31611] ? device_add_disk_no_queue_reg+0x20/0x20 [ 2753.688896][T31611] loop_remove+0x42/0xa0 [ 2753.693109][T31611] loop_control_ioctl+0x67f/0x740 [ 2753.698105][T31611] ? loop_remove+0xa0/0xa0 [ 2753.702488][T31611] ? loop_remove+0xa0/0xa0 [ 2753.706874][T31611] do_vfs_ioctl+0x744/0x1730 [ 2753.711434][T31611] ? selinux_file_ioctl+0x723/0x970 [ 2753.716599][T31611] ? ioctl_preallocate+0x250/0x250 [ 2753.721682][T31611] ? __fget+0x40c/0x4a0 [ 2753.725807][T31611] ? fget_many+0x20/0x20 [ 2753.730021][T31611] ? __fpregs_load_activate+0x1d7/0x3c0 03:37:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x6}, 0x80030000000000) [ 2753.735539][T31611] ? security_file_ioctl+0x9d/0xb0 [ 2753.740626][T31611] __x64_sys_ioctl+0xd4/0x110 [ 2753.745278][T31611] do_syscall_64+0xcb/0x1c0 [ 2753.749757][T31611] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2753.755622][T31611] ---[ end trace b61d2c152d24eb2e ]--- [ 2753.761321][T31611] ------------[ cut here ]------------ [ 2753.766805][T31611] kernfs: can not remove 'events_poll_msecs', no directory [ 2753.774603][T31611] WARNING: CPU: 0 PID: 31611 at fs/kernfs/dir.c:1511 kernfs_remove_by_name_ns+0x61/0x90 [ 2753.784299][T31611] Modules linked in: [ 2753.788169][T31611] CPU: 0 PID: 31611 Comm: syz-executor.5 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2753.799927][T31611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2753.809982][T31611] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2753.816102][T31611] Code: 48 89 c3 e8 61 79 ab ff 48 89 df e8 e9 ee ff ff 31 db eb 29 e8 50 79 ab ff 48 c7 c7 80 0d e8 84 4c 89 fe 31 c0 e8 4f 52 82 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 79 ab ff bb fe ff ff ff 48 c7 c7 [ 2753.835676][T31611] RSP: 0018:ffff8881dd0afa20 EFLAGS: 00010246 [ 2753.841708][T31611] RAX: b4a5d20001f75d00 RBX: 0000000000000000 RCX: 0000000000040000 [ 2753.849646][T31611] RDX: ffffc900067f2000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2753.857590][T31611] RBP: ffffffff85e45820 R08: ffffffff814e3a77 R09: ffffed103edcaa08 [ 2753.865534][T31611] R10: ffffed103edcaa08 R11: 1ffff1103edcaa07 R12: 0000000000000000 [ 2753.873475][T31611] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84fd7260 [ 2753.881589][T31611] FS: 00007f50e753e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2753.890488][T31611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2753.897040][T31611] CR2: 00007ffc38d43d68 CR3: 00000001e132a000 CR4: 00000000003406f0 [ 2753.904979][T31611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2753.912919][T31611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2753.920855][T31611] Call Trace: [ 2753.924118][T31611] sysfs_remove_files+0x99/0xf0 [ 2753.928935][T31611] del_gendisk+0x26e/0xbf0 [ 2753.933322][T31611] ? device_add_disk_no_queue_reg+0x20/0x20 [ 2753.939198][T31611] loop_remove+0x42/0xa0 [ 2753.943415][T31611] loop_control_ioctl+0x67f/0x740 [ 2753.948403][T31611] ? loop_remove+0xa0/0xa0 [ 2753.952790][T31611] ? loop_remove+0xa0/0xa0 [ 2753.957171][T31611] do_vfs_ioctl+0x744/0x1730 [ 2753.961727][T31611] ? selinux_file_ioctl+0x723/0x970 [ 2753.966890][T31611] ? ioctl_preallocate+0x250/0x250 [ 2753.971965][T31611] ? __fget+0x40c/0x4a0 [ 2753.976089][T31611] ? fget_many+0x20/0x20 [ 2753.980299][T31611] ? __fpregs_load_activate+0x1d7/0x3c0 [ 2753.985814][T31611] ? security_file_ioctl+0x9d/0xb0 [ 2753.990891][T31611] __x64_sys_ioctl+0xd4/0x110 [ 2753.995548][T31611] do_syscall_64+0xcb/0x1c0 [ 2754.000025][T31611] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2754.005881][T31611] ---[ end trace b61d2c152d24eb2f ]--- [ 2754.013299][T31611] ------------[ cut here ]------------ [ 2754.018811][T31611] kernfs: can not remove 'bdi', no directory [ 2754.024839][T31611] WARNING: CPU: 0 PID: 31611 at fs/kernfs/dir.c:1511 kernfs_remove_by_name_ns+0x61/0x90 [ 2754.034520][T31611] Modules linked in: [ 2754.038386][T31611] CPU: 0 PID: 31611 Comm: syz-executor.5 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2754.049968][T31611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2754.060014][T31611] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2754.066143][T31611] Code: 48 89 c3 e8 61 79 ab ff 48 89 df e8 e9 ee ff ff 31 db eb 29 e8 50 79 ab ff 48 c7 c7 80 0d e8 84 4c 89 fe 31 c0 e8 4f 52 82 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 79 ab ff bb fe ff ff ff 48 c7 c7 [ 2754.085714][T31611] RSP: 0018:ffff8881dd0afa60 EFLAGS: 00010246 [ 2754.091746][T31611] RAX: b4a5d20001f75d00 RBX: 0000000000000000 RCX: 0000000000040000 [ 2754.099689][T31611] RDX: ffffc900067f2000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2754.107636][T31611] RBP: ffff8881dd0afb68 R08: ffffffff814e3a77 R09: ffffed103edc52b2 [ 2754.115579][T31611] R10: ffffed103edc52b2 R11: 1ffff1103edc52b1 R12: ffff8881dd18f000 [ 2754.123520][T31611] R13: ffff8881dd18f4e8 R14: 0000000000000000 R15: ffffffff84fd6d00 [ 2754.131460][T31611] FS: 00007f50e753e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2754.140356][T31611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2754.146915][T31611] CR2: 00007ffc38d43d68 CR3: 00000001e132a000 CR4: 00000000003406f0 [ 2754.154856][T31611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2754.162798][T31611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2754.170743][T31611] Call Trace: [ 2754.174007][T31611] del_gendisk+0x593/0xbf0 [ 2754.178389][T31611] ? device_add_disk_no_queue_reg+0x20/0x20 [ 2754.184250][T31611] loop_remove+0x42/0xa0 [ 2754.188461][T31611] loop_control_ioctl+0x67f/0x740 [ 2754.193451][T31611] ? loop_remove+0xa0/0xa0 [ 2754.197850][T31611] ? loop_remove+0xa0/0xa0 [ 2754.202233][T31611] do_vfs_ioctl+0x744/0x1730 [ 2754.206790][T31611] ? selinux_file_ioctl+0x723/0x970 [ 2754.212127][T31611] ? ioctl_preallocate+0x250/0x250 [ 2754.217206][T31611] ? __fget+0x40c/0x4a0 [ 2754.221336][T31611] ? fget_many+0x20/0x20 [ 2754.225546][T31611] ? __fpregs_load_activate+0x1d7/0x3c0 [ 2754.231065][T31611] ? security_file_ioctl+0x9d/0xb0 [ 2754.236150][T31611] __x64_sys_ioctl+0xd4/0x110 [ 2754.240820][T31611] do_syscall_64+0xcb/0x1c0 [ 2754.245296][T31611] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2754.251246][T31611] ---[ end trace b61d2c152d24eb30 ]--- [ 2754.259095][T31611] kasan: CONFIG_KASAN_INLINE enabled [ 2754.264813][T31611] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2754.272955][T31611] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2754.279867][T31611] CPU: 1 PID: 31611 Comm: syz-executor.5 Tainted: G W 5.4.219-syzkaller-00012-ga8aad8851131 #0 [ 2754.291452][T31611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2754.301488][T31611] RIP: 0010:strlen+0x2a/0x60 [ 2754.306062][T31611] Code: 