0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x36], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1715.979222][T30359] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 1715.984581][T30359] ? blk_mq_free_tag_set+0x470/0x470 [ 1715.989855][T30359] blk_stat_alloc_callback+0x5c/0x210 [ 1715.995215][T30359] blk_mq_init_allocated_queue+0x86/0x16e0 [ 1715.999315][T30350] xt_CT: No such helper "syz0" [ 1716.001009][T30359] ? blk_timeout_work+0x10/0x10 [ 1716.001020][T30359] ? blk_alloc_queue_node+0x4e0/0x570 [ 1716.001035][T30359] blk_mq_init_queue+0x48/0xa0 [ 1716.020693][T30359] loop_add+0x256/0x710 [ 1716.024845][T30359] loop_control_ioctl+0x468/0x680 18:16:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002017819000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:05 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x8000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1716.029863][T30359] ? xor_init+0x60/0x60 [ 1716.034014][T30359] do_vfs_ioctl+0x6fb/0x15b0 [ 1716.038604][T30359] __x64_sys_ioctl+0xd4/0x110 [ 1716.043274][T30359] do_syscall_64+0xcb/0x1e0 [ 1716.047767][T30359] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1716.053644][T30359] RIP: 0033:0x7f6a3b7a7ae9 [ 1716.058058][T30359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.077649][T30359] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1716.086048][T30359] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1716.094006][T30359] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1716.101965][T30359] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.109926][T30359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1716.116603][T30475] xt_CT: No such helper "syz0" 18:16:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0xc}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x9000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xba000000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002007a19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1716.119014][T30359] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 22) 18:16:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0xd}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x42], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002027a19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1716.194972][T30590] xt_l2tp: invalid flags combination: 0 [ 1716.203729][T30595] FAULT_INJECTION: forcing a failure. [ 1716.203729][T30595] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.228502][T30595] CPU: 1 PID: 30595 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 18:16:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0xe}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x10}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1716.240131][T30595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.250175][T30595] Call Trace: [ 1716.253460][T30595] dump_stack+0x18e/0x1de [ 1716.257780][T30595] should_fail+0x5d8/0x740 [ 1716.258634][T30584] xt_CT: No such helper "syz0" [ 1716.262701][T30595] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 1716.262710][T30595] ? blk_stat_alloc_callback+0x95/0x210 [ 1716.262724][T30595] should_failslab+0x5/0x20 [ 1716.282811][T30595] __kmalloc+0x5f/0x2f0 [ 1716.286959][T30595] ? blk_stat_alloc_callback+0x5c/0x210 18:16:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x25}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1716.292504][T30595] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 1716.297865][T30595] ? blk_mq_free_tag_set+0x470/0x470 [ 1716.303136][T30595] blk_stat_alloc_callback+0x95/0x210 [ 1716.308514][T30595] ? blk_mq_free_tag_set+0x470/0x470 [ 1716.313873][T30595] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 1716.319238][T30595] blk_mq_init_allocated_queue+0x86/0x16e0 [ 1716.325039][T30595] ? blk_timeout_work+0x10/0x10 [ 1716.329891][T30595] ? blk_alloc_queue_node+0x4e0/0x570 [ 1716.335249][T30595] blk_mq_init_queue+0x48/0xa0 [ 1716.340003][T30595] loop_add+0x256/0x710 [ 1716.344151][T30595] loop_control_ioctl+0x468/0x680 [ 1716.349168][T30595] ? xor_init+0x60/0x60 [ 1716.353307][T30595] do_vfs_ioctl+0x6fb/0x15b0 [ 1716.357874][T30595] __x64_sys_ioctl+0xd4/0x110 [ 1716.362559][T30595] do_syscall_64+0xcb/0x1e0 [ 1716.367070][T30595] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1716.372932][T30595] RIP: 0033:0x7f6a3b7a7ae9 18:16:05 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xa000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xbe010000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x36}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 23) 18:16:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002029d19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x4a], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1716.377317][T30595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.396891][T30595] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1716.405270][T30595] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1716.413225][T30595] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1716.421166][T30595] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.429116][T30595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1716.437058][T30595] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x52], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x42}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000201bf19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1716.493518][T30820] xt_l2tp: invalid flags combination: 0 [ 1716.506153][T30822] FAULT_INJECTION: forcing a failure. [ 1716.506153][T30822] name failslab, interval 1, probability 0, space 0, times 0 18:16:05 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xc2010000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x5c], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1716.544396][T30810] xt_CT: No such helper "syz0" [ 1716.550482][T30822] CPU: 1 PID: 30822 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1716.562140][T30822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.572184][T30822] Call Trace: [ 1716.575476][T30822] dump_stack+0x18e/0x1de [ 1716.579828][T30822] should_fail+0x5d8/0x740 [ 1716.582464][T30931] xt_l2tp: invalid flags combination: 0 [ 1716.584253][T30822] ? blk_mq_init_allocated_queue+0xf0/0x16e0 [ 1716.584265][T30822] should_failslab+0x5/0x20 [ 1716.584274][T30822] kmem_cache_alloc_trace+0x39/0x2b0 [ 1716.584282][T30822] ? blk_stat_alloc_callback+0x1a4/0x210 [ 1716.584296][T30822] ? blk_mq_free_tag_set+0x470/0x470 [ 1716.616639][T30822] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 1716.622018][T30822] blk_mq_init_allocated_queue+0xf0/0x16e0 [ 1716.627816][T30822] ? blk_alloc_queue_node+0x4e0/0x570 [ 1716.633175][T30822] blk_mq_init_queue+0x48/0xa0 [ 1716.637929][T30822] loop_add+0x256/0x710 [ 1716.642086][T30822] loop_control_ioctl+0x468/0x680 [ 1716.647113][T30822] ? xor_init+0x60/0x60 [ 1716.651245][T30822] do_vfs_ioctl+0x6fb/0x15b0 [ 1716.655812][T30822] __x64_sys_ioctl+0xd4/0x110 [ 1716.660479][T30822] do_syscall_64+0xcb/0x1e0 [ 1716.664959][T30822] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1716.670828][T30822] RIP: 0033:0x7f6a3b7a7ae9 [ 1716.675214][T30822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:16:06 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xa030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x70], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1716.694808][T30822] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1716.703190][T30822] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1716.711160][T30822] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1716.719154][T30822] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.727099][T30822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1716.735042][T30822] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:06 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xc2030000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203c119000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:06 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 24) 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x71], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000202c319000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x73], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1716.787758][T31146] xt_l2tp: invalid flags combination: 0 [ 1716.795248][T31150] FAULT_INJECTION: forcing a failure. [ 1716.795248][T31150] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.823146][T31150] CPU: 0 PID: 31150 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1716.834776][T31150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.844818][T31150] Call Trace: [ 1716.848111][T31150] dump_stack+0x18e/0x1de [ 1716.852431][T31150] should_fail+0x5d8/0x740 [ 1716.856842][T31150] ? blk_mq_init_allocated_queue+0x429/0x16e0 [ 1716.862908][T31150] should_failslab+0x5/0x20 [ 1716.867407][T31150] __kmalloc+0x5f/0x2f0 [ 1716.871550][T31150] ? blk_mq_sysfs_init+0x18b/0x1c0 [ 1716.876644][T31150] blk_mq_init_allocated_queue+0x429/0x16e0 [ 1716.878602][T31149] xt_CT: No such helper "syz0" [ 1716.882522][T31150] ? blk_alloc_queue_node+0x4e0/0x570 [ 1716.882531][T31150] blk_mq_init_queue+0x48/0xa0 [ 1716.882545][T31150] loop_add+0x256/0x710 [ 1716.901514][T31150] loop_control_ioctl+0x468/0x680 [ 1716.906525][T31150] ? xor_init+0x60/0x60 [ 1716.910668][T31150] do_vfs_ioctl+0x6fb/0x15b0 [ 1716.915257][T31150] __x64_sys_ioctl+0xd4/0x110 [ 1716.919965][T31150] do_syscall_64+0xcb/0x1e0 [ 1716.924451][T31150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1716.930313][T31150] RIP: 0033:0x7f6a3b7a7ae9 [ 1716.934699][T31150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.954273][T31150] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1716.962654][T31150] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1716.970610][T31150] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1716.978670][T31150] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200c919000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:06 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xc6000000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xb000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x74], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 25) [ 1716.986613][T31150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1716.994567][T31150] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1717.021596][T31365] xt_l2tp: invalid flags combination: 0 18:16:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000201d519000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x52}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xc6020000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x8b], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002ffe019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1717.041097][T31373] FAULT_INJECTION: forcing a failure. [ 1717.041097][T31373] name failslab, interval 1, probability 0, space 0, times 0 18:16:06 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xce020000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x5c}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xa0], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1717.119188][T31373] CPU: 0 PID: 31373 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1717.130838][T31373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.140886][T31373] Call Trace: [ 1717.144172][T31373] dump_stack+0x18e/0x1de [ 1717.148498][T31373] should_fail+0x5d8/0x740 [ 1717.152905][T31373] ? blk_mq_realloc_hw_ctxs+0x38a/0x1440 [ 1717.157639][T31374] xt_CT: No such helper "syz0" [ 1717.158521][T31373] should_failslab+0x5/0x20 [ 1717.158530][T31373] __kmalloc+0x5f/0x2f0 [ 1717.158540][T31373] ? _raw_spin_lock+0x6c/0x170 [ 1717.158555][T31373] blk_mq_realloc_hw_ctxs+0x38a/0x1440 [ 1717.182108][T31373] ? blk_mq_sysfs_init+0x18b/0x1c0 [ 1717.187211][T31373] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 1717.193134][T31373] ? blk_alloc_queue_node+0x4e0/0x570 [ 1717.198496][T31373] blk_mq_init_queue+0x48/0xa0 [ 1717.203246][T31373] loop_add+0x256/0x710 [ 1717.207393][T31373] loop_control_ioctl+0x468/0x680 [ 1717.212414][T31373] ? xor_init+0x60/0x60 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xa7], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1717.216557][T31373] do_vfs_ioctl+0x6fb/0x15b0 [ 1717.221170][T31373] __x64_sys_ioctl+0xd4/0x110 [ 1717.225832][T31373] do_syscall_64+0xcb/0x1e0 [ 1717.230307][T31373] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1717.236171][T31373] RIP: 0033:0x7f6a3b7a7ae9 [ 1717.240580][T31373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1717.260152][T31373] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:16:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200e319000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:06 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xc000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 26) 18:16:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x60}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xd9030000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xb8], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000201eb19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1717.268527][T31373] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1717.276465][T31373] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1717.284411][T31373] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.292355][T31373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1717.300294][T31373] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x68}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xde000000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203f019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xba], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1717.356972][T31939] FAULT_INJECTION: forcing a failure. [ 1717.356972][T31939] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.395182][T31939] CPU: 0 PID: 31939 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xc6], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1717.406810][T31939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.416859][T31939] Call Trace: [ 1717.420141][T31939] dump_stack+0x18e/0x1de [ 1717.424466][T31939] should_fail+0x5d8/0x740 [ 1717.428222][T31898] xt_CT: No such helper "syz0" [ 1717.428868][T31939] ? blk_mq_realloc_hw_ctxs+0x637/0x1440 [ 1717.428879][T31939] should_failslab+0x5/0x20 [ 1717.428888][T31939] __kmalloc+0x5f/0x2f0 [ 1717.428902][T31939] ? blk_mq_realloc_hw_ctxs+0x38a/0x1440 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xde], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1717.453484][T31939] ? _raw_spin_lock+0x6c/0x170 [ 1717.458243][T31939] blk_mq_realloc_hw_ctxs+0x637/0x1440 [ 1717.463691][T31939] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 1717.469593][T31939] ? blk_alloc_queue_node+0x4e0/0x570 [ 1717.474958][T31939] blk_mq_init_queue+0x48/0xa0 [ 1717.479709][T31939] loop_add+0x256/0x710 [ 1717.483854][T31939] loop_control_ioctl+0x468/0x680 [ 1717.488865][T31939] ? xor_init+0x60/0x60 [ 1717.493018][T31939] do_vfs_ioctl+0x6fb/0x15b0 [ 1717.497605][T31939] __x64_sys_ioctl+0xd4/0x110 [ 1717.502272][T31939] do_syscall_64+0xcb/0x1e0 [ 1717.506773][T31939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1717.512648][T31939] RIP: 0033:0x7f6a3b7a7ae9 [ 1717.517036][T31939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1717.536609][T31939] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1717.544989][T31939] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 18:16:06 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xd000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 27) 18:16:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203f819000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xf0], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x6c}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xe0030000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x71}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1717.552929][T31939] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1717.560875][T31939] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.568832][T31939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1717.576783][T31939] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xf2], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000203f919000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x138], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:06 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xe3000000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1717.648820][T32236] FAULT_INJECTION: forcing a failure. [ 1717.648820][T32236] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.669958][T32225] xt_CT: No such helper "syz0" [ 1717.684040][T32236] CPU: 0 PID: 32236 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 18:16:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x73}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1717.695666][T32236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.705708][T32236] Call Trace: [ 1717.708999][T32236] dump_stack+0x18e/0x1de [ 1717.713322][T32236] should_fail+0x5d8/0x740 [ 1717.717738][T32236] ? sbitmap_init_node+0x145/0x3d0 [ 1717.722839][T32236] should_failslab+0x5/0x20 [ 1717.727334][T32236] __kmalloc+0x5f/0x2f0 [ 1717.731482][T32236] sbitmap_init_node+0x145/0x3d0 [ 1717.736416][T32236] blk_mq_realloc_hw_ctxs+0x6a1/0x1440 [ 1717.741869][T32236] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 1717.747753][T32236] ? blk_alloc_queue_node+0x4e0/0x570 [ 1717.753198][T32236] blk_mq_init_queue+0x48/0xa0 [ 1717.757959][T32236] loop_add+0x256/0x710 [ 1717.762105][T32236] loop_control_ioctl+0x468/0x680 [ 1717.767329][T32236] ? xor_init+0x60/0x60 [ 1717.771537][T32236] do_vfs_ioctl+0x6fb/0x15b0 [ 1717.776120][T32236] __x64_sys_ioctl+0xd4/0x110 [ 1717.780785][T32236] do_syscall_64+0xcb/0x1e0 [ 1717.785700][T32236] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1717.791566][T32236] RIP: 0033:0x7f6a3b7a7ae9 [ 1717.795971][T32236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1717.815929][T32236] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1717.824313][T32236] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1717.832257][T32236] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1717.840566][T32236] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:07 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xe000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x13a], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200fc19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:07 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xe6030000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 28) 18:16:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x148], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1717.848506][T32236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1717.856449][T32236] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x7a}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020fff19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x8b}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x150], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002e0ff19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1717.924647][T32562] FAULT_INJECTION: forcing a failure. [ 1717.924647][T32562] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.977901][T32562] CPU: 0 PID: 32562 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1717.989623][T32562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.999672][T32562] Call Trace: [ 1718.002953][T32562] dump_stack+0x18e/0x1de [ 1718.007303][T32562] should_fail+0x5d8/0x740 [ 1718.011704][T32562] ? blk_alloc_flush_queue+0x7e/0x230 [ 1718.017058][T32562] should_failslab+0x5/0x20 [ 1718.019505][T32571] xt_CT: No such helper "syz0" [ 1718.021541][T32562] kmem_cache_alloc_trace+0x39/0x2b0 [ 1718.021552][T32562] blk_alloc_flush_queue+0x7e/0x230 [ 1718.021565][T32562] blk_mq_realloc_hw_ctxs+0x873/0x1440 [ 1718.042230][T32562] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 1718.048206][T32562] ? blk_alloc_queue_node+0x4e0/0x570 [ 1718.053560][T32562] blk_mq_init_queue+0x48/0xa0 [ 1718.058308][T32562] loop_add+0x256/0x710 [ 1718.062456][T32562] loop_control_ioctl+0x468/0x680 [ 1718.067560][T32562] ? xor_init+0x60/0x60 [ 1718.071702][T32562] do_vfs_ioctl+0x6fb/0x15b0 [ 1718.076272][T32562] __x64_sys_ioctl+0xd4/0x110 [ 1718.080928][T32562] do_syscall_64+0xcb/0x1e0 [ 1718.085400][T32562] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1718.091292][T32562] RIP: 0033:0x7f6a3b7a7ae9 [ 1718.095731][T32562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.115399][T32562] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:16:07 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x10000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xe7020000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0xa0}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000007000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x160], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 29) 18:16:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0xa7}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1718.123779][T32562] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1718.131719][T32562] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1718.139674][T32562] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1718.147714][T32562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.155658][T32562] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:07 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xee010000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000219000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x192], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0xb8}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1718.213846][ T428] FAULT_INJECTION: forcing a failure. [ 1718.213846][ T428] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.237260][ T428] CPU: 0 PID: 428 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1718.248728][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1718.258957][ T428] Call Trace: 18:16:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0xba}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1718.262243][ T428] dump_stack+0x18e/0x1de [ 1718.266573][ T428] should_fail+0x5d8/0x740 [ 1718.270982][ T428] ? blk_alloc_flush_queue+0xdf/0x230 [ 1718.276344][ T428] should_failslab+0x5/0x20 [ 1718.280838][ T428] __kmalloc+0x5f/0x2f0 [ 1718.284991][ T428] ? blk_alloc_flush_queue+0x7e/0x230 [ 1718.290354][ T428] blk_alloc_flush_queue+0xdf/0x230 [ 1718.295542][ T428] blk_mq_realloc_hw_ctxs+0x873/0x1440 [ 1718.300998][ T428] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 1718.306884][ T428] ? blk_alloc_queue_node+0x4e0/0x570 [ 1718.312253][ T428] blk_mq_init_queue+0x48/0xa0 [ 1718.317050][ T428] loop_add+0x256/0x710 [ 1718.321201][ T428] loop_control_ioctl+0x468/0x680 [ 1718.326221][ T428] ? xor_init+0x60/0x60 [ 1718.330371][ T428] do_vfs_ioctl+0x6fb/0x15b0 [ 1718.334957][ T428] __x64_sys_ioctl+0xd4/0x110 [ 1718.339623][ T428] do_syscall_64+0xcb/0x1e0 [ 1718.344115][ T428] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1718.349990][ T428] RIP: 0033:0x7f6a3b7a7ae9 [ 1718.354373][ T428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.373956][ T428] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.382444][ T428] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1718.390478][ T428] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1718.398442][ T428] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1718.406385][ T428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:16:07 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x10020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0xc6}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x1be], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000319000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:07 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xef010000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 30) [ 1718.414328][ T428] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0xde}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000419000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x1c2], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0xf0}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1718.461517][ T708] l2tp_mt_check6: 59 callbacks suppressed [ 1718.461521][ T708] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1718.489620][ T715] FAULT_INJECTION: forcing a failure. [ 1718.489620][ T715] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.514729][ T715] CPU: 1 PID: 715 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1718.526191][ T715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1718.531538][ T832] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1718.536231][ T715] Call Trace: [ 1718.536248][ T715] dump_stack+0x18e/0x1de [ 1718.536267][ T715] should_fail+0x5d8/0x740 [ 1718.554284][ T715] ? __alloc_disk_node+0x76/0x5a0 [ 1718.559383][ T715] should_failslab+0x5/0x20 18:16:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x1ee], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x1ef], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1718.563883][ T715] kmem_cache_alloc_trace+0x39/0x2b0 [ 1718.569247][ T715] __alloc_disk_node+0x76/0x5a0 [ 1718.574101][ T715] loop_add+0x323/0x710 [ 1718.578256][ T715] loop_control_ioctl+0x468/0x680 [ 1718.582921][ T834] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1718.583267][ T715] ? xor_init+0x60/0x60 [ 1718.583283][ T715] do_vfs_ioctl+0x6fb/0x15b0 [ 1718.598024][ T715] __x64_sys_ioctl+0xd4/0x110 [ 1718.602693][ T715] do_syscall_64+0xcb/0x1e0 [ 1718.603536][ T836] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1718.607186][ T715] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1718.607200][ T715] RIP: 0033:0x7f6a3b7a7ae9 [ 1718.623596][ T715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.643185][ T715] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.651579][ T715] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 18:16:07 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x11000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x1fc], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xf0000000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000519000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0xf2}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 31) [ 1718.659520][ T715] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1718.667464][ T715] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1718.675407][ T715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.683354][ T715] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:08 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xf2000000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000619000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1718.734361][ T948] FAULT_INJECTION: forcing a failure. [ 1718.734361][ T948] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.749275][ T952] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1718.780518][ T948] CPU: 0 PID: 948 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1718.790147][ T1074] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1718.791975][ T948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1718.791978][ T948] Call Trace: [ 1718.791995][ T948] dump_stack+0x18e/0x1de [ 1718.792012][ T948] should_fail+0x5d8/0x740 [ 1718.820305][ T948] ? __alloc_disk_node+0x319/0x5a0 [ 1718.825417][ T948] should_failslab+0x5/0x20 [ 1718.829911][ T948] kmem_cache_alloc_trace+0x39/0x2b0 [ 1718.835180][ T948] __alloc_disk_node+0x319/0x5a0 [ 1718.840107][ T948] loop_add+0x323/0x710 [ 1718.844687][ T948] loop_control_ioctl+0x468/0x680 [ 1718.849692][ T948] ? xor_init+0x60/0x60 [ 1718.853838][ T948] do_vfs_ioctl+0x6fb/0x15b0 [ 1718.858424][ T948] __x64_sys_ioctl+0xd4/0x110 [ 1718.863093][ T948] do_syscall_64+0xcb/0x1e0 [ 1718.867589][ T948] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1718.873465][ T948] RIP: 0033:0x7f6a3b7a7ae9 [ 1718.877865][ T948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.897461][ T948] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.905856][ T948] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1718.913812][ T948] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1718.921766][ T948] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:08 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x12000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x210], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x16020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xfa030000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000719000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x216], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1718.929725][ T948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.937691][ T948] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1718.964204][ T1328] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1718.970090][ T1333] xt_l2tp: missing protocol rule (udp|l2tpip) 18:16:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1719.007953][ T1392] xt_l2tp: missing protocol rule (udp|l2tpip) 18:16:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 32) 18:16:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000819000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:08 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xfc010000], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x228], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x22030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000919000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1719.050391][ T1490] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1719.086228][ T1534] FAULT_INJECTION: forcing a failure. [ 1719.086228][ T1534] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.119852][ T1534] CPU: 0 PID: 1534 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1719.131393][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1719.141468][ T1534] Call Trace: [ 1719.144841][ T1534] dump_stack+0x18e/0x1de [ 1719.149165][ T1534] should_fail+0x5d8/0x740 [ 1719.153572][ T1534] ? rand_initialize_disk+0x4b/0xb0 [ 1719.158756][ T1534] should_failslab+0x5/0x20 [ 1719.163328][ T1534] kmem_cache_alloc_trace+0x39/0x2b0 18:16:08 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x28020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1719.168597][ T1534] ? part_release+0xc0/0xc0 [ 1719.173081][ T1534] ? percpu_ref_init+0x189/0x230 [ 1719.178091][ T1534] rand_initialize_disk+0x4b/0xb0 [ 1719.183099][ T1534] __alloc_disk_node+0x3f6/0x5a0 [ 1719.188022][ T1534] loop_add+0x323/0x710 [ 1719.192174][ T1534] loop_control_ioctl+0x468/0x680 [ 1719.197186][ T1534] ? xor_init+0x60/0x60 [ 1719.201329][ T1534] do_vfs_ioctl+0x6fb/0x15b0 [ 1719.205999][ T1534] __x64_sys_ioctl+0xd4/0x110 [ 1719.210666][ T1534] do_syscall_64+0xcb/0x1e0 [ 1719.215159][ T1534] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1719.221032][ T1534] RIP: 