40)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x0, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:05 executing program 4: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 554.011093][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) [ 554.462636][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:06 executing program 4: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:22:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:22:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) [ 555.315362][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x0, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) [ 555.677400][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:07 executing program 4: sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 556.103204][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:08 executing program 4: sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:08 executing program 4: sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) 14:22:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 557.837548][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:09 executing program 4: getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) 14:22:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 558.654211][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:10 executing program 4: getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) [ 559.495142][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) 14:22:11 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 560.063193][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:11 executing program 4: getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) [ 560.398804][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:11 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:12 executing program 3: sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:12 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) [ 561.201622][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:12 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001280)="d560b8bdcff7e94ff4c849c6b75178213a6390acd232547ce8dffcb68b62bbe5ed6deff19c28a7b18bec307636a3e918fafa5c16b880a2b7e1127ab7e6a0b45ab38b1dcabb43a336540c1cd444b60ffacb778f32f8dcf083a220914c", 0x5c}, {&(0x7f0000001380)="8d7bbdc2de4443837f9fbc4dc34bcf8ac1a346265bfcaaac3d54d1099b7f6d8de0ed81cee5de6b87b6813a0d6eeaba28b5db14f1ab159c363ddf6d18ca11a29ce94a5871a06834c2033c8374604b75002a8d5fda45c874e495adf13dd618cf74e50ee588d59b624999cf0edaf9222dc03f04286be7138bfc222f013399e2fb1d5033504b327c237ee012470d921f91757515fbeffb4c69917f377ff38f9aac08e026a209c6b3adfb5e7f6849b275f6a6641132fa3956c66d2f9d04196c8c7c39d4e86c", 0xc3}, {&(0x7f0000001480)="e0a9b96661eadd0b71805dff8e6c3f8e550366557e379aeb634886d5b938b5c4d93cfc683d618722f3f0e3309017775ce2a2ea68d5e2d6079331eb4a5eeff286d103ded1de06d5fb389fbee633f1fa0705d8bcc6d79a22bb3f7a2115f7a675eef26326a87e5543ee177625baa8a425bda15e268e2e9d79f18f3a15fe4a", 0x7d}, {&(0x7f0000001540)="6be6c62168b9f665af0cce021e69ad58ab4027138484fc5fbbad2c77a9a81e01def64acf70ea8f1ef3d0c189aca83d64c782d5663c79db6f5dc612c149568890b3d69b01c4450a5549afd33de35dec42764e7dc2a8c7d50f9b428f667a4884a37e693d8d6387226aa134af100366bb2177078277c883c4f2a9077175b7e90d1a98e62de85559016b", 0x88}, {&(0x7f0000001600)="25b60eda603a99bcdd04d4a9c360d1778d9350494fda91022301cf6b4a89f851f3fd8b0c695bf33960b54f08f5778aeac0ef1cecf32fb360d78793f3285ce8df0282204e58401923dd23d9e1f3c766918c0c514a89ab01fa", 0x58}, {&(0x7f0000002680)="f5359aa0901b07b8e8eb7289f64823f93b86c6391e927d78bb5d95930272f03953a3f7e1fd7471c1", 0x28}, {0x0}], 0x7, &(0x7f0000002a40)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYRES32, @ANYRES8=r1, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="0000000002000000d4bdb0c1f907fc76511b558b3d4508ea9b17322cfa3d5e0ae76ca9ee36cf483e2cce64503f2d631a20f9988d31b4b4be48d8aead6ce44bd21738b366dbf714a90c481889bc2887eb8b00570dac2621a804fc2da759ff82aeaa3fc93426053292a14c2d5db1e047fb535a6c254c17a2421b1a675f82f4837f69cef035a04d1b7bf579c70c72b3", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000001cd0b5c5e76a6fa"], 0x78, 0x5}}], 0x1, 0x20000094) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x20, @private1, 0x80}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r5 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000100)) [ 561.713754][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 14:22:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001280)="d560b8bdcff7e94ff4c849c6b75178213a6390acd232547ce8dffcb68b62bbe5ed6deff19c28a7b18bec307636a3e918fafa5c16b880a2b7e1127ab7e6a0b45ab38b1dcabb43a336540c1cd444b60ffacb778f32f8dcf083a220914c", 0x5c}, {&(0x7f0000001380)="8d7bbdc2de4443837f9fbc4dc34bcf8ac1a346265bfcaaac3d54d1099b7f6d8de0ed81cee5de6b87b6813a0d6eeaba28b5db14f1ab159c363ddf6d18ca11a29ce94a5871a06834c2033c8374604b75002a8d5fda45c874e495adf13dd618cf74e50ee588d59b624999cf0edaf9222dc03f04286be7138bfc222f013399e2fb1d5033504b327c237ee012470d921f91757515fbeffb4c69917f377ff38f9aac08e026a209c6b3adfb5e7f6849b275f6a6641132fa3956c66d2f9d04196c8c7c39d4e86c", 0xc3}, {&(0x7f0000001480)="e0a9b96661eadd0b71805dff8e6c3f8e550366557e379aeb634886d5b938b5c4d93cfc683d618722f3f0e3309017775ce2a2ea68d5e2d6079331eb4a5eeff286d103ded1de06d5fb389fbee633f1fa0705d8bcc6d79a22bb3f7a2115f7a675eef26326a87e5543ee177625baa8a425bda15e268e2e9d79f18f3a15fe4a", 0x7d}, {&(0x7f0000001540)="6be6c62168b9f665af0cce021e69ad58ab4027138484fc5fbbad2c77a9a81e01def64acf70ea8f1ef3d0c189aca83d64c782d5663c79db6f5dc612c149568890b3d69b01c4450a5549afd33de35dec42764e7dc2a8c7d50f9b428f667a4884a37e693d8d6387226aa134af100366bb2177078277c883c4f2a9077175b7e90d1a98e62de85559016b", 0x88}, {&(0x7f0000001600)="25b60eda603a99bcdd04d4a9c360d1778d9350494fda91022301cf6b4a89f851f3fd8b0c695bf33960b54f08f5778aeac0ef1cecf32fb360d78793f3285ce8df0282204e58401923dd23d9e1f3c766918c0c514a89ab01fa", 0x58}, {&(0x7f0000002680)="f5359aa0901b07b8e8eb7289f64823f93b86c6391e927d78bb5d95930272f03953a3f7e1fd7471c1", 0x28}, {0x0}], 0x7, &(0x7f0000002a40)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYRES32, @ANYRES8=r1, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="0000000002000000d4bdb0c1f907fc76511b558b3d4508ea9b17322cfa3d5e0ae76ca9ee36cf483e2cce64503f2d631a20f9988d31b4b4be48d8aead6ce44bd21738b366dbf714a90c481889bc2887eb8b00570dac2621a804fc2da759ff82aeaa3fc93426053292a14c2d5db1e047fb535a6c254c17a2421b1a675f82f4837f69cef035a04d1b7bf579c70c72b3", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000001cd0b5c5e76a6fa"], 0x78, 0x5}}], 0x1, 0x20000094) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x20, @private1, 0x80}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r5 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000100)) 14:22:13 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 562.259081][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001280)="d560b8bdcff7e94ff4c849c6b75178213a6390acd232547ce8dffcb68b62bbe5ed6deff19c28a7b18bec307636a3e918fafa5c16b880a2b7e1127ab7e6a0b45ab38b1dcabb43a336540c1cd444b60ffacb778f32f8dcf083a220914c", 0x5c}, {&(0x7f0000001380)="8d7bbdc2de4443837f9fbc4dc34bcf8ac1a346265bfcaaac3d54d1099b7f6d8de0ed81cee5de6b87b6813a0d6eeaba28b5db14f1ab159c363ddf6d18ca11a29ce94a5871a06834c2033c8374604b75002a8d5fda45c874e495adf13dd618cf74e50ee588d59b624999cf0edaf9222dc03f04286be7138bfc222f013399e2fb1d5033504b327c237ee012470d921f91757515fbeffb4c69917f377ff38f9aac08e026a209c6b3adfb5e7f6849b275f6a6641132fa3956c66d2f9d04196c8c7c39d4e86c", 0xc3}, {&(0x7f0000001480)="e0a9b96661eadd0b71805dff8e6c3f8e550366557e379aeb634886d5b938b5c4d93cfc683d618722f3f0e3309017775ce2a2ea68d5e2d6079331eb4a5eeff286d103ded1de06d5fb389fbee633f1fa0705d8bcc6d79a22bb3f7a2115f7a675eef26326a87e5543ee177625baa8a425bda15e268e2e9d79f18f3a15fe4a", 0x7d}, {&(0x7f0000001540)="6be6c62168b9f665af0cce021e69ad58ab4027138484fc5fbbad2c77a9a81e01def64acf70ea8f1ef3d0c189aca83d64c782d5663c79db6f5dc612c149568890b3d69b01c4450a5549afd33de35dec42764e7dc2a8c7d50f9b428f667a4884a37e693d8d6387226aa134af100366bb2177078277c883c4f2a9077175b7e90d1a98e62de85559016b", 0x88}, {&(0x7f0000001600)="25b60eda603a99bcdd04d4a9c360d1778d9350494fda91022301cf6b4a89f851f3fd8b0c695bf33960b54f08f5778aeac0ef1cecf32fb360d78793f3285ce8df0282204e58401923dd23d9e1f3c766918c0c514a89ab01fa", 0x58}, {&(0x7f0000002680)="f5359aa0901b07b8e8eb7289f64823f93b86c6391e927d78bb5d95930272f03953a3f7e1fd7471c1", 0x28}, {0x0}], 0x7, &(0x7f0000002a40)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYRES32, @ANYRES8=r1, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="0000000002000000d4bdb0c1f907fc76511b558b3d4508ea9b17322cfa3d5e0ae76ca9ee36cf483e2cce64503f2d631a20f9988d31b4b4be48d8aead6ce44bd21738b366dbf714a90c481889bc2887eb8b00570dac2621a804fc2da759ff82aeaa3fc93426053292a14c2d5db1e047fb535a6c254c17a2421b1a675f82f4837f69cef035a04d1b7bf579c70c72b3", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000001cd0b5c5e76a6fa"], 0x78, 0x5}}], 0x1, 0x20000094) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x20, @private1, 0x80}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r5 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000100)) 14:22:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:13 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 562.670510][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001280)="d560b8bdcff7e94ff4c849c6b75178213a6390acd232547ce8dffcb68b62bbe5ed6deff19c28a7b18bec307636a3e918fafa5c16b880a2b7e1127ab7e6a0b45ab38b1dcabb43a336540c1cd444b60ffacb778f32f8dcf083a220914c", 0x5c}, {&(0x7f0000001380)="8d7bbdc2de4443837f9fbc4dc34bcf8ac1a346265bfcaaac3d54d1099b7f6d8de0ed81cee5de6b87b6813a0d6eeaba28b5db14f1ab159c363ddf6d18ca11a29ce94a5871a06834c2033c8374604b75002a8d5fda45c874e495adf13dd618cf74e50ee588d59b624999cf0edaf9222dc03f04286be7138bfc222f013399e2fb1d5033504b327c237ee012470d921f91757515fbeffb4c69917f377ff38f9aac08e026a209c6b3adfb5e7f6849b275f6a6641132fa3956c66d2f9d04196c8c7c39d4e86c", 0xc3}, {&(0x7f0000001480)="e0a9b96661eadd0b71805dff8e6c3f8e550366557e379aeb634886d5b938b5c4d93cfc683d618722f3f0e3309017775ce2a2ea68d5e2d6079331eb4a5eeff286d103ded1de06d5fb389fbee633f1fa0705d8bcc6d79a22bb3f7a2115f7a675eef26326a87e5543ee177625baa8a425bda15e268e2e9d79f18f3a15fe4a", 0x7d}, {&(0x7f0000001540)="6be6c62168b9f665af0cce021e69ad58ab4027138484fc5fbbad2c77a9a81e01def64acf70ea8f1ef3d0c189aca83d64c782d5663c79db6f5dc612c149568890b3d69b01c4450a5549afd33de35dec42764e7dc2a8c7d50f9b428f667a4884a37e693d8d6387226aa134af100366bb2177078277c883c4f2a9077175b7e90d1a98e62de85559016b", 0x88}, {&(0x7f0000001600)="25b60eda603a99bcdd04d4a9c360d1778d9350494fda91022301cf6b4a89f851f3fd8b0c695bf33960b54f08f5778aeac0ef1cecf32fb360d78793f3285ce8df0282204e58401923dd23d9e1f3c766918c0c514a89ab01fa", 