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 90 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 2754.325809][T31611] RSP: 0018:ffff8881dd0af9c0 EFLAGS: 00010246 [ 2754.331843][T31611] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 2754.339783][T31611] RDX: ffffc900067f2000 RSI: 000000000003ffff RDI: 0000000000000000 [ 2754.347727][T31611] RBP: 0000000000000000 R08: ffffffff81b9a329 R09: ffffed103ba15f3d [ 2754.355669][T31611] R10: ffffed103ba15f3d R11: 1ffff1103ba15f3c R12: ffffffffffffffff [ 2754.363635][T31611] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 2754.371581][T31611] FS: 00007f50e753e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2754.380477][T31611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2754.387027][T31611] CR2: 00007fbe28d56218 CR3: 00000001e132a000 CR4: 00000000003406e0 [ 2754.394973][T31611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2754.402912][T31611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2754.410847][T31611] Call Trace: [ 2754.414110][T31611] kernfs_name_hash+0x1e/0x220 [ 2754.418848][T31611] kernfs_find_ns+0x6b/0x260 [ 2754.423415][T31611] kernfs_remove_by_name_ns+0x32/0x90 [ 2754.428755][T31611] del_gendisk+0x98a/0xbf0 [ 2754.433143][T31611] ? device_add_disk_no_queue_reg+0x20/0x20 [ 2754.439002][T31611] loop_remove+0x42/0xa0 [ 2754.443220][T31611] loop_control_ioctl+0x67f/0x740 [ 2754.448213][T31611] ? loop_remove+0xa0/0xa0 [ 2754.452596][T31611] ? loop_remove+0xa0/0xa0 [ 2754.456981][T31611] do_vfs_ioctl+0x744/0x1730 [ 2754.461539][T31611] ? selinux_file_ioctl+0x723/0x970 [ 2754.466703][T31611] ? ioctl_preallocate+0x250/0x250 [ 2754.471783][T31611] ? __fget+0x40c/0x4a0 [ 2754.475904][T31611] ? fget_many+0x20/0x20 [ 2754.480132][T31611] ? __fpregs_load_activate+0x1d7/0x3c0 [ 2754.485649][T31611] ? security_file_ioctl+0x9d/0xb0 [ 2754.490726][T31611] __x64_sys_ioctl+0xd4/0x110 [ 2754.495373][T31611] do_syscall_64+0xcb/0x1c0 [ 2754.499843][T31611] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2754.505697][T31611] Modules linked in: [ 2754.509714][T31611] ---[ end trace b61d2c152d24eb31 ]--- [ 2754.515156][T31611] RIP: 0010:strlen+0x2a/0x60 [ 2754.519739][T31611] Code: 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 90 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 2754.539355][T31611] RSP: 0018:ffff8881dd0af9c0 EFLAGS: 00010246 [ 2754.545391][T31611] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 2754.553414][T31611] RDX: ffffc900067f2000 RSI: 000000000003ffff RDI: 0000000000000000 [ 2754.561392][T31611] RBP: 0000000000000000 R08: ffffffff81b9a329 R09: ffffed103ba15f3d [ 2754.569377][T31611] R10: ffffed103ba15f3d R11: 1ffff1103ba15f3c R12: ffffffffffffffff [ 2754.577334][T31611] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 2754.585403][T31611] FS: 00007f50e753e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2754.594453][T31611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2754.601040][T31611] CR2: 00007fbe28d56218 CR3: 00000001e132a000 CR4: 00000000003406e0 [ 2754.609015][T31611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2754.616963][T31611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2754.624929][T31611] Kernel panic - not syncing: Fatal exception [ 2754.631159][T31611] Kernel Offset: disabled [ 2754.635461][T31611] Rebooting in 86400 seconds..