0033:0x7f6a3b7a7ae9 [ 1719.225460][ T1534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1719.245236][ T1534] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1719.253641][ T1534] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1719.261600][ T1534] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 18:16:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x250], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1719.269558][ T1534] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1719.277514][ T1534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1719.285468][ T1534] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 33) 18:16:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000a19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:08 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x2e030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x252], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000b19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:08 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x2}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x25a], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1719.400456][ T2012] FAULT_INJECTION: forcing a failure. [ 1719.400456][ T2012] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.418269][ T2012] CPU: 1 PID: 2012 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1719.429810][ T2012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1719.439853][ T2012] Call Trace: [ 1719.443141][ T2012] dump_stack+0x18e/0x1de 18:16:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000c19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x268], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x3}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1719.447467][ T2012] should_fail+0x5d8/0x740 [ 1719.451872][ T2012] ? blk_mq_init_tags+0x74/0x290 [ 1719.456800][ T2012] should_failslab+0x5/0x20 [ 1719.461297][ T2012] kmem_cache_alloc_trace+0x39/0x2b0 [ 1719.466566][ T2012] ? mutex_unlock+0x19/0x40 [ 1719.471054][ T2012] blk_mq_init_tags+0x74/0x290 [ 1719.475802][ T2012] ? blk_mq_hw_queue_to_node+0xeb/0x100 [ 1719.481336][ T2012] blk_mq_alloc_rq_map+0x93/0x1a0 [ 1719.486352][ T2012] blk_mq_init_sched+0x1d6/0xb10 [ 1719.491309][ T2012] elevator_init_mq+0x2cd/0x3f0 [ 1719.496150][ T2012] __device_add_disk+0x87/0x1220 [ 1719.501077][ T2012] ? loop_add+0x340/0x710 [ 1719.505404][ T2012] loop_add+0x554/0x710 [ 1719.509551][ T2012] loop_control_ioctl+0x468/0x680 [ 1719.514566][ T2012] ? xor_init+0x60/0x60 [ 1719.518716][ T2012] do_vfs_ioctl+0x6fb/0x15b0 [ 1719.523304][ T2012] __x64_sys_ioctl+0xd4/0x110 [ 1719.527982][ T2012] do_syscall_64+0xcb/0x1e0 [ 1719.532473][ T2012] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1719.538453][ T2012] RIP: 0033:0x7f6a3b7a7ae9 [ 1719.542843][ T2012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1719.562420][ T2012] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1719.570890][ T2012] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1719.578831][ T2012] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1719.586864][ T2012] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 34) 18:16:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000d19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x272], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x8}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x30030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000e19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1719.594815][ T2012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1719.602761][ T2012] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1719.611326][ T2012] "mq-deadline" elevator initialization failed, falling back to "none" 18:16:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x27a], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002001019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1719.681030][ T2364] FAULT_INJECTION: forcing a failure. [ 1719.681030][ T2364] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.706397][ T2364] CPU: 1 PID: 2364 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1719.717937][ T2364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1719.727990][ T2364] Call Trace: 18:16:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x290], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1719.731475][ T2364] dump_stack+0x18e/0x1de [ 1719.735801][ T2364] should_fail+0x5d8/0x740 [ 1719.740204][ T2364] ? sbitmap_init_node+0x145/0x3d0 [ 1719.745315][ T2364] should_failslab+0x5/0x20 [ 1719.749801][ T2364] __kmalloc+0x5f/0x2f0 [ 1719.753954][ T2364] sbitmap_init_node+0x145/0x3d0 [ 1719.758880][ T2364] sbitmap_queue_init_node+0x2f/0xbe0 [ 1719.764263][ T2364] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 1719.769792][ T2364] ? blk_mq_init_tags+0x74/0x290 [ 1719.774715][ T2364] ? mutex_unlock+0x19/0x40 [ 1719.779212][ T2364] blk_mq_init_tags+0xef/0x290 [ 1719.783966][ T2364] blk_mq_alloc_rq_map+0x93/0x1a0 [ 1719.789068][ T2364] blk_mq_init_sched+0x1d6/0xb10 [ 1719.794019][ T2364] elevator_init_mq+0x2cd/0x3f0 [ 1719.798866][ T2364] __device_add_disk+0x87/0x1220 [ 1719.803798][ T2364] ? loop_add+0x340/0x710 [ 1719.808185][ T2364] loop_add+0x554/0x710 [ 1719.812365][ T2364] loop_control_ioctl+0x468/0x680 [ 1719.817362][ T2364] ? xor_init+0x60/0x60 [ 1719.821490][ T2364] do_vfs_ioctl+0x6fb/0x15b0 [ 1719.826058][ T2364] __x64_sys_ioctl+0xd4/0x110 [ 1719.830706][ T2364] do_syscall_64+0xcb/0x1e0 [ 1719.835231][ T2364] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1719.841180][ T2364] RIP: 0033:0x7f6a3b7a7ae9 [ 1719.845564][ T2364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1719.865135][ T2364] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1719.873510][ T2364] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 18:16:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 35) 18:16:09 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x36}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x36000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x292], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002001119000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002001219000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1719.881535][ T2364] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1719.889477][ T2364] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1719.897553][ T2364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1719.905589][ T2364] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1719.915773][ T2364] "mq-deadline" elevator initialization failed, falling back to "none" 18:16:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x2be], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1719.991108][ T2653] FAULT_INJECTION: forcing a failure. [ 1719.991108][ T2653] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.010182][ T2653] CPU: 0 PID: 2653 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1720.021718][ T2653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1720.031762][ T2653] Call Trace: [ 1720.035044][ T2653] dump_stack+0x18e/0x1de 18:16:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002001619000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002002219000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002002519000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1720.039373][ T2653] should_fail+0x5d8/0x740 [ 1720.043780][ T2653] ? sbitmap_queue_init_node+0x3db/0xbe0 [ 1720.049406][ T2653] should_failslab+0x5/0x20 [ 1720.053904][ T2653] kmem_cache_alloc_trace+0x39/0x2b0 [ 1720.059182][ T2653] sbitmap_queue_init_node+0x3db/0xbe0 [ 1720.064651][ T2653] blk_mq_init_tags+0xef/0x290 [ 1720.069410][ T2653] blk_mq_alloc_rq_map+0x93/0x1a0 [ 1720.074432][ T2653] blk_mq_init_sched+0x1d6/0xb10 [ 1720.080062][ T2653] elevator_init_mq+0x2cd/0x3f0 [ 1720.085006][ T2653] __device_add_disk+0x87/0x1220 [ 1720.089939][ T2653] ? loop_add+0x340/0x710 [ 1720.094261][ T2653] loop_add+0x554/0x710 [ 1720.098486][ T2653] loop_control_ioctl+0x468/0x680 [ 1720.103495][ T2653] ? xor_init+0x60/0x60 [ 1720.107634][ T2653] do_vfs_ioctl+0x6fb/0x15b0 [ 1720.112200][ T2653] __x64_sys_ioctl+0xd4/0x110 [ 1720.116845][ T2653] do_syscall_64+0xcb/0x1e0 [ 1720.121316][ T2653] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1720.127183][ T2653] RIP: 0033:0x7f6a3b7a7ae9 [ 1720.131601][ T2653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.151279][ T2653] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1720.159744][ T2653] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1720.167687][ T2653] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1720.175624][ T2653] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1720.183572][ T2653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:16:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 36) 18:16:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002002e19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:09 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x3a010000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x2c6], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x42}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1720.191607][ T2653] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1720.201031][ T2653] "mq-deadline" elevator initialization failed, falling back to "none" 18:16:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x2ce], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002003219000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x2e7], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004819000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x300], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1720.320187][ T2891] FAULT_INJECTION: forcing a failure. [ 1720.320187][ T2891] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.342211][ T2891] CPU: 0 PID: 2891 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1720.353757][ T2891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1720.363801][ T2891] Call Trace: [ 1720.367116][ T2891] dump_stack+0x18e/0x1de [ 1720.371440][ T2891] should_fail+0x5d8/0x740 [ 1720.375844][ T2891] ? sbitmap_queue_init_node+0x3db/0xbe0 [ 1720.381452][ T2891] should_failslab+0x5/0x20 [ 1720.385928][ T2891] kmem_cache_alloc_trace+0x39/0x2b0 [ 1720.391184][ T2891] sbitmap_queue_init_node+0x3db/0xbe0 [ 1720.396610][ T2891] blk_mq_init_tags+0x153/0x290 [ 1720.401610][ T2891] blk_mq_alloc_rq_map+0x93/0x1a0 [ 1720.406607][ T2891] blk_mq_init_sched+0x1d6/0xb10 [ 1720.411517][ T2891] elevator_init_mq+0x2cd/0x3f0 [ 1720.416335][ T2891] __device_add_disk+0x87/0x1220 [ 1720.421242][ T2891] ? loop_add+0x340/0x710 [ 1720.425539][ T2891] loop_add+0x554/0x710 [ 1720.429666][ T2891] loop_control_ioctl+0x468/0x680 [ 1720.434662][ T2891] ? xor_init+0x60/0x60 [ 1720.438800][ T2891] do_vfs_ioctl+0x6fb/0x15b0 [ 1720.443369][ T2891] __x64_sys_ioctl+0xd4/0x110 [ 1720.448055][ T2891] do_syscall_64+0xcb/0x1e0 [ 1720.452531][ T2891] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1720.458396][ T2891] RIP: 0033:0x7f6a3b7a7ae9 [ 1720.462805][ T2891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.482685][ T2891] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1720.491237][ T2891] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1720.499183][ T2891] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1720.507127][ T2891] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 37) 18:16:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x11}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1720.515069][ T2891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1720.523024][ T2891] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1720.532572][ T2891] "mq-deadline" elevator initialization failed, falling back to "none" 18:16:09 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x40000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002004c19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x30a], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x4a}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1720.583933][ T3010] FAULT_INJECTION: forcing a failure. [ 1720.583933][ T3010] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.603749][ T3010] CPU: 0 PID: 3010 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1720.615291][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1720.620162][ T3018] l2tp_mt_check: 18 callbacks suppressed [ 1720.620173][ T3018] xt_l2tp: invalid flags combination: 0 [ 1720.625331][ T3010] Call Trace: [ 1720.625349][ T3010] dump_stack+0x18e/0x1de [ 1720.625362][ T3010] should_fail+0x5d8/0x740 [ 1720.625379][ T3010] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 1720.654093][ T3010] should_failslab+0x5/0x20 [ 1720.658594][ T3010] __kmalloc+0x5f/0x2f0 [ 1720.662739][ T3010] ? blk_mq_init_tags+0x209/0x290 [ 1720.667752][ T3010] blk_mq_alloc_rq_map+0xb3/0x1a0 [ 1720.672769][ T3010] blk_mq_init_sched+0x1d6/0xb10 [ 1720.677703][ T3010] elevator_init_mq+0x2cd/0x3f0 18:16:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002006019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1720.682572][ T3010] __device_add_disk+0x87/0x1220 [ 1720.687513][ T3010] ? loop_add+0x340/0x710 [ 1720.691834][ T3010] loop_add+0x554/0x710 [ 1720.695979][ T3010] loop_control_ioctl+0x468/0x680 [ 1720.700989][ T3010] ? xor_init+0x60/0x60 [ 1720.705592][ T3010] do_vfs_ioctl+0x6fb/0x15b0 [ 1720.710171][ T3010] __x64_sys_ioctl+0xd4/0x110 [ 1720.714830][ T3010] do_syscall_64+0xcb/0x1e0 [ 1720.719323][ T3010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1720.724357][ T3038] xt_ct_set_helper: 12 callbacks suppressed 18:16:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002006819000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:10 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x42000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1720.724368][ T3038] xt_CT: No such helper "syz0" [ 1720.725193][ T3010] RIP: 0033:0x7f6a3b7a7ae9 [ 1720.725203][ T3010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.725207][ T3010] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1720.768190][ T3010] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1720.776588][ T3010] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x36}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 38) 18:16:10 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x52}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x322], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002006c19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x42}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1720.784551][ T3010] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1720.792515][ T3010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1720.800478][ T3010] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1720.815705][ T3010] "mq-deadline" elevator initialization failed, falling back to "none" 18:16:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002007419000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x32e], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1720.865916][ T3232] xt_CT: No such helper "syz0" [ 1720.883112][ T3244] xt_l2tp: invalid flags combination: 0 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x56}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1720.910471][ T3243] FAULT_INJECTION: forcing a failure. [ 1720.910471][ T3243] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.936357][ T3243] CPU: 0 PID: 3243 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1720.942609][ T3436] xt_l2tp: invalid flags combination: 0 [ 1720.947895][ T3243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1720.947898][ T3243] Call Trace: [ 1720.947916][ T3243] dump_stack+0x18e/0x1de [ 1720.947934][ T3243] should_fail+0x5d8/0x740 [ 1720.975526][ T3243] ? blk_mq_alloc_rq_map+0xe9/0x1a0 [ 1720.980809][ T3243] should_failslab+0x5/0x20 [ 1720.985417][ T3243] __kmalloc+0x5f/0x2f0 [ 1720.989562][ T3243] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 1720.994728][ T3243] blk_mq_alloc_rq_map+0xe9/0x1a0 [ 1720.999735][ T3243] blk_mq_init_sched+0x1d6/0xb10 [ 1721.004649][ T3243] elevator_init_mq+0x2cd/0x3f0 [ 1721.009470][ T3243] __device_add_disk+0x87/0x1220 [ 1721.014381][ T3243] ? loop_add+0x340/0x710 [ 1721.018679][ T3243] loop_add+0x554/0x710 [ 1721.022804][ T3243] loop_control_ioctl+0x468/0x680 [ 1721.027807][ T3243] ? xor_init+0x60/0x60 [ 1721.031932][ T3243] do_vfs_ioctl+0x6fb/0x15b0 [ 1721.036502][ T3243] __x64_sys_ioctl+0xd4/0x110 [ 1721.041199][ T3243] do_syscall_64+0xcb/0x1e0 [ 1721.045670][ T3243] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1721.051527][ T3243] RIP: 0033:0x7f6a3b7a7ae9 [ 1721.055908][ T3243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.075480][ T3243] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1721.083861][ T3243] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1721.091798][ T3243] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1721.099740][ T3243] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002007a19000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 39) 18:16:10 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x48010000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x330], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x5c}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1721.107677][ T3243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1721.115617][ T3243] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1721.125420][ T3243] "mq-deadline" elevator initialization failed, falling back to "none" 18:16:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x356], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200c919000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x369], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1721.187600][ T3571] xt_l2tp: invalid flags combination: 0 [ 1721.210885][ T3570] FAULT_INJECTION: forcing a failure. [ 1721.210885][ T3570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x60}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1721.233739][ T3570] CPU: 0 PID: 3570 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1721.245279][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1721.255316][ T3570] Call Trace: [ 1721.258598][ T3570] dump_stack+0x18e/0x1de [ 1721.262919][ T3570] should_fail+0x5d8/0x740 [ 1721.263929][ T3569] xt_CT: No such helper "syz0" [ 1721.267335][ T3570] __alloc_pages_nodemask+0x12e/0x740 [ 1721.267346][ T3570] blk_mq_alloc_rqs+0x252/0x660 [ 1721.267360][ T3570] ? blk_mq_alloc_rq_map+0x11a/0x1a0 18:16:10 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x4a000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1721.287534][ T3570] blk_mq_init_sched+0x235/0xb10 [ 1721.292464][ T3570] elevator_init_mq+0x2cd/0x3f0 [ 1721.297306][ T3570] __device_add_disk+0x87/0x1220 [ 1721.302234][ T3570] ? loop_add+0x340/0x710 [ 1721.306552][ T3570] loop_add+0x554/0x710 [ 1721.310701][ T3570] loop_control_ioctl+0x468/0x680 [ 1721.315714][ T3570] ? xor_init+0x60/0x60 [ 1721.319864][ T3570] do_vfs_ioctl+0x6fb/0x15b0 [ 1721.324451][ T3570] __x64_sys_ioctl+0xd4/0x110 [ 1721.329119][ T3570] do_syscall_64+0xcb/0x1e0 [ 1721.333613][ T3570] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1721.339487][ T3570] RIP: 0033:0x7f6a3b7a7ae9 [ 1721.343886][ T3570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.363562][ T3570] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1721.371963][ T3570] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1721.373778][ T3788] xt_CT: No such helper "syz0" 18:16:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200e019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 40) 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x68}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x71}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200e319000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x36a], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1721.379919][ T3570] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1721.379925][ T3570] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1721.379930][ T3570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1721.379935][ T3570] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x6c}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200002e000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x376], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1721.443505][ T3895] xt_l2tp: invalid flags combination: 0 [ 1721.480938][ T3925] FAULT_INJECTION: forcing a failure. 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x71}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x74}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1721.480938][ T3925] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1721.508196][ T3925] CPU: 0 PID: 3925 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1721.514620][ T4113] xt_l2tp: invalid flags combination: 0 [ 1721.519742][ T3925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1721.519745][ T3925] Call Trace: [ 1721.519762][ T3925] dump_stack+0x18e/0x1de [ 1721.519775][ T3925] should_fail+0x5d8/0x740 [ 1721.519789][ T3925] __alloc_pages_nodemask+0x12e/0x740 [ 1721.519800][ T3925] blk_mq_alloc_rqs+0x252/0x660 [ 1721.519812][ T3925] blk_mq_init_sched+0x235/0xb10 [ 1721.519825][ T3925] elevator_init_mq+0x2cd/0x3f0 [ 1721.519835][ T3925] __device_add_disk+0x87/0x1220 [ 1721.519850][ T3925] ? loop_add+0x340/0x710 [ 1721.576906][ T3925] loop_add+0x554/0x710 [ 1721.581073][ T3925] loop_control_ioctl+0x468/0x680 [ 1721.586256][ T3925] ? xor_init+0x60/0x60 [ 1721.591085][ T3925] do_vfs_ioctl+0x6fb/0x15b0 [ 1721.595648][ T3925] __x64_sys_ioctl+0xd4/0x110 [ 1721.600295][ T3925] do_syscall_64+0xcb/0x1e0 [ 1721.604786][ T3925] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1721.610651][ T3925] RIP: 0033:0x7f6a3b7a7ae9 [ 1721.615036][ T3925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.634620][ T3925] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:16:10 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x50010000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x73}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 41) 18:16:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000007000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x39a], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:10 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0x8b}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1721.643002][ T3925] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1721.650948][ T3925] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1721.658887][ T3925] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1721.666827][ T3925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1721.674767][ T3925] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x74}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3a4], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0xa0}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200002e000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1721.730827][ T4225] xt_l2tp: invalid flags combination: 0 [ 1721.773944][ T4226] FAULT_INJECTION: forcing a failure. [ 1721.773944][ T4226] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.792553][ T4218] xt_CT: No such helper "syz0" [ 1721.803311][ T4226] CPU: 0 PID: 4226 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 18:16:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0x8b}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1721.814844][ T4226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1721.819314][ T4338] xt_l2tp: invalid flags combination: 0 [ 1721.824886][ T4226] Call Trace: [ 1721.824903][ T4226] dump_stack+0x18e/0x1de [ 1721.824923][ T4226] should_fail+0x5d8/0x740 [ 1721.842405][ T4226] ? elevator_alloc+0x4b/0xc0 [ 1721.847079][ T4226] should_failslab+0x5/0x20 [ 1721.851574][ T4226] kmem_cache_alloc_trace+0x39/0x2b0 [ 1721.856858][ T4226] elevator_alloc+0x4b/0xc0 [ 1721.861354][ T4226] dd_init_queue+0x1f/0x330 [ 1721.865939][ T4226] blk_mq_init_sched+0x444/0xb10 [ 1721.870872][ T4226] elevator_init_mq+0x2cd/0x3f0 [ 1721.875774][ T4226] __device_add_disk+0x87/0x1220 [ 1721.880682][ T4226] ? loop_add+0x340/0x710 [ 1721.884979][ T4226] loop_add+0x554/0x710 [ 1721.889195][ T4226] loop_control_ioctl+0x468/0x680 [ 1721.894198][ T4226] ? xor_init+0x60/0x60 [ 1721.898329][ T4226] do_vfs_ioctl+0x6fb/0x15b0 [ 1721.902895][ T4226] __x64_sys_ioctl+0xd4/0x110 [ 1721.907718][ T4226] do_syscall_64+0xcb/0x1e0 [ 1721.912199][ T4226] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1721.918078][ T4226] RIP: 0033:0x7f6a3b7a7ae9 [ 1721.922461][ T4226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.942044][ T4226] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1721.950426][ T4226] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1721.958374][ T4226] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1721.966338][ T4226] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:11 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x50020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 42) 18:16:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3b8], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019020000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:11 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0xa7}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3c2], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1721.974289][ T4226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1721.982239][ T4226] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1721.992121][ T4226] "mq-deadline" elevator initialization failed, falling back to "none" 18:16:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3e6], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019030000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1722.056116][ T4557] xt_l2tp: invalid flags combination: 0 [ 1722.080181][ T4553] FAULT_INJECTION: forcing a failure. [ 1722.080181][ T4553] name failslab, interval 1, probability 0, space 0, times 0 18:16:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xba}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1722.105881][ T4553] CPU: 0 PID: 4553 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1722.117940][ T4553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1722.129548][ T4553] Call Trace: [ 1722.132830][ T4553] dump_stack+0x18e/0x1de [ 1722.132833][ T4546] xt_CT: No such helper "syz0" [ 1722.137151][ T4553] should_fail+0x5d8/0x740 [ 1722.137161][ T4553] ? elevator_alloc+0x4b/0xc0 [ 1722.137176][ T4553] ? dd_init_queue+0x69/0x330 [ 1722.155621][ T4553] should_failslab+0x5/0x20 [ 1722.160127][ T4553] kmem_cache_alloc_trace+0x39/0x2b0 [ 1722.165405][ T4553] ? memset+0x1f/0x40 [ 1722.169378][ T4553] dd_init_queue+0x69/0x330 [ 1722.174147][ T4553] blk_mq_init_sched+0x444/0xb10 [ 1722.179076][ T4553] elevator_init_mq+0x2cd/0x3f0 [ 1722.183917][ T4553] __device_add_disk+0x87/0x1220 [ 1722.189024][ T4553] ? loop_add+0x340/0x710 [ 1722.193343][ T4553] loop_add+0x554/0x710 [ 1722.197467][ T4553] loop_control_ioctl+0x468/0x680 [ 1722.202478][ T4553] ? xor_init+0x60/0x60 [ 1722.206600][ T4553] do_vfs_ioctl+0x6fb/0x15b0 [ 1722.211166][ T4553] __x64_sys_ioctl+0xd4/0x110 [ 1722.215812][ T4553] do_syscall_64+0xcb/0x1e0 [ 1722.220287][ T4553] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1722.226146][ T4553] RIP: 0033:0x7f6a3b7a7ae9 [ 1722.230546][ T4553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:16:11 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x52000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xc6}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1722.250124][ T4553] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1722.258509][ T4553] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1722.266458][ T4553] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1722.274410][ T4553] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1722.282358][ T4553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1722.290397][ T4553] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 43) 18:16:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019040000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3fa], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0xb8}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xde}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1722.304363][ T4553] "mq-deadline" elevator initialization failed, falling back to "none" 18:16:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3fc], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xf0}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019050000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xa03], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:11 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0xba}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1722.348373][ T4779] xt_l2tp: invalid flags combination: 0 [ 1722.380993][ T4783] FAULT_INJECTION: forcing a failure. [ 1722.380993][ T4783] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.420273][ T4783] CPU: 0 PID: 4783 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1722.431518][ T4772] xt_CT: No such helper "syz0" [ 1722.431901][ T4783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1722.431913][ T4783] Call Trace: [ 1722.450054][ T4783] dump_stack+0x18e/0x1de [ 1722.454380][ T4783] should_fail+0x5d8/0x740 [ 1722.458794][ T4783] ? device_create_vargs+0x7d/0x210 [ 1722.463981][ T4783] should_failslab+0x5/0x20 [ 1722.468586][ T4783] kmem_cache_alloc_trace+0x39/0x2b0 [ 1722.473857][ T4783] ? number+0xf64/0x11e0 [ 1722.478091][ T4783] device_create_vargs+0x7d/0x210 [ 1722.483098][ T4783] device_create+0x86/0xb0 [ 1722.487486][ T4783] ? vsnprintf+0x1a07/0x1aa0 [ 1722.492049][ T4783] bdi_register_va+0x89/0x5e0 [ 1722.496785][ T4783] bdi_register+0x80/0xa0 [ 1722.501088][ T4783] ? __device_add_disk+0x50a/0x1220 [ 1722.506258][ T4783] bdi_register_owner+0x56/0xf0 [ 1722.511079][ T4783] __device_add_disk+0x583/0x1220 [ 1722.516075][ T4783] loop_add+0x554/0x710 [ 1722.520207][ T4783] loop_control_ioctl+0x468/0x680 [ 1722.525213][ T4783] ? xor_init+0x60/0x60 [ 1722.529345][ T4783] do_vfs_ioctl+0x6fb/0x15b0 [ 1722.534002][ T4783] __x64_sys_ioctl+0xd4/0x110 [ 1722.538655][ T4783] do_syscall_64+0xcb/0x1e0 [ 1722.543158][ T4783] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1722.549036][ T4783] RIP: 0033:0x7f6a3b7a7ae9 [ 1722.553425][ T4783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1722.573016][ T4783] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1722.581399][ T4783] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1722.589341][ T4783] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1722.598001][ T4783] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1722.605949][ T4783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1722.613908][ T4783] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1722.623397][ T4783] ------------[ cut here ]------------ [ 1722.628958][ T4783] WARNING: CPU: 1 PID: 4783 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1722.638121][ T4783] Modules linked in: [ 1722.642011][ T4783] CPU: 1 PID: 4783 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1722.653777][ T4783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1722.663817][ T4783] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1722.669595][ T4783] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1722.689171][ T4783] RSP: 0018:ffff8881a1f4fce8 EFLAGS: 00010246 [ 1722.695214][ T4783] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1722.703167][ T4783] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1722.711113][ T4783] RBP: ffff8881ef099178 R08: ffffffff82147a3e R09: fffffbfff0bac77f [ 1722.719057][ T4783] R10: fffffbfff0bac77f R11: 0000000000000000 R12: dffffc0000000000 [ 1722.726999][ T4783] R13: 1ffff1103526f601 R14: 1ffff1103526f69d R15: ffff8881a937b000 [ 1722.735130][ T4783] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1722.744050][ T4783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1722.750614][ T4783] CR2: 000055555596db38 CR3: 00000001a8bc4000 CR4: 00000000003406e0 [ 1722.758566][ T4783] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1722.766532][ T4783] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1722.774475][ T4783] Call Trace: [ 1722.777748][ T4783] loop_add+0x554/0x710 [ 1722.781880][ T4783] loop_control_ioctl+0x468/0x680 [ 1722.786878][ T4783] ? xor_init+0x60/0x60 [ 1722.791007][ T4783] do_vfs_ioctl+0x6fb/0x15b0 [ 1722.795570][ T4783] __x64_sys_ioctl+0xd4/0x110 [ 1722.800234][ T4783] do_syscall_64+0xcb/0x1e0 [ 1722.804715][ T4783] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1722.810581][ T4783] RIP: 0033:0x7f6a3b7a7ae9 [ 1722.814979][ T4783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1722.834570][ T4783] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1722.842955][ T4783] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1722.850915][ T4783] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1722.858859][ T4783] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:12 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x52020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x0, 0xf2}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0xc6}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x1002], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019060000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 44) [ 1722.866811][ T4783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1722.874756][ T4783] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1722.882706][ T4783] ---[ end trace 8542d17d5d84a004 ]--- 18:16:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019070000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x1100], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0xde}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1722.962571][ T5105] FAULT_INJECTION: forcing a failure. [ 1722.962571][ T5105] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.994749][ T5105] CPU: 1 PID: 5105 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1723.006297][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1723.016341][ T5105] Call Trace: [ 1723.019627][ T5105] dump_stack+0x18e/0x1de [ 1723.023981][ T5105] should_fail+0x5d8/0x740 [ 1723.028391][ T5105] ? device_create_vargs+0x7d/0x210 [ 1723.033585][ T5105] should_failslab+0x5/0x20 [ 1723.037155][ T5107] xt_CT: No such helper "syz0" [ 1723.038104][ T5105] kmem_cache_alloc_trace+0x39/0x2b0 [ 1723.038112][ T5105] ? number+0xf64/0x11e0 [ 1723.038128][ T5105] device_create_vargs+0x7d/0x210 [ 1723.057344][ T5105] device_create+0x86/0xb0 18:16:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019080000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019090000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1723.061753][ T5105] ? vsnprintf+0x1a07/0x1aa0 [ 1723.066334][ T5105] bdi_register_va+0x89/0x5e0 [ 1723.071005][ T5105] bdi_register+0x80/0xa0 [ 1723.075330][ T5105] ? __device_add_disk+0x50a/0x1220 [ 1723.080522][ T5105] bdi_register_owner+0x56/0xf0 [ 1723.085366][ T5105] __device_add_disk+0x583/0x1220 [ 1723.090384][ T5105] loop_add+0x554/0x710 [ 1723.094547][ T5105] loop_control_ioctl+0x468/0x680 [ 1723.099564][ T5105] ? xor_init+0x60/0x60 [ 1723.103697][ T5105] do_vfs_ioctl+0x6fb/0x15b0 [ 1723.108281][ T5105] __x64_sys_ioctl+0xd4/0x110 [ 1723.112947][ T5105] do_syscall_64+0xcb/0x1e0 [ 1723.117865][ T5105] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1723.123731][ T5105] RIP: 0033:0x7f6a3b7a7ae9 [ 1723.128191][ T5105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1723.147771][ T5105] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1723.156152][ T5105] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1723.164096][ T5105] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1723.172043][ T5105] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1723.179983][ T5105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1723.187929][ T5105] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1723.200099][ T5105] ------------[ cut here ]------------ 18:16:12 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x56030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190a0000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:12 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0xe3}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x2, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x1602], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1723.205576][ T5105] WARNING: CPU: 1 PID: 5105 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1723.214573][ T5105] Modules linked in: [ 1723.218469][ T5105] CPU: 1 PID: 5105 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1723.229985][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1723.240047][ T5105] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1723.245844][ T5105] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1723.265437][ T5105] RSP: 0018:ffff8881a16f7ce8 EFLAGS: 00010246 [ 1723.271521][ T5105] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1723.279480][ T5105] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1723.287442][ T5105] RBP: ffff8881ef7eb3b8 R08: ffffffff82147a3e R09: fffffbfff0bac77f [ 1723.295403][ T5105] R10: fffffbfff0bac77f R11: 0000000000000000 R12: dffffc0000000000 [ 1723.303490][ T5105] R13: 1ffff11035557e01 R14: 1ffff11035557e9d R15: ffff8881aaabf000 [ 1723.311452][ T5105] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1723.320371][ T5105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1723.326942][ T5105] CR2: 000055555596db38 CR3: 00000001ada6d000 CR4: 00000000003406e0 [ 1723.334898][ T5105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1723.339161][ T5534] xt_CT: No such helper "syz0" [ 1723.342852][ T5105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1723.342855][ T5105] Call Trace: [ 1723.342875][ T5105] loop_add+0x554/0x710 [ 1723.342889][ T5105] loop_control_ioctl+0x468/0x680 [ 1723.367981][ T5105] ? xor_init+0x60/0x60 [ 1723.372130][ T5105] do_vfs_ioctl+0x6fb/0x15b0 [ 1723.376716][ T5105] __x64_sys_ioctl+0xd4/0x110 [ 1723.381381][ T5105] do_syscall_64+0xcb/0x1e0 [ 1723.385955][ T5105] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1723.391817][ T5105] RIP: 0033:0x7f6a3b7a7ae9 [ 1723.396201][ T5105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1723.415773][ T5105] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1723.424151][ T5105] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1723.432089][ T5105] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1723.440030][ T5105] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1723.447971][ T5105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1723.455915][ T5105] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 45) 18:16:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x2203], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0xf0}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x3, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190b0000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:12 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x5a020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1723.463952][ T5105] ---[ end trace 8542d17d5d84a005 ]--- 18:16:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190c0000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190d0000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:12 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {0xf2}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1723.491532][ T1926] udevd[1926]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1723.507665][ T5668] l2tp_mt_check6: 63 callbacks suppressed [ 1723.507668][ T5668] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1723.520511][ T5667] xt_l2tp: missing protocol rule (udp|l2tpip) 18:16:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x4, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x2802], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190e0000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1723.537016][ T5638] FAULT_INJECTION: forcing a failure. [ 1723.537016][ T5638] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.561760][ T5757] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1723.572372][ T5638] CPU: 1 PID: 5638 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1723.583910][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1723.594214][ T5638] Call Trace: [ 1723.597504][ T5638] dump_stack+0x18e/0x1de [ 1723.601827][ T5638] should_fail+0x5d8/0x740 [ 1723.606237][ T5638] ? device_add+0xcb/0x1820 [ 1723.610727][ T5638] should_failslab+0x5/0x20 [ 1723.615243][ T5638] kmem_cache_alloc_trace+0x39/0x2b0 [ 1723.620513][ T5638] device_add+0xcb/0x1820 [ 1723.624828][ T5638] ? kobject_set_name_vargs+0x5d/0x110 [ 1723.630279][ T5638] ? kstrdup_const+0x6c/0x90 [ 1723.634871][ T5638] ? memcpy+0x38/0x50 [ 1723.638844][ T5638] device_create_vargs+0x1b8/0x210 [ 1723.643968][ T5638] device_create+0x86/0xb0 [ 1723.648373][ T5638] ? vsnprintf+0x1a07/0x1aa0 [ 1723.652949][ T5638] bdi_register_va+0x89/0x5e0 [ 1723.657615][ T5638] bdi_register+0x80/0xa0 [ 1723.661336][ T5740] xt_CT: No such helper "syz0" [ 1723.661926][ T5638] ? __device_add_disk+0x50a/0x1220 [ 1723.661942][ T5638] bdi_register_owner+0x56/0xf0 [ 1723.676689][ T5638] __device_add_disk+0x583/0x1220 [ 1723.681709][ T5638] loop_add+0x554/0x710 [ 1723.685861][ T5638] loop_control_ioctl+0x468/0x680 [ 1723.690868][ T5638] ? xor_init+0x60/0x60 [ 1723.695006][ T5638] do_vfs_ioctl+0x6fb/0x15b0 [ 1723.699581][ T5638] __x64_sys_ioctl+0xd4/0x110 [ 1723.704247][ T5638] do_syscall_64+0xcb/0x1e0 [ 1723.708894][ T5638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1723.714757][ T5638] RIP: 0033:0x7f6a3b7a7ae9 [ 1723.719195][ T5638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1723.738771][ T5638] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1723.747311][ T5638] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1723.755253][ T5638] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1723.763303][ T5638] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1723.771254][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1723.779645][ T5638] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1723.789354][ T5638] ------------[ cut here ]------------ [ 1723.794890][ T5638] WARNING: CPU: 0 PID: 5638 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1723.804244][ T5638] Modules linked in: [ 1723.808124][ T5638] CPU: 0 PID: 5638 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1723.819748][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1723.829793][ T5638] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1723.835569][ T5638] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1723.855146][ T5638] RSP: 0018:ffff8881a16f7ce8 EFLAGS: 00010246 [ 1723.861270][ T5638] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1723.869215][ T5638] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1723.877156][ T5638] RBP: ffff8881ef7e8058 R08: ffffffff82147a3e R09: 0000000000000010 [ 1723.885125][ T5638] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1723.893074][ T5638] R13: 1ffff1103e0d6e01 R14: 1ffff1103e0d6e9d R15: ffff8881f06b7000 [ 1723.901023][ T5638] FS: 00007f6a3951e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1723.909942][ T5638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1723.916495][ T5638] CR2: 00007ffd65105ff8 CR3: 0000000195a4f000 CR4: 00000000003406f0 [ 1723.924548][ T5638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1723.932491][ T5638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1723.940866][ T5638] Call Trace: [ 1723.944135][ T5638] loop_add+0x554/0x710 [ 1723.948278][ T5638] loop_control_ioctl+0x468/0x680 [ 1723.953275][ T5638] ? xor_init+0x60/0x60 [ 1723.957402][ T5638] do_vfs_ioctl+0x6fb/0x15b0 [ 1723.961981][ T5638] __x64_sys_ioctl+0xd4/0x110 [ 1723.966802][ T5638] do_syscall_64+0xcb/0x1e0 [ 1723.971278][ T5638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1723.977137][ T5638] RIP: 0033:0x7f6a3b7a7ae9 [ 1723.981523][ T5638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1724.001098][ T5638] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1724.009491][ T5638] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1724.017433][ T5638] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1724.025393][ T5638] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1724.033337][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:16:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 46) 18:16:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x5, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019100000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x2e03], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:13 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:13 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x5c000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1724.041280][ T5638] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1724.049237][ T5638] ---[ end trace 8542d17d5d84a006 ]--- 18:16:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x6, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019110000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:13 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x2}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3003], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1724.090709][ T6073] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1724.093954][ T6070] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1724.121854][ T6074] FAULT_INJECTION: forcing a failure. [ 1724.121854][ T6074] name failslab, interval 1, probability 0, space 0, times 0 18:16:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019120000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x7, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1724.156593][ T6074] CPU: 1 PID: 6074 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1724.163743][ T6181] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1724.168139][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1724.168142][ T6074] Call Trace: [ 1724.168159][ T6074] dump_stack+0x18e/0x1de [ 1724.168176][ T6074] should_fail+0x5d8/0x740 [ 1724.196237][ T6074] ? __kernfs_new_node+0x47/0x630 [ 1724.201262][ T6074] should_failslab+0x5/0x20 [ 1724.205760][ T6074] __kmalloc_track_caller+0x5d/0x2e0 [ 1724.209453][ T6185] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1724.211038][ T6074] kstrdup_const+0x51/0x90 [ 1724.211047][ T6074] __kernfs_new_node+0x47/0x630 [ 1724.211060][ T6074] ? bdi_register+0x80/0xa0 [ 1724.228590][ T6186] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1724.230833][ T6074] ? bdi_register_owner+0x56/0xf0 [ 1724.230843][ T6074] ? loop_add+0x554/0x710 [ 1724.230857][ T6074] ? loop_control_ioctl+0x468/0x680 [ 1724.251382][ T6074] ? do_vfs_ioctl+0x6fb/0x15b0 [ 1724.256140][ T6074] ? __x64_sys_ioctl+0xd4/0x110 [ 1724.260975][ T6074] ? do_syscall_64+0xcb/0x1e0 [ 1724.265637][ T6074] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1724.271690][ T6074] kernfs_create_dir_ns+0x90/0x220 [ 1724.276792][ T6074] sysfs_create_dir_ns+0x14e/0x2f0 [ 1724.281891][ T6074] kobject_add_internal+0x595/0xbd0 [ 1724.287058][ T6074] kobject_add+0x100/0x1a0 [ 1724.291448][ T6074] ? get_device_parent+0x2cd/0x430 [ 1724.296529][ T6074] device_add+0x417/0x1820 [ 1724.300913][ T6074] device_create_vargs+0x1b8/0x210 [ 1724.305988][ T6074] device_create+0x86/0xb0 [ 1724.310372][ T6074] ? vsnprintf+0x1a07/0x1aa0 [ 1724.314928][ T6074] bdi_register_va+0x89/0x5e0 [ 1724.319570][ T6074] bdi_register+0x80/0xa0 [ 1724.323866][ T6074] ? __device_add_disk+0x50a/0x1220 [ 1724.329032][ T6074] bdi_register_owner+0x56/0xf0 [ 1724.333848][ T6074] __device_add_disk+0x583/0x1220 [ 1724.338848][ T6074] loop_add+0x554/0x710 [ 1724.342973][ T6074] loop_control_ioctl+0x468/0x680 [ 1724.347962][ T6074] ? xor_init+0x60/0x60 [ 1724.352088][ T6074] do_vfs_ioctl+0x6fb/0x15b0 [ 1724.356649][ T6074] __x64_sys_ioctl+0xd4/0x110 [ 1724.361292][ T6074] do_syscall_64+0xcb/0x1e0 [ 1724.365762][ T6074] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1724.371621][ T6074] RIP: 0033:0x7f6a3b7a7ae9 [ 1724.376003][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1724.395575][ T6074] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1724.403955][ T6074] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1724.411899][ T6074] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1724.419840][ T6074] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1724.427782][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1724.435729][ T6074] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1724.445197][ T6074] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 1724.452928][ T6074] ------------[ cut here ]------------ [ 1724.458395][ T6074] WARNING: CPU: 0 PID: 6074 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1724.467387][ T6074] Modules linked in: [ 1724.471260][ T6074] CPU: 0 PID: 6074 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1724.482772][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1724.492808][ T6074] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1724.498583][ T6074] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1724.518157][ T6074] RSP: 0018:ffff8881e03ffce8 EFLAGS: 00010246 [ 1724.524191][ T6074] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1724.532145][ T6074] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1724.540087][ T6074] RBP: ffff8881ef09a298 R08: ffffffff82147a3e R09: 0000000000000010 [ 1724.548056][ T6074] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1724.556011][ T6074] R13: 1ffff1103e0a6601 R14: 1ffff1103e0a669d R15: ffff8881f0533000 [ 1724.563956][ T6074] FS: 00007f6a3951e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1724.572853][ T6074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1724.579408][ T6074] CR2: 000055555596db38 CR3: 00000001ede4c000 CR4: 00000000003406f0 [ 1724.587373][ T6074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1724.595325][ T6074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1724.603273][ T6074] Call Trace: [ 1724.606562][ T6074] loop_add+0x554/0x710 [ 1724.610688][ T6074] loop_control_ioctl+0x468/0x680 [ 1724.615680][ T6074] ? xor_init+0x60/0x60 [ 1724.619807][ T6074] do_vfs_ioctl+0x6fb/0x15b0 [ 1724.624370][ T6074] __x64_sys_ioctl+0xd4/0x110 [ 1724.629017][ T6074] do_syscall_64+0xcb/0x1e0 [ 1724.633491][ T6074] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1724.639356][ T6074] RIP: 0033:0x7f6a3b7a7ae9 [ 1724.643744][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1724.663315][ T6074] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1724.671693][ T6074] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1724.679633][ T6074] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1724.687586][ T6074] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1724.695528][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:16:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 47) 18:16:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019160000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x8, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3600], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:13 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x3}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:13 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x60010000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1724.703468][ T6074] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1724.711412][ T6074] ---[ end trace 8542d17d5d84a007 ]--- [ 1724.743618][ T1926] udevd[1926]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 18:16:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019220000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:14 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x8}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3801], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1724.757373][ T6299] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1724.757868][ T6301] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1724.780850][ T6295] FAULT_INJECTION: forcing a failure. [ 1724.780850][ T6295] name failslab, interval 1, probability 0, space 0, times 0 18:16:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x9, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3a01], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xa, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1724.816083][ T6295] CPU: 1 PID: 6295 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1724.827627][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1724.837667][ T6295] Call Trace: [ 1724.840955][ T6295] dump_stack+0x18e/0x1de [ 1724.845283][ T6295] should_fail+0x5d8/0x740 [ 1724.850995][ T6295] ? __kernfs_new_node+0x8b/0x630 [ 1724.856013][ T6295] should_failslab+0x5/0x20 [ 1724.860509][ T6295] kmem_cache_alloc+0x36/0x290 [ 1724.865261][ T6295] ? memcpy+0x38/0x50 [ 1724.869259][ T6295] __kernfs_new_node+0x8b/0x630 [ 1724.874096][ T6295] ? bdi_register+0x80/0xa0 [ 1724.878594][ T6295] ? bdi_register_owner+0x56/0xf0 [ 1724.883605][ T6295] ? loop_add+0x554/0x710 [ 1724.888097][ T6295] ? loop_control_ioctl+0x468/0x680 [ 1724.893294][ T6295] ? do_vfs_ioctl+0x6fb/0x15b0 [ 1724.898072][ T6295] ? __x64_sys_ioctl+0xd4/0x110 [ 1724.902940][ T6295] ? do_syscall_64+0xcb/0x1e0 [ 1724.907621][ T6295] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1724.913682][ T6295] kernfs_create_dir_ns+0x90/0x220 [ 1724.918777][ T6295] sysfs_create_dir_ns+0x14e/0x2f0 [ 1724.923863][ T6295] kobject_add_internal+0x595/0xbd0 [ 1724.929030][ T6295] kobject_add+0x100/0x1a0 [ 1724.933416][ T6295] ? get_device_parent+0x2cd/0x430 [ 1724.938607][ T6295] device_add+0x417/0x1820 [ 1724.942994][ T6295] device_create_vargs+0x1b8/0x210 [ 1724.948073][ T6295] device_create+0x86/0xb0 [ 1724.952454][ T6295] ? vsnprintf+0x1a07/0x1aa0 [ 1724.957012][ T6295] bdi_register_va+0x89/0x5e0 [ 1724.961656][ T6295] bdi_register+0x80/0xa0 [ 1724.965963][ T6295] ? __device_add_disk+0x50a/0x1220 [ 1724.971140][ T6295] bdi_register_owner+0x56/0xf0 [ 1724.975959][ T6295] __device_add_disk+0x583/0x1220 [ 1724.980997][ T6295] loop_add+0x554/0x710 [ 1724.985120][ T6295] loop_control_ioctl+0x468/0x680 [ 1724.990201][ T6295] ? xor_init+0x60/0x60 [ 1724.994329][ T6295] do_vfs_ioctl+0x6fb/0x15b0 [ 1724.998893][ T6295] __x64_sys_ioctl+0xd4/0x110 [ 1725.003541][ T6295] do_syscall_64+0xcb/0x1e0 [ 1725.008011][ T6295] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1725.013870][ T6295] RIP: 0033:0x7f6a3b7a7ae9 [ 1725.018254][ T6295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1725.037827][ T6295] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1725.046248][ T6295] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1725.054215][ T6295] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1725.062156][ T6295] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1725.070104][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1725.078044][ T6295] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1725.086668][ T6295] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 1725.094634][ T6295] ------------[ cut here ]------------ [ 1725.100093][ T6295] WARNING: CPU: 1 PID: 6295 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1725.109080][ T6295] Modules linked in: [ 1725.112950][ T6295] CPU: 1 PID: 6295 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1725.124460][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.134498][ T6295] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1725.140281][ T6295] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1725.159858][ T6295] RSP: 0018:ffff8881f0f1fce8 EFLAGS: 00010246 [ 1725.165994][ T6295] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1725.173946][ T6295] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1725.182695][ T6295] RBP: ffff8881ef7ee718 R08: ffffffff82147a3e R09: 0000000000000010 [ 1725.190641][ T6295] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1725.198592][ T6295] R13: 1ffff1103ccfc001 R14: 1ffff1103ccfc09d R15: ffff8881e67e0000 [ 1725.206545][ T6295] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1725.215439][ T6295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1725.221993][ T6295] CR2: 0000000000000000 CR3: 000000019fe1f000 CR4: 00000000003406e0 [ 1725.229950][ T6295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1725.237905][ T6295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1725.245848][ T6295] Call Trace: [ 1725.249118][ T6295] loop_add+0x554/0x710 [ 1725.253251][ T6295] loop_control_ioctl+0x468/0x680 [ 1725.258259][ T6295] ? xor_init+0x60/0x60 [ 1725.262388][ T6295] do_vfs_ioctl+0x6fb/0x15b0 [ 1725.266949][ T6295] __x64_sys_ioctl+0xd4/0x110 [ 1725.271689][ T6295] do_syscall_64+0xcb/0x1e0 [ 1725.276161][ T6295] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1725.282021][ T6295] RIP: 0033:0x7f6a3b7a7ae9 [ 1725.286413][ T6295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1725.306095][ T6295] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:16:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 48) 18:16:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x4000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xb, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019250000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:14 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x36}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x68020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000192e0000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1725.314486][ T6295] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1725.322429][ T6295] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1725.330371][ T6295] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1725.338329][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1725.346282][ T6295] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1725.354578][ T6295] ---[ end trace 8542d17d5d84a008 ]--- 18:16:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xc, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x4200], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xd, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x4801], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xe, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1725.410460][ T6520] FAULT_INJECTION: forcing a failure. [ 1725.410460][ T6520] name failslab, interval 1, probability 0, space 0, times 0 [ 1725.423099][ T6520] CPU: 1 PID: 6520 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1725.434620][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.444751][ T6520] Call Trace: [ 1725.448032][ T6520] dump_stack+0x18e/0x1de [ 1725.452356][ T6520] should_fail+0x5d8/0x740 [ 1725.456781][ T6520] ? device_add+0x417/0x1820 [ 1725.461366][ T6520] ? radix_tree_node_alloc+0x18c/0x370 [ 1725.466815][ T6520] should_failslab+0x5/0x20 [ 1725.471308][ T6520] kmem_cache_alloc+0x36/0x290 [ 1725.476848][ T6520] ? __x64_sys_ioctl+0xd4/0x110 [ 1725.481863][ T6520] ? do_syscall_64+0xcb/0x1e0 [ 1725.486529][ T6520] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1725.492586][ T6520] radix_tree_node_alloc+0x18c/0x370 [ 1725.497862][ T6520] idr_get_free+0x2aa/0x900 [ 1725.502443][ T6520] idr_alloc_cyclic+0x170/0x510 [ 1725.507284][ T6520] __kernfs_new_node+0xdd/0x630 [ 1725.512134][ T6520] ? bdi_register+0x80/0xa0 [ 1725.516620][ T6520] ? loop_control_ioctl+0x468/0x680 [ 1725.521826][ T6520] ? __x64_sys_ioctl+0xd4/0x110 [ 1725.526656][ T6520] ? do_syscall_64+0xcb/0x1e0 [ 1725.531313][ T6520] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1725.537367][ T6520] kernfs_create_dir_ns+0x90/0x220 [ 1725.542499][ T6520] sysfs_create_dir_ns+0x14e/0x2f0 [ 1725.547603][ T6520] kobject_add_internal+0x595/0xbd0 [ 1725.552832][ T6520] kobject_add+0x100/0x1a0 [ 1725.557263][ T6520] ? get_device_parent+0x2cd/0x430 [ 1725.562359][ T6520] device_add+0x417/0x1820 [ 1725.566769][ T6520] device_create_vargs+0x1b8/0x210 [ 1725.571869][ T6520] device_create+0x86/0xb0 [ 1725.576352][ T6520] ? vsnprintf+0x1a07/0x1aa0 [ 1725.580921][ T6520] bdi_register_va+0x89/0x5e0 [ 1725.585568][ T6520] bdi_register+0x80/0xa0 [ 1725.589867][ T6520] ? __device_add_disk+0x50a/0x1220 [ 1725.595032][ T6520] bdi_register_owner+0x56/0xf0 [ 1725.599852][ T6520] __device_add_disk+0x583/0x1220 [ 1725.604851][ T6520] loop_add+0x554/0x710 [ 1725.608974][ T6520] loop_control_ioctl+0x468/0x680 [ 1725.613971][ T6520] ? xor_init+0x60/0x60 [ 1725.618112][ T6520] do_vfs_ioctl+0x6fb/0x15b0 [ 1725.622673][ T6520] __x64_sys_ioctl+0xd4/0x110 [ 1725.627321][ T6520] do_syscall_64+0xcb/0x1e0 [ 1725.631796][ T6520] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1725.637659][ T6520] RIP: 0033:0x7f6a3b7a7ae9 [ 1725.642048][ T6520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:16:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 49) 18:16:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x4a00], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x10, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019320000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:14 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x42}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:14 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x69030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1725.661623][ T6520] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1725.670003][ T6520] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1725.677949][ T6520] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1725.686066][ T6520] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1725.694007][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1725.701952][ T6520] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x11, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x5001], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019480000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x12, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:15 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x4a}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1725.750113][ T6750] l2tp_mt_check: 10 callbacks suppressed [ 1725.750124][ T6750] xt_l2tp: invalid flags combination: 0 [ 1725.782195][ T6749] FAULT_INJECTION: forcing a failure. [ 1725.782195][ T6749] name failslab, interval 1, probability 0, space 0, times 0 