0x58}, {&(0x7f0000002680)="f5359aa0901b07b8e8eb7289f64823f93b86c6391e927d78bb5d95930272f03953a3f7e1fd7471c1", 0x28}, {0x0}], 0x7, &(0x7f0000002a40)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYRES32, @ANYRES8=r1, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="0000000002000000d4bdb0c1f907fc76511b558b3d4508ea9b17322cfa3d5e0ae76ca9ee36cf483e2cce64503f2d631a20f9988d31b4b4be48d8aead6ce44bd21738b366dbf714a90c481889bc2887eb8b00570dac2621a804fc2da759ff82aeaa3fc93426053292a14c2d5db1e047fb535a6c254c17a2421b1a675f82f4837f69cef035a04d1b7bf579c70c72b3", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000001cd0b5c5e76a6fa"], 0x78, 0x5}}], 0x1, 0x20000094) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x20, @private1, 0x80}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r5 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000100)) 14:22:14 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:14 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:14 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:14 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001280)="d560b8bdcff7e94ff4c849c6b75178213a6390acd232547ce8dffcb68b62bbe5ed6deff19c28a7b18bec307636a3e918fafa5c16b880a2b7e1127ab7e6a0b45ab38b1dcabb43a336540c1cd444b60ffacb778f32f8dcf083a220914c", 0x5c}, {&(0x7f0000001380)="8d7bbdc2de4443837f9fbc4dc34bcf8ac1a346265bfcaaac3d54d1099b7f6d8de0ed81cee5de6b87b6813a0d6eeaba28b5db14f1ab159c363ddf6d18ca11a29ce94a5871a06834c2033c8374604b75002a8d5fda45c874e495adf13dd618cf74e50ee588d59b624999cf0edaf9222dc03f04286be7138bfc222f013399e2fb1d5033504b327c237ee012470d921f91757515fbeffb4c69917f377ff38f9aac08e026a209c6b3adfb5e7f6849b275f6a6641132fa3956c66d2f9d04196c8c7c39d4e86c", 0xc3}, {&(0x7f0000001480)="e0a9b96661eadd0b71805dff8e6c3f8e550366557e379aeb634886d5b938b5c4d93cfc683d618722f3f0e3309017775ce2a2ea68d5e2d6079331eb4a5eeff286d103ded1de06d5fb389fbee633f1fa0705d8bcc6d79a22bb3f7a2115f7a675eef26326a87e5543ee177625baa8a425bda15e268e2e9d79f18f3a15fe4a", 0x7d}, {&(0x7f0000001540)="6be6c62168b9f665af0cce021e69ad58ab4027138484fc5fbbad2c77a9a81e01def64acf70ea8f1ef3d0c189aca83d64c782d5663c79db6f5dc612c149568890b3d69b01c4450a5549afd33de35dec42764e7dc2a8c7d50f9b428f667a4884a37e693d8d6387226aa134af100366bb2177078277c883c4f2a9077175b7e90d1a98e62de85559016b", 0x88}, {&(0x7f0000001600)="25b60eda603a99bcdd04d4a9c360d1778d9350494fda91022301cf6b4a89f851f3fd8b0c695bf33960b54f08f5778aeac0ef1cecf32fb360d78793f3285ce8df0282204e58401923dd23d9e1f3c766918c0c514a89ab01fa", 0x58}, {&(0x7f0000002680)="f5359aa0901b07b8e8eb7289f64823f93b86c6391e927d78bb5d95930272f03953a3f7e1fd7471c1", 0x28}, {0x0}], 0x7, &(0x7f0000002a40)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYRES32, @ANYRES8=r1, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="0000000002000000d4bdb0c1f907fc76511b558b3d4508ea9b17322cfa3d5e0ae76ca9ee36cf483e2cce64503f2d631a20f9988d31b4b4be48d8aead6ce44bd21738b366dbf714a90c481889bc2887eb8b00570dac2621a804fc2da759ff82aeaa3fc93426053292a14c2d5db1e047fb535a6c254c17a2421b1a675f82f4837f69cef035a04d1b7bf579c70c72b3", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000001cd0b5c5e76a6fa"], 0x78, 0x5}}], 0x1, 0x20000094) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x20, @private1, 0x80}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r5 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000100)) [ 563.816190][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:15 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:15 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:15 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:15 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:16 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:16 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:16 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:17 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001280)="d560b8bdcff7e94ff4c849c6b75178213a6390acd232547ce8dffcb68b62bbe5ed6deff19c28a7b18bec307636a3e918fafa5c16b880a2b7e1127ab7e6a0b45ab38b1dcabb43a336540c1cd444b60ffacb778f32f8dcf083a220914c", 0x5c}, {&(0x7f0000001380)="8d7bbdc2de4443837f9fbc4dc34bcf8ac1a346265bfcaaac3d54d1099b7f6d8de0ed81cee5de6b87b6813a0d6eeaba28b5db14f1ab159c363ddf6d18ca11a29ce94a5871a06834c2033c8374604b75002a8d5fda45c874e495adf13dd618cf74e50ee588d59b624999cf0edaf9222dc03f04286be7138bfc222f013399e2fb1d5033504b327c237ee012470d921f91757515fbeffb4c69917f377ff38f9aac08e026a209c6b3adfb5e7f6849b275f6a6641132fa3956c66d2f9d04196c8c7c39d4e86c", 0xc3}, {&(0x7f0000001480)="e0a9b96661eadd0b71805dff8e6c3f8e550366557e379aeb634886d5b938b5c4d93cfc683d618722f3f0e3309017775ce2a2ea68d5e2d6079331eb4a5eeff286d103ded1de06d5fb389fbee633f1fa0705d8bcc6d79a22bb3f7a2115f7a675eef26326a87e5543ee177625baa8a425bda15e268e2e9d79f18f3a15fe4a", 0x7d}, {&(0x7f0000001540)="6be6c62168b9f665af0cce021e69ad58ab4027138484fc5fbbad2c77a9a81e01def64acf70ea8f1ef3d0c189aca83d64c782d5663c79db6f5dc612c149568890b3d69b01c4450a5549afd33de35dec42764e7dc2a8c7d50f9b428f667a4884a37e693d8d6387226aa134af100366bb2177078277c883c4f2a9077175b7e90d1a98e62de85559016b", 0x88}, {&(0x7f0000001600)="25b60eda603a99bcdd04d4a9c360d1778d9350494fda91022301cf6b4a89f851f3fd8b0c695bf33960b54f08f5778aeac0ef1cecf32fb360d78793f3285ce8df0282204e58401923dd23d9e1f3c766918c0c514a89ab01fa", 0x58}, {&(0x7f0000002680)="f5359aa0901b07b8e8eb7289f64823f93b86c6391e927d78bb5d95930272f03953a3f7e1fd7471c1", 0x28}, {0x0}], 0x7, &(0x7f0000002a40)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYRES32, @ANYRES8=r1, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="0000000002000000d4bdb0c1f907fc76511b558b3d4508ea9b17322cfa3d5e0ae76ca9ee36cf483e2cce64503f2d631a20f9988d31b4b4be48d8aead6ce44bd21738b366dbf714a90c481889bc2887eb8b00570dac2621a804fc2da759ff82aeaa3fc93426053292a14c2d5db1e047fb535a6c254c17a2421b1a675f82f4837f69cef035a04d1b7bf579c70c72b3", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000001cd0b5c5e76a6fa"], 0x78, 0x5}}], 0x1, 0x20000094) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x20, @private1, 0x80}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r5 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) 14:22:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:17 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 566.081325][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001280)="d560b8bdcff7e94ff4c849c6b75178213a6390acd232547ce8dffcb68b62bbe5ed6deff19c28a7b18bec307636a3e918fafa5c16b880a2b7e1127ab7e6a0b45ab38b1dcabb43a336540c1cd444b60ffacb778f32f8dcf083a220914c", 0x5c}, {&(0x7f0000001380)="8d7bbdc2de4443837f9fbc4dc34bcf8ac1a346265bfcaaac3d54d1099b7f6d8de0ed81cee5de6b87b6813a0d6eeaba28b5db14f1ab159c363ddf6d18ca11a29ce94a5871a06834c2033c8374604b75002a8d5fda45c874e495adf13dd618cf74e50ee588d59b624999cf0edaf9222dc03f04286be7138bfc222f013399e2fb1d5033504b327c237ee012470d921f91757515fbeffb4c69917f377ff38f9aac08e026a209c6b3adfb5e7f6849b275f6a6641132fa3956c66d2f9d04196c8c7c39d4e86c", 0xc3}, {&(0x7f0000001480)="e0a9b96661eadd0b71805dff8e6c3f8e550366557e379aeb634886d5b938b5c4d93cfc683d618722f3f0e3309017775ce2a2ea68d5e2d6079331eb4a5eeff286d103ded1de06d5fb389fbee633f1fa0705d8bcc6d79a22bb3f7a2115f7a675eef26326a87e5543ee177625baa8a425bda15e268e2e9d79f18f3a15fe4a", 0x7d}, {&(0x7f0000001540)="6be6c62168b9f665af0cce021e69ad58ab4027138484fc5fbbad2c77a9a81e01def64acf70ea8f1ef3d0c189aca83d64c782d5663c79db6f5dc612c149568890b3d69b01c4450a5549afd33de35dec42764e7dc2a8c7d50f9b428f667a4884a37e693d8d6387226aa134af100366bb2177078277c883c4f2a9077175b7e90d1a98e62de85559016b", 0x88}, {&(0x7f0000001600)="25b60eda603a99bcdd04d4a9c360d1778d9350494fda91022301cf6b4a89f851f3fd8b0c695bf33960b54f08f5778aeac0ef1cecf32fb360d78793f3285ce8df0282204e58401923dd23d9e1f3c766918c0c514a89ab01fa", 0x58}, {&(0x7f0000002680)="f5359aa0901b07b8e8eb7289f64823f93b86c6391e927d78bb5d95930272f03953a3f7e1fd7471c1", 0x28}, {0x0}], 0x7, &(0x7f0000002a40)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYRES32, @ANYRES8=r1, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="0000000002000000d4bdb0c1f907fc76511b558b3d4508ea9b17322cfa3d5e0ae76ca9ee36cf483e2cce64503f2d631a20f9988d31b4b4be48d8aead6ce44bd21738b366dbf714a90c481889bc2887eb8b00570dac2621a804fc2da759ff82aeaa3fc93426053292a14c2d5db1e047fb535a6c254c17a2421b1a675f82f4837f69cef035a04d1b7bf579c70c72b3", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000001cd0b5c5e76a6fa"], 0x78, 0x5}}], 0x1, 0x20000094) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x20, @private1, 0x80}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r5 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) 14:22:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001280)="d560b8bdcff7e94ff4c849c6b75178213a6390acd232547ce8dffcb68b62bbe5ed6deff19c28a7b18bec307636a3e918fafa5c16b880a2b7e1127ab7e6a0b45ab38b1dcabb43a336540c1cd444b60ffacb778f32f8dcf083a220914c", 0x5c}, {&(0x7f0000001380)="8d7bbdc2de4443837f9fbc4dc34bcf8ac1a346265bfcaaac3d54d1099b7f6d8de0ed81cee5de6b87b6813a0d6eeaba28b5db14f1ab159c363ddf6d18ca11a29ce94a5871a06834c2033c8374604b75002a8d5fda45c874e495adf13dd618cf74e50ee588d59b624999cf0edaf9222dc03f04286be7138bfc222f013399e2fb1d5033504b327c237ee012470d921f91757515fbeffb4c69917f377ff38f9aac08e026a209c6b3adfb5e7f6849b275f6a6641132fa3956c66d2f9d04196c8c7c39d4e86c", 0xc3}, {&(0x7f0000001480)="e0a9b96661eadd0b71805dff8e6c3f8e550366557e379aeb634886d5b938b5c4d93cfc683d618722f3f0e3309017775ce2a2ea68d5e2d6079331eb4a5eeff286d103ded1de06d5fb389fbee633f1fa0705d8bcc6d79a22bb3f7a2115f7a675eef26326a87e5543ee177625baa8a425bda15e268e2e9d79f18f3a15fe4a", 0x7d}, {&(0x7f0000001540)="6be6c62168b9f665af0cce021e69ad58ab4027138484fc5fbbad2c77a9a81e01def64acf70ea8f1ef3d0c189aca83d64c782d5663c79db6f5dc612c149568890b3d69b01c4450a5549afd33de35dec42764e7dc2a8c7d50f9b428f667a4884a37e693d8d6387226aa134af100366bb2177078277c883c4f2a9077175b7e90d1a98e62de85559016b", 0x88}, {&(0x7f0000001600)="25b60eda603a99bcdd04d4a9c360d1778d9350494fda91022301cf6b4a89f851f3fd8b0c695bf33960b54f08f5778aeac0ef1cecf32fb360d78793f3285ce8df0282204e58401923dd23d9e1f3c766918c0c514a89ab01fa", 0x58}, {&(0x7f0000002680)="f5359aa0901b07b8e8eb7289f64823f93b86c6391e927d78bb5d95930272f03953a3f7e1fd7471c1", 0x28}, {0x0}], 0x7, &(0x7f0000002a40)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYRES32, @ANYRES8=r1, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="0000000002000000d4bdb0c1f907fc76511b558b3d4508ea9b17322cfa3d5e0ae76ca9ee36cf483e2cce64503f2d631a20f9988d31b4b4be48d8aead6ce44bd21738b366dbf714a90c481889bc2887eb8b00570dac2621a804fc2da759ff82aeaa3fc93426053292a14c2d5db1e047fb535a6c254c17a2421b1a675f82f4837f69cef035a04d1b7bf579c70c72b3", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000001cd0b5c5e76a6fa"], 0x78, 0x5}}], 0x1, 0x20000094) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x20, @private1, 