18:16:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000194c0000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1725.810915][ T6749] CPU: 1 PID: 6749 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1725.822463][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.832509][ T6749] Call Trace: [ 1725.835797][ T6749] dump_stack+0x18e/0x1de [ 1725.840122][ T6749] should_fail+0x5d8/0x740 [ 1725.840440][ T6868] xt_l2tp: invalid flags combination: 0 [ 1725.844535][ T6749] ? __kernfs_new_node+0x8b/0x630 [ 1725.844545][ T6749] should_failslab+0x5/0x20 [ 1725.844554][ T6749] kmem_cache_alloc+0x36/0x290 [ 1725.844565][ T6749] __kernfs_new_node+0x8b/0x630 [ 1725.844574][ T6749] ? mutex_unlock+0x19/0x40 [ 1725.844590][ T6749] ? kernfs_add_one+0x49e/0x5c0 [ 1725.871321][ T6755] xt_ct_set_helper: 3 callbacks suppressed [ 1725.871332][ T6755] xt_CT: No such helper "syz0" [ 1725.873815][ T6749] ? __kernfs_create_file+0x1f1/0x260 [ 1725.873824][ T6749] kernfs_new_node+0x95/0x160 [ 1725.873838][ T6749] kernfs_create_link+0x9c/0x1f0 [ 1725.904108][ T6749] sysfs_do_create_link_sd+0x85/0x100 [ 1725.909472][ T6749] device_add+0x6dc/0x1820 [ 1725.913894][ T6749] device_create_vargs+0x1b8/0x210 [ 1725.918995][ T6749] device_create+0x86/0xb0 [ 1725.923396][ T6749] ? vsnprintf+0x1a07/0x1aa0 [ 1725.927981][ T6749] bdi_register_va+0x89/0x5e0 [ 1725.932735][ T6749] bdi_register+0x80/0xa0 [ 1725.937056][ T6749] ? __device_add_disk+0x50a/0x1220 [ 1725.942237][ T6749] bdi_register_owner+0x56/0xf0 [ 1725.947208][ T6749] __device_add_disk+0x583/0x1220 [ 1725.952248][ T6749] loop_add+0x554/0x710 [ 1725.956372][ T6749] loop_control_ioctl+0x468/0x680 [ 1725.961365][ T6749] ? xor_init+0x60/0x60 [ 1725.965492][ T6749] do_vfs_ioctl+0x6fb/0x15b0 [ 1725.970054][ T6749] __x64_sys_ioctl+0xd4/0x110 [ 1725.974810][ T6749] do_syscall_64+0xcb/0x1e0 [ 1725.979301][ T6749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1725.985172][ T6749] RIP: 0033:0x7f6a3b7a7ae9 [ 1725.989565][ T6749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.010245][ T6749] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1726.018629][ T6749] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1726.026569][ T6749] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1726.034520][ T6749] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.042548][ T6749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.050495][ T6749] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1726.060007][ T6749] ------------[ cut here ]------------ [ 1726.065471][ T6749] WARNING: CPU: 0 PID: 6749 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1726.074515][ T6749] Modules linked in: [ 1726.078389][ T6749] CPU: 0 PID: 6749 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1726.089899][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.100054][ T6749] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1726.105849][ T6749] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1726.125532][ T6749] RSP: 0018:ffff8881ec1cfce8 EFLAGS: 00010246 [ 1726.131571][ T6749] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1726.139523][ T6749] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1726.147500][ T6749] RBP: ffff8881ef7ede88 R08: ffffffff82147a3e R09: 0000000000000010 [ 1726.155456][ T6749] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1726.163516][ T6749] R13: 1ffff1103c6a7401 R14: 1ffff1103c6a749d R15: ffff8881e353a000 [ 1726.171517][ T6749] FS: 00007f6a3951e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1726.180418][ T6749] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1726.187019][ T6749] CR2: 0000555555bf0b38 CR3: 00000001ad861000 CR4: 00000000003406f0 [ 1726.195035][ T6749] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1726.202981][ T6749] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1726.210922][ T6749] Call Trace: [ 1726.214219][ T6749] loop_add+0x554/0x710 [ 1726.218358][ T6749] loop_control_ioctl+0x468/0x680 [ 1726.223362][ T6749] ? xor_init+0x60/0x60 [ 1726.227493][ T6749] do_vfs_ioctl+0x6fb/0x15b0 [ 1726.232075][ T6749] __x64_sys_ioctl+0xd4/0x110 [ 1726.236727][ T6749] do_syscall_64+0xcb/0x1e0 [ 1726.241214][ T6749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1726.247085][ T6749] RIP: 0033:0x7f6a3b7a7ae9 [ 1726.251481][ T6749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.271078][ T6749] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1726.279475][ T6749] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1726.287536][ T6749] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1726.295494][ T6749] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.303456][ T6749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:16:15 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 50) 18:16:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x25, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x5002], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:15 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x52}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:15 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x6a030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019600000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x5200], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1726.311403][ T6749] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1726.319361][ T6749] ---[ end trace 8542d17d5d84a009 ]--- 18:16:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x36, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019680000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000196c0000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x5202], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:15 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x56}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1726.369729][ T7080] xt_l2tp: invalid flags combination: 0 [ 1726.431704][ T7082] FAULT_INJECTION: forcing a failure. [ 1726.431704][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.433661][ T7081] xt_CT: No such helper "syz0" [ 1726.461678][ T7082] CPU: 1 PID: 7082 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1726.465420][ T7197] xt_l2tp: invalid flags combination: 0 [ 1726.473249][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.473253][ T7082] Call Trace: [ 1726.473270][ T7082] dump_stack+0x18e/0x1de [ 1726.473283][ T7082] should_fail+0x5d8/0x740 [ 1726.473295][ T7082] ? __kernfs_new_node+0x47/0x630 [ 1726.473305][ T7082] should_failslab+0x5/0x20 [ 1726.473315][ T7082] __kmalloc_track_caller+0x5d/0x2e0 [ 1726.473332][ T7082] kstrdup_const+0x51/0x90 [ 1726.520291][ T7082] __kernfs_new_node+0x47/0x630 [ 1726.525113][ T7082] ? mutex_lock+0x6c/0xc0 [ 1726.529416][ T7082] ? kernfs_activate+0x3fc/0x420 [ 1726.534332][ T7082] kernfs_new_node+0x95/0x160 [ 1726.538980][ T7082] kernfs_create_link+0x9c/0x1f0 [ 1726.543891][ T7082] sysfs_do_create_link_sd+0x85/0x100 [ 1726.549232][ T7082] device_add+0x93a/0x1820 [ 1726.553722][ T7082] device_create_vargs+0x1b8/0x210 [ 1726.558800][ T7082] device_create+0x86/0xb0 [ 1726.563189][ T7082] ? vsnprintf+0x1a07/0x1aa0 [ 1726.567750][ T7082] bdi_register_va+0x89/0x5e0 [ 1726.572468][ T7082] bdi_register+0x80/0xa0 [ 1726.576782][ T7082] ? __device_add_disk+0x50a/0x1220 [ 1726.582055][ T7082] bdi_register_owner+0x56/0xf0 [ 1726.587047][ T7082] __device_add_disk+0x583/0x1220 [ 1726.592056][ T7082] loop_add+0x554/0x710 [ 1726.596194][ T7082] loop_control_ioctl+0x468/0x680 [ 1726.601206][ T7082] ? xor_init+0x60/0x60 [ 1726.605340][ T7082] do_vfs_ioctl+0x6fb/0x15b0 [ 1726.609905][ T7082] __x64_sys_ioctl+0xd4/0x110 [ 1726.614639][ T7082] do_syscall_64+0xcb/0x1e0 [ 1726.619112][ T7082] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1726.625029][ T7082] RIP: 0033:0x7f6a3b7a7ae9 [ 1726.629414][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.648987][ T7082] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1726.657370][ T7082] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1726.665313][ T7082] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1726.673257][ T7082] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.681200][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.689329][ T7082] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1726.699145][ T7082] ------------[ cut here ]------------ [ 1726.704620][ T7082] WARNING: CPU: 0 PID: 7082 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1726.713617][ T7082] Modules linked in: [ 1726.717518][ T7082] CPU: 0 PID: 7082 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1726.729018][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.739053][ T7082] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1726.744828][ T7082] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1726.764407][ T7082] RSP: 0018:ffff8881a6bdfce8 EFLAGS: 00010246 [ 1726.770508][ T7082] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1726.778462][ T7082] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1726.786437][ T7082] RBP: ffff8881ef09b3b8 R08: ffffffff82147a3e R09: 0000000000000010 [ 1726.794391][ T7082] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1726.802878][ T7082] R13: 1ffff1103c860e01 R14: 1ffff1103c860e9d R15: ffff8881e4307000 [ 1726.810838][ T7082] FS: 00007f6a3951e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1726.819749][ T7082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1726.826304][ T7082] CR2: 00007f7b49407058 CR3: 00000001ad861000 CR4: 00000000003406f0 [ 1726.834258][ T7082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1726.842223][ T7082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1726.850177][ T7082] Call Trace: [ 1726.853451][ T7082] loop_add+0x554/0x710 [ 1726.857583][ T7082] loop_control_ioctl+0x468/0x680 [ 1726.862580][ T7082] ? xor_init+0x60/0x60 [ 1726.866713][ T7082] do_vfs_ioctl+0x6fb/0x15b0 [ 1726.871296][ T7082] __x64_sys_ioctl+0xd4/0x110 [ 1726.875947][ T7082] do_syscall_64+0xcb/0x1e0 [ 1726.880427][ T7082] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1726.886290][ T7082] RIP: 0033:0x7f6a3b7a7ae9 [ 1726.890675][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.910496][ T7082] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1726.918878][ T7082] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 18:16:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 51) 18:16:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x42, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x5603], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019740000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:16 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x5c}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x6affffff], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x48, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1726.926823][ T7082] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1726.934896][ T7082] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.942850][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.950914][ T7082] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1726.958864][ T7082] ---[ end trace 8542d17d5d84a00a ]--- 18:16:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000197a0000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x4a, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x5a02], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x71}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019c90000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1727.017052][ T7310] xt_l2tp: invalid flags combination: 0 [ 1727.036646][ T7309] FAULT_INJECTION: forcing a failure. [ 1727.036646][ T7309] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.077540][ T7309] CPU: 0 PID: 7309 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1727.087742][ T7423] xt_l2tp: invalid flags combination: 0 [ 1727.089081][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1727.089085][ T7309] Call Trace: [ 1727.089101][ T7309] dump_stack+0x18e/0x1de [ 1727.089114][ T7309] should_fail+0x5d8/0x740 [ 1727.089126][ T7309] ? __kernfs_new_node+0x8b/0x630 [ 1727.089136][ T7309] should_failslab+0x5/0x20 [ 1727.089146][ T7309] kmem_cache_alloc+0x36/0x290 [ 1727.089153][ T7309] ? memcpy+0x38/0x50 [ 1727.089162][ T7309] __kernfs_new_node+0x8b/0x630 [ 1727.089179][ T7309] ? mutex_lock+0x6c/0xc0 [ 1727.104896][ T7308] xt_CT: No such helper "syz0" [ 1727.108025][ T7309] ? kernfs_activate+0x3fc/0x420 [ 1727.108044][ T7309] kernfs_new_node+0x95/0x160 [ 1727.158486][ T7309] kernfs_create_link+0x9c/0x1f0 [ 1727.163405][ T7309] sysfs_do_create_link_sd+0x85/0x100 [ 1727.168744][ T7309] device_add+0x93a/0x1820 [ 1727.173135][ T7309] device_create_vargs+0x1b8/0x210 [ 1727.178214][ T7309] device_create+0x86/0xb0 [ 1727.182721][ T7309] ? vsnprintf+0x1a07/0x1aa0 [ 1727.187314][ T7309] bdi_register_va+0x89/0x5e0 [ 1727.191970][ T7309] bdi_register+0x80/0xa0 [ 1727.196333][ T7309] ? __device_add_disk+0x50a/0x1220 [ 1727.201532][ T7309] bdi_register_owner+0x56/0xf0 [ 1727.206362][ T7309] __device_add_disk+0x583/0x1220 [ 1727.211365][ T7309] loop_add+0x554/0x710 [ 1727.215494][ T7309] loop_control_ioctl+0x468/0x680 [ 1727.220500][ T7309] ? xor_init+0x60/0x60 [ 1727.224778][ T7309] do_vfs_ioctl+0x6fb/0x15b0 [ 1727.229344][ T7309] __x64_sys_ioctl+0xd4/0x110 [ 1727.233990][ T7309] do_syscall_64+0xcb/0x1e0 [ 1727.238469][ T7309] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1727.244332][ T7309] RIP: 0033:0x7f6a3b7a7ae9 [ 1727.248717][ T7309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.268304][ T7309] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1727.276703][ T7309] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1727.284654][ T7309] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1727.292612][ T7309] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.300568][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.308513][ T7309] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1727.318280][ T7309] ------------[ cut here ]------------ [ 1727.323770][ T7309] WARNING: CPU: 1 PID: 7309 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1727.332758][ T7309] Modules linked in: [ 1727.336636][ T7309] CPU: 1 PID: 7309 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1727.348317][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1727.358369][ T7309] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1727.364157][ T7309] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1727.383904][ T7309] RSP: 0018:ffff8881a0817ce8 EFLAGS: 00010246 [ 1727.389981][ T7309] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1727.400988][ T7309] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1727.408946][ T7309] RBP: ffff8881ef09e718 R08: ffffffff82147a3e R09: 0000000000000010 [ 1727.417013][ T7309] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1727.424974][ T7309] R13: 1ffff1103cdf5e01 R14: 1ffff1103cdf5e9d R15: ffff8881e6faf000 [ 1727.432941][ T7309] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1727.442111][ T7309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1727.448675][ T7309] CR2: 00007ffc7457dc98 CR3: 00000001a88d3000 CR4: 00000000003406e0 [ 1727.456743][ T7309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1727.464721][ T7309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1727.472687][ T7309] Call Trace: [ 1727.476106][ T7309] loop_add+0x554/0x710 [ 1727.480259][ T7309] loop_control_ioctl+0x468/0x680 [ 1727.485263][ T7309] ? xor_init+0x60/0x60 [ 1727.489419][ T7309] do_vfs_ioctl+0x6fb/0x15b0 [ 1727.493990][ T7309] __x64_sys_ioctl+0xd4/0x110 [ 1727.498660][ T7309] do_syscall_64+0xcb/0x1e0 [ 1727.503162][ T7309] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1727.509040][ T7309] RIP: 0033:0x7f6a3b7a7ae9 [ 1727.513453][ T7309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.533037][ T7309] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1727.541424][ T7309] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1727.549377][ T7309] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1727.557329][ T7309] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.565275][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:16:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 52) 18:16:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019e00000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x5c00], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x4c, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x74}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1727.573221][ T7309] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1727.581172][ T7309] ---[ end trace 8542d17d5d84a00b ]--- 18:16:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x52, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x6b030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x6001], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019e30000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x5c, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1727.631096][ T7595] xt_l2tp: invalid flags combination: 0 [ 1727.670441][ T7578] FAULT_INJECTION: forcing a failure. 18:16:16 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0x8b}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x6802], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1727.670441][ T7578] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.695213][ T7578] CPU: 0 PID: 7578 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1727.707373][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1727.717419][ T7578] Call Trace: [ 1727.720709][ T7578] dump_stack+0x18e/0x1de [ 1727.725035][ T7578] should_fail+0x5d8/0x740 [ 1727.729450][ T7578] ? __kernfs_new_node+0x8b/0x630 [ 1727.733961][ T7670] xt_CT: No such helper "syz0" [ 1727.734492][ T7578] should_failslab+0x5/0x20 [ 1727.734502][ T7578] kmem_cache_alloc+0x36/0x290 [ 1727.734519][ T7578] __kernfs_new_node+0x8b/0x630 [ 1727.753306][ T7578] ? mutex_unlock+0x19/0x40 [ 1727.757808][ T7578] ? kernfs_xattr_get+0x81/0x90 [ 1727.762687][ T7578] ? selinux_kernfs_init_security+0x12d/0x720 [ 1727.768747][ T7578] kernfs_new_node+0x95/0x160 [ 1727.773422][ T7578] __kernfs_create_file+0x45/0x260 [ 1727.778530][ T7578] sysfs_add_file_mode_ns+0x293/0x340 [ 1727.782916][ T7939] xt_l2tp: invalid flags combination: 0 [ 1727.783891][ T7578] internal_create_group+0x486/0xd70 [ 1727.783910][ T7578] sysfs_create_groups+0x5d/0x130 [ 1727.799704][ T7578] device_add+0x9fa/0x1820 [ 1727.804118][ T7578] device_create_vargs+0x1b8/0x210 [ 1727.809310][ T7578] device_create+0x86/0xb0 [ 1727.813713][ T7578] ? vsnprintf+0x1a07/0x1aa0 [ 1727.818300][ T7578] bdi_register_va+0x89/0x5e0 [ 1727.822964][ T7578] bdi_register+0x80/0xa0 [ 1727.827304][ T7578] ? __device_add_disk+0x50a/0x1220 [ 1727.832495][ T7578] bdi_register_owner+0x56/0xf0 [ 1727.837336][ T7578] __device_add_disk+0x583/0x1220 [ 1727.842349][ T7578] loop_add+0x554/0x710 [ 1727.846478][ T7578] loop_control_ioctl+0x468/0x680 [ 1727.851472][ T7578] ? xor_init+0x60/0x60 [ 1727.855739][ T7578] do_vfs_ioctl+0x6fb/0x15b0 [ 1727.860322][ T7578] __x64_sys_ioctl+0xd4/0x110 [ 1727.864974][ T7578] do_syscall_64+0xcb/0x1e0 [ 1727.869453][ T7578] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1727.875334][ T7578] RIP: 0033:0x7f6a3b7a7ae9 [ 1727.879725][ T7578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.899337][ T7578] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1727.907742][ T7578] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1727.915689][ T7578] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1727.923647][ T7578] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.931591][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.939537][ T7578] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1727.950204][ T7578] ------------[ cut here ]------------ [ 1727.955761][ T7578] WARNING: CPU: 1 PID: 7578 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1727.964744][ T7578] Modules linked in: [ 1727.968616][ T7578] CPU: 1 PID: 7578 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1727.980118][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1727.990158][ T7578] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1727.995934][ T7578] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1728.015530][ T7578] RSP: 0018:ffff8881db58fce8 EFLAGS: 00010246 [ 1728.021575][ T7578] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1728.029518][ T7578] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1728.037461][ T7578] RBP: ffff8881ef098058 R08: ffffffff82147a3e R09: 0000000000000010 [ 1728.045405][ T7578] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1728.053434][ T7578] R13: 1ffff1103dbd7001 R14: 1ffff1103dbd709d R15: ffff8881edeb8000 [ 1728.061379][ T7578] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1728.070380][ T7578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1728.076947][ T7578] CR2: 00007ff628bdf058 CR3: 00000001e4c67000 CR4: 00000000003406e0 [ 1728.084891][ T7578] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1728.092834][ T7578] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1728.100791][ T7578] Call Trace: [ 1728.104057][ T7578] loop_add+0x554/0x710 [ 1728.108218][ T7578] loop_control_ioctl+0x468/0x680 [ 1728.113234][ T7578] ? xor_init+0x60/0x60 [ 1728.117386][ T7578] do_vfs_ioctl+0x6fb/0x15b0 [ 1728.121956][ T7578] __x64_sys_ioctl+0xd4/0x110 [ 1728.126610][ T7578] do_syscall_64+0xcb/0x1e0 [ 1728.131088][ T7578] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1728.136954][ T7578] RIP: 0033:0x7f6a3b7a7ae9 [ 1728.141345][ T7578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.160921][ T7578] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1728.169314][ T7578] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 18:16:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 53) 18:16:17 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x71000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:17 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0xa0}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x6903], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x60, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019fc0000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1728.177257][ T7578] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1728.185211][ T7578] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1728.193160][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1728.201128][ T7578] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1728.209076][ T7578] ---[ end trace 8542d17d5d84a00c ]--- 18:16:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x68, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x6a03], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1728.249765][ T8064] xt_l2tp: invalid flags combination: 0 [ 1728.280286][ T8062] FAULT_INJECTION: forcing a failure. [ 1728.280286][ T8062] name failslab, interval 1, probability 0, space 0, times 0 18:16:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1728.294681][ T8062] CPU: 0 PID: 8062 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1728.306251][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1728.316294][ T8062] Call Trace: [ 1728.319582][ T8062] dump_stack+0x18e/0x1de [ 1728.323270][ T8066] xt_CT: No such helper "syz0" [ 1728.323903][ T8062] should_fail+0x5d8/0x740 [ 1728.323922][ T8062] ? __kernfs_new_node+0x8b/0x630 [ 1728.338077][ T8062] should_failslab+0x5/0x20 [ 1728.342575][ T8062] kmem_cache_alloc+0x36/0x290 18:16:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7100], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:17 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x72020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1728.347342][ T8062] ? memcpy+0x38/0x50 [ 1728.351324][ T8062] __kernfs_new_node+0x8b/0x630 [ 1728.356167][ T8062] ? mutex_lock+0x6c/0xc0 [ 1728.360490][ T8062] ? kernfs_activate+0x3fc/0x420 [ 1728.365423][ T8062] kernfs_new_node+0x95/0x160 [ 1728.370109][ T8062] kernfs_create_link+0x9c/0x1f0 [ 1728.375050][ T8062] sysfs_do_create_link_sd+0x85/0x100 [ 1728.380416][ T8062] device_add+0x93a/0x1820 [ 1728.384834][ T8062] device_create_vargs+0x1b8/0x210 [ 1728.389936][ T8062] device_create+0x86/0xb0 [ 1728.394380][ T8062] ? vsnprintf+0x1a07/0x1aa0 [ 1728.398964][ T8062] bdi_register_va+0x89/0x5e0 [ 1728.403633][ T8062] bdi_register+0x80/0xa0 [ 1728.407945][ T8062] ? __device_add_disk+0x50a/0x1220 [ 1728.413124][ T8062] bdi_register_owner+0x56/0xf0 [ 1728.417955][ T8062] __device_add_disk+0x583/0x1220 [ 1728.422978][ T8062] loop_add+0x554/0x710 [ 1728.427119][ T8062] loop_control_ioctl+0x468/0x680 [ 1728.429130][ T8245] xt_CT: No such helper "syz0" [ 1728.432131][ T8062] ? xor_init+0x60/0x60 [ 1728.432142][ T8062] do_vfs_ioctl+0x6fb/0x15b0 [ 1728.432158][ T8062] __x64_sys_ioctl+0xd4/0x110 18:16:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7202], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1728.450263][ T8062] do_syscall_64+0xcb/0x1e0 [ 1728.454937][ T8062] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1728.460820][ T8062] RIP: 0033:0x7f6a3b7a7ae9 [ 1728.466706][ T8062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.486291][ T8062] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1728.494693][ T8062] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1728.502735][ T8062] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1728.510795][ T8062] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1728.518757][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1728.526897][ T8062] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1728.539802][ T8062] ------------[ cut here ]------------ [ 1728.545416][ T8062] WARNING: CPU: 1 PID: 8062 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1728.554412][ T8062] Modules linked in: [ 1728.558290][ T8062] CPU: 1 PID: 8062 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1728.569797][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1728.579843][ T8062] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1728.585712][ T8062] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1728.605728][ T8062] RSP: 0018:ffff8881e5cd7ce8 EFLAGS: 00010246 [ 1728.611771][ T8062] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1728.619876][ T8062] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1728.627940][ T8062] RBP: ffff8881ef09c4d8 R08: ffffffff82147a3e R09: 0000000000000010 [ 1728.635898][ T8062] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1728.643842][ T8062] R13: 1ffff1103e7dc001 R14: 1ffff1103e7dc09d R15: ffff8881f3ee0000 [ 1728.651788][ T8062] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1728.660686][ T8062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1728.667558][ T8062] CR2: 000055555609eb38 CR3: 00000001a17e1000 CR4: 00000000003406e0 [ 1728.675521][ T8062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1728.683597][ T8062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1728.691801][ T8062] Call Trace: [ 1728.695073][ T8062] loop_add+0x554/0x710 [ 1728.699205][ T8062] loop_control_ioctl+0x468/0x680 [ 1728.704290][ T8062] ? xor_init+0x60/0x60 [ 1728.708505][ T8062] do_vfs_ioctl+0x6fb/0x15b0 [ 1728.713069][ T8062] __x64_sys_ioctl+0xd4/0x110 [ 1728.717719][ T8062] do_syscall_64+0xcb/0x1e0 [ 1728.722206][ T8062] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1728.728072][ T8062] RIP: 0033:0x7f6a3b7a7ae9 [ 1728.732474][ T8062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.752067][ T8062] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1728.760884][ T8062] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1728.768846][ T8062] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1728.776797][ T8062] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1728.784760][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1728.792709][ T8062] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 54) 18:16:18 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x73000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7300], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000193c0100900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x6c, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:18 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0xa7}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1728.800678][ T8062] ---[ end trace 8542d17d5d84a00d ]--- 18:16:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019720100900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x71, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1728.838594][ T8390] l2tp_mt_check6: 38 callbacks suppressed [ 1728.838598][ T8390] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1728.851853][ T8392] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1728.860563][ T8394] xt_l2tp: invalid flags combination: 0 [ 1728.880210][ T8391] FAULT_INJECTION: forcing a failure. 18:16:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7400], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1728.880210][ T8391] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.910842][ T8391] CPU: 0 PID: 8391 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1728.922390][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1728.922545][ T8393] xt_CT: No such helper "syz0" [ 1728.932444][ T8391] Call Trace: [ 1728.932463][ T8391] dump_stack+0x18e/0x1de [ 1728.932476][ T8391] should_fail+0x5d8/0x740 [ 1728.932488][ T8391] ? __kernfs_new_node+0x8b/0x630 [ 1728.932507][ T8391] should_failslab+0x5/0x20 18:16:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x73, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7603], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1728.938218][ T8460] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1728.940517][ T8391] kmem_cache_alloc+0x36/0x290 [ 1728.940529][ T8391] __kernfs_new_node+0x8b/0x630 [ 1728.940538][ T8391] ? mutex_lock+0x6c/0xc0 [ 1728.940546][ T8391] ? kernfs_activate+0x3fc/0x420 [ 1728.940561][ T8391] kernfs_new_node+0x95/0x160 [ 1728.955903][ T8474] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1728.958789][ T8391] __kernfs_create_file+0x45/0x260 [ 1728.958799][ T8391] sysfs_add_file_mode_ns+0x293/0x340 [ 1728.958809][ T8391] internal_create_group+0x486/0xd70 18:16:18 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x74000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1728.958823][ T8391] sysfs_create_groups+0x5d/0x130 [ 1728.988735][ T8543] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1728.994352][ T8391] device_add+0x9fa/0x1820 [ 1728.994369][ T8391] device_create_vargs+0x1b8/0x210 [ 1729.030603][ T8391] device_create+0x86/0xb0 [ 1729.035008][ T8391] ? vsnprintf+0x1a07/0x1aa0 [ 1729.039590][ T8391] bdi_register_va+0x89/0x5e0 [ 1729.044286][ T8391] bdi_register+0x80/0xa0 [ 1729.048603][ T8391] ? __device_add_disk+0x50a/0x1220 [ 1729.053786][ T8391] bdi_register_owner+0x56/0xf0 [ 1729.058627][ T8391] __device_add_disk+0x583/0x1220 [ 1729.063642][ T8391] loop_add+0x554/0x710 [ 1729.067779][ T8391] loop_control_ioctl+0x468/0x680 [ 1729.072785][ T8391] ? xor_init+0x60/0x60 [ 1729.076227][ T8579] xt_CT: No such helper "syz0" [ 1729.076922][ T8391] do_vfs_ioctl+0x6fb/0x15b0 [ 1729.076941][ T8391] __x64_sys_ioctl+0xd4/0x110 [ 1729.087938][ T8591] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1729.090910][ T8391] do_syscall_64+0xcb/0x1e0 [ 1729.090921][ T8391] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1729.090929][ T8391] RIP: 0033:0x7f6a3b7a7ae9 [ 1729.090943][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.131566][ T8391] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.139966][ T8391] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1729.148347][ T8391] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1729.156290][ T8391] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.164235][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1729.173476][ T8391] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1729.183854][ T8391] ------------[ cut here ]------------ [ 1729.189319][ T8391] WARNING: CPU: 1 PID: 8391 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1729.198337][ T8391] Modules linked in: [ 1729.202235][ T8391] CPU: 1 PID: 8391 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1729.213911][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.223966][ T8391] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1729.229748][ T8391] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1729.249322][ T8391] RSP: 0018:ffff8881e4b87ce8 EFLAGS: 00010246 [ 1729.255371][ T8391] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1729.263436][ T8391] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1729.271390][ T8391] RBP: ffff8881ef1ebc48 R08: ffffffff82147a3e R09: 0000000000000010 [ 1729.279334][ T8391] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1729.287279][ T8391] R13: 1ffff1103e157601 R14: 1ffff1103e15769d R15: ffff8881f0abb000 [ 1729.295239][ T8391] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1729.304141][ T8391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1729.310733][ T8391] CR2: 0000555557480b38 CR3: 00000001ec00c000 CR4: 00000000003406e0 [ 1729.318764][ T8391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1729.326731][ T8391] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1729.334673][ T8391] Call Trace: [ 1729.337939][ T8391] loop_add+0x554/0x710 [ 1729.342072][ T8391] loop_control_ioctl+0x468/0x680 [ 1729.347072][ T8391] ? xor_init+0x60/0x60 [ 1729.351200][ T8391] do_vfs_ioctl+0x6fb/0x15b0 [ 1729.355760][ T8391] __x64_sys_ioctl+0xd4/0x110 [ 1729.360406][ T8391] do_syscall_64+0xcb/0x1e0 [ 1729.364881][ T8391] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1729.370742][ T8391] RIP: 0033:0x7f6a3b7a7ae9 [ 1729.375168][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.394741][ T8391] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.403130][ T8391] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 18:16:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 55) 18:16:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7a02], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x74, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:18 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x76030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019780100900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:18 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0xb8}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1729.411096][ T8391] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1729.419042][ T8391] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.426985][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1729.434928][ T8391] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1729.442897][ T8391] ---[ end trace 8542d17d5d84a00e ]--- 18:16:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019bf0100900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x8b00], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x7a, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:18 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0xba}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1729.481095][ T8716] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1729.483748][ T8720] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1729.540478][ T8721] FAULT_INJECTION: forcing a failure. [ 1729.540478][ T8721] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.556943][ T8828] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1729.565357][ T8830] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1729.572906][ T8721] CPU: 1 PID: 8721 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 18:16:18 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0xc6}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019d50100900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1729.584533][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.592037][ T8719] xt_CT: No such helper "syz0" [ 1729.594577][ T8721] Call Trace: [ 1729.594595][ T8721] dump_stack+0x18e/0x1de [ 1729.594613][ T8721] should_fail+0x5d8/0x740 [ 1729.611355][ T8721] ? __kernfs_new_node+0x8b/0x630 [ 1729.616389][ T8721] should_failslab+0x5/0x20 [ 1729.620890][ T8721] kmem_cache_alloc+0x36/0x290 [ 1729.625659][ T8721] __kernfs_new_node+0x8b/0x630 [ 1729.630502][ T8721] ? mutex_lock+0x6c/0xc0 [ 1729.634841][ T8721] ? kernfs_activate+0x3fc/0x420 [ 1729.639773][ T8721] kernfs_new_node+0x95/0x160 [ 1729.644458][ T8721] __kernfs_create_file+0x45/0x260 [ 1729.649676][ T8721] sysfs_add_file_mode_ns+0x293/0x340 [ 1729.655043][ T8721] internal_create_group+0x486/0xd70 [ 1729.660320][ T8721] sysfs_create_groups+0x5d/0x130 [ 1729.665452][ T8721] device_add+0x9fa/0x1820 [ 1729.669967][ T8721] device_create_vargs+0x1b8/0x210 [ 1729.675075][ T8721] device_create+0x86/0xb0 [ 1729.679475][ T8721] ? vsnprintf+0x1a07/0x1aa0 [ 1729.684060][ T8721] bdi_register_va+0x89/0x5e0 [ 1729.688712][ T8721] bdi_register+0x80/0xa0 [ 1729.693019][ T8721] ? __device_add_disk+0x50a/0x1220 [ 1729.698194][ T8721] bdi_register_owner+0x56/0xf0 [ 1729.703033][ T8721] __device_add_disk+0x583/0x1220 [ 1729.708144][ T8721] loop_add+0x554/0x710 [ 1729.712276][ T8721] loop_control_ioctl+0x468/0x680 [ 1729.717272][ T8721] ? xor_init+0x60/0x60 [ 1729.721405][ T8721] do_vfs_ioctl+0x6fb/0x15b0 [ 1729.725974][ T8721] __x64_sys_ioctl+0xd4/0x110 [ 1729.730636][ T8721] do_syscall_64+0xcb/0x1e0 [ 1729.735113][ T8721] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1729.740976][ T8721] RIP: 0033:0x7f6a3b7a7ae9 [ 1729.745465][ T8721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.765040][ T8721] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.773425][ T8721] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1729.781418][ T8721] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1729.789366][ T8721] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.797311][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1729.805377][ T8721] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1729.815824][ T8721] ------------[ cut here ]------------ [ 1729.821310][ T8721] WARNING: CPU: 0 PID: 8721 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1729.830317][ T8721] Modules linked in: [ 1729.834208][ T8721] CPU: 0 PID: 8721 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1729.845714][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.855753][ T8721] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1729.861531][ T8721] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1729.881108][ T8721] RSP: 0018:ffff8881e88b7ce8 EFLAGS: 00010246 [ 1729.887150][ T8721] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1729.895108][ T8721] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1729.903060][ T8721] RBP: ffff8881ef25a298 R08: ffffffff82147a3e R09: 0000000000000010 [ 1729.911177][ T8721] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1729.919137][ T8721] R13: 1ffff1103b8fc201 R14: 1ffff1103b8fc29d R15: ffff8881dc7e1000 [ 1729.927106][ T8721] FS: 00007f6a3951e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1729.936017][ T8721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1729.942570][ T8721] CR2: 000055555596db38 CR3: 00000001e106f000 CR4: 00000000003406f0 [ 1729.950516][ T8721] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1729.958462][ T8721] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1729.966408][ T8721] Call Trace: [ 1729.969691][ T8721] loop_add+0x554/0x710 [ 1729.973822][ T8721] loop_control_ioctl+0x468/0x680 [ 1729.978823][ T8721] ? xor_init+0x60/0x60 [ 1729.982971][ T8721] do_vfs_ioctl+0x6fb/0x15b0 [ 1729.987545][ T8721] __x64_sys_ioctl+0xd4/0x110 [ 1729.992198][ T8721] do_syscall_64+0xcb/0x1e0 [ 1729.996676][ T8721] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1730.002552][ T8721] RIP: 0033:0x7f6a3b7a7ae9 [ 1730.006938][ T8721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1730.026515][ T8721] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1730.034895][ T8721] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 18:16:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 56) 18:16:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019eb0100900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:19 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0xde}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1730.042847][ T8721] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1730.050808][ T8721] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1730.058750][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1730.066695][ T8721] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1730.074654][ T8721] ---[ end trace 8542d17d5d84a00f ]--- 18:16:19 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x7a020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x8b, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x9002], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019040200900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1730.134074][ T9073] FAULT_INJECTION: forcing a failure. [ 1730.134074][ T9073] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.149366][ T9073] CPU: 0 PID: 9073 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1730.160908][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1730.170987][ T9073] Call Trace: [ 1730.174272][ T9073] dump_stack+0x18e/0x1de [ 1730.178598][ T9073] should_fail+0x5d8/0x740 [ 1730.183006][ T9073] ? __kernfs_new_node+0x8b/0x630 [ 1730.188018][ T9073] should_failslab+0x5/0x20 [ 1730.192512][ T9073] kmem_cache_alloc+0x36/0x290 [ 1730.197268][ T9073] __kernfs_new_node+0x8b/0x630 [ 1730.202110][ T9073] ? kernfs_add_one+0x49e/0x5c0 [ 1730.206950][ T9073] kernfs_new_node+0x95/0x160 [ 1730.211630][ T9073] __kernfs_create_file+0x45/0x260 [ 1730.216816][ T9073] sysfs_add_file_mode_ns+0x293/0x340 [ 1730.222181][ T9073] sysfs_create_file_ns+0x146/0x230 [ 1730.227371][ T9073] device_add+0xbc7/0x1820 [ 1730.231780][ T9073] device_create_vargs+0x1b8/0x210 [ 1730.236887][ T9073] device_create+0x86/0xb0 [ 1730.239227][ T9163] xt_CT: No such helper "syz0" [ 1730.241282][ T9073] ? vsnprintf+0x1a07/0x1aa0 [ 1730.241295][ T9073] bdi_register_va+0x89/0x5e0 [ 1730.241305][ T9073] bdi_register+0x80/0xa0 [ 1730.241319][ T9073] ? __device_add_disk+0x50a/0x1220 [ 1730.264848][ T9073] bdi_register_owner+0x56/0xf0 [ 1730.269735][ T9073] __device_add_disk+0x583/0x1220 [ 1730.274760][ T9073] loop_add+0x554/0x710 [ 1730.278936][ T9073] loop_control_ioctl+0x468/0x680 [ 1730.283952][ T9073] ? xor_init+0x60/0x60 [ 1730.288098][ T9073] do_vfs_ioctl+0x6fb/0x15b0 [ 1730.292850][ T9073] __x64_sys_ioctl+0xd4/0x110 [ 1730.297513][ T9073] do_syscall_64+0xcb/0x1e0 [ 1730.302008][ T9073] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1730.307905][ T9073] RIP: 0033:0x7f6a3b7a7ae9 [ 1730.312328][ T9073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:16:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xa0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019140200900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000192a0200900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019400200900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:19 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x7ffffffe], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1730.332092][ T9073] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1730.340485][ T9073] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1730.348440][ T9073] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1730.356392][ T9073] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1730.364350][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1730.372308][ T9073] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1730.384514][ T9073] ------------[ cut here ]------------ [ 1730.389983][ T9073] WARNING: CPU: 0 PID: 9073 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1730.398977][ T9073] Modules linked in: [ 1730.402862][ T9073] CPU: 0 PID: 9073 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1730.414371][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1730.424526][ T9073] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1730.430499][ T9073] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1730.450072][ T9073] RSP: 0018:ffff88818742fce8 EFLAGS: 00010246 [ 1730.456117][ T9073] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1730.464064][ T9073] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1730.472005][ T9073] RBP: ffff8881ef1e88e8 R08: ffffffff82147a3e R09: 0000000000000010 [ 1730.479947][ T9073] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1730.487887][ T9073] R13: 1ffff1103d14f201 R14: 1ffff1103d14f29d R15: ffff8881e8a79000 [ 1730.495830][ T9073] FS: 00007f6a3951e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1730.504725][ T9073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1730.511275][ T9073] CR2: 00007ff629014004 CR3: 00000001eb582000 CR4: 00000000003406f0 [ 1730.519232][ T9073] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1730.527186][ T9073] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1730.535139][ T9073] Call Trace: [ 1730.538405][ T9073] loop_add+0x554/0x710 [ 1730.542530][ T9073] loop_control_ioctl+0x468/0x680 [ 1730.547522][ T9073] ? xor_init+0x60/0x60 [ 1730.551650][ T9073] do_vfs_ioctl+0x6fb/0x15b0 [ 1730.556220][ T9073] __x64_sys_ioctl+0xd4/0x110 [ 1730.560886][ T9073] do_syscall_64+0xcb/0x1e0 [ 1730.565359][ T9073] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1730.571662][ T9073] RIP: 0033:0x7f6a3b7a7ae9 [ 1730.576045][ T9073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1730.595618][ T9073] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1730.603998][ T9073] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1730.612118][ T9073] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1730.620072][ T9073] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 57) 18:16:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000197a0200900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:19 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0xe3}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x9201], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xa7, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:19 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x8b000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x9202], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000199d0200900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1730.628202][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1730.637038][ T9073] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1730.644993][ T9073] ---[ end trace 8542d17d5d84a010 ]--- 18:16:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x9a03], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019c30200900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xb8, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1730.722376][ T9584] FAULT_INJECTION: forcing a failure. [ 1730.722376][ T9584] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.735182][ T9584] CPU: 1 PID: 9584 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1730.746793][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1730.756837][ T9584] Call Trace: [ 1730.760123][ T9584] dump_stack+0x18e/0x1de [ 1730.764451][ T9584] should_fail+0x5d8/0x740 [ 1730.768868][ T9584] ? device_add+0x9fa/0x1820 [ 1730.773491][ T9584] ? radix_tree_node_alloc+0x18c/0x370 [ 1730.778944][ T9584] should_failslab+0x5/0x20 [ 1730.783442][ T9584] kmem_cache_alloc+0x36/0x290 [ 1730.788239][ T9584] ? __x64_sys_ioctl+0xd4/0x110 [ 1730.793082][ T9584] ? do_syscall_64+0xcb/0x1e0 [ 1730.797756][ T9584] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1730.804114][ T9584] radix_tree_node_alloc+0x18c/0x370 [ 1730.809395][ T9584] idr_get_free+0x2aa/0x900 [ 1730.813895][ T9584] idr_alloc_cyclic+0x170/0x510 18:16:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000300900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1730.818747][ T9584] __kernfs_new_node+0xdd/0x630 [ 1730.823587][ T9584] ? mutex_lock+0x6c/0xc0 [ 1730.827917][ T9584] ? kernfs_activate+0x3fc/0x420 [ 1730.832847][ T9584] kernfs_new_node+0x95/0x160 [ 1730.837519][ T9584] __kernfs_create_file+0x45/0x260 [ 1730.842619][ T9584] sysfs_add_file_mode_ns+0x293/0x340 [ 1730.847978][ T9584] internal_create_group+0x486/0xd70 [ 1730.853237][ T9584] sysfs_create_groups+0x5d/0x130 [ 1730.858235][ T9584] device_add+0x9fa/0x1820 [ 1730.862625][ T9584] device_create_vargs+0x1b8/0x210 [ 1730.867708][ T9584] device_create+0x86/0xb0 [ 1730.872095][ T9584] ? vsnprintf+0x1a07/0x1aa0 [ 1730.876659][ T9584] bdi_register_va+0x89/0x5e0 [ 1730.881309][ T9584] bdi_register+0x80/0xa0 [ 1730.885653][ T9584] ? __device_add_disk+0x50a/0x1220 [ 1730.890829][ T9584] bdi_register_owner+0x56/0xf0 [ 1730.895653][ T9584] __device_add_disk+0x583/0x1220 [ 1730.900648][ T9584] loop_add+0x554/0x710 [ 1730.904774][ T9584] loop_control_ioctl+0x468/0x680 [ 1730.909792][ T9584] ? xor_init+0x60/0x60 [ 1730.913931][ T9584] do_vfs_ioctl+0x6fb/0x15b0 [ 1730.918502][ T9584] __x64_sys_ioctl+0xd4/0x110 [ 1730.923156][ T9584] do_syscall_64+0xcb/0x1e0 [ 1730.927631][ T9584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1730.933587][ T9584] RIP: 0033:0x7f6a3b7a7ae9 [ 1730.938135][ T9584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1730.957714][ T9584] RSP: 002b:00007f6a394fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:16:20 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 58) 18:16:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019060300900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xba, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0xf0}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x90020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xa000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1730.966098][ T9584] RAX: ffffffffffffffda RBX: 00007f6a3b8bb020 RCX: 00007f6a3b7a7ae9 [ 1730.974128][ T9584] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1730.982091][ T9584] RBP: 00007f6a394fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1730.990031][ T9584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1730.997973][ T9584] R13: 00007ffddfaedadf R14: 00007f6a394fd300 R15: 0000000000022000 18:16:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019360300900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1731.028413][ T1926] udevd[1926]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1731.035039][ T9796] l2tp_mt_check: 5 callbacks suppressed [ 1731.035050][ T9796] xt_l2tp: invalid flags combination: 0 18:16:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xa403], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xc6, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019c10300900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:20 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {0xf2}}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xa700], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1731.070371][ T9794] FAULT_INJECTION: forcing a failure. [ 1731.070371][ T9794] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.118474][ T9794] CPU: 1 PID: 9794 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1731.127458][ T9915] xt_l2tp: invalid flags combination: 0 [ 1731.130102][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1731.130106][ T9794] Call Trace: [ 1731.130122][ T9794] dump_stack+0x18e/0x1de [ 1731.130136][ T9794] should_fail+0x5d8/0x740 [ 1731.130149][ T9794] ? __kernfs_new_node+0x8b/0x630 [ 1731.130160][ T9794] should_failslab+0x5/0x20 [ 1731.130171][ T9794] kmem_cache_alloc+0x36/0x290 [ 1731.130181][ T9794] ? selinux_kernfs_init_security+0x12d/0x720 [ 1731.130191][ T9794] __kernfs_new_node+0x8b/0x630 [ 1731.130200][ T9794] ? mutex_lock+0x6c/0xc0 [ 1731.130211][ T9794] kernfs_new_node+0x95/0x160 [ 1731.130222][ T9794] __kernfs_create_file+0x45/0x260 [ 1731.130231][ T9794] sysfs_add_file_mode_ns+0x293/0x340 [ 1731.130241][ T9794] sysfs_merge_group+0x19b/0x320 [ 1731.130252][ T9794] dpm_sysfs_add+0xbd/0x260 [ 1731.130260][ T9794] device_add+0xcec/0x1820 [ 1731.130272][ T9794] device_create_vargs+0x1b8/0x210 [ 1731.130281][ T9794] device_create+0x86/0xb0 [ 1731.130288][ T9794] ? vsnprintf+0x1a07/0x1aa0 [ 1731.130299][ T9794] bdi_register_va+0x89/0x5e0 [ 1731.130309][ T9794] bdi_register+0x80/0xa0 [ 1731.130326][ T9794] ? __device_add_disk+0x50a/0x1220 [ 1731.130337][ T9794] bdi_register_owner+0x56/0xf0 [ 1731.130361][ T9794] __device_add_disk+0x583/0x1220 [ 1731.130374][ T9794] loop_add+0x554/0x710 [ 1731.130383][ T9794] loop_control_ioctl+0x468/0x680 [ 1731.130392][ T9794] ? xor_init+0x60/0x60 [ 1731.130402][ T9794] do_vfs_ioctl+0x6fb/0x15b0 [ 1731.130415][ T9794] __x64_sys_ioctl+0xd4/0x110 [ 1731.130425][ T9794] do_syscall_64+0xcb/0x1e0 [ 1731.130435][ T9794] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1731.130443][ T9794] RIP: 0033:0x7f6a3b7a7ae9 [ 1731.130452][ T9794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.130456][ T9794] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1731.130465][ T9794] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1731.130470][ T9794] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1731.130475][ T9794] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1731.130480][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1731.130484][ T9794] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1731.156892][ T9794] ------------[ cut here ]------------ [ 1731.180367][ T9804] xt_ct_set_helper: 2 callbacks suppressed [ 1731.180377][ T9804] xt_CT: No such helper "syz0" [ 1731.183963][ T9794] WARNING: CPU: 1 PID: 9794 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1731.183965][ T9794] Modules linked in: [ 1731.183979][ T9794] CPU: 1 PID: 9794 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1731.183990][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1731.410678][ T9794] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1731.416464][ T9794] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1731.436056][ T9794] RSP: 0018:ffff8881e4627ce8 EFLAGS: 00010287 [ 1731.442090][ T9794] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1731.450033][ T9794] RDX: ffffc90000144000 RSI: 000000000002ed09 RDI: 000000000002ed0a [ 1731.457973][ T9794] RBP: ffff8881ef25d5f8 R08: ffffffff82147a3e R09: 0000000000000010 [ 1731.465928][ T9794] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1731.473865][ T9794] R13: 1ffff1103be87201 R14: 1ffff1103be8729d R15: ffff8881df439000 [ 1731.481803][ T9794] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1731.490700][ T9794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1731.497254][ T9794] CR2: 00007f45bf0f5004 CR3: 000000019c9e2000 CR4: 00000000003406e0 [ 1731.505300][ T9794] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1731.513243][ T9794] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1731.521182][ T9794] Call Trace: [ 1731.524446][ T9794] loop_add+0x554/0x710 [ 1731.528579][ T9794] loop_control_ioctl+0x468/0x680 [ 1731.533572][ T9794] ? xor_init+0x60/0x60 [ 1731.537697][ T9794] do_vfs_ioctl+0x6fb/0x15b0 [ 1731.542257][ T9794] __x64_sys_ioctl+0xd4/0x110 [ 1731.546904][ T9794] do_syscall_64+0xcb/0x1e0 [ 1731.551378][ T9794] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1731.557239][ T9794] RIP: 0033:0x7f6a3b7a7ae9 [ 1731.561620][ T9794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.581199][ T9794] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1731.589594][ T9794] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1731.597885][ T9794] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1731.605829][ T9794] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:20 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 59) 18:16:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xde, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xb800], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019f00300900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1731.613887][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1731.621874][ T9794] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1731.629874][ T9794] ---[ end trace 8542d17d5d84a011 ]--- 18:16:20 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x92010000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xb803], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xf0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019f80300900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xba00], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xf2, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019f90300900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1731.703730][T10135] xt_l2tp: invalid flags combination: 0 [ 1731.712550][T10063] FAULT_INJECTION: forcing a failure. [ 1731.712550][T10063] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.747493][T10063] CPU: 1 PID: 10063 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1731.759723][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1731.769788][T10063] Call Trace: [ 1731.773071][T10063] dump_stack+0x18e/0x1de [ 1731.777425][T10063] should_fail+0x5d8/0x740 [ 1731.781842][T10063] ? __kernfs_new_node+0x8b/0x630 [ 1731.786861][T10063] should_failslab+0x5/0x20 [ 1731.791351][T10063] kmem_cache_alloc+0x36/0x290 [ 1731.796103][T10063] __kernfs_new_node+0x8b/0x630 [ 1731.800967][T10063] ? mutex_lock+0x6c/0xc0 [ 1731.802627][T10133] xt_CT: No such helper "syz0" [ 1731.805327][T10063] ? kernfs_activate+0x3fc/0x420 [ 1731.814967][T10063] kernfs_new_node+0x95/0x160 [ 1731.819656][T10063] __kernfs_create_file+0x45/0x260 [ 1731.824799][T10063] sysfs_add_file_mode_ns+0x293/0x340 [ 1731.830168][T10063] sysfs_merge_group+0x19b/0x320 [ 1731.835099][T10063] dpm_sysfs_add+0xbd/0x260 [ 1731.839646][T10063] device_add+0xcec/0x1820 [ 1731.844145][T10063] device_create_vargs+0x1b8/0x210 [ 1731.849241][T10063] device_create+0x86/0xb0 [ 1731.853746][T10063] ? vsnprintf+0x1a07/0x1aa0 [ 1731.858310][T10063] bdi_register_va+0x89/0x5e0 [ 1731.863133][T10063] bdi_register+0x80/0xa0 [ 1731.867639][T10063] ? __device_add_disk+0x50a/0x1220 [ 1731.872988][T10063] bdi_register_owner+0x56/0xf0 [ 1731.877815][T10063] __device_add_disk+0x583/0x1220 [ 1731.882825][T10063] loop_add+0x554/0x710 [ 1731.886966][T10063] loop_control_ioctl+0x468/0x680 [ 1731.891963][T10063] ? xor_init+0x60/0x60 [ 1731.896108][T10063] do_vfs_ioctl+0x6fb/0x15b0 [ 1731.900679][T10063] __x64_sys_ioctl+0xd4/0x110 [ 1731.905463][T10063] do_syscall_64+0xcb/0x1e0 [ 1731.909941][T10063] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1731.915807][T10063] RIP: 0033:0x7f6a3b7a7ae9 [ 1731.920190][T10063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.939762][T10063] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1731.948139][T10063] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1731.956080][T10063] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1731.964117][T10063] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1731.972056][T10063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1731.980341][T10063] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1731.990879][T10063] ------------[ cut here ]------------ [ 1731.996353][T10063] WARNING: CPU: 0 PID: 10063 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1732.005435][T10063] Modules linked in: [ 1732.009315][T10063] CPU: 0 PID: 10063 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1732.020938][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.030974][T10063] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1732.036970][T10063] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1732.056656][T10063] RSP: 0018:ffff8881a042fce8 EFLAGS: 00010246 [ 1732.062695][T10063] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1732.070676][T10063] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1732.078627][T10063] RBP: ffff8881ef1ecd68 R08: ffffffff82147a3e R09: 0000000000000010 [ 1732.086568][T10063] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1732.094506][T10063] R13: 1ffff1103b6dd601 R14: 1ffff1103b6dd69d R15: ffff8881db6eb000 [ 1732.102535][T10063] FS: 00007f6a3951e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1732.111430][T10063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1732.117989][T10063] CR2: 00007ffd65105ff8 CR3: 00000001f53df000 CR4: 00000000003406f0 [ 1732.125953][T10063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1732.133894][T10063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1732.141867][T10063] Call Trace: [ 1732.145134][T10063] loop_add+0x554/0x710 [ 1732.149265][T10063] loop_control_ioctl+0x468/0x680 [ 1732.154287][T10063] ? xor_init+0x60/0x60 [ 1732.158412][T10063] do_vfs_ioctl+0x6fb/0x15b0 [ 1732.163124][T10063] __x64_sys_ioctl+0xd4/0x110 [ 1732.167854][T10063] do_syscall_64+0xcb/0x1e0 [ 1732.172329][T10063] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1732.178197][T10063] RIP: 0033:0x7f6a3b7a7ae9 [ 1732.182601][T10063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1732.202176][T10063] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.210564][T10063] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1732.218512][T10063] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1732.226464][T10063] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1732.234408][T10063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:16:21 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 60) 18:16:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x138, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019020400900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:21 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x2}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xbe01], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:21 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x92020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1732.242354][T10063] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1732.250301][T10063] ---[ end trace 8542d17d5d84a012 ]--- 18:16:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019060400900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x13a, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xbe02], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019100400900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x148, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x160, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1732.293436][T10353] xt_l2tp: invalid flags combination: 0 [ 1732.330648][T10356] FAULT_INJECTION: forcing a failure. [ 1732.330648][T10356] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.366211][T10356] CPU: 0 PID: 10356 