0x80}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r5 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r6, "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", "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"}) 14:22:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:18 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:18 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 567.113404][ T8704] FAULT_INJECTION: forcing a failure. [ 567.113404][ T8704] name failslab, interval 1, probability 0, space 0, times 1 [ 567.126117][ T8704] CPU: 0 PID: 8704 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 567.136333][ T8704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 567.146384][ T8704] Call Trace: [ 567.149674][ T8704] dump_stack_lvl+0x1e2/0x24b [ 567.154360][ T8704] ? panic+0x7d7/0x7d7 [ 567.158413][ T8704] ? bfq_pos_tree_add_move+0x43e/0x43e [ 567.163871][ T8704] ? preempt_schedule_irq+0xef/0x140 [ 567.169138][ T8704] ? preempt_schedule_notrace+0x140/0x140 [ 567.174835][ T8704] ? do_vfs_ioctl+0x796/0x1a90 [ 567.179573][ T8704] dump_stack+0x15/0x17 [ 567.183705][ T8704] should_fail+0x3c0/0x510 [ 567.188108][ T8704] ? loop_add+0x5a/0x760 [ 567.192324][ T8704] __should_failslab+0x9f/0xe0 [ 567.197060][ T8704] should_failslab+0x9/0x20 [ 567.201535][ T8704] kmem_cache_alloc_trace+0x3a/0x330 [ 567.206814][ T8704] loop_add+0x5a/0x760 [ 567.210862][ T8704] loop_control_ioctl+0x564/0x740 [ 567.217271][ T8704] ? loop_remove+0xb0/0xb0 [ 567.221740][ T8704] ? irqentry_exit+0x50/0x60 [ 567.226321][ T8704] ? sysvec_reschedule_ipi+0x84/0x160 [ 567.231685][ T8704] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 567.237307][ T8704] ? loop_remove+0xb0/0xb0 [ 567.241707][ T8704] __se_sys_ioctl+0x115/0x190 [ 567.246372][ T8704] __x64_sys_ioctl+0x7b/0x90 [ 567.250955][ T8704] do_syscall_64+0x34/0x70 [ 567.255354][ T8704] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 567.261233][ T8704] RIP: 0033:0x7fa4636b90d9 [ 567.265630][ T8704] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 567.285432][ T8704] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.293829][ T8704] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 567.301782][ T8704] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 567.309743][ T8704] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 567.317696][ T8704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.325683][ T8704] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:18 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 567.538465][ T23] audit: type=1400 audit(1670682138.960:292): avc: denied { remove_name } for pid=142 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.598938][ T23] audit: type=1400 audit(1670682138.960:293): avc: denied { rename } for pid=142 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 567.666412][ T23] audit: type=1400 audit(1670682138.960:294): avc: denied { create } for pid=142 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 14:22:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 2) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:19 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 567.960849][ T8716] FAULT_INJECTION: forcing a failure. [ 567.960849][ T8716] name failslab, interval 1, probability 0, space 0, times 0 [ 567.973500][ T8716] CPU: 0 PID: 8716 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 567.983731][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 567.993758][ T8716] Call Trace: [ 567.997028][ T8716] dump_stack_lvl+0x1e2/0x24b [ 568.001677][ T8716] ? bfq_pos_tree_add_move+0x43e/0x43e [ 568.007105][ T8716] ? preempt_schedule_irq+0xef/0x140 [ 568.012363][ T8716] dump_stack+0x15/0x17 [ 568.016517][ T8716] should_fail+0x3c0/0x510 [ 568.020906][ T8716] ? blk_mq_alloc_tag_set+0x308/0xd40 [ 568.026250][ T8716] __should_failslab+0x9f/0xe0 [ 568.030997][ T8716] should_failslab+0x9/0x20 [ 568.035473][ T8716] __kmalloc+0x60/0x360 [ 568.039600][ T8716] ? blk_mq_alloc_tag_set+0x23/0xd40 [ 568.044857][ T8716] blk_mq_alloc_tag_set+0x308/0xd40 [ 568.050032][ T8716] loop_add+0x241/0x760 [ 568.054162][ T8716] loop_control_ioctl+0x564/0x740 [ 568.059158][ T8716] ? loop_remove+0xb0/0xb0 [ 568.063547][ T8716] ? __fget_files+0x310/0x370 [ 568.068200][ T8716] ? security_file_ioctl+0xb1/0xd0 [ 568.073287][ T8716] ? loop_remove+0xb0/0xb0 [ 568.077674][ T8716] __se_sys_ioctl+0x115/0x190 [ 568.082326][ T8716] __x64_sys_ioctl+0x7b/0x90 [ 568.086888][ T8716] do_syscall_64+0x34/0x70 [ 568.091281][ T8716] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 568.097143][ T8716] RIP: 0033:0x7fa4636b90d9 [ 568.101538][ T8716] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 568.121114][ T8716] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.129497][ T8716] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 568.137439][ T8716] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 568.145383][ T8716] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 568.153329][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.161281][ T8716] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:19 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) [ 568.527382][ T8730] FAULT_INJECTION: forcing a failure. [ 568.527382][ T8730] name failslab, interval 1, probability 0, space 0, times 0 [ 568.548516][ T8730] CPU: 1 PID: 8730 Comm: syz-executor.5 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 568.558766][ T8730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 568.568823][ T8730] Call Trace: [ 568.572110][ T8730] dump_stack_lvl+0x1e2/0x24b [ 568.576783][ T8730] ? panic+0x7d7/0x7d7 [ 568.580850][ T8730] ? bfq_pos_tree_add_move+0x43e/0x43e [ 568.586386][ T8730] ? __irq_exit_rcu+0x41/0x150 [ 568.591140][ T8730] dump_stack+0x15/0x17 [ 568.595297][ T8730] should_fail+0x3c0/0x510 [ 568.599705][ T8730] __should_failslab+0x9f/0xe0 [ 568.604465][ T8730] should_failslab+0x9/0x20 [ 568.608958][ T8730] kmem_cache_alloc+0x3f/0x300 [ 568.613717][ T8730] ? kvm_mmu_topup_memory_cache+0xeb/0x2b0 [ 568.619516][ T8730] kvm_mmu_topup_memory_cache+0xeb/0x2b0 [ 568.625146][ T8730] kvm_mmu_load+0x79/0x15d0 [ 568.629651][ T8730] ? __kasan_check_read+0x11/0x20 [ 568.634672][ T8730] vcpu_enter_guest+0x25d6/0x3680 [ 568.639695][ T8730] ? local_bh_enable+0x30/0x30 [ 568.644453][ T8730] ? vmx_vcpu_load_vmcs+0x684/0x8e0 [ 568.649645][ T8730] ? __kasan_check_read+0x11/0x20 [ 568.654662][ T8730] vcpu_run+0x332/0xc20 [ 568.658812][ T8730] kvm_arch_vcpu_ioctl_run+0x4dc/0x9d0 [ 568.664263][ T8730] kvm_vcpu_ioctl+0x7cb/0xcd0 [ 568.668934][ T8730] ? __kasan_check_write+0x14/0x20 [ 568.674037][ T8730] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 568.679772][ T8730] ? selinux_file_ioctl+0x3c9/0x530 [ 568.684968][ T8730] ? selinux_file_alloc_security+0x120/0x120 [ 568.690937][ T8730] ? __kasan_check_write+0x14/0x20 [ 568.696028][ T8730] ? __fget_files+0x310/0x370 [ 568.700694][ T8730] ? security_file_ioctl+0xb1/0xd0 [ 568.705791][ T8730] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 568.711432][ T8730] __se_sys_ioctl+0x115/0x190 [ 568.716104][ T8730] __x64_sys_ioctl+0x7b/0x90 [ 568.720703][ T8730] do_syscall_64+0x34/0x70 [ 568.725197][ T8730] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 568.731072][ T8730] RIP: 0033:0x7f4d59de90d9 [ 568.735467][ T8730] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 568.755047][ T8730] RSP: 002b:00007f4d58b5c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.763441][ T8730] RAX: ffffffffffffffda RBX: 00007f4d59f08f80 RCX: 00007f4d59de90d9 14:22:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 3) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 2) [ 568.771386][ T8730] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 568.779331][ T8730] RBP: 00007f4d58b5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 568.787275][ T8730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.795221][ T8730] R13: 00007ffe61b31dff R14: 00007f4d58b5c300 R15: 0000000000022000 [ 568.850767][ T8736] FAULT_INJECTION: forcing a failure. [ 568.850767][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 568.863562][ T8736] CPU: 1 PID: 8736 Comm: syz-executor.5 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 568.873775][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 568.883802][ T8736] Call Trace: [ 568.887069][ T8736] dump_stack_lvl+0x1e2/0x24b [ 568.891718][ T8736] ? panic+0x7d7/0x7d7 [ 568.895758][ T8736] ? bfq_pos_tree_add_move+0x43e/0x43e [ 568.901186][ T8736] dump_stack+0x15/0x17 [ 568.905314][ T8736] should_fail+0x3c0/0x510 [ 568.909702][ T8736] __should_failslab+0x9f/0xe0 [ 568.914439][ T8736] should_failslab+0x9/0x20 [ 568.918917][ T8736] kmem_cache_alloc+0x3f/0x300 [ 568.923659][ T8736] ? kvm_mmu_topup_memory_cache+0xeb/0x2b0 [ 568.929448][ T8736] kvm_mmu_topup_memory_cache+0xeb/0x2b0 [ 568.935052][ T8736] kvm_mmu_load+0x79/0x15d0 [ 568.939527][ T8736] ? __kasan_check_read+0x11/0x20 [ 568.944524][ T8736] vcpu_enter_guest+0x25d6/0x3680 [ 568.949612][ T8736] ? local_bh_enable+0x30/0x30 [ 568.954349][ T8736] ? vmx_vcpu_load_vmcs+0x684/0x8e0 [ 568.959520][ T8736] ? __kasan_check_read+0x11/0x20 [ 568.964526][ T8736] vcpu_run+0x332/0xc20 [ 568.968715][ T8736] kvm_arch_vcpu_ioctl_run+0x4dc/0x9d0 [ 568.974151][ T8736] kvm_vcpu_ioctl+0x7cb/0xcd0 [ 568.978799][ T8736] ? __kasan_check_write+0x14/0x20 [ 568.983880][ T8736] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 568.989484][ T8736] ? selinux_file_ioctl+0x3c9/0x530 [ 568.994656][ T8736] ? selinux_file_alloc_security+0x120/0x120 [ 569.000622][ T8736] ? __kasan_check_write+0x14/0x20 [ 569.005713][ T8736] ? __fget_files+0x310/0x370 [ 569.010365][ T8736] ? security_file_ioctl+0xb1/0xd0 [ 569.015445][ T8736] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 569.021047][ T8736] __se_sys_ioctl+0x115/0x190 [ 569.025695][ T8736] __x64_sys_ioctl+0x7b/0x90 [ 569.030256][ T8736] do_syscall_64+0x34/0x70 [ 569.034652][ T8736] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 569.040515][ T8736] RIP: 0033:0x7f4d59de90d9 [ 569.044908][ T8736] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 569.064486][ T8736] RSP: 002b:00007f4d58b5c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.072874][ T8736] RAX: ffffffffffffffda RBX: 00007f4d59f08f80 RCX: 00007f4d59de90d9 [ 569.080827][ T8736] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 569.088775][ T8736] RBP: 00007f4d58b5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 569.096719][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.104663][ T8736] R13: 00007ffe61b31dff R14: 00007f4d58b5c300 R15: 0000000000022000 [ 569.165815][ T8739] FAULT_INJECTION: forcing a failure. [ 569.165815][ T8739] name failslab, interval 1, probability 0, space 