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1732.377856][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.387904][T10356] Call Trace: [ 1732.391189][T10356] dump_stack+0x18e/0x1de [ 1732.395512][T10356] should_fail+0x5d8/0x740 [ 1732.399271][T10351] xt_CT: No such helper "syz0" [ 1732.399928][T10356] ? __kernfs_new_node+0x8b/0x630 [ 1732.399939][T10356] should_failslab+0x5/0x20 [ 1732.399953][T10356] kmem_cache_alloc+0x36/0x290 [ 1732.418922][T10356] __kernfs_new_node+0x8b/0x630 [ 1732.423763][T10356] ? mutex_lock+0x6c/0xc0 [ 1732.428083][T10356] ? kernfs_activate+0x3fc/0x420 [ 1732.433015][T10356] kernfs_new_node+0x95/0x160 [ 1732.437683][T10356] __kernfs_create_file+0x45/0x260 [ 1732.442779][T10356] sysfs_add_file_mode_ns+0x293/0x340 [ 1732.448123][T10356] sysfs_merge_group+0x19b/0x320 [ 1732.453031][T10356] dpm_sysfs_add+0xbd/0x260 [ 1732.457503][T10356] device_add+0xcec/0x1820 [ 1732.461887][T10356] device_create_vargs+0x1b8/0x210 [ 1732.466980][T10356] device_create+0x86/0xb0 [ 1732.471366][T10356] ? vsnprintf+0x1a07/0x1aa0 [ 1732.475922][T10356] bdi_register_va+0x89/0x5e0 [ 1732.480565][T10356] bdi_register+0x80/0xa0 [ 1732.484865][T10356] ? __device_add_disk+0x50a/0x1220 [ 1732.490046][T10356] bdi_register_owner+0x56/0xf0 [ 1732.494954][T10356] __device_add_disk+0x583/0x1220 [ 1732.499951][T10356] loop_add+0x554/0x710 [ 1732.504100][T10356] loop_control_ioctl+0x468/0x680 [ 1732.509104][T10356] ? xor_init+0x60/0x60 [ 1732.513227][T10356] do_vfs_ioctl+0x6fb/0x15b0 [ 1732.517786][T10356] __x64_sys_ioctl+0xd4/0x110 [ 1732.522432][T10356] do_syscall_64+0xcb/0x1e0 [ 1732.528296][T10356] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1732.534173][T10356] RIP: 0033:0x7f6a3b7a7ae9 [ 1732.538557][T10356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1732.558126][T10356] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.566517][T10356] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1732.574468][T10356] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1732.582415][T10356] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1732.590355][T10356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1732.598305][T10356] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1732.608503][T10356] ------------[ cut here ]------------ [ 1732.613971][T10356] WARNING: CPU: 1 PID: 10356 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1732.623051][T10356] Modules linked in: [ 1732.626920][T10356] CPU: 1 PID: 10356 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1732.638513][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.648556][T10356] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1732.654339][T10356] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1732.673929][T10356] RSP: 0018:ffff8881ea697ce8 EFLAGS: 00010246 [ 1732.679978][T10356] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1732.687919][T10356] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1732.695949][T10356] RBP: ffff8881ef1ee718 R08: ffffffff82147a3e R09: 0000000000000010 [ 1732.703903][T10356] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1732.712119][T10356] R13: 1ffff1103520a201 R14: 1ffff1103520a29d R15: ffff8881a9051000 [ 1732.720088][T10356] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1732.728990][T10356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1732.735557][T10356] CR2: 00007fadccc08058 CR3: 00000001a6587000 CR4: 00000000003406e0 [ 1732.743514][T10356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1732.751473][T10356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1732.759419][T10356] Call Trace: [ 1732.762686][T10356] loop_add+0x554/0x710 [ 1732.766819][T10356] loop_control_ioctl+0x468/0x680 [ 1732.771815][T10356] ? xor_init+0x60/0x60 [ 1732.775946][T10356] do_vfs_ioctl+0x6fb/0x15b0 [ 1732.780522][T10356] __x64_sys_ioctl+0xd4/0x110 [ 1732.785180][T10356] do_syscall_64+0xcb/0x1e0 [ 1732.789677][T10356] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1732.795735][T10356] RIP: 0033:0x7f6a3b7a7ae9 [ 1732.800122][T10356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1732.819703][T10356] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.828100][T10356] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1732.836043][T10356] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1732.844074][T10356] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1732.852268][T10356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1732.860209][T10356] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:22 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 61) 18:16:22 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x3}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xc201], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x192, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x94000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000500900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1732.868159][T10356] ---[ end trace 8542d17d5d84a013 ]--- 18:16:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x1be, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000600900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xc203], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019030600900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xc600], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x1c2, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1732.913034][T10582] xt_l2tp: invalid flags combination: 0 [ 1732.935566][T10581] FAULT_INJECTION: forcing a failure. [ 1732.935566][T10581] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.984468][T10581] CPU: 0 PID: 10581 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1732.996195][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.006240][T10581] Call Trace: [ 1733.009526][T10581] dump_stack+0x18e/0x1de [ 1733.013847][T10581] should_fail+0x5d8/0x740 [ 1733.018252][T10581] ? __kernfs_new_node+0x8b/0x630 [ 1733.020778][T10577] xt_CT: No such helper "syz0" [ 1733.023256][T10581] should_failslab+0x5/0x20 [ 1733.023267][T10581] kmem_cache_alloc+0x36/0x290 [ 1733.023280][T10581] __kernfs_new_node+0x8b/0x630 [ 1733.042514][T10581] ? mutex_lock+0x6c/0xc0 [ 1733.046833][T10581] ? kernfs_activate+0x3fc/0x420 [ 1733.051760][T10581] kernfs_new_node+0x95/0x160 [ 1733.056425][T10581] __kernfs_create_file+0x45/0x260 [ 1733.061522][T10581] sysfs_add_file_mode_ns+0x293/0x340 [ 1733.066943][T10581] sysfs_merge_group+0x19b/0x320 [ 1733.071954][T10581] dpm_sysfs_add+0xbd/0x260 [ 1733.076424][T10581] device_add+0xcec/0x1820 [ 1733.080812][T10581] device_create_vargs+0x1b8/0x210 [ 1733.085890][T10581] device_create+0x86/0xb0 [ 1733.090272][T10581] ? vsnprintf+0x1a07/0x1aa0 [ 1733.094833][T10581] bdi_register_va+0x89/0x5e0 [ 1733.099477][T10581] bdi_register+0x80/0xa0 [ 1733.103791][T10581] ? __device_add_disk+0x50a/0x1220 [ 1733.108972][T10581] bdi_register_owner+0x56/0xf0 [ 1733.113814][T10581] __device_add_disk+0x583/0x1220 [ 1733.118821][T10581] loop_add+0x554/0x710 [ 1733.122950][T10581] loop_control_ioctl+0x468/0x680 [ 1733.127952][T10581] ? xor_init+0x60/0x60 [ 1733.132078][T10581] do_vfs_ioctl+0x6fb/0x15b0 [ 1733.136636][T10581] __x64_sys_ioctl+0xd4/0x110 [ 1733.141283][T10581] do_syscall_64+0xcb/0x1e0 [ 1733.145759][T10581] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1733.151639][T10581] RIP: 0033:0x7f6a3b7a7ae9 [ 1733.156035][T10581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.175618][T10581] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1733.183999][T10581] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1733.191953][T10581] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1733.199896][T10581] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.207856][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.215798][T10581] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1733.226613][T10581] ------------[ cut here ]------------ [ 1733.232081][T10581] WARNING: CPU: 1 PID: 10581 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1733.241168][T10581] Modules linked in: [ 1733.245058][T10581] CPU: 1 PID: 10581 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1733.256663][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.266806][T10581] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1733.272595][T10581] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1733.292175][T10581] RSP: 0018:ffff8881a6487ce8 EFLAGS: 00010246 [ 1733.298214][T10581] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1733.306158][T10581] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1733.314100][T10581] RBP: ffff8881ef1e8058 R08: ffffffff82147a3e R09: 0000000000000010 [ 1733.322042][T10581] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1733.329986][T10581] R13: 1ffff1103da09401 R14: 1ffff1103da0949d R15: ffff8881ed04a000 [ 1733.337934][T10581] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1733.346835][T10581] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1733.353390][T10581] CR2: 0000555557480b38 CR3: 00000001ab768000 CR4: 00000000003406e0 [ 1733.361345][T10581] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1733.369289][T10581] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1733.377229][T10581] Call Trace: [ 1733.380497][T10581] loop_add+0x554/0x710 [ 1733.384802][T10581] loop_control_ioctl+0x468/0x680 [ 1733.389799][T10581] ? xor_init+0x60/0x60 [ 1733.393938][T10581] do_vfs_ioctl+0x6fb/0x15b0 [ 1733.398503][T10581] __x64_sys_ioctl+0xd4/0x110 [ 1733.403171][T10581] do_syscall_64+0xcb/0x1e0 [ 1733.407659][T10581] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1733.413531][T10581] RIP: 0033:0x7f6a3b7a7ae9 [ 1733.417917][T10581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.437505][T10581] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1733.445885][T10581] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1733.453832][T10581] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1733.461805][T10581] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.469759][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.477703][T10581] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:22 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 62) 18:16:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xc602], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x1ee, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x9a030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019040600900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1733.485675][T10581] ---[ end trace 8542d17d5d84a014 ]--- 18:16:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xce02], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000700900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x1ef, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xde00], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000900900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:22 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x8}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1733.543435][T10807] xt_l2tp: invalid flags combination: 0 [ 1733.572165][T10804] FAULT_INJECTION: forcing a failure. [ 1733.572165][T10804] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.604109][T10804] CPU: 1 PID: 10804 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1733.615741][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.625784][T10804] Call Trace: [ 1733.629067][T10804] dump_stack+0x18e/0x1de [ 1733.633386][T10804] should_fail+0x5d8/0x740 [ 1733.636282][T10806] xt_CT: No such helper "syz0" [ 1733.637784][T10804] ? __kernfs_new_node+0x8b/0x630 [ 1733.637795][T10804] should_failslab+0x5/0x20 [ 1733.637804][T10804] kmem_cache_alloc+0x36/0x290 [ 1733.637817][T10804] __kernfs_new_node+0x8b/0x630 [ 1733.659344][T10921] xt_l2tp: invalid flags combination: 0 [ 1733.661728][T10804] ? mutex_lock+0x6c/0xc0 [ 1733.661740][T10804] ? kernfs_activate+0x3fc/0x420 [ 1733.661755][T10804] kernfs_new_node+0x95/0x160 [ 1733.681219][T10804] __kernfs_create_file+0x45/0x260 [ 1733.686327][T10804] sysfs_add_file_mode_ns+0x293/0x340 [ 1733.691721][T10804] sysfs_merge_group+0x19b/0x320 [ 1733.696636][T10804] dpm_sysfs_add+0xbd/0x260 [ 1733.701116][T10804] device_add+0xcec/0x1820 [ 1733.705517][T10804] device_create_vargs+0x1b8/0x210 [ 1733.710605][T10804] device_create+0x86/0xb0 [ 1733.714994][T10804] ? vsnprintf+0x1a07/0x1aa0 [ 1733.719558][T10804] bdi_register_va+0x89/0x5e0 [ 1733.724206][T10804] bdi_register+0x80/0xa0 [ 1733.728510][T10804] ? __device_add_disk+0x50a/0x1220 [ 1733.733680][T10804] bdi_register_owner+0x56/0xf0 [ 1733.738539][T10804] __device_add_disk+0x583/0x1220 [ 1733.743535][T10804] loop_add+0x554/0x710 [ 1733.747671][T10804] loop_control_ioctl+0x468/0x680 [ 1733.752666][T10804] ? xor_init+0x60/0x60 [ 1733.756827][T10804] do_vfs_ioctl+0x6fb/0x15b0 [ 1733.761390][T10804] __x64_sys_ioctl+0xd4/0x110 [ 1733.766216][T10804] do_syscall_64+0xcb/0x1e0 [ 1733.770745][T10804] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1733.776608][T10804] RIP: 0033:0x7f6a3b7a7ae9 [ 1733.781002][T10804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.800668][T10804] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1733.809052][T10804] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1733.817003][T10804] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1733.824952][T10804] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.832894][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.840858][T10804] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1733.854557][T10804] ------------[ cut here ]------------ [ 1733.860025][T10804] WARNING: CPU: 0 PID: 10804 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1733.869672][T10804] Modules linked in: [ 1733.873539][T10804] CPU: 0 PID: 10804 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1733.885126][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.895227][T10804] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1733.901003][T10804] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1733.920587][T10804] RSP: 0018:ffff88818e00fce8 EFLAGS: 00010246 [ 1733.926623][T10804] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1733.934564][T10804] RDX: ffffc90000144000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1733.942505][T10804] RBP: ffff8881ef25c4d8 R08: ffffffff82147a3e R09: 0000000000000010 [ 1733.950448][T10804] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1733.958389][T10804] R13: 1ffff1103c83e001 R14: 1ffff1103c83e09d R15: ffff8881e41f0000 [ 1733.966329][T10804] FS: 00007f6a3951e700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1733.975224][T10804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1733.981775][T10804] CR2: 00007ffeb37bae38 CR3: 000000019d043000 CR4: 00000000003406f0 [ 1733.989718][T10804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1733.997659][T10804] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1734.005599][T10804] Call Trace: [ 1734.008881][T10804] loop_add+0x554/0x710 [ 1734.013006][T10804] loop_control_ioctl+0x468/0x680 [ 1734.018000][T10804] ? xor_init+0x60/0x60 [ 1734.022124][T10804] do_vfs_ioctl+0x6fb/0x15b0 [ 1734.026684][T10804] __x64_sys_ioctl+0xd4/0x110 [ 1734.031331][T10804] do_syscall_64+0xcb/0x1e0 [ 1734.035808][T10804] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1734.041683][T10804] RIP: 0033:0x7f6a3b7a7ae9 [ 1734.046077][T10804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.065736][T10804] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.074116][T10804] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1734.082055][T10804] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1734.090083][T10804] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.098024][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:16:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 63) 18:16:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x1fc, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000a00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:23 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xa0000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:23 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x36}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xe603], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1734.105982][T10804] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1734.113939][T10804] ---[ end trace 8542d17d5d84a015 ]--- [ 1734.142813][T11130] l2tp_mt_check6: 35 callbacks suppressed [ 1734.142818][T11130] xt_l2tp: missing protocol rule (udp|l2tpip) 18:16:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000b00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x210, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1734.151802][T11134] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1734.163295][T11131] xt_l2tp: invalid flags combination: 0 18:16:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000c00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xe702], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x214, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:23 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x42}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1734.199949][T11205] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1734.220059][T11241] FAULT_INJECTION: forcing a failure. [ 1734.220059][T11241] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.244738][T11248] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1734.252021][T11241] CPU: 1 PID: 11241 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1734.260800][T11250] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1734.263638][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.263641][T11241] Call Trace: [ 1734.263658][T11241] dump_stack+0x18e/0x1de [ 1734.263675][T11241] should_fail+0x5d8/0x740 [ 1734.278214][T11135] xt_CT: No such helper "syz0" [ 1734.279759][T11241] ? __kernfs_new_node+0x8b/0x630 [ 1734.279771][T11241] should_failslab+0x5/0x20 [ 1734.279780][T11241] kmem_cache_alloc+0x36/0x290 [ 1734.279794][T11241] __kernfs_new_node+0x8b/0x630 [ 1734.302444][T11249] xt_l2tp: invalid flags combination: 0 [ 1734.306261][T11241] ? mutex_lock+0x6c/0xc0 [ 1734.306274][T11241] ? kernfs_activate+0x3fc/0x420 [ 1734.306284][T11241] kernfs_new_node+0x95/0x160 [ 1734.306294][T11241] __kernfs_create_file+0x45/0x260 [ 1734.306308][T11241] sysfs_add_file_mode_ns+0x293/0x340 [ 1734.346138][T11241] sysfs_merge_group+0x19b/0x320 [ 1734.351063][T11241] dpm_sysfs_add+0xbd/0x260 [ 1734.355552][T11241] device_add+0xcec/0x1820 [ 1734.359953][T11241] device_create_vargs+0x1b8/0x210 [ 1734.365033][T11241] device_create+0x86/0xb0 [ 1734.369417][T11241] ? vsnprintf+0x1a07/0x1aa0 [ 1734.374023][T11241] bdi_register_va+0x89/0x5e0 [ 1734.378671][T11241] bdi_register+0x80/0xa0 [ 1734.382972][T11241] ? __device_add_disk+0x50a/0x1220 [ 1734.388168][T11241] bdi_register_owner+0x56/0xf0 [ 1734.393186][T11241] __device_add_disk+0x583/0x1220 [ 1734.398199][T11241] loop_add+0x554/0x710 [ 1734.402337][T11241] loop_control_ioctl+0x468/0x680 [ 1734.407336][T11241] ? xor_init+0x60/0x60 [ 1734.411473][T11241] do_vfs_ioctl+0x6fb/0x15b0 [ 1734.416063][T11241] __x64_sys_ioctl+0xd4/0x110 [ 1734.420765][T11241] do_syscall_64+0xcb/0x1e0 [ 1734.425245][T11241] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1734.431208][T11241] RIP: 0033:0x7f6a3b7a7ae9 [ 1734.435598][T11241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.455171][T11241] RSP: 002b:00007f6a394fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.463563][T11241] RAX: ffffffffffffffda RBX: 00007f6a3b8bb020 RCX: 00007f6a3b7a7ae9 [ 1734.471525][T11241] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1734.479483][T11241] RBP: 00007f6a394fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.487428][T11241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1734.495370][T11241] R13: 00007ffddfaedadf R14: 00007f6a394fd300 R15: 0000000000022000 [ 1734.505341][T11241] ------------[ cut here ]------------ [ 1734.510809][T11241] WARNING: CPU: 0 PID: 11241 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 1734.519878][T11241] Modules linked in: [ 1734.523836][T11241] CPU: 0 PID: 11241 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1734.535430][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.545497][T11241] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 1734.551274][T11241] Code: ff e8 44 4c 4c ff 0f 0b e9 6b fe ff ff e8 38 4c 4c ff 0f 0b e9 a1 f2 ff ff e8 2c 4c 4c ff 0f 0b e9 5d f8 ff ff e8 20 4c 4c ff <0f> 0b e9 04 f7 ff ff e8 14 4c 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 1734.570867][T11241] RSP: 0018:ffff8881ec347ce8 EFLAGS: 00010246 [ 1734.576905][T11241] RAX: ffffffff82148340 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1734.584865][T11241] RDX: ffffc90000345000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1734.592814][T11241] RBP: ffff8881ef25de88 R08: ffffffff82147a3e R09: 0000000000000010 [ 1734.600759][T11241] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 1734.608758][T11241] R13: 1ffff11035508a01 R14: 1ffff11035508a9d R15: ffff8881aa845000 [ 1734.616708][T11241] FS: 00007f6a394fd700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1734.625609][T11241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1734.632173][T11241] CR2: 00007ffc7457dc98 CR3: 00000001ac19c000 CR4: 00000000003406f0 [ 1734.640123][T11241] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1734.648076][T11241] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1734.656038][T11241] Call Trace: [ 1734.659316][T11241] loop_add+0x554/0x710 [ 1734.663446][T11241] loop_control_ioctl+0x468/0x680 [ 1734.668440][T11241] ? xor_init+0x60/0x60 [ 1734.672583][T11241] do_vfs_ioctl+0x6fb/0x15b0 [ 1734.677168][T11241] __x64_sys_ioctl+0xd4/0x110 [ 1734.681824][T11241] do_syscall_64+0xcb/0x1e0 [ 1734.686344][T11241] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1734.692217][T11241] RIP: 0033:0x7f6a3b7a7ae9 [ 1734.696608][T11241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.716283][T11241] RSP: 002b:00007f6a394fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.724668][T11241] RAX: ffffffffffffffda RBX: 00007f6a3b8bb020 RCX: 00007f6a3b7a7ae9 [ 1734.732613][T11241] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1734.740649][T11241] RBP: 00007f6a394fd1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:24 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 64) 18:16:24 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xa4030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000d00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xee01], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x216, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x4a}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1734.748594][T11241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1734.756537][T11241] R13: 00007ffddfaedadf R14: 00007f6a394fd300 R15: 0000000000022000 [ 1734.764501][T11241] ---[ end trace 8542d17d5d84a016 ]--- 18:16:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000e00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xef01], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x228, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1734.800748][T11457] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1734.808822][T11463] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1734.824981][T11462] xt_l2tp: invalid flags combination: 0 [ 1734.839933][T11461] FAULT_INJECTION: forcing a failure. 18:16:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019041000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:24 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x52}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1734.839933][T11461] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.853644][T11470] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1734.865650][T11471] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1734.882766][T11461] CPU: 1 PID: 11461 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1734.894394][T11461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.904435][T11461] Call Trace: [ 1734.907724][T11461] dump_stack+0x18e/0x1de [ 1734.912048][T11461] should_fail+0x5d8/0x740 [ 1734.916452][T11461] ? kobject_uevent_env+0x252/0x1000 [ 1734.918860][T11460] xt_CT: No such helper "syz0" [ 1734.921728][T11461] should_failslab+0x5/0x20 [ 1734.921740][T11461] kmem_cache_alloc_trace+0x39/0x2b0 [ 1734.921748][T11461] ? sysfs_add_file_mode_ns+0x2b4/0x340 [ 1734.921762][T11461] kobject_uevent_env+0x252/0x1000 [ 1734.946900][T11461] ? mutex_lock+0x6c/0xc0 18:16:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xf000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1734.951222][T11461] device_add+0xecf/0x1820 [ 1734.954591][T11702] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1734.955682][T11461] device_create_vargs+0x1b8/0x210 [ 1734.955698][T11461] device_create+0x86/0xb0 [ 1734.971358][T11461] ? vsnprintf+0x1a07/0x1aa0 [ 1734.975940][T11461] bdi_register_va+0x89/0x5e0 [ 1734.980608][T11461] bdi_register+0x80/0xa0 [ 1734.984932][T11461] ? __device_add_disk+0x50a/0x1220 [ 1734.990125][T11461] bdi_register_owner+0x56/0xf0 [ 1734.994963][T11461] __device_add_disk+0x583/0x1220 [ 1735.000006][T11461] loop_add+0x554/0x710 [ 1735.004170][T11461] loop_control_ioctl+0x468/0x680 [ 1735.009165][T11461] ? xor_init+0x60/0x60 [ 1735.013290][T11461] do_vfs_ioctl+0x6fb/0x15b0 [ 1735.017847][T11461] __x64_sys_ioctl+0xd4/0x110 [ 1735.022494][T11461] do_syscall_64+0xcb/0x1e0 [ 1735.026964][T11461] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1735.032822][T11461] RIP: 0033:0x7f6a3b7a7ae9 [ 1735.037202][T11461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.056773][T11461] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1735.065151][T11461] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1735.073087][T11461] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1735.081025][T11461] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.088963][T11461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:16:24 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 65) 18:16:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xf200], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xa7000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019201000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:24 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x56}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x252, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1735.096901][T11461] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:24 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x5c}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019001100900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x25a, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xfa03], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019001200900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:24 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x71}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1735.210057][T11825] FAULT_INJECTION: forcing a failure. [ 1735.210057][T11825] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.228022][T11782] xt_CT: No such helper "syz0" [ 1735.234521][T11825] CPU: 1 PID: 11825 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1735.246142][T11825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.256186][T11825] Call Trace: [ 1735.259464][T11825] dump_stack+0x18e/0x1de [ 1735.263783][T11825] should_fail+0x5d8/0x740 [ 1735.268184][T11825] ? __alloc_skb+0x75/0x4d0 [ 1735.272660][T11825] should_failslab+0x5/0x20 [ 1735.277133][T11825] kmem_cache_alloc+0x36/0x290 [ 1735.281866][T11825] __alloc_skb+0x75/0x4d0 [ 1735.286167][T11825] ? mutex_lock+0x6c/0xc0 [ 1735.290469][T11825] alloc_uevent_skb+0x73/0x220 [ 1735.295202][T11825] kobject_uevent_env+0xaee/0x1000 [ 1735.300287][T11825] device_add+0xecf/0x1820 [ 1735.304675][T11825] device_create_vargs+0x1b8/0x210 [ 1735.309776][T11825] device_create+0x86/0xb0 [ 1735.314246][T11825] ? vsnprintf+0x1a07/0x1aa0 [ 1735.318815][T11825] bdi_register_va+0x89/0x5e0 [ 1735.323466][T11825] bdi_register+0x80/0xa0 [ 1735.327767][T11825] ? __device_add_disk+0x50a/0x1220 [ 1735.332948][T11825] bdi_register_owner+0x56/0xf0 [ 1735.337771][T11825] __device_add_disk+0x583/0x1220 [ 1735.342767][T11825] loop_add+0x554/0x710 [ 1735.346903][T11825] loop_control_ioctl+0x468/0x680 [ 1735.351906][T11825] ? xor_init+0x60/0x60 [ 1735.356032][T11825] do_vfs_ioctl+0x6fb/0x15b0 [ 1735.360592][T11825] __x64_sys_ioctl+0xd4/0x110 [ 1735.365260][T11825] do_syscall_64+0xcb/0x1e0 [ 1735.369742][T11825] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1735.375606][T11825] RIP: 0033:0x7f6a3b7a7ae9 [ 1735.379990][T11825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.399652][T11825] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:16:24 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 66) 18:16:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x268, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xb8000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xfc01], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019021400900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:24 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x74}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x272, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1735.408032][T11825] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1735.415985][T11825] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1735.423927][T11825] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.431867][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1735.439807][T11825] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019001600900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x27a, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xfc03], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1735.520595][T12196] FAULT_INJECTION: forcing a failure. [ 1735.520595][T12196] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.553314][T12196] CPU: 0 PID: 12196 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1735.564951][T12196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.575003][T12196] Call Trace: [ 1735.576285][T12213] xt_CT: No such helper "syz0" [ 1735.578292][T12196] dump_stack+0x18e/0x1de [ 1735.578313][T12196] should_fail+0x5d8/0x740 [ 1735.591788][T12196] ? kobject_uevent_env+0x252/0x1000 [ 1735.597166][T12196] should_failslab+0x5/0x20 [ 1735.601669][T12196] kmem_cache_alloc_trace+0x39/0x2b0 [ 1735.606949][T12196] ? sysfs_add_file_mode_ns+0x2b4/0x340 [ 1735.612491][T12196] kobject_uevent_env+0x252/0x1000 [ 1735.617598][T12196] ? mutex_lock+0x6c/0xc0 [ 1735.621920][T12196] device_add+0xecf/0x1820 [ 1735.626329][T12196] device_create_vargs+0x1b8/0x210 [ 1735.631437][T12196] device_create+0x86/0xb0 [ 1735.635841][T12196] ? vsnprintf+0x1a07/0x1aa0 [ 1735.640423][T12196] bdi_register_va+0x89/0x5e0 [ 1735.645097][T12196] bdi_register+0x80/0xa0 [ 1735.649415][T12196] ? __device_add_disk+0x50a/0x1220 [ 1735.654603][T12196] bdi_register_owner+0x56/0xf0 [ 1735.659445][T12196] __device_add_disk+0x583/0x1220 [ 1735.664459][T12196] loop_add+0x554/0x710 18:16:24 