0, times 0 [ 569.178505][ T8739] CPU: 0 PID: 8739 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 569.188725][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 569.198763][ T8739] Call Trace: [ 569.202030][ T8739] dump_stack_lvl+0x1e2/0x24b [ 569.206678][ T8739] ? bfq_pos_tree_add_move+0x43e/0x43e [ 569.212107][ T8739] ? irqentry_exit+0x50/0x60 [ 569.216675][ T8739] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 569.222281][ T8739] dump_stack+0x15/0x17 [ 569.226410][ T8739] should_fail+0x3c0/0x510 [ 569.230806][ T8739] ? blk_mq_alloc_tag_set+0x3eb/0xd40 [ 569.236148][ T8739] __should_failslab+0x9f/0xe0 [ 569.240887][ T8739] should_failslab+0x9/0x20 [ 569.245360][ T8739] __kmalloc+0x60/0x360 [ 569.249486][ T8739] ? blk_mq_alloc_tag_set+0x308/0xd40 [ 569.254830][ T8739] blk_mq_alloc_tag_set+0x3eb/0xd40 [ 569.260003][ T8739] loop_add+0x241/0x760 [ 569.264133][ T8739] loop_control_ioctl+0x564/0x740 [ 569.269142][ T8739] ? loop_remove+0xb0/0xb0 [ 569.273534][ T8739] ? __fget_files+0x310/0x370 [ 569.278184][ T8739] ? security_file_ioctl+0xb1/0xd0 [ 569.283266][ T8739] ? loop_remove+0xb0/0xb0 [ 569.287655][ T8739] __se_sys_ioctl+0x115/0x190 [ 569.292303][ T8739] __x64_sys_ioctl+0x7b/0x90 [ 569.296869][ T8739] do_syscall_64+0x34/0x70 [ 569.301266][ T8739] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 569.307130][ T8739] RIP: 0033:0x7fa4636b90d9 [ 569.311521][ T8739] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 569.331096][ T8739] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.339487][ T8739] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 569.347517][ T8739] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 569.355465][ T8739] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 569.363414][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.371358][ T8739] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 3) 14:22:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) 14:22:21 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 569.647214][ T8745] FAULT_INJECTION: forcing a failure. [ 569.647214][ T8745] name failslab, interval 1, probability 0, space 0, times 0 [ 569.666069][ T8745] CPU: 0 PID: 8745 Comm: syz-executor.5 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 569.676316][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 569.686450][ T8745] Call Trace: [ 569.689739][ T8745] dump_stack_lvl+0x1e2/0x24b [ 569.694388][ T8745] ? panic+0x7d7/0x7d7 [ 569.698698][ T8745] ? bfq_pos_tree_add_move+0x43e/0x43e [ 569.704141][ T8745] dump_stack+0x15/0x17 [ 569.708282][ T8745] should_fail+0x3c0/0x510 [ 569.712680][ T8745] __should_failslab+0x9f/0xe0 [ 569.717424][ T8745] should_failslab+0x9/0x20 [ 569.721898][ T8745] kmem_cache_alloc+0x3f/0x300 [ 569.726645][ T8745] ? kvm_mmu_topup_memory_cache+0xeb/0x2b0 [ 569.732425][ T8745] kvm_mmu_topup_memory_cache+0xeb/0x2b0 [ 569.738044][ T8745] kvm_mmu_load+0x79/0x15d0 [ 569.742539][ T8745] ? __kasan_check_read+0x11/0x20 [ 569.747557][ T8745] vcpu_enter_guest+0x25d6/0x3680 [ 569.752566][ T8745] ? local_bh_enable+0x30/0x30 [ 569.757320][ T8745] ? vmx_vcpu_load_vmcs+0x684/0x8e0 [ 569.762504][ T8745] ? __kasan_check_read+0x11/0x20 [ 569.767505][ T8745] vcpu_run+0x332/0xc20 [ 569.771636][ T8745] kvm_arch_vcpu_ioctl_run+0x4dc/0x9d0 [ 569.777068][ T8745] kvm_vcpu_ioctl+0x7cb/0xcd0 [ 569.781717][ T8745] ? __kasan_check_write+0x14/0x20 [ 569.786807][ T8745] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 569.792516][ T8745] ? selinux_file_ioctl+0x3c9/0x530 [ 569.797717][ T8745] ? selinux_file_alloc_security+0x120/0x120 [ 569.803694][ T8745] ? __kasan_check_write+0x14/0x20 [ 569.808806][ T8745] ? __fget_files+0x310/0x370 [ 569.813472][ T8745] ? security_file_ioctl+0xb1/0xd0 [ 569.818579][ T8745] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 569.824198][ T8745] __se_sys_ioctl+0x115/0x190 [ 569.828864][ T8745] __x64_sys_ioctl+0x7b/0x90 [ 569.833443][ T8745] do_syscall_64+0x34/0x70 [ 569.837859][ T8745] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 569.843745][ T8745] RIP: 0033:0x7f4d59de90d9 [ 569.848156][ T8745] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 569.867839][ T8745] RSP: 002b:00007f4d58b5c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.876250][ T8745] RAX: ffffffffffffffda RBX: 00007f4d59f08f80 RCX: 00007f4d59de90d9 [ 569.884198][ T8745] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 14:22:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 4) [ 569.892143][ T8745] RBP: 00007f4d58b5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 569.900092][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.908035][ T8745] R13: 00007ffe61b31dff R14: 00007f4d58b5c300 R15: 0000000000022000 [ 569.923627][ T8755] FAULT_INJECTION: forcing a failure. [ 569.923627][ T8755] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 569.969924][ T8755] CPU: 0 PID: 8755 Comm: syz-executor.0 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 569.980178][ T8755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 569.990226][ T8755] Call Trace: [ 569.993524][ T8755] dump_stack_lvl+0x1e2/0x24b [ 569.998204][ T8755] ? panic+0x7d7/0x7d7 [ 570.002275][ T8755] ? bfq_pos_tree_add_move+0x43e/0x43e [ 570.007736][ T8755] dump_stack+0x15/0x17 [ 570.011893][ T8755] should_fail+0x3c0/0x510 [ 570.016308][ T8755] should_fail_usercopy+0x1a/0x20 [ 570.021329][ T8755] _copy_to_user+0x20/0x90 [ 570.025748][ T8755] simple_read_from_buffer+0xdd/0x160 [ 570.031115][ T8755] proc_fail_nth_read+0x1af/0x220 [ 570.036137][ T8755] ? security_file_permission+0x9d/0xc0 [ 570.041679][ T8755] ? proc_fault_inject_write+0x3a0/0x3a0 [ 570.045205][ T8762] FAULT_INJECTION: forcing a failure. [ 570.045205][ T8762] name failslab, interval 1, probability 0, space 0, times 0 [ 570.047307][ T8755] ? security_file_permission+0xa8/0xc0 [ 570.047330][ T8755] ? rw_verify_area+0x1c2/0x360 [ 570.070252][ T8755] ? proc_fault_inject_write+0x3a0/0x3a0 [ 570.075870][ T8755] vfs_read+0x22b/0xbf0 [ 570.080008][ T8755] ? kernel_read+0x70/0x70 [ 570.084403][ T8755] ? __kasan_check_write+0x14/0x20 [ 570.089501][ T8755] ? mutex_lock+0xb2/0x1e0 [ 570.093896][ T8755] ? mutex_trylock+0x180/0x180 [ 570.098645][ T8755] ? __fdget_pos+0x26d/0x310 [ 570.103213][ T8755] ? ksys_read+0x77/0x2c0 [ 570.107538][ T8755] ksys_read+0x198/0x2c0 [ 570.111789][ T8755] ? vfs_write+0xf80/0xf80 [ 570.116193][ T8755] ? __se_sys_ioctl+0x1f/0x190 [ 570.120950][ T8755] ? debug_smp_processor_id+0x17/0x20 [ 570.126310][ T8755] __x64_sys_read+0x7b/0x90 [ 570.130810][ T8755] do_syscall_64+0x34/0x70 [ 570.135212][ T8755] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 570.141095][ T8755] RIP: 0033:0x7fa70745fefc [ 570.145496][ T8755] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 570.165091][ T8755] RSP: 002b:00007fa706200160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 570.173492][ T8755] RAX: ffffffffffffffda RBX: 00007fa7075ce050 RCX: 00007fa70745fefc [ 570.181447][ T8755] RDX: 000000000000000f RSI: 00007fa7062001e0 RDI: 0000000000000004 [ 570.189396][ T8755] RBP: 00007fa7062001d0 R08: 0000000000000000 R09: 0000000000000000 [ 570.197431][ T8755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.205389][ T8755] R13: 00007ffc96544f7f R14: 00007fa706200300 R15: 0000000000022000 [ 570.213350][ T8762] CPU: 1 PID: 8762 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 570.223576][ T8762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 570.233613][ T8762] Call Trace: [ 570.236886][ T8762] dump_stack_lvl+0x1e2/0x24b [ 570.241540][ T8762] ? panic+0x7d7/0x7d7 [ 570.245582][ T8762] ? bfq_pos_tree_add_move+0x43e/0x43e [ 570.251016][ T8762] ? ____kasan_kmalloc+0xf3/0x110 [ 570.256013][ T8762] ? __kasan_kmalloc+0x9/0x10 [ 570.260668][ T8762] ? __kmalloc+0x1f7/0x360 [ 570.265057][ T8762] ? blk_mq_alloc_tag_set+0x3eb/0xd40 [ 570.270406][ T8762] ? loop_control_ioctl+0x564/0x740 [ 570.275577][ T8762] ? __se_sys_ioctl+0x115/0x190 [ 570.280400][ T8762] ? __x64_sys_ioctl+0x7b/0x90 [ 570.285136][ T8762] dump_stack+0x15/0x17 [ 570.289267][ T8762] should_fail+0x3c0/0x510 [ 570.293658][ T8762] ? blk_mq_init_tags+0x73/0x410 [ 570.298580][ T8762] __should_failslab+0x9f/0xe0 [ 570.303318][ T8762] should_failslab+0x9/0x20 [ 570.307797][ T8762] kmem_cache_alloc_trace+0x3a/0x330 [ 570.313060][ T8762] ? find_next_bit+0xf5/0x120 [ 570.317718][ T8762] blk_mq_init_tags+0x73/0x410 [ 570.322473][ T8762] blk_mq_alloc_rq_map+0x7e/0x190 [ 570.327473][ T8762] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 570.333445][ T8762] blk_mq_alloc_tag_set+0x662/0xd40 [ 570.338622][ T8762] loop_add+0x241/0x760 [ 570.342752][ T8762] loop_control_ioctl+0x564/0x740 [ 570.347770][ T8762] ? loop_remove+0xb0/0xb0 [ 570.352161][ T8762] ? __fget_files+0x310/0x370 [ 570.356818][ T8762] ? security_file_ioctl+0xb1/0xd0 [ 570.361903][ T8762] ? loop_remove+0xb0/0xb0 [ 570.366296][ T8762] __se_sys_ioctl+0x115/0x190 [ 570.370950][ T8762] __x64_sys_ioctl+0x7b/0x90 [ 570.375517][ T8762] do_syscall_64+0x34/0x70 [ 570.379910][ T8762] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 570.385774][ T8762] RIP: 0033:0x7fa4636b90d9 [ 570.390167][ T8762] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 570.409832][ T8762] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 570.418219][ T8762] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 570.426164][ T8762] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 570.434110][ T8762] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 570.442056][ T8762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.450004][ T8762] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 570.458164][ T8762] blk-mq: reduced tag depth (128 -> 64) 14:22:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:22:22 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x2, 0x0) [ 570.898908][ T8787] FAULT_INJECTION: forcing a failure. [ 570.898908][ T8787] name failslab, interval 1, probability 0, space 0, times 0 [ 570.911595][ T8787] CPU: 0 PID: 8787 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 570.921836][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 570.931876][ T8787] Call Trace: [ 570.935158][ T8787] dump_stack_lvl+0x1e2/0x24b [ 570.939817][ T8787] ? panic+0x7d7/0x7d7 [ 570.943866][ T8787] ? bfq_pos_tree_add_move+0x43e/0x43e [ 570.949306][ T8787] ? __kasan_check_read+0x11/0x20 [ 570.954314][ T8787] ? preempt_schedule_irq+0xef/0x140 [ 570.959592][ T8787] ? preempt_schedule_notrace+0x140/0x140 [ 570.965291][ T8787] dump_stack+0x15/0x17 [ 570.969426][ T8787] should_fail+0x3c0/0x510 [ 570.973829][ T8787] ? sbitmap_queue_init_node+0x163/0x1060 [ 570.979527][ T8787] __should_failslab+0x9f/0xe0 [ 570.984287][ T8787] should_failslab+0x9/0x20 [ 570.988781][ T8787] __kmalloc+0x60/0x360 [ 570.992940][ T8787] ? sbitmap_queue_init_node+0xaa/0x1060 [ 570.998564][ T8787] sbitmap_queue_init_node+0x163/0x1060 [ 571.004095][ T8787] blk_mq_init_tags+0x165/0x410 [ 571.008960][ T8787] blk_mq_alloc_rq_map+0x7e/0x190 [ 571.013972][ T8787] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 571.019932][ T8787] blk_mq_alloc_tag_set+0x662/0xd40 [ 571.025108][ T8787] loop_add+0x241/0x760 [ 571.029243][ T8787] loop_control_ioctl+0x564/0x740 [ 571.034241][ T8787] ? loop_remove+0xb0/0xb0 [ 571.038637][ T8787] ? __fget_files+0x310/0x370 [ 571.043289][ T8787] ? security_file_ioctl+0xb1/0xd0 [ 571.048377][ T8787] ? loop_remove+0xb0/0xb0 [ 571.052771][ T8787] __se_sys_ioctl+0x115/0x190 [ 571.057430][ T8787] __x64_sys_ioctl+0x7b/0x90 [ 571.061995][ T8787] do_syscall_64+0x34/0x70 [ 571.066388][ T8787] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 571.072296][ T8787] RIP: 0033:0x7fa4636b90d9 [ 571.076689][ T8787] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 571.096268][ T8787] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.104684][ T8787] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 571.112633][ T8787] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 571.120578][ T8787] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.128526][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.136477][ T8787] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 571.144756][ T8787] blk-mq: reduced tag depth (128 -> 64) 14:22:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x2, 0x0) 14:22:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x4b47, 0x0) 14:22:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x4b49, 0x0) 14:22:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:23 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4b47, 0x0) 14:22:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x541b, 0x0) 14:22:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x5421, 0x0) 14:22:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4b49, 0x0) [ 571.763966][ T8830] FAULT_INJECTION: forcing a failure. [ 571.763966][ T8830] name failslab, interval 1, probability 0, space 0, times 0 [ 571.776694][ T8830] CPU: 0 PID: 8830 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 571.786914][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 571.796947][ T8830] Call Trace: [ 571.800217][ T8830] dump_stack_lvl+0x1e2/0x24b [ 571.804872][ T8830] ? bfq_pos_tree_add_move+0x43e/0x43e [ 571.810303][ T8830] ? find_next_bit+0xd6/0x120 [ 571.815041][ T8830] ? cpumask_next+0x11/0x30 [ 571.819521][ T8830] dump_stack+0x15/0x17 [ 571.823653][ T8830] should_fail+0x3c0/0x510 [ 571.828045][ T8830] ? sbitmap_queue_init_node+0x72c/0x1060 [ 571.833741][ T8830] __should_failslab+0x9f/0xe0 [ 571.838496][ T8830] should_failslab+0x9/0x20 [ 571.842984][ T8830] kmem_cache_alloc_trace+0x3a/0x330 [ 571.848254][ T8830] ? find_next_bit+0xd6/0x120 [ 571.852913][ T8830] ? cpumask_next+0x11/0x30 [ 571.857414][ T8830] sbitmap_queue_init_node+0x72c/0x1060 [ 571.862947][ T8830] blk_mq_init_tags+0x165/0x410 [ 571.867778][ T8830] blk_mq_alloc_rq_map+0x7e/0x190 [ 571.872793][ T8830] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 571.878773][ T8830] blk_mq_alloc_tag_set+0x662/0xd40 [ 571.883961][ T8830] loop_add+0x241/0x760 [ 571.888117][ T8830] loop_control_ioctl+0x564/0x740 [ 571.893124][ T8830] ? loop_remove+0xb0/0xb0 [ 571.897536][ T8830] ? irqentry_exit+0x50/0x60 [ 571.902113][ T8830] ? sysvec_reschedule_ipi+0x84/0x160 [ 571.907464][ T8830] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 571.913080][ T8830] ? security_file_ioctl+0xb1/0xd0 [ 571.918171][ T8830] ? loop_remove+0xb0/0xb0 [ 571.922575][ T8830] __se_sys_ioctl+0x115/0x190 [ 571.927233][ T8830] __x64_sys_ioctl+0x7b/0x90 [ 571.931805][ T8830] do_syscall_64+0x34/0x70 [ 571.936196][ T8830] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 571.942061][ T8830] RIP: 0033:0x7fa4636b90d9 [ 571.946457][ T8830] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 571.966036][ T8830] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.974425][ T8830] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 571.982371][ T8830] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 571.990317][ T8830] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.998262][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.006209][ T8830] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 572.014613][ T8830] blk-mq: reduced tag depth (128 -> 64) 14:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x5450, 0x0) 14:22:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x541b, 0x0) 14:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x5451, 0x0) 14:22:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x5421, 0x0) 14:22:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:23 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x5452, 0x0) 14:22:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x5450, 0x0) 14:22:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 7) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x5451, 0x0) 14:22:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x5460, 0x0) 14:22:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x5452, 0x0) [ 572.643805][ T8867] FAULT_INJECTION: forcing a failure. [ 572.643805][ T8867] name failslab, interval 1, probability 0, space 0, times 0 [ 572.656482][ T8867] CPU: 0 PID: 8867 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 572.666791][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 572.676823][ T8867] Call Trace: [ 572.680094][ T8867] dump_stack_lvl+0x1e2/0x24b [ 572.684745][ T8867] ? bfq_pos_tree_add_move+0x43e/0x43e [ 572.690176][ T8867] ? find_next_bit+0xd6/0x120 [ 572.694826][ T8867] ? cpumask_next+0x11/0x30 [ 572.699302][ T8867] dump_stack+0x15/0x17 [ 572.703433][ T8867] should_fail+0x3c0/0x510 [ 572.707821][ T8867] ? sbitmap_queue_init_node+0x72c/0x1060 [ 572.713530][ T8867] __should_failslab+0x9f/0xe0 [ 572.718287][ T8867] should_failslab+0x9/0x20 [ 572.722777][ T8867] kmem_cache_alloc_trace+0x3a/0x330 [ 572.728048][ T8867] sbitmap_queue_init_node+0x72c/0x1060 [ 572.733576][ T8867] blk_mq_init_tags+0x1dc/0x410 [ 572.738402][ T8867] blk_mq_alloc_rq_map+0x7e/0x190 [ 572.743399][ T8867] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 572.749351][ T8867] blk_mq_alloc_tag_set+0x662/0xd40 [ 572.754521][ T8867] loop_add+0x241/0x760 [ 572.758653][ T8867] loop_control_ioctl+0x564/0x740 [ 572.763649][ T8867] ? loop_remove+0xb0/0xb0 [ 572.768038][ T8867] ? sysvec_reschedule_ipi+0x84/0x160 [ 572.773385][ T8867] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 572.778992][ T8867] ? loop_remove+0xb0/0xb0 [ 572.783382][ T8867] ? do_vfs_ioctl+0xf6/0x1a90 [ 572.788034][ T8867] ? __se_sys_ioctl+0xa6/0x190 [ 572.792772][ T8867] ? __se_sys_ioctl+0x109/0x190 [ 572.797612][ T8867] ? loop_control_ioctl+0x1/0x740 [ 572.802620][ T8867] ? loop_remove+0xb0/0xb0 [ 572.807108][ T8867] __se_sys_ioctl+0x115/0x190 [ 572.811766][ T8867] __x64_sys_ioctl+0x7b/0x90 [ 572.816333][ T8867] do_syscall_64+0x34/0x70 [ 572.820728][ T8867] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 572.826595][ T8867] RIP: 0033:0x7fa4636b90d9 [ 572.830986][ T8867] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 572.850564][ T8867] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.858953][ T8867] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 572.866914][ T8867] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 572.874877][ T8867] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 572.882926][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.890881][ T8867] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 572.899354][ T8867] blk-mq: reduced tag depth (128 -> 64) [ 573.003039][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x40049409, 0x0) 14:22:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x5460, 0x0) 14:22:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x4004ae8b, 0x0) 14:22:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x40049409, 0x0) 14:22:24 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x4004ae99, 0x0) 14:22:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4004ae8b, 0x0) 14:22:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 8) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4004ae99, 0x0) 14:22:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x40086602, 0x0) 14:22:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x40086602, 0x0) [ 573.515947][ T8911] FAULT_INJECTION: forcing a failure. [ 573.515947][ T8911] name failslab, interval 1, probability 0, space 0, times 0 [ 573.528590][ T8911] CPU: 0 PID: 8911 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 573.538803][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 573.548838][ T8911] Call Trace: [ 573.552113][ T8911] dump_stack_lvl+0x1e2/0x24b [ 573.556781][ T8911] ? panic+0x7d7/0x7d7 [ 573.560832][ T8911] ? bfq_pos_tree_add_move+0x43e/0x43e [ 573.566267][ T8911] ? sbitmap_queue_init_node+0xa1a/0x1060 [ 573.571970][ T8911] dump_stack+0x15/0x17 [ 573.576108][ T8911] should_fail+0x3c0/0x510 [ 573.580508][ T8911] ? blk_mq_alloc_rq_map+0xa2/0x190 [ 573.585752][ T8911] __should_failslab+0x9f/0xe0 [ 573.590518][ T8911] should_failslab+0x9/0x20 [ 573.595002][ T8911] __kmalloc+0x60/0x360 [ 573.599134][ T8911] ? blk_mq_init_tags+0x2d0/0x410 [ 573.604129][ T8911] blk_mq_alloc_rq_map+0xa2/0x190 [ 573.609144][ T8911] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 573.615110][ T8911] blk_mq_alloc_tag_set+0x662/0xd40 [ 573.620290][ T8911] loop_add+0x241/0x760 [ 573.624433][ T8911] loop_control_ioctl+0x564/0x740 [ 573.629437][ T8911] ? loop_remove+0xb0/0xb0 [ 573.633851][ T8911] ? irqentry_exit+0x50/0x60 [ 573.638424][ T8911] ? sysvec_reschedule_ipi+0x84/0x160 [ 573.643778][ T8911] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 573.649399][ T8911] ? do_vfs_ioctl+0xf6/0x1a90 [ 573.654056][ T8911] ? __se_sys_ioctl+0x109/0x190 [ 573.658886][ T8911] ? loop_remove+0xb0/0xb0 [ 573.663295][ T8911] __se_sys_ioctl+0x115/0x190 [ 573.667947][ T8911] __x64_sys_ioctl+0x7b/0x90 [ 573.672539][ T8911] do_syscall_64+0x34/0x70 [ 573.676948][ T8911] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 573.682832][ T8911] RIP: 0033:0x7fa4636b90d9 [ 573.687232][ T8911] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 573.706816][ T8911] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.715295][ T8911] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 573.723249][ T8911] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 573.731199][ T8911] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 573.739152][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.747098][ T8911] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 