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xba000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1735.668600][T12196] loop_control_ioctl+0x468/0x680 [ 1735.673811][T12196] ? xor_init+0x60/0x60 [ 1735.677954][T12196] do_vfs_ioctl+0x6fb/0x15b0 [ 1735.682532][T12196] __x64_sys_ioctl+0xd4/0x110 [ 1735.687094][T12430] xt_CT: No such helper "syz0" [ 1735.687279][T12196] do_syscall_64+0xcb/0x1e0 [ 1735.687295][T12196] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1735.702371][T12196] RIP: 0033:0x7f6a3b7a7ae9 18:16:24 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xbc000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1735.706782][T12196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.726373][T12196] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1735.734780][T12196] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1735.742742][T12196] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1735.750703][T12196] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.758665][T12196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:16:25 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 67) 18:16:25 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x8b}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019001f00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x290, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x20000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1735.766624][T12196] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x292, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0xa0}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019002000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x2be, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xbe010000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x40000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019102000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1735.920611][T12874] FAULT_INJECTION: forcing a failure. [ 1735.920611][T12874] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.933233][T12874] CPU: 0 PID: 12874 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1735.944835][T12874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.954979][T12874] Call Trace: [ 1735.958244][T12874] dump_stack+0x18e/0x1de [ 1735.962550][T12874] should_fail+0x5d8/0x740 [ 1735.966940][T12874] ? skb_clone+0x1b2/0x360 [ 1735.971332][T12874] should_failslab+0x5/0x20 [ 1735.975815][T12874] kmem_cache_alloc+0x36/0x290 [ 1735.980574][T12874] ? string+0x280/0x2c0 [ 1735.984717][T12874] skb_clone+0x1b2/0x360 [ 1735.988953][T12874] netlink_broadcast_filtered+0x5e1/0x10b0 [ 1735.994737][T12874] ? skb_put+0x101/0x1e0 [ 1735.998958][T12874] netlink_broadcast+0x35/0x50 [ 1736.003691][T12874] kobject_uevent_env+0xb1f/0x1000 [ 1736.008780][T12874] device_add+0xecf/0x1820 [ 1736.013169][T12874] device_create_vargs+0x1b8/0x210 [ 1736.018267][T12874] device_create+0x86/0xb0 [ 1736.022658][T12874] ? vsnprintf+0x1a07/0x1aa0 [ 1736.027219][T12874] bdi_register_va+0x89/0x5e0 [ 1736.031864][T12874] bdi_register+0x80/0xa0 [ 1736.036166][T12874] ? __device_add_disk+0x50a/0x1220 [ 1736.041347][T12874] bdi_register_owner+0x56/0xf0 [ 1736.046167][T12874] __device_add_disk+0x583/0x1220 [ 1736.051165][T12874] loop_add+0x554/0x710 [ 1736.055300][T12874] loop_control_ioctl+0x468/0x680 [ 1736.060294][T12874] ? xor_init+0x60/0x60 [ 1736.064441][T12874] do_vfs_ioctl+0x6fb/0x15b0 [ 1736.069009][T12874] __x64_sys_ioctl+0xd4/0x110 [ 1736.073657][T12874] do_syscall_64+0xcb/0x1e0 [ 1736.078143][T12874] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1736.084023][T12874] RIP: 0033:0x7f6a3b7a7ae9 [ 1736.088429][T12874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.108003][T12874] RSP: 002b:00007f6a394fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:16:25 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 68) 18:16:25 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0xa7}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x2c6, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x1000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019002200900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:25 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xbe020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1736.116382][T12874] RAX: ffffffffffffffda RBX: 00007f6a3b8bb020 RCX: 00007f6a3b7a7ae9 [ 1736.124325][T12874] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1736.132285][T12874] RBP: 00007f6a394fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.140240][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.148189][T12874] R13: 00007ffddfaedadf R14: 00007f6a394fd300 R15: 0000000000022000 18:16:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x2000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019002500900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x2ce, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1736.193808][T12969] l2tp_mt_check: 7 callbacks suppressed [ 1736.193824][T12969] xt_l2tp: invalid flags combination: 0 [ 1736.213033][T12972] FAULT_INJECTION: forcing a failure. [ 1736.213033][T12972] name failslab, interval 1, probability 0, space 0, times 0 18:16:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x2e7, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1736.260881][T12972] CPU: 0 PID: 12972 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1736.272514][T12972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1736.282562][T12972] Call Trace: [ 1736.285847][T12972] dump_stack+0x18e/0x1de [ 1736.290173][T12972] should_fail+0x5d8/0x740 [ 1736.294588][T12972] ? skb_clone+0x1b2/0x360 [ 1736.299003][T12972] should_failslab+0x5/0x20 [ 1736.303502][T12972] kmem_cache_alloc+0x36/0x290 18:16:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x300, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1736.308338][T12972] ? string+0x280/0x2c0 [ 1736.312488][T12972] skb_clone+0x1b2/0x360 [ 1736.316725][T12972] netlink_broadcast_filtered+0x5e1/0x10b0 [ 1736.322526][T12972] ? skb_put+0x101/0x1e0 [ 1736.326767][T12972] netlink_broadcast+0x35/0x50 [ 1736.331524][T12972] kobject_uevent_env+0xb1f/0x1000 [ 1736.336716][T12972] device_add+0xecf/0x1820 [ 1736.341129][T12972] device_create_vargs+0x1b8/0x210 [ 1736.346335][T12972] device_create+0x86/0xb0 [ 1736.350738][T12972] ? vsnprintf+0x1a07/0x1aa0 [ 1736.355320][T12972] bdi_register_va+0x89/0x5e0 [ 1736.359987][T12972] bdi_register+0x80/0xa0 [ 1736.364309][T12972] ? __device_add_disk+0x50a/0x1220 [ 1736.369497][T12972] bdi_register_owner+0x56/0xf0 [ 1736.374337][T12972] __device_add_disk+0x583/0x1220 [ 1736.379351][T12972] loop_add+0x554/0x710 [ 1736.383494][T12972] loop_control_ioctl+0x468/0x680 [ 1736.388508][T12972] ? xor_init+0x60/0x60 [ 1736.392653][T12972] do_vfs_ioctl+0x6fb/0x15b0 [ 1736.397238][T12972] __x64_sys_ioctl+0xd4/0x110 [ 1736.401905][T12972] do_syscall_64+0xcb/0x1e0 [ 1736.406399][T12972] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1736.412283][T12972] RIP: 0033:0x7f6a3b7a7ae9 [ 1736.416950][T12972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.436542][T12972] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1736.445125][T12972] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1736.453087][T12972] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 18:16:25 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 69) [ 1736.461043][T12972] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.469005][T12972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.477053][T12972] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:25 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0xb8}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x30a, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019022a00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x8000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1736.546048][T12974] xt_ct_set_helper: 2 callbacks suppressed [ 1736.546059][T12974] xt_CT: No such helper "syz0" [ 1736.577947][T13098] xt_l2tp: invalid flags combination: 0 18:16:25 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xc2010000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019002e00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x322, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xa030000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0xba}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1736.595634][T13090] FAULT_INJECTION: forcing a failure. [ 1736.595634][T13090] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.630761][T13090] CPU: 0 PID: 13090 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 18:16:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x10020000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x11000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1736.642394][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1736.652446][T13090] Call Trace: [ 1736.655725][T13090] dump_stack+0x18e/0x1de [ 1736.660052][T13090] should_fail+0x5d8/0x740 [ 1736.664463][T13090] ? __d_alloc+0x2a/0x6a0 [ 1736.668790][T13090] should_failslab+0x5/0x20 [ 1736.673284][T13090] kmem_cache_alloc+0x36/0x290 [ 1736.678038][T13090] __d_alloc+0x2a/0x6a0 [ 1736.682184][T13090] ? kobject_uevent_env+0xbb2/0x1000 [ 1736.687551][T13090] d_alloc_parallel+0x7d/0x12b0 [ 1736.692387][T13090] ? avc_has_perm_noaudit+0x2fc/0x380 [ 1736.697748][T13090] ? avc_has_perm_noaudit+0x2b0/0x380 [ 1736.703105][T13090] ? __d_lookup+0x4b8/0x510 [ 1736.707595][T13090] __lookup_slow+0xef/0x3b0 [ 1736.712089][T13090] lookup_one_len+0x11d/0x210 [ 1736.716754][T13090] start_creating+0xec/0x270 [ 1736.721337][T13090] debugfs_create_dir+0x24/0x3f0 [ 1736.726281][T13090] bdi_register_va+0x232/0x5e0 [ 1736.731033][T13090] bdi_register+0x80/0xa0 [ 1736.731199][T13309] xt_CT: No such helper "syz0" [ 1736.735345][T13090] ? __device_add_disk+0x50a/0x1220 [ 1736.735355][T13090] bdi_register_owner+0x56/0xf0 [ 1736.735364][T13090] __device_add_disk+0x583/0x1220 [ 1736.735379][T13090] loop_add+0x554/0x710 [ 1736.759265][T13090] loop_control_ioctl+0x468/0x680 [ 1736.764281][T13090] ? xor_init+0x60/0x60 [ 1736.768431][T13090] do_vfs_ioctl+0x6fb/0x15b0 [ 1736.773015][T13090] __x64_sys_ioctl+0xd4/0x110 [ 1736.777679][T13090] do_syscall_64+0xcb/0x1e0 [ 1736.782173][T13090] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1736.788056][T13090] RIP: 0033:0x7f6a3b7a7ae9 [ 1736.792467][T13090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.812063][T13090] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1736.820474][T13090] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1736.828435][T13090] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1736.836404][T13090] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 18:16:26 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 70) 18:16:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x16020000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x32e, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xc2030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019003200900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:26 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0xc6}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1736.844370][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.852333][T13090] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1736.877461][T13416] xt_l2tp: invalid flags combination: 0 18:16:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x22030000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x330, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019033600900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1736.953766][T13530] xt_l2tp: invalid flags combination: 0 [ 1736.962436][T13527] FAULT_INJECTION: forcing a failure. [ 1736.962436][T13527] name failslab, interval 1, probability 0, space 0, times 0 18:16:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x28020000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x2e030000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1736.999610][T13527] CPU: 0 PID: 13527 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1737.011254][T13527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.021299][T13527] Call Trace: [ 1737.024588][T13527] dump_stack+0x18e/0x1de [ 1737.028917][T13527] should_fail+0x5d8/0x740 [ 1737.033335][T13527] ? new_inode_pseudo+0x79/0x220 [ 1737.038274][T13527] should_failslab+0x5/0x20 [ 1737.042772][T13527] kmem_cache_alloc+0x36/0x290 18:16:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x30030000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1737.047529][T13527] new_inode_pseudo+0x79/0x220 [ 1737.052286][T13527] new_inode+0x25/0x1d0 [ 1737.056442][T13527] ? start_creating+0x183/0x270 [ 1737.061292][T13527] debugfs_create_dir+0x68/0x3f0 [ 1737.066318][T13527] bdi_register_va+0x232/0x5e0 [ 1737.071071][T13527] bdi_register+0x80/0xa0 [ 1737.075392][T13527] ? __device_add_disk+0x50a/0x1220 [ 1737.080759][T13527] bdi_register_owner+0x56/0xf0 [ 1737.086098][T13527] __device_add_disk+0x583/0x1220 [ 1737.091120][T13527] loop_add+0x554/0x710 [ 1737.095362][T13527] loop_control_ioctl+0x468/0x680 [ 1737.100383][T13527] ? xor_init+0x60/0x60 [ 1737.104538][T13527] do_vfs_ioctl+0x6fb/0x15b0 [ 1737.109126][T13527] __x64_sys_ioctl+0xd4/0x110 [ 1737.113796][T13527] do_syscall_64+0xcb/0x1e0 [ 1737.118288][T13527] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1737.124166][T13527] RIP: 0033:0x7f6a3b7a7ae9 [ 1737.128570][T13527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.148359][T13527] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1737.156762][T13527] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1737.164722][T13527] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1737.172681][T13527] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.180729][T13527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1737.188687][T13527] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:26 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 71) 18:16:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x36000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0xde}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x369, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019013c00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:26 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xc6000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1737.246164][T13525] xt_CT: No such helper "syz0" [ 1737.251676][T13527] debugfs: out of free dentries, can not create directory '7:0' 18:16:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x38010000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x376, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019003f00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x3a010000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1737.328610][T13758] xt_l2tp: invalid flags combination: 0 [ 1737.340686][T13750] FAULT_INJECTION: forcing a failure. [ 1737.340686][T13750] name failslab, interval 1, probability 0, space 0, times 0 18:16:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019004000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1737.374391][T13750] CPU: 0 PID: 13750 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1737.386029][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.396073][T13750] Call Trace: [ 1737.399363][T13750] dump_stack+0x18e/0x1de [ 1737.403693][T13750] should_fail+0x5d8/0x740 [ 1737.408115][T13750] ? security_inode_alloc+0x32/0x1d0 [ 1737.413395][T13750] should_failslab+0x5/0x20 [ 1737.417892][T13750] kmem_cache_alloc+0x36/0x290 18:16:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019024000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1737.422648][T13750] security_inode_alloc+0x32/0x1d0 [ 1737.427750][T13750] inode_init_always+0x387/0x810 [ 1737.432682][T13750] new_inode_pseudo+0x90/0x220 [ 1737.437447][T13750] new_inode+0x25/0x1d0 [ 1737.441609][T13750] ? start_creating+0x183/0x270 [ 1737.447016][T13750] debugfs_create_dir+0x68/0x3f0 [ 1737.451944][T13750] bdi_register_va+0x232/0x5e0 [ 1737.456698][T13750] bdi_register+0x80/0xa0 [ 1737.461023][T13750] ? __device_add_disk+0x50a/0x1220 [ 1737.466212][T13750] bdi_register_owner+0x56/0xf0 [ 1737.471051][T13750] __device_add_disk+0x583/0x1220 [ 1737.476068][T13750] loop_add+0x554/0x710 [ 1737.480216][T13750] loop_control_ioctl+0x468/0x680 [ 1737.485243][T13750] ? xor_init+0x60/0x60 [ 1737.489390][T13750] do_vfs_ioctl+0x6fb/0x15b0 [ 1737.493976][T13750] __x64_sys_ioctl+0xd4/0x110 [ 1737.498642][T13750] do_syscall_64+0xcb/0x1e0 [ 1737.503138][T13750] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1737.509014][T13750] RIP: 0033:0x7f6a3b7a7ae9 [ 1737.513414][T13750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.533005][T13750] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1737.541412][T13750] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1737.549374][T13750] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1737.557338][T13750] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.565292][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1737.573290][T13750] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1737.611005][T13754] xt_CT: No such helper "syz0" 18:16:26 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 72) 18:16:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019004800900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:26 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0xe3}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x39a, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x40000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xc6020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1737.655975][T13750] debugfs: out of free dentries, can not create directory '7:0' 18:16:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x3a4, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x42000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019004c00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x3b8, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019006000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:27 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0xf0}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1737.730125][T13980] xt_l2tp: invalid flags combination: 0 [ 1737.736340][T13981] FAULT_INJECTION: forcing a failure. [ 1737.736340][T13981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1737.797266][T13982] xt_CT: No such helper "syz0" [ 1737.801490][T13981] CPU: 1 PID: 13981 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1737.813666][T13981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.823707][T13981] Call Trace: [ 1737.826994][T13981] dump_stack+0x18e/0x1de [ 1737.831321][T13981] should_fail+0x5d8/0x740 [ 1737.835735][T13981] __alloc_pages_nodemask+0x12e/0x740 [ 1737.841099][T13981] __get_free_pages+0xa/0x30 [ 1737.845680][T13981] inode_doinit_with_dentry+0x8d4/0x1170 [ 1737.851305][T13981] security_d_instantiate+0xa5/0x100 [ 1737.856578][T13981] d_instantiate+0x51/0x90 [ 1737.860987][T13981] debugfs_create_dir+0x1bc/0x3f0 [ 1737.866004][T13981] bdi_register_va+0x232/0x5e0 [ 1737.870760][T13981] bdi_register+0x80/0xa0 [ 1737.875088][T13981] ? __device_add_disk+0x50a/0x1220 [ 1737.880274][T13981] bdi_register_owner+0x56/0xf0 [ 1737.885114][T13981] __device_add_disk+0x583/0x1220 [ 1737.890132][T13981] loop_add+0x554/0x710 [ 1737.894276][T13981] loop_control_ioctl+0x468/0x680 [ 1737.899290][T13981] ? xor_init+0x60/0x60 [ 1737.903435][T13981] do_vfs_ioctl+0x6fb/0x15b0 [ 1737.908022][T13981] __x64_sys_ioctl+0xd4/0x110 [ 1737.912687][T13981] do_syscall_64+0xcb/0x1e0 [ 1737.917179][T13981] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1737.923235][T13981] RIP: 0033:0x7f6a3b7a7ae9 [ 1737.927643][T13981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.947236][T13981] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1737.955656][T13981] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1737.963614][T13981] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1737.971574][T13981] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.979541][T13981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1737.987502][T13981] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:27 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 73) 18:16:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x48010000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019006800900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x3c2, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0xf2}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xce020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x3e6, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019006c00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x4a000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1738.060776][T14304] xt_l2tp: invalid flags combination: 0 18:16:27 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x13a}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x50010000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019017200900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1738.101786][T14307] FAULT_INJECTION: forcing a failure. [ 1738.101786][T14307] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.128627][T14420] xt_l2tp: invalid flags combination: 0 [ 1738.150336][T14307] CPU: 0 PID: 14307 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1738.161965][T14307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.172003][T14307] Call Trace: [ 1738.175294][T14307] dump_stack+0x18e/0x1de [ 1738.179623][T14307] should_fail+0x5d8/0x740 [ 1738.184034][T14307] ? __d_alloc+0x2a/0x6a0 [ 1738.188351][T14307] should_failslab+0x5/0x20 [ 1738.192840][T14307] kmem_cache_alloc+0x36/0x290 [ 1738.197588][T14307] ? stack_trace_save+0xc4/0x160 [ 1738.202511][T14307] __d_alloc+0x2a/0x6a0 [ 1738.206654][T14307] ? save_stack+0x107/0x170 [ 1738.207758][T14308] xt_CT: No such helper "syz0" [ 1738.211140][T14307] d_alloc_parallel+0x7d/0x12b0 [ 1738.211149][T14307] ? avc_has_perm_noaudit+0x2fc/0x380 [ 1738.211158][T14307] ? avc_has_perm_noaudit+0x2b0/0x380 [ 1738.211169][T14307] ? __d_lookup+0x4b8/0x510 [ 1738.211178][T14307] __lookup_slow+0xef/0x3b0 [ 1738.211190][T14307] lookup_one_len+0x11d/0x210 [ 1738.245054][T14307] start_creating+0xec/0x270 [ 1738.249637][T14307] __debugfs_create_file+0x74/0x460 [ 1738.254830][T14307] ? debugfs_create_dir+0x302/0x3f0 [ 1738.260022][T14307] bdi_register_va+0x274/0x5e0 [ 1738.264773][T14307] bdi_register+0x80/0xa0 [ 1738.269094][T14307] ? __device_add_disk+0x50a/0x1220 [ 1738.274282][T14307] bdi_register_owner+0x56/0xf0 [ 1738.279124][T14307] __device_add_disk+0x583/0x1220 [ 1738.284139][T14307] loop_add+0x554/0x710 [ 1738.288284][T14307] loop_control_ioctl+0x468/0x680 [ 1738.293321][T14307] ? xor_init+0x60/0x60 [ 1738.297466][T14307] do_vfs_ioctl+0x6fb/0x15b0 [ 1738.302054][T14307] __x64_sys_ioctl+0xd4/0x110 [ 1738.306719][T14307] do_syscall_64+0xcb/0x1e0 [ 1738.311217][T14307] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1738.317098][T14307] RIP: 0033:0x7f6a3b7a7ae9 [ 1738.321498][T14307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.341090][T14307] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:16:27 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 74) 18:16:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x3fa, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x50020000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019007400900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:27 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xe6030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x148}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1738.349491][T14307] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1738.357449][T14307] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1738.365422][T14307] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.373560][T14307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1738.381604][T14307] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x3fc, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x52000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019017800900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1738.450889][T14642] FAULT_INJECTION: forcing a failure. [ 1738.450889][T14642] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.464719][T14640] xt_l2tp: invalid flags combination: 0 18:16:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019007a00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1738.494335][T14642] CPU: 0 PID: 14642 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1738.505991][T14642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.516036][T14642] Call Trace: [ 1738.519359][T14642] dump_stack+0x18e/0x1de [ 1738.523690][T14642] should_fail+0x5d8/0x740 [ 1738.528099][T14642] ? new_inode_pseudo+0x79/0x220 [ 1738.533024][T14642] should_failslab+0x5/0x20 [ 1738.537701][T14642] kmem_cache_alloc+0x36/0x290 18:16:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019027a00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019029d00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1738.542465][T14642] new_inode_pseudo+0x79/0x220 [ 1738.547231][T14642] new_inode+0x25/0x1d0 [ 1738.551377][T14642] ? start_creating+0x183/0x270 [ 1738.556217][T14642] __debugfs_create_file+0xb5/0x460 [ 1738.561414][T14642] ? debugfs_create_dir+0x302/0x3f0 [ 1738.566604][T14642] bdi_register_va+0x274/0x5e0 [ 1738.571361][T14642] bdi_register+0x80/0xa0 [ 1738.576290][T14642] ? __device_add_disk+0x50a/0x1220 [ 1738.581472][T14642] bdi_register_owner+0x56/0xf0 [ 1738.586313][T14642] __device_add_disk+0x583/0x1220 [ 1738.591327][T14642] loop_add+0x554/0x710 [ 1738.595506][T14642] loop_control_ioctl+0x468/0x680 [ 1738.600521][T14642] ? xor_init+0x60/0x60 [ 1738.604671][T14642] do_vfs_ioctl+0x6fb/0x15b0 [ 1738.609259][T14642] __x64_sys_ioctl+0xd4/0x110 [ 1738.614040][T14642] do_syscall_64+0xcb/0x1e0 [ 1738.618544][T14642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1738.624433][T14642] RIP: 0033:0x7f6a3b7a7ae9 [ 1738.628840][T14642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.648435][T14642] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.656846][T14642] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1738.664819][T14642] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1738.672884][T14642] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.680848][T14642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:16:27 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 75) 18:16:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001901bf00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x52020000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x500, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1738.688807][T14642] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1738.697779][T14642] debugfs: out of free dentries, can not create file 'stats' [ 1738.723796][T14641] xt_CT: No such helper "syz0" 18:16:28 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xe7020000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x150}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001903c100900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x56030000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x600, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1738.789005][T14766] FAULT_INJECTION: forcing a failure. [ 1738.789005][T14766] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.819970][T14766] CPU: 1 PID: 14766 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1738.831599][T14766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.841653][T14766] Call Trace: [ 1738.844936][T14766] dump_stack+0x18e/0x1de [ 1738.849261][T14766] should_fail+0x5d8/0x740 [ 1738.853675][T14766] ? security_inode_alloc+0x32/0x1d0 [ 1738.858952][T14766] should_failslab+0x5/0x20 [ 1738.863449][T14766] kmem_cache_alloc+0x36/0x290 [ 1738.868208][T14766] security_inode_alloc+0x32/0x1d0 [ 1738.873310][T14766] inode_init_always+0x387/0x810 [ 1738.878324][T14766] new_inode_pseudo+0x90/0x220 [ 1738.883077][T14766] new_inode+0x25/0x1d0 [ 1738.887309][T14766] ? start_creating+0x183/0x270 [ 1738.892152][T14766] __debugfs_create_file+0xb5/0x460 [ 1738.897339][T14766] ? debugfs_create_dir+0x302/0x3f0 [ 1738.902528][T14766] bdi_register_va+0x274/0x5e0 [ 1738.907280][T14766] bdi_register+0x80/0xa0 [ 1738.911598][T14766] ? __device_add_disk+0x50a/0x1220 [ 1738.916784][T14766] bdi_register_owner+0x56/0xf0 [ 1738.921624][T14766] __device_add_disk+0x583/0x1220 [ 1738.926640][T14766] loop_add+0x554/0x710 [ 1738.930787][T14766] loop_control_ioctl+0x468/0x680 18:16:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001902c300900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x5a020000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900c900900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1738.935798][T14766] ? xor_init+0x60/0x60 [ 1738.939941][T14766] do_vfs_ioctl+0x6fb/0x15b0 [ 1738.944522][T14766] __x64_sys_ioctl+0xd4/0x110 [ 1738.949187][T14766] do_syscall_64+0xcb/0x1e0 [ 1738.953680][T14766] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1738.959556][T14766] RIP: 0033:0x7f6a3b7a7ae9 [ 1738.963957][T14766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.973817][T14879] xt_CT: No such helper "syz0" [ 1738.983639][T14766] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.983648][T14766] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1738.983653][T14766] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1738.983657][T14766] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.983661][T14766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1738.983665][T14766] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:28 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 76) 18:16:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001901d500900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x5c000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x160}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1738.988477][T14766] debugfs: out of free dentries, can not create file 'stats' [ 1739.084775][T14992] xt_l2tp: invalid flags combination: 0 [ 1739.123422][T14995] FAULT_INJECTION: forcing a failure. [ 1739.123422][T14995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1739.136841][T14995] CPU: 0 PID: 14995 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1739.148452][T14995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.158494][T14995] Call Trace: [ 1739.161781][T14995] dump_stack+0x18e/0x1de [ 1739.166540][T14995] should_fail+0x5d8/0x740 [ 1739.170988][T14995] __alloc_pages_nodemask+0x12e/0x740 [ 1739.176444][T14995] __get_free_pages+0xa/0x30 [ 1739.181020][T14995] inode_doinit_with_dentry+0x8d4/0x1170 [ 1739.186654][T14995] security_d_instantiate+0xa5/0x100 [ 1739.191934][T14995] d_instantiate+0x51/0x90 [ 1739.196344][T14995] __debugfs_create_file+0x256/0x460 [ 1739.201703][T14995] bdi_register_va+0x274/0x5e0 [ 1739.206541][T14995] bdi_register+0x80/0xa0 [ 1739.210863][T14995] ? __device_add_disk+0x50a/0x1220 [ 1739.216045][T14995] bdi_register_owner+0x56/0xf0 [ 1739.220885][T14995] __device_add_disk+0x583/0x1220 [ 1739.225902][T14995] loop_add+0x554/0x710 [ 1739.230048][T14995] loop_control_ioctl+0x468/0x680 [ 1739.235072][T14995] ? xor_init+0x60/0x60 [ 1739.239215][T14995] do_vfs_ioctl+0x6fb/0x15b0 [ 1739.243796][T14995] __x64_sys_ioctl+0xd4/0x110 [ 1739.248722][T14995] do_syscall_64+0xcb/0x1e0 [ 1739.253236][T14995] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1739.259114][T14995] RIP: 0033:0x7f6a3b7a7ae9 [ 1739.263519][T14995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.283108][T14995] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1739.291516][T14995] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1739.299477][T14995] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1739.307437][T14995] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.315405][T14995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.323370][T14995] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:28 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xea030000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x700, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x60010000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019ffe000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:28 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x1be}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 77) 18:16:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900e300900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:28 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x1c2}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1739.400363][T15207] l2tp_mt_check6: 58 callbacks suppressed [ 1739.400367][T15207] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1739.425562][T15210] xt_l2tp: missing protocol rule (udp|l2tpip) 18:16:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x900, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1739.451317][T15211] FAULT_INJECTION: forcing a failure. [ 1739.451317][T15211] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.487609][T15211] CPU: 1 PID: 15211 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1739.499249][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.509640][T15211] Call Trace: [ 1739.512921][T15211] dump_stack+0x18e/0x1de [ 1739.517247][T15211] should_fail+0x5d8/0x740 [ 1739.521645][T15211] ? kobj_map+0x70/0x650 [ 1739.523132][T15209] xt_CT: No such helper "syz0" [ 1739.525958][T15211] should_failslab+0x5/0x20 [ 1739.525968][T15211] __kmalloc+0x5f/0x2f0 [ 1739.525977][T15211] kobj_map+0x70/0x650 [ 1739.525987][T15211] ? exact_match+0x10/0x10 [ 1739.526001][T15211] ? refcount_inc_checked+0x1a/0x50 [ 1739.552961][T15211] ? disk_check_events+0x580/0x580 [ 1739.558064][T15211] __device_add_disk+0x5ff/0x1220 [ 1739.563168][T15211] loop_add+0x554/0x710 [ 1739.567317][T15211] loop_control_ioctl+0x468/0x680 [ 1739.572330][T15211] ? xor_init+0x60/0x60 [ 1739.576477][T15211] do_vfs_ioctl+0x6fb/0x15b0 [ 1739.581081][T15211] __x64_sys_ioctl+0xd4/0x110 [ 1739.585752][T15211] do_syscall_64+0xcb/0x1e0 [ 1739.590250][T15211] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1739.596128][T15211] RIP: 0033:0x7f6a3b7a7ae9 18:16:28 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xee010000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1739.600526][T15211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.620217][T15211] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1739.626132][T15624] xt_CT: No such helper "syz0" [ 1739.628615][T15211] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1739.628621][T15211] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 18:16:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x68020000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xa00, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x1ee}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001901eb00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1739.628626][T15211] RBP: 00007f6a3951e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.628630][T15211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.628635][T15211] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 18:16:28 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x1ef}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001903f000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x69030000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1739.701258][T15632] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1739.705670][T15643] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1739.771005][T15839] xt_l2tp: missing protocol rule (udp|l2tpip) 18:16:29 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (fail_nth: 78) 18:16:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xa03, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:29 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xef010000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001903f800900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x6a030000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:29 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x1fc}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001903f900900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x70000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1739.854259][T15951] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1739.854938][T15949] xt_l2tp: missing protocol rule (udp|l2tpip) 18:16:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xb00, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:29 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x210}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x71000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900fc00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1739.919923][T16058] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1739.947604][T16060] FAULT_INJECTION: forcing a failure. [ 1739.947604][T16060] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.959176][T16063] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1739.981945][T16065] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1740.018365][T16060] CPU: 0 PID: 16060 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1740.029997][T16060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.040041][T16060] Call Trace: [ 1740.043326][T16060] dump_stack+0x18e/0x1de [ 1740.047651][T16060] should_fail+0x5d8/0x740 [ 1740.052066][T16060] ? kobject_set_name_vargs+0x5d/0x110 [ 1740.057521][T16060] should_failslab+0x5/0x20 [ 1740.062019][T16060] __kmalloc_track_caller+0x5d/0x2e0 [ 1740.067301][T16060] kstrdup_const+0x51/0x90 [ 1740.071712][T16060] kobject_set_name_vargs+0x5d/0x110 [ 1740.076989][T16060] dev_set_name+0x80/0xa0 [ 1740.081306][T16060] ? kobj_map+0x61e/0x650 [ 1740.085625][T16060] __device_add_disk+0x678/0x1220 [ 1740.090666][T16060] loop_add+0x554/0x710 [ 1740.094817][T16060] loop_control_ioctl+0x468/0x680 [ 1740.099840][T16060] ? xor_init+0x60/0x60 [ 1740.103987][T16060] do_vfs_ioctl+0x6fb/0x15b0 [ 1740.108573][T16060] __x64_sys_ioctl+0xd4/0x110 [ 1740.113239][T16060] do_syscall_64+0xcb/0x1e0 [ 1740.117733][T16060] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1740.123705][T16060] RIP: 0033:0x7f6a3b7a7ae9 [ 1740.128110][T16060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.147872][T16060] RSP: 002b:00007f6a394fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1740.156358][T16060] RAX: ffffffffffffffda RBX: 00007f6a3b8bb020 RCX: 00007f6a3b7a7ae9 [ 1740.164318][T16060] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1740.172275][T16060] RBP: 00007f6a394fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.180234][T16060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.188281][T16060] R13: 00007ffddfaedadf R14: 00007f6a394fd300 R15: 0000000000022000 [ 1740.208887][T16060] kobject_add_internal failed for queue (error: -2 parent: (null)) [ 1740.217072][T16060] ------------[ cut here ]------------ [ 1740.222971][T16060] WARNING: CPU: 0 PID: 16060 at fs/sysfs/file.c:328 sysfs_create_files+0x1ef/0x380 [ 1740.232226][T16060] Modules linked in: [ 1740.236198][T16060] CPU: 0 PID: 16060 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1740.247806][T16060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.257860][T16060] RIP: 0010:sysfs_create_files+0x1ef/0x380 [ 1740.263655][T16060] Code: 85 ed 0f 84 a4 00 00 00 e8 be 96 ae ff 89 eb 48 8b 6c 24 10 4c 8b 7c 24 28 e9 ad fe ff ff e8 a8 96 ae ff eb 05 e8 a1 96 ae ff <0f> 0b 41 bc ea ff ff ff eb 8d 3c 03 0f 8f a1 fe ff ff 48 8d 7c 24 [ 1740.283253][T16060] RSP: 0018:ffff8881e8797c68 EFLAGS: 00010246 [ 1740.289302][T16060] RAX: ffffffff81b238bf RBX: 0000000000000000 RCX: 0000000000040000 [ 1740.297263][T16060] RDX: ffffc90000345000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1740.305222][T16060] RBP: ffff8881aa68c0a0 R08: ffffffff821b27cc R09: ffffed103d0f2f8b [ 1740.313181][T16060] R10: ffffed103d0f2f8b R11: 0000000000000000 R12: dffffc0000000000 [ 1740.321145][T16060] R13: ffffffff84e292c0 R14: dffffc0000000000 R15: ffff8881aa68c070 [ 1740.329113][T16060] FS: 00007f6a394fd700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1740.338025][T16060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1740.344594][T16060] CR2: 00007fadca87b718 CR3: 00000001e0cf6000 CR4: 00000000003406f0 [ 1740.352552][T16060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1740.360699][T16060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1740.368654][T16060] Call Trace: [ 1740.371946][T16060] __device_add_disk+0xced/0x1220 [ 1740.376966][T16060] loop_add+0x554/0x710 [ 1740.381113][T16060] loop_control_ioctl+0x468/0x680 [ 1740.386127][T16060] ? xor_init+0x60/0x60 [ 1740.390274][T16060] do_vfs_ioctl+0x6fb/0x15b0 [ 1740.394858][T16060] __x64_sys_ioctl+0xd4/0x110 [ 1740.399522][T16060] do_syscall_64+0xcb/0x1e0 [ 1740.404015][T16060] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1740.409898][T16060] RIP: 0033:0x7f6a3b7a7ae9 [ 1740.414322][T16060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.433924][T16060] RSP: 002b:00007f6a394fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1740.442762][T16060] RAX: ffffffffffffffda RBX: 00007f6a3b8bb020 RCX: 00007f6a3b7a7ae9 [ 1740.450720][T16060] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1740.458683][T16060] RBP: 00007f6a394fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.466641][T16060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.474604][T16060] R13: 00007ffddfaedadf R14: 00007f6a394fd300 R15: 0000000000022000 [ 1740.482568][T16060] ---[ end trace 8542d17d5d84a017 ]--- [ 1740.491315][T16060] ------------[ cut here ]------------ [ 1740.496904][T16060] kernfs: can not remove 'events', no directory [ 1740.503834][T16060] WARNING: CPU: 0 PID: 16060 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 1740.513532][T16060] Modules linked in: [ 1740.517426][T16060] CPU: 0 PID: 16060 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1740.529027][T16060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.539084][T16060] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 1740.545229][T16060] Code: 48 89 c3 e8 61 f2 ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 50 f2 ae ff 48 c7 c7 40 bf cb 84 4c 89 fe 31 c0 e8 1f 79 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 f2 ae ff bb fe ff ff ff 48 c7 c7 [ 1740.564825][T16060] RSP: 0018:ffff8881e8797c48 EFLAGS: 00010246 [ 1740.570877][T16060] RAX: 95eaefe851598700 RBX: 0000000000000000 RCX: 0000000000040000 [ 1740.578836][T16060] RDX: ffffc90000345000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1740.586806][T16060] RBP: ffffffff84e292c0 R08: ffffffff814b2a4c R09: ffffed103edc9608 [ 1740.594770][T16060] R10: ffffed103edc9608 R11: 0000000000000000 R12: 00000000ffffffea [ 1740.602826][T16060] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff84e29380 [ 1740.610796][T16060] FS: 00007f6a394fd700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1740.619712][T16060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1740.626285][T16060] CR2: 00007fadca87b718 CR3: 00000001e0cf6000 CR4: 00000000003406f0 [ 1740.634246][T16060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1740.642210][T16060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1740.650170][T16060] Call Trace: [ 1740.653453][T16060] sysfs_create_files+0x321/0x380 [ 1740.658472][T16060] __device_add_disk+0xced/0x1220 [ 1740.663489][T16060] loop_add+0x554/0x710 [ 1740.667636][T16060] loop_control_ioctl+0x468/0x680 [ 1740.672649][T16060] ? xor_init+0x60/0x60 [ 1740.676795][T16060] do_vfs_ioctl+0x6fb/0x15b0 [ 1740.681415][T16060] __x64_sys_ioctl+0xd4/0x110 [ 1740.686080][T16060] do_syscall_64+0xcb/0x1e0 [ 1740.690574][T16060] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1740.696451][T16060] RIP: 0033:0x7f6a3b7a7ae9 [ 1740.700853][T16060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.720449][T16060] RSP: 002b:00007f6a394fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:16:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 18:16:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xc00, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1740.728886][T16060] RAX: ffffffffffffffda RBX: 00007f6a3b8bb020 RCX: 00007f6a3b7a7ae9 [ 1740.736850][T16060] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1740.744816][T16060] RBP: 00007f6a394fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.752776][T16060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.760734][T16060] R13: 00007ffddfaedadf R14: 00007f6a394fd300 R15: 0000000000022000 [ 1740.768697][T16060] ---[ end trace 8542d17d5d84a018 ]--- [ 1740.776972][T16060] loop0: failed to create sysfs files for events 18:16:30 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c000000290000032abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d0002000d0000000100130006000500036192b45dd4b300f95b90d60b8b57cb8b0ca034f6f50b0100000048f101a629be91f15c4a36e59b441b68ea11207d97286b1e7216c8105b40cec559f90a790cf7c850090000000ccd3178f7a2fa5e30f852486bfc481faf549731dbb711e161d2aee0636880ae36ddc15ee4bc6c523ed4dd99dc9aabc6aa9397d7f4cd2a582cb0e967dba4ca757ba7bbe7f6fd8199895d2084969540af0710d3cc8b7eae728b2416b3f40bc0fd1b5973ea2a950000000000000000000000000000008e8b86f66519f0978da59d5591a776d66d17044a3fe1c8db94b4fe404ddcf2689ef510a71ebcadc991a3875a57b43b68a79f3b9e7d891f96f26cdb228867fa88ce668e97eba707b48ef805e0d515110253a022f2bae275e073e6fa585e2b18b271058844bd4f0630b2bc0f7c6575f4ddca56026243565d5e40ea1fae5a239c48c6c491d00d792e4d19bcbec419e511323b102b2ec9a368c21ad7325261ec42bf7e830d0613fe43df5c7537272b5899a4d94450929bd5d8ccd6a876832630e7f30fdbc1dd9931d940184824df487b6e6a81a40a3fd9ed3c1b799dc5e74ad9883fbf13f5681589f0eb6f1bb9ad6f6e35923fca19548b535a23d11852baadf8dc898cc73248f84ce427110be3f58761deaa1c58a36d668598b91b886989356ad318a3f782a465e6f15e0f7a852abbe28f8bfdb7ff94d3572d93b8b53f7e3b162e92586b88d10e714ac153cd2f4f27ec124ae0b02ba621158278e0e58f9f59932bd848bc0d9c3af94e2b9d15245300000000000000000000000021699606421e09fc293a98010e4f51916021ae62b9e40efbce2539d168f319741c5be95169087d4fd14d94d8dc72747121f6c8d2a171edce3518044c6a7708d1a7a944fbde641f0e04fb01cb80ea154f7633dd0582cbafcfb30952d3fca45d1988f23e56771dfede06b41492de8d14364448ea3e708723a32bbe"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xf0000000], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:30 executing program 3: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x490f1bcc}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x0, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x228}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190fff00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) 18:16:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x72020000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xd00, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0xe00, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019e0ff00900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012a00)) [ 1740.846198][T16277] ------------[ cut here ]------------ [ 1740.865900][T16277] kernfs: can not remove 'events', no directory [ 1740.881402][T16277] WARNING: CPU: 1 PID: 16277 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 1740.891146][T16277] Modules linked in: [ 1740.895038][T16277] CPU: 1 PID: 16277 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1740.906643][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.916700][T16277] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 1740.922869][T16277] Code: 48 89 c3 e8 61 f2 ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 50 f2 ae ff 48 c7 c7 40 bf cb 84 4c 89 fe 31 c0 e8 1f 79 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 f2 ae ff bb fe ff ff ff 48 c7 c7 [ 1740.942985][T16277] RSP: 0018:ffff8881e4447cf8 EFLAGS: 00010246 [ 1740.949042][T16277] RAX: aa28e2bdca642b00 RBX: 0000000000000000 RCX: ffff8881eb880fc0 [ 1740.956999][T16277] RDX: 0000000000000003 RSI: 000000000001bd51 RDI: 0000000000000000 [ 1740.964960][T16277] RBP: ffffffff85e46960 R08: ffffffff814b2a4c R09: 0000000000006f55 [ 1740.972924][T16277] R10: ffffc90000144000 R11: 0000000000000000 R12: 0000000000000000 [ 1740.980973][T16277] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84e29380 [ 1740.988937][T16277] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1740.997854][T16277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1741.004451][T16277] CR2: 0000001b2f021000 CR3: 00000001aa150000 CR4: 00000000003406e0 [ 1741.012417][T16277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1741.020377][T16277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1741.028334][T16277] Call Trace: [ 1741.031636][T16277] sysfs_remove_files+0x99/0xf0 [ 1741.036570][T16277] del_gendisk+0x259/0xb70 [ 1741.040982][T16277] ? radix_tree_delete_item+0x22a/0x320 [ 1741.046519][T16277] loop_control_ioctl+0x563/0x680 [ 1741.051616][T16277] ? xor_init+0x60/0x60 [ 1741.055764][T16277] do_vfs_ioctl+0x6fb/0x15b0 [ 1741.060350][T16277] __x64_sys_ioctl+0xd4/0x110 [ 1741.065022][T16277] do_syscall_64+0xcb/0x1e0 [ 1741.069515][T16277] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1741.075390][T16277] RIP: 0033:0x7f6a3b7a7ae9 [ 1741.079789][T16277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.099654][T16277] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.108056][T16277] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1741.116454][T16277] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1741.124436][T16277] RBP: 00007f6a3b801f6d R08: 0000000000000000 R09: 0000000000000000 [ 1741.132396][T16277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 18:16:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x73000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x1002, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 18:16:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x8, 0x160, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xe6030000], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x74000000], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 1741.140379][T16277] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1741.148863][T16277] ---[ end trace 8542d17d5d84a019 ]--- [ 1741.175576][T16277] ------------[ cut here ]------------ [ 1741.181671][T16277] kernfs: can not remove 'events_async', no directory [ 1741.188671][T16277] WARNING: CPU: 1 PID: 16277 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 1741.198372][T16277] Modules linked in: [ 1741.202260][T16277] CPU: 1 PID: 16277 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1741.213951][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.224006][T16277] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 1741.230149][T16277] Code: 48 89 c3 e8 61 f2 ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 50 f2 ae ff 48 c7 c7 40 bf cb 84 4c 89 fe 31 c0 e8 1f 79 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 f2 ae ff bb fe ff ff ff 48 c7 c7 [ 1741.249739][T16277] RSP: 0018:ffff8881e4447cf8 EFLAGS: 00010246 [ 1741.255794][T16277] RAX: aa28e2bdca642b00 RBX: 0000000000000000 RCX: ffff8881eb880fc0 [ 1741.263750][T16277] RDX: 0000000000000003 RSI: 0000000080000000 RDI: 0000000000000000 [ 1741.271710][T16277] RBP: ffffffff85e46960 R08: ffffffff814b2a4c R09: 000000000000ffff [ 1741.279669][T16277] R10: ffffc90000144000 R11: 0000000000000000 R12: 0000000000000000 [ 1741.287631][T16277] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84e294c0 [ 1741.295589][T16277] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1741.304504][T16277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1741.311103][T16277] CR2: 00007f45beced000 CR3: 00000001aa150000 CR4: 00000000003406e0 [ 1741.319064][T16277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1741.327019][T16277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1741.334972][T16277] Call Trace: [ 1741.338258][T16277] sysfs_remove_files+0x99/0xf0 [ 1741.343102][T16277] del_gendisk+0x259/0xb70 [ 1741.347509][T16277] ? radix_tree_delete_item+0x22a/0x320 [ 1741.353042][T16277] loop_control_ioctl+0x563/0x680 [ 1741.358056][T16277] ? xor_init+0x60/0x60 [ 1741.362203][T16277] do_vfs_ioctl+0x6fb/0x15b0 [ 1741.366788][T16277] __x64_sys_ioctl+0xd4/0x110 [ 1741.371450][T16277] do_syscall_64+0xcb/0x1e0 [ 1741.375944][T16277] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1741.381821][T16277] RIP: 0033:0x7f6a3b7a7ae9 [ 1741.386221][T16277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.405815][T16277] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.414295][T16277] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1741.422344][T16277] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1741.430303][T16277] RBP: 00007f6a3b801f6d R08: 0000000000000000 R09: 0000000000000000 [ 1741.438292][T16277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1741.446252][T16277] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1741.454215][T16277] ---[ end trace 8542d17d5d84a01a ]--- [ 1741.460908][T16277] ------------[ cut here ]------------ [ 1741.466489][T16277] kernfs: can not remove 'events_poll_msecs', no directory [ 1741.474781][T16277] WARNING: CPU: 1 PID: 16277 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 1741.484480][T16277] Modules linked in: [ 1741.488370][T16277] CPU: 1 PID: 16277 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1741.499979][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.510038][T16277] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 1741.516180][T16277] Code: 48 89 c3 e8 61 f2 ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 50 f2 ae ff 48 c7 c7 40 bf cb 84 4c 89 fe 31 c0 e8 1f 79 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 f2 ae ff bb fe ff ff ff 48 c7 c7 [ 1741.535792][T16277] RSP: 0018:ffff8881e4447cf8 EFLAGS: 00010246 [ 1741.541847][T16277] RAX: aa28e2bdca642b00 RBX: 0000000000000000 RCX: ffff8881eb880fc0 [ 1741.549812][T16277] RDX: 0000000000000003 RSI: 0000000080000000 RDI: 0000000000000000 [ 1741.557865][T16277] RBP: ffffffff85e46960 R08: ffffffff814b2a4c R09: 000000000000ffff [ 1741.565833][T16277] R10: ffffc90000144000 R11: 0000000000000000 R12: 0000000000000000 [ 1741.573797][T16277] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84e29500 [ 1741.581766][T16277] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1741.590684][T16277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1741.597261][T16277] CR2: 00007f45beced000 CR3: 00000001aa150000 CR4: 00000000003406e0 [ 1741.605229][T16277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1741.613195][T16277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1741.621156][T16277] Call Trace: [ 1741.624446][T16277] sysfs_remove_files+0x99/0xf0 [ 1741.629291][T16277] del_gendisk+0x259/0xb70 [ 1741.633728][T16277] ? radix_tree_delete_item+0x22a/0x320 [ 1741.639270][T16277] loop_control_ioctl+0x563/0x680 [ 1741.644311][T16277] ? xor_init+0x60/0x60 [ 1741.648466][T16277] do_vfs_ioctl+0x6fb/0x15b0 [ 1741.653052][T16277] __x64_sys_ioctl+0xd4/0x110 [ 1741.657720][T16277] do_syscall_64+0xcb/0x1e0 [ 1741.662222][T16277] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1741.668198][T16277] RIP: 0033:0x7f6a3b7a7ae9 [ 1741.672606][T16277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.692206][T16277] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.700611][T16277] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1741.708584][T16277] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1741.716549][T16277] RBP: 00007f6a3b801f6d R08: 0000000000000000 R09: 0000000000000000 [ 1741.724515][T16277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1741.732478][T16277] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1741.740448][T16277] ---[ end trace 8542d17d5d84a01b ]--- [ 1741.751517][T16277] ------------[ cut here ]------------ [ 1741.757007][T16277] kernfs: can not remove 'bdi', no directory [ 1741.763112][T16277] WARNING: CPU: 1 PID: 16277 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 1741.772895][T16277] Modules linked in: [ 1741.776869][T16277] CPU: 1 PID: 16277 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1741.788642][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.798699][T16277] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 1741.804930][T16277] Code: 48 89 c3 e8 61 f2 ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 50 f2 ae ff 48 c7 c7 40 bf cb 84 4c 89 fe 31 c0 e8 1f 79 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 31 f2 ae ff bb fe ff ff ff 48 c7 c7 [ 1741.824528][T16277] RSP: 0018:ffff8881e4447d38 EFLAGS: 00010246 [ 1741.830587][T16277] RAX: aa28e2bdca642b00 RBX: 0000000000000000 RCX: ffff8881eb880fc0 [ 1741.838550][T16277] RDX: 0000000000000003 RSI: 0000000080000000 RDI: 0000000000000000 [ 1741.846524][T16277] RBP: 0000000000000000 R08: ffffffff814b2a4c R09: 000000000000ffff [ 1741.854491][T16277] R10: ffffc90000144000 R11: 0000000000000000 R12: 1ffff110354d1800 [ 1741.862459][T16277] R13: ffff8881aa68c4e8 R14: 0000000000000000 R15: ffffffff84e28da0 [ 1741.870430][T16277] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1741.879348][T16277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1741.885919][T16277] CR2: 0000001b2ee33000 CR3: 00000001aa150000 CR4: 00000000003406e0 [ 1741.893881][T16277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1741.901847][T16277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1741.909807][T16277] Call Trace: [ 1741.913094][T16277] del_gendisk+0x543/0xb70 [ 1741.917508][T16277] loop_control_ioctl+0x563/0x680 [ 1741.922527][T16277] ? xor_init+0x60/0x60 [ 1741.926678][T16277] do_vfs_ioctl+0x6fb/0x15b0 [ 1741.931265][T16277] __x64_sys_ioctl+0xd4/0x110 [ 1741.935936][T16277] do_syscall_64+0xcb/0x1e0 [ 1741.940436][T16277] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1741.946317][T16277] RIP: 0033:0x7f6a3b7a7ae9 [ 1741.950723][T16277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.970317][T16277] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.978720][T16277] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1741.986680][T16277] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1741.994644][T16277] RBP: 00007f6a3b801f6d R08: 0000000000000000 R09: 0000000000000000 [ 1742.002736][T16277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.010698][T16277] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1742.018663][T16277] ---[ end trace 8542d17d5d84a01c ]--- [ 1742.025588][T16277] kasan: CONFIG_KASAN_INLINE enabled [ 1742.031461][T16277] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1742.039566][T16277] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1742.046491][T16277] CPU: 1 PID: 16277 Comm: syz-executor.0 Tainted: G W 5.4.147-syzkaller-00010-g697fba25ed27 #0 [ 1742.058096][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.068156][T16277] RIP: 0010:strlen+0x27/0x60 [ 1742.072817][T16277] Code: 0f 1f 00 41 57 41 56 53 49 89 fe 49 bf 00 00 00 00 00 fc ff df 48 89 f8 66 66 2e 0f 1f 84 00 00 00 00 00 48 89 c3 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 0b 48 8d 43 01 80 3b 00 75 e7 eb 13 89 d9 [ 1742.092410][T16277] RSP: 0018:ffff8881e4447cd0 EFLAGS: 00010246 [ 1742.098501][T16277] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000200001 [ 1742.106461][T16277] RDX: 0000000000200000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1742.114598][T16277] RBP: 0000000000000000 R08: ffffffff81b1affb R09: 000000000000ffff [ 1742.122564][T16277] R10: ffffc90000144000 R11: 0000000000000000 R12: ffff8881f2fcdc80 [ 1742.130528][T16277] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1742.138505][T16277] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1742.147428][T16277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1742.154030][T16277] CR2: 0000001b2ee33000 CR3: 00000001aa150000 CR4: 00000000003406e0 [ 1742.162016][T16277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1742.169992][T16277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1742.177950][T16277] Call Trace: [ 1742.181242][T16277] kernfs_find_ns+0x83/0x430 [ 1742.185846][T16277] ? mutex_lock+0x6c/0xc0 [ 1742.190170][T16277] kernfs_remove_by_name_ns+0x32/0x90 [ 1742.195530][T16277] del_gendisk+0x93d/0xb70 [ 1742.199943][T16277] loop_control_ioctl+0x563/0x680 [ 1742.204959][T16277] ? xor_init+0x60/0x60 [ 1742.209110][T16277] do_vfs_ioctl+0x6fb/0x15b0 [ 1742.213693][T16277] __x64_sys_ioctl+0xd4/0x110 [ 1742.219684][T16277] do_syscall_64+0xcb/0x1e0 [ 1742.224178][T16277] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1742.230058][T16277] RIP: 0033:0x7f6a3b7a7ae9 [ 1742.234463][T16277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.254141][T16277] RSP: 002b:00007f6a3951e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1742.262545][T16277] RAX: ffffffffffffffda RBX: 00007f6a3b8baf60 RCX: 00007f6a3b7a7ae9 [ 1742.270504][T16277] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1742.278466][T16277] RBP: 00007f6a3b801f6d R08: 0000000000000000 R09: 0000000000000000 [ 1742.286429][T16277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.294389][T16277] R13: 00007ffddfaedadf R14: 00007f6a3951e300 R15: 0000000000022000 [ 1742.302351][T16277] Modules linked in: [ 1742.306532][T16277] ---[ end trace 8542d17d5d84a01d ]--- [ 1742.312065][T16277] RIP: 0010:strlen+0x27/0x60 [ 1742.316645][T16277] Code: 0f 1f 00 41 57 41 56 53 49 89 fe 49 bf 00 00 00 00 00 fc ff df 48 89 f8 66 66 2e 0f 1f 84 00 00 00 00 00 48 89 c3 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 0b 48 8d 43 01 80 3b 00 75 e7 eb 13 89 d9 [ 1742.336300][T16277] RSP: 0018:ffff8881e4447cd0 EFLAGS: 00010246 [ 1742.342436][T16277] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000200001 [ 1742.350439][T16277] RDX: 0000000000200000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1742.358424][T16277] RBP: 0000000000000000 R08: ffffffff81b1affb R09: 000000000000ffff [ 1742.366490][T16277] R10: ffffc90000144000 R11: 0000000000000000 R12: ffff8881f2fcdc80 [ 1742.374566][T16277] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1742.382569][T16277] FS: 00007f6a3951e700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1742.391531][T16277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1742.398101][T16277] CR2: 0000001b2ee33000 CR3: 00000001aa150000 CR4: 00000000003406e0 [ 1742.412848][T16277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1742.436374][T16277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1742.444585][T16277] Kernel panic - not syncing: Fatal exception [ 1742.450866][T16277] Kernel Offset: disabled [ 1742.455242][T16277] Rebooting in 86400 seconds..