573.755527][ T8911] blk-mq: reduced tag depth (128 -> 64) [ 573.849570][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x40087602, 0x0) 14:22:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x40087602, 0x0) 14:22:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4020940d, 0x0) 14:22:25 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x4020940d, 0x0) 14:22:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4048ae9b, 0x0) 14:22:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 9) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4090ae82, 0x0) 14:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x4048ae9b, 0x0) 14:22:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4138ae84, 0x0) 14:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x4090ae82, 0x0) [ 574.399180][ T8945] FAULT_INJECTION: forcing a failure. [ 574.399180][ T8945] name failslab, interval 1, probability 0, space 0, times 0 [ 574.411842][ T8945] CPU: 0 PID: 8945 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 574.422054][ T8945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 574.432084][ T8945] Call Trace: [ 574.435353][ T8945] dump_stack_lvl+0x1e2/0x24b [ 574.440007][ T8945] ? panic+0x7d7/0x7d7 [ 574.444049][ T8945] ? bfq_pos_tree_add_move+0x43e/0x43e [ 574.449477][ T8945] dump_stack+0x15/0x17 [ 574.453614][ T8945] should_fail+0x3c0/0x510 [ 574.458002][ T8945] ? blk_mq_alloc_rq_map+0xe2/0x190 [ 574.463171][ T8945] __should_failslab+0x9f/0xe0 [ 574.467907][ T8945] should_failslab+0x9/0x20 [ 574.472381][ T8945] __kmalloc+0x60/0x360 [ 574.476509][ T8945] ? blk_mq_alloc_rq_map+0xa2/0x190 [ 574.481683][ T8945] blk_mq_alloc_rq_map+0xe2/0x190 [ 574.486680][ T8945] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 574.492635][ T8945] blk_mq_alloc_tag_set+0x662/0xd40 [ 574.497809][ T8945] loop_add+0x241/0x760 [ 574.501938][ T8945] loop_control_ioctl+0x564/0x740 [ 574.507042][ T8945] ? loop_remove+0xb0/0xb0 [ 574.511456][ T8945] ? __fget_files+0x310/0x370 [ 574.516116][ T8945] ? security_file_ioctl+0xb1/0xd0 [ 574.521221][ T8945] ? loop_remove+0xb0/0xb0 [ 574.525619][ T8945] __se_sys_ioctl+0x115/0x190 [ 574.530291][ T8945] __x64_sys_ioctl+0x7b/0x90 [ 574.534859][ T8945] do_syscall_64+0x34/0x70 [ 574.539337][ T8945] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 574.545209][ T8945] RIP: 0033:0x7fa4636b90d9 [ 574.549607][ T8945] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 574.569189][ T8945] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.577575][ T8945] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 574.585612][ T8945] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 574.593556][ T8945] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 574.601510][ T8945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.609460][ T8945] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 574.617856][ T8945] blk-mq: reduced tag depth (128 -> 64) [ 574.761376][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x4138ae84, 0x0) 14:22:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x41a0ae8d, 0x0) 14:22:26 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x41a0ae8d, 0x0) 14:22:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) 14:22:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 10) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) 14:22:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x80086601, 0x0) [ 575.280881][ T8983] FAULT_INJECTION: forcing a failure. [ 575.280881][ T8983] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 575.294162][ T8983] CPU: 0 PID: 8983 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 575.304389][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 575.314429][ T8983] Call Trace: [ 575.317701][ T8983] dump_stack_lvl+0x1e2/0x24b [ 575.322353][ T8983] ? bfq_pos_tree_add_move+0x43e/0x43e [ 575.327782][ T8983] dump_stack+0x15/0x17 [ 575.331913][ T8983] should_fail+0x3c0/0x510 [ 575.336303][ T8983] should_fail_alloc_page+0x50/0x60 [ 575.341471][ T8983] __alloc_pages_nodemask+0x1c0/0x890 [ 575.346816][ T8983] ? __x64_sys_ioctl+0x7b/0x90 [ 575.351551][ T8983] ? do_syscall_64+0x34/0x70 [ 575.356112][ T8983] ? irqentry_exit+0x50/0x60 [ 575.360672][ T8983] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 575.366194][ T8983] ? __do_softirq+0x596/0x596 [ 575.370850][ T8983] ? blk_mq_alloc_rqs+0x277/0x910 [ 575.375846][ T8983] blk_mq_alloc_rqs+0x323/0x910 [ 575.380674][ T8983] ? __kasan_kmalloc+0x9/0x10 [ 575.385324][ T8983] ? blk_mq_alloc_rq_map+0x190/0x190 [ 575.390579][ T8983] ? blk_mq_alloc_rq_map+0x11b/0x190 [ 575.395837][ T8983] blk_mq_alloc_map_and_requests+0x1cb/0x7d0 [ 575.401791][ T8983] blk_mq_alloc_tag_set+0x662/0xd40 [ 575.406969][ T8983] loop_add+0x241/0x760 [ 575.411100][ T8983] loop_control_ioctl+0x564/0x740 [ 575.416112][ T8983] ? loop_remove+0xb0/0xb0 [ 575.420504][ T8983] ? __fget_files+0x310/0x370 [ 575.425157][ T8983] ? security_file_ioctl+0xb1/0xd0 [ 575.430239][ T8983] ? loop_remove+0xb0/0xb0 [ 575.434626][ T8983] __se_sys_ioctl+0x115/0x190 [ 575.439275][ T8983] __x64_sys_ioctl+0x7b/0x90 [ 575.443838][ T8983] do_syscall_64+0x34/0x70 [ 575.448254][ T8983] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 575.454118][ T8983] RIP: 0033:0x7fa4636b90d9 [ 575.458507][ T8983] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 575.478106][ T8983] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.486502][ T8983] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 575.494455][ T8983] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 575.502406][ T8983] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 575.510354][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.518327][ T8983] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x80086601, 0x0) 14:22:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x80087601, 0x0) 14:22:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x8090ae81, 0x0) 14:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x80087601, 0x0) 14:22:27 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x8138ae83, 0x0) 14:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x8090ae81, 0x0) 14:22:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 11) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x8138ae83, 0x0) 14:22:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x81a0ae8c, 0x0) [ 576.160209][ T9023] FAULT_INJECTION: forcing a failure. [ 576.160209][ T9023] name failslab, interval 1, probability 0, space 0, times 0 [ 576.172944][ T9023] CPU: 0 PID: 9023 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 576.183158][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 576.193194][ T9023] Call Trace: [ 576.196461][ T9023] dump_stack_lvl+0x1e2/0x24b [ 576.201113][ T9023] ? bfq_pos_tree_add_move+0x43e/0x43e [ 576.206547][ T9023] ? loop_add+0x24c/0x760 [ 576.210847][ T9023] dump_stack+0x15/0x17 [ 576.214977][ T9023] should_fail+0x3c0/0x510 [ 576.219368][ T9023] __should_failslab+0x9f/0xe0 [ 576.224104][ T9023] should_failslab+0x9/0x20 [ 576.228579][ T9023] kmem_cache_alloc+0x3f/0x300 [ 576.233315][ T9023] ? blk_alloc_queue+0x2a/0x640 [ 576.238141][ T9023] blk_alloc_queue+0x2a/0x640 [ 576.242791][ T9023] ? __mutex_init+0xa1/0xf0 [ 576.247266][ T9023] ? blk_mq_alloc_tag_set+0xa57/0xd40 [ 576.252614][ T9023] blk_mq_init_queue+0x35/0xc0 [ 576.257354][ T9023] loop_add+0x270/0x760 [ 576.261484][ T9023] loop_control_ioctl+0x564/0x740 [ 576.266480][ T9023] ? loop_remove+0xb0/0xb0 [ 576.270875][ T9023] ? __fget_files+0x310/0x370 [ 576.275528][ T9023] ? security_file_ioctl+0xb1/0xd0 [ 576.280613][ T9023] ? loop_remove+0xb0/0xb0 [ 576.285006][ T9023] __se_sys_ioctl+0x115/0x190 [ 576.289656][ T9023] __x64_sys_ioctl+0x7b/0x90 [ 576.294218][ T9023] do_syscall_64+0x34/0x70 [ 576.298609][ T9023] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 576.304472][ T9023] RIP: 0033:0x7fa4636b90d9 [ 576.308886][ T9023] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 576.328467][ T9023] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.336855][ T9023] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 576.344801][ T9023] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 576.352746][ T9023] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 576.360690][ T9023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.368635][ T9023] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0x81a0ae8c, 0x0) 14:22:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:28 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 14:22:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 14:22:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 12) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 14:22:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 14:22:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 577.036076][ T9057] FAULT_INJECTION: forcing a failure. [ 577.036076][ T9057] name failslab, interval 1, probability 0, space 0, times 0 [ 577.048915][ T9057] CPU: 0 PID: 9057 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 577.059127][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 577.069153][ T9057] Call Trace: [ 577.072420][ T9057] dump_stack_lvl+0x1e2/0x24b [ 577.077071][ T9057] ? bfq_pos_tree_add_move+0x43e/0x43e [ 577.082505][ T9057] dump_stack+0x15/0x17 [ 577.086633][ T9057] should_fail+0x3c0/0x510 [ 577.091025][ T9057] ? mempool_init_node+0x12b/0x4b0 [ 577.096111][ T9057] __should_failslab+0x9f/0xe0 [ 577.100847][ T9057] should_failslab+0x9/0x20 [ 577.105321][ T9057] __kmalloc+0x60/0x360 [ 577.109451][ T9057] ? __irq_exit_rcu+0x41/0x150 [ 577.114205][ T9057] mempool_init_node+0x12b/0x4b0 [ 577.119118][ T9057] ? mempool_alloc_slab+0x30/0x30 [ 577.124138][ T9057] ? mempool_free+0x310/0x310 [ 577.128789][ T9057] ? mempool_free+0x310/0x310 [ 577.133438][ T9057] ? mempool_alloc_slab+0x30/0x30 [ 577.138432][ T9057] mempool_init+0x3c/0x50 [ 577.142735][ T9057] bioset_init+0x48e/0x640 [ 577.147124][ T9057] blk_alloc_queue+0xc6/0x640 [ 577.151772][ T9057] ? __mutex_init+0xa1/0xf0 [ 577.156249][ T9057] blk_mq_init_queue+0x35/0xc0 [ 577.160992][ T9057] loop_add+0x270/0x760 [ 577.165122][ T9057] loop_control_ioctl+0x564/0x740 [ 577.170121][ T9057] ? __kasan_check_read+0x11/0x20 [ 577.175117][ T9057] ? loop_remove+0xb0/0xb0 [ 577.179507][ T9057] ? __fget_files+0x310/0x370 [ 577.184159][ T9057] ? security_file_ioctl+0xb1/0xd0 [ 577.189244][ T9057] ? loop_remove+0xb0/0xb0 [ 577.193642][ T9057] __se_sys_ioctl+0x115/0x190 [ 577.198290][ T9057] __x64_sys_ioctl+0x7b/0x90 [ 577.202852][ T9057] do_syscall_64+0x34/0x70 [ 577.207243][ T9057] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 577.213104][ T9057] RIP: 0033:0x7fa4636b90d9 [ 577.217496][ T9057] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 577.237072][ T9057] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.245459][ T9057] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 577.253452][ T9057] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 577.261397][ T9057] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 577.269426][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.277374][ T9057] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xc0189436, 0x0) 14:22:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xc0189436, 0x0) 14:22:29 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xc018ae85, 0x0) 14:22:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xc018ae85, 0x0) 14:22:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 13) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xc020660b, 0x0) 14:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xc020660b, 0x0) [ 577.910204][ T9088] FAULT_INJECTION: forcing a failure. [ 577.910204][ T9088] name failslab, interval 1, probability 0, space 0, times 0 [ 577.922870][ T9088] CPU: 0 PID: 9088 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 577.933086][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 577.943152][ T9088] Call Trace: [ 577.946420][ T9088] dump_stack_lvl+0x1e2/0x24b [ 577.951072][ T9088] ? panic+0x7d7/0x7d7 [ 577.955114][ T9088] ? bfq_pos_tree_add_move+0x43e/0x43e [ 577.960990][ T9088] dump_stack+0x15/0x17 [ 577.965122][ T9088] should_fail+0x3c0/0x510 [ 577.969515][ T9088] __should_failslab+0x9f/0xe0 [ 577.974252][ T9088] should_failslab+0x9/0x20 [ 577.978730][ T9088] kmem_cache_alloc+0x3f/0x300 [ 577.983467][ T9088] ? mempool_alloc_slab+0x1d/0x30 [ 577.988465][ T9088] mempool_alloc_slab+0x1d/0x30 [ 577.993291][ T9088] ? mempool_free+0x310/0x310 [ 577.997944][ T9088] mempool_init_node+0x1e6/0x4b0 [ 578.002856][ T9088] ? mempool_free+0x310/0x310 [ 578.007528][ T9088] ? mempool_alloc_slab+0x30/0x30 [ 578.012540][ T9088] mempool_init+0x3c/0x50 [ 578.016926][ T9088] bioset_init+0x48e/0x640 [ 578.021338][ T9088] blk_alloc_queue+0xc6/0x640 [ 578.026000][ T9088] blk_mq_init_queue+0x35/0xc0 [ 578.030745][ T9088] loop_add+0x270/0x760 [ 578.034880][ T9088] loop_control_ioctl+0x564/0x740 [ 578.039972][ T9088] ? loop_remove+0xb0/0xb0 [ 578.044365][ T9088] ? __fget_files+0x310/0x370 [ 578.049015][ T9088] ? security_file_ioctl+0xb1/0xd0 [ 578.054107][ T9088] ? loop_remove+0xb0/0xb0 [ 578.058499][ T9088] __se_sys_ioctl+0x115/0x190 [ 578.063149][ T9088] __x64_sys_ioctl+0x7b/0x90 [ 578.067717][ T9088] do_syscall_64+0x34/0x70 [ 578.072110][ T9088] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 578.077977][ T9088] RIP: 0033:0x7fa4636b90d9 [ 578.082371][ T9088] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 578.101954][ T9088] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.110429][ T9088] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 578.118462][ T9088] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 578.126408][ T9088] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 578.134354][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 578.142301][ T9088] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2) 14:22:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x2) 14:22:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x3) 14:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3) 14:22:30 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x4) 14:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4) 14:22:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 14) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x5) 14:22:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x5) 14:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x6) [ 578.789213][ T9127] FAULT_INJECTION: forcing a failure. [ 578.789213][ T9127] name failslab, interval 1, probability 0, space 0, times 0 [ 578.801878][ T9127] CPU: 0 PID: 9127 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 578.812095][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 578.822123][ T9127] Call Trace: [ 578.825398][ T9127] dump_stack_lvl+0x1e2/0x24b [ 578.830051][ T9127] ? panic+0x7d7/0x7d7 [ 578.834092][ T9127] ? bfq_pos_tree_add_move+0x43e/0x43e [ 578.839531][ T9127] ? __do_softirq+0x596/0x596 [ 578.844179][ T9127] dump_stack+0x15/0x17 [ 578.848403][ T9127] should_fail+0x3c0/0x510 [ 578.852795][ T9127] __should_failslab+0x9f/0xe0 [ 578.857532][ T9127] should_failslab+0x9/0x20 [ 578.862095][ T9127] kmem_cache_alloc+0x3f/0x300 [ 578.866831][ T9127] ? mempool_alloc_slab+0x1d/0x30 [ 578.871829][ T9127] ? ____kasan_slab_free+0x10a/0x160 [ 578.877095][ T9127] mempool_alloc_slab+0x1d/0x30 [ 578.881919][ T9127] ? mempool_free+0x310/0x310 [ 578.886569][ T9127] mempool_init_node+0x1e6/0x4b0 [ 578.891478][ T9127] ? mempool_free+0x310/0x310 [ 578.896131][ T9127] ? mempool_alloc_slab+0x30/0x30 [ 578.901126][ T9127] mempool_init+0x3c/0x50 [ 578.905430][ T9127] bioset_init+0x48e/0x640 [ 578.909820][ T9127] blk_alloc_queue+0xc6/0x640 [ 578.914468][ T9127] ? __mutex_init+0xa1/0xf0 [ 578.918943][ T9127] blk_mq_init_queue+0x35/0xc0 [ 578.923683][ T9127] loop_add+0x270/0x760 [ 578.927812][ T9127] loop_control_ioctl+0x564/0x740 [ 578.932811][ T9127] ? loop_remove+0xb0/0xb0 [ 578.937203][ T9127] ? irqentry_exit+0x50/0x60 [ 578.941791][ T9127] ? sysvec_reschedule_ipi+0x84/0x160 [ 578.947139][ T9127] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 578.952745][ T9127] ? loop_remove+0xb0/0xb0 [ 578.957135][ T9127] __se_sys_ioctl+0x115/0x190 [ 578.961785][ T9127] __x64_sys_ioctl+0x7b/0x90 [ 578.966347][ T9127] do_syscall_64+0x34/0x70 [ 578.970737][ T9127] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 578.976603][ T9127] RIP: 0033:0x7fa4636b90d9 [ 578.980992][ T9127] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 579.000565][ T9127] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.008953][ T9127] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 579.016901][ T9127] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 579.025021][ T9127] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 579.032979][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 579.040923][ T9127] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x6) 14:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7) 14:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8) 14:22:30 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x7) 14:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x9) 14:22:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 15) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa) 14:22:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x8) 14:22:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x9) [ 579.666300][ T9161] FAULT_INJECTION: forcing a failure. [ 579.666300][ T9161] name failslab, interval 1, probability 0, space 0, times 0 [ 579.678970][ T9161] CPU: 0 PID: 9161 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 579.689194][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 579.699229][ T9161] Call Trace: [ 579.702507][ T9161] dump_stack_lvl+0x1e2/0x24b [ 579.707167][ T9161] ? bfq_pos_tree_add_move+0x43e/0x43e [ 579.712606][ T9161] dump_stack+0x15/0x17 [ 579.716757][ T9161] should_fail+0x3c0/0x510 [ 579.721156][ T9161] ? mempool_init_node+0x12b/0x4b0 [ 579.726240][ T9161] __should_failslab+0x9f/0xe0 [ 579.730984][ T9161] should_failslab+0x9/0x20 [ 579.735458][ T9161] __kmalloc+0x60/0x360 [ 579.739589][ T9161] ? ____kasan_slab_free+0x10a/0x160 [ 579.744848][ T9161] mempool_init_node+0x12b/0x4b0 [ 579.749764][ T9161] ? mempool_alloc_slab+0x30/0x30 [ 579.754761][ T9161] ? mempool_free+0x310/0x310 [ 579.759420][ T9161] ? mempool_free+0x310/0x310 [ 579.764070][ T9161] ? mempool_alloc_slab+0x30/0x30 [ 579.769064][ T9161] mempool_init+0x3c/0x50 [ 579.773369][ T9161] bioset_init+0x503/0x640 [ 579.777758][ T9161] blk_alloc_queue+0xc6/0x640 [ 579.782406][ T9161] ? __mutex_init+0xa1/0xf0 [ 579.786883][ T9161] blk_mq_init_queue+0x35/0xc0 [ 579.791620][ T9161] loop_add+0x270/0x760 [ 579.795755][ T9161] loop_control_ioctl+0x564/0x740 [ 579.800756][ T9161] ? loop_remove+0xb0/0xb0 [ 579.805149][ T9161] ? __fget_files+0x310/0x370 [ 579.809801][ T9161] ? security_file_ioctl+0xb1/0xd0 [ 579.814888][ T9161] ? loop_remove+0xb0/0xb0 [ 579.819279][ T9161] __se_sys_ioctl+0x115/0x190 [ 579.823931][ T9161] __x64_sys_ioctl+0x7b/0x90 [ 579.828498][ T9161] do_syscall_64+0x34/0x70 [ 579.832891][ T9161] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 579.838766][ T9161] RIP: 0033:0x7fa4636b90d9 [ 579.843161][ T9161] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 579.862738][ T9161] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.871211][ T9161] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 579.879158][ T9161] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 579.887107][ T9161] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 579.895057][ T9161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 579.903005][ T9161] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xa) 14:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb) 14:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc) 14:22:31 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xb) 14:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xd) 14:22:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 16) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xc) 14:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe) 14:22:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xd) [ 580.550271][ T9197] FAULT_INJECTION: forcing a failure. [ 580.550271][ T9197] name failslab, interval 1, probability 0, space 0, times 0 [ 580.562920][ T9197] CPU: 0 PID: 9197 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 580.573134][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 580.583172][ T9197] Call Trace: [ 580.586454][ T9197] dump_stack_lvl+0x1e2/0x24b [ 580.591122][ T9197] ? panic+0x7d7/0x7d7 [ 580.595176][ T9197] ? bfq_pos_tree_add_move+0x43e/0x43e [ 580.600615][ T9197] dump_stack+0x15/0x17 [ 580.604747][ T9197] should_fail+0x3c0/0x510 [ 580.609139][ T9197] __should_failslab+0x9f/0xe0 [ 580.613882][ T9197] should_failslab+0x9/0x20 [ 580.618360][ T9197] kmem_cache_alloc+0x3f/0x300 [ 580.623101][ T9197] ? mempool_alloc_slab+0x1d/0x30 [ 580.628101][ T9197] mempool_alloc_slab+0x1d/0x30 [ 580.632934][ T9197] ? mempool_free+0x310/0x310 [ 580.637590][ T9197] mempool_init_node+0x1e6/0x4b0 [ 580.642502][ T9197] ? mempool_free+0x310/0x310 [ 580.647174][ T9197] ? mempool_alloc_slab+0x30/0x30 [ 580.652180][ T9197] mempool_init+0x3c/0x50 [ 580.656490][ T9197] bioset_init+0x503/0x640 [ 580.661018][ T9197] blk_alloc_queue+0xc6/0x640 [ 580.665682][ T9197] ? __mutex_init+0xa1/0xf0 [ 580.670168][ T9197] blk_mq_init_queue+0x35/0xc0 [ 580.674914][ T9197] loop_add+0x270/0x760 [ 580.679059][ T9197] loop_control_ioctl+0x564/0x740 [ 580.684061][ T9197] ? sysvec_reschedule_ipi+0x84/0x160 [ 580.689411][ T9197] ? loop_remove+0xb0/0xb0 [ 580.693804][ T9197] ? security_file_ioctl+0x8f/0xd0 [ 580.698891][ T9197] ? security_file_ioctl+0xb1/0xd0 [ 580.703974][ T9197] ? loop_remove+0xb0/0xb0 [ 580.708365][ T9197] __se_sys_ioctl+0x115/0x190 [ 580.713123][ T9197] __x64_sys_ioctl+0x7b/0x90 [ 580.717697][ T9197] do_syscall_64+0x34/0x70 [ 580.722099][ T9197] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 580.727986][ T9197] RIP: 0033:0x7fa4636b90d9 [ 580.732395][ T9197] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 580.752106][ T9197] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.760499][ T9197] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 580.768449][ T9197] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 580.776405][ T9197] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 580.784353][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 580.792514][ T9197] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xf) 14:22:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xe) 14:22:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x10) 14:22:32 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xf) 14:22:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x11) 14:22:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 17) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x10) 14:22:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x12) 14:22:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x11) [ 581.425312][ T9233] FAULT_INJECTION: forcing a failure. [ 581.425312][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 581.437957][ T9233] CPU: 0 PID: 9233 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 581.448172][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 581.458198][ T9233] Call Trace: [ 581.461463][ T9233] dump_stack_lvl+0x1e2/0x24b [ 581.466203][ T9233] ? panic+0x7d7/0x7d7 [ 581.470242][ T9233] ? bfq_pos_tree_add_move+0x43e/0x43e [ 581.475673][ T9233] dump_stack+0x15/0x17 [ 581.479813][ T9233] should_fail+0x3c0/0x510 [ 581.484203][ T9233] __should_failslab+0x9f/0xe0 [ 581.488940][ T9233] should_failslab+0x9/0x20 [ 581.493414][ T9233] kmem_cache_alloc+0x3f/0x300 [ 581.498152][ T9233] ? mempool_alloc_slab+0x1d/0x30 [ 581.503150][ T9233] ? ____kasan_slab_free+0x10a/0x160 [ 581.508409][ T9233] mempool_alloc_slab+0x1d/0x30 [ 581.513233][ T9233] ? mempool_free+0x310/0x310 [ 581.517885][ T9233] mempool_init_node+0x1e6/0x4b0 [ 581.522795][ T9233] ? mempool_free+0x310/0x310 [ 581.527445][ T9233] ? mempool_alloc_slab+0x30/0x30 [ 581.532441][ T9233] mempool_init+0x3c/0x50 [ 581.536746][ T9233] bioset_init+0x503/0x640 [ 581.541141][ T9233] blk_alloc_queue+0xc6/0x640 [ 581.545787][ T9233] ? __mutex_init+0xa1/0xf0 [ 581.550265][ T9233] blk_mq_init_queue+0x35/0xc0 [ 581.555000][ T9233] loop_add+0x270/0x760 [ 581.559131][ T9233] loop_control_ioctl+0x564/0x740 [ 581.564165][ T9233] ? sysvec_reschedule_ipi+0x84/0x160 [ 581.569512][ T9233] ? loop_remove+0xb0/0xb0 [ 581.573908][ T9233] ? security_file_ioctl+0xb1/0xd0 [ 581.578990][ T9233] ? loop_remove+0xb0/0xb0 [ 581.583468][ T9233] __se_sys_ioctl+0x115/0x190 [ 581.588118][ T9233] __x64_sys_ioctl+0x7b/0x90 [ 581.592683][ T9233] do_syscall_64+0x34/0x70 [ 581.597072][ T9233] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 581.602937][ T9233] RIP: 0033:0x7fa4636b90d9 [ 581.607327][ T9233] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 581.626902][ T9233] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.635291][ T9233] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 581.643236][ T9233] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 581.651181][ T9233] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 581.659129][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.667074][ T9233] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x13) 14:22:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x12) 14:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x14) 14:22:33 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x13) 14:22:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 18) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x15) 14:22:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x16) 14:22:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x14) 14:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x17) [ 582.295509][ T9273] FAULT_INJECTION: forcing a failure. [ 582.295509][ T9273] name failslab, interval 1, probability 0, space 0, times 0 [ 582.308171][ T9273] CPU: 0 PID: 9273 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 582.318401][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 582.328444][ T9273] Call Trace: [ 582.331725][ T9273] dump_stack_lvl+0x1e2/0x24b [ 582.336400][ T9273] ? bfq_pos_tree_add_move+0x43e/0x43e [ 582.341834][ T9273] ? kmem_cache_alloc+0x1a4/0x300 [ 582.346834][ T9273] ? ____kasan_slab_free+0x10a/0x160 [ 582.352091][ T9273] dump_stack+0x15/0x17 [ 582.356223][ T9273] should_fail+0x3c0/0x510 [ 582.360610][ T9273] ? bdi_alloc+0x4e/0x110 [ 582.364910][ T9273] __should_failslab+0x9f/0xe0 [ 582.369646][ T9273] should_failslab+0x9/0x20 [ 582.374122][ T9273] kmem_cache_alloc_trace+0x3a/0x330 [ 582.379378][ T9273] ? bioset_init+0x54a/0x640 [ 582.383939][ T9273] bdi_alloc+0x4e/0x110 [ 582.388071][ T9273] blk_alloc_queue+0x111/0x640 [ 582.392809][ T9273] blk_mq_init_queue+0x35/0xc0 [ 582.397546][ T9273] loop_add+0x270/0x760 [ 582.401676][ T9273] loop_control_ioctl+0x564/0x740 [ 582.406675][ T9273] ? loop_remove+0xb0/0xb0 [ 582.411064][ T9273] ? __fget_files+0x310/0x370 [ 582.415715][ T9273] ? security_file_ioctl+0xb1/0xd0 [ 582.420799][ T9273] ? loop_remove+0xb0/0xb0 [ 582.425188][ T9273] __se_sys_ioctl+0x115/0x190 [ 582.429836][ T9273] __x64_sys_ioctl+0x7b/0x90 [ 582.434398][ T9273] do_syscall_64+0x34/0x70 [ 582.438790][ T9273] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 582.444664][ T9273] RIP: 0033:0x7fa4636b90d9 [ 582.449073][ T9273] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 582.468655][ T9273] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.477042][ T9273] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 582.484989][ T9273] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 582.492939][ T9273] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 582.500889][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 582.508854][ T9273] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x15) 14:22:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x18) 14:22:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x16) 14:22:34 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x19) 14:22:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x17) 14:22:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 19) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1a) 14:22:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x18) 14:22:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1b) [ 583.150289][ T9308] FAULT_INJECTION: forcing a failure. [ 583.150289][ T9308] name failslab, interval 1, probability 0, space 0, times 0 [ 583.162946][ T9308] CPU: 0 PID: 9308 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 583.173159][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 583.183186][ T9308] Call Trace: [ 583.186452][ T9308] dump_stack_lvl+0x1e2/0x24b [ 583.191104][ T9308] ? panic+0x7d7/0x7d7 [ 583.195146][ T9308] ? bfq_pos_tree_add_move+0x43e/0x43e [ 583.200576][ T9308] dump_stack+0x15/0x17 [ 583.204968][ T9308] should_fail+0x3c0/0x510 [ 583.209356][ T9308] ? blk_alloc_queue_stats+0x4c/0x100 [ 583.214702][ T9308] __should_failslab+0x9f/0xe0 [ 583.219440][ T9308] should_failslab+0x9/0x20 [ 583.223919][ T9308] kmem_cache_alloc_trace+0x3a/0x330 [ 583.229175][ T9308] ? bdi_init+0x239/0x370 [ 583.233478][ T9308] blk_alloc_queue_stats+0x4c/0x100 [ 583.238667][ T9308] blk_alloc_queue+0x151/0x640 [ 583.243407][ T9308] blk_mq_init_queue+0x35/0xc0 [ 583.248146][ T9308] loop_add+0x270/0x760 [ 583.252274][ T9308] loop_control_ioctl+0x564/0x740 [ 583.257269][ T9308] ? loop_remove+0xb0/0xb0 [ 583.261672][ T9308] ? __fget_files+0x310/0x370 [ 583.266327][ T9308] ? security_file_ioctl+0xb1/0xd0 [ 583.271414][ T9308] ? loop_remove+0xb0/0xb0 [ 583.275803][ T9308] __se_sys_ioctl+0x115/0x190 [ 583.280454][ T9308] __x64_sys_ioctl+0x7b/0x90 [ 583.285020][ T9308] do_syscall_64+0x34/0x70 [ 583.289433][ T9308] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 583.295294][ T9308] RIP: 0033:0x7fa4636b90d9 [ 583.299686][ T9308] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 583.319606][ T9308] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.327994][ T9308] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 583.335944][ T9308] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 583.343898][ T9308] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 583.351841][ T9308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 583.359877][ T9308] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x19) 14:22:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c) 14:22:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1a) 14:22:35 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1d) 14:22:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 20) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1b) 14:22:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1c) 14:22:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1e) [ 584.004345][ T9345] FAULT_INJECTION: forcing a failure. [ 584.004345][ T9345] name failslab, interval 1, probability 0, space 0, times 0 [ 584.016999][ T9345] CPU: 0 PID: 9345 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 584.027215][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 584.037246][ T9345] Call Trace: [ 584.040517][ T9345] dump_stack_lvl+0x1e2/0x24b [ 584.045168][ T9345] ? panic+0x7d7/0x7d7 [ 584.049211][ T9345] ? bfq_pos_tree_add_move+0x43e/0x43e [ 584.054643][ T9345] ? preempt_schedule_thunk+0x16/0x18 [ 584.059987][ T9345] ? find_next_bit+0xd6/0x120 [ 584.064638][ T9345] ? cpumask_next+0x11/0x30 [ 584.069116][ T9345] dump_stack+0x15/0x17 [ 584.073246][ T9345] should_fail+0x3c0/0x510 [ 584.077635][ T9345] ? percpu_ref_init+0xd0/0x340 [ 584.082457][ T9345] __should_failslab+0x9f/0xe0 [ 584.087197][ T9345] should_failslab+0x9/0x20 [ 584.091673][ T9345] kmem_cache_alloc_trace+0x3a/0x330 [ 584.096932][ T9345] percpu_ref_init+0xd0/0x340 [ 584.101581][ T9345] ? blk_timeout_work+0x10/0x10 [ 584.106405][ T9345] ? __kasan_check_write+0x14/0x20 [ 584.111491][ T9345] blk_alloc_queue+0x440/0x640 [ 584.116229][ T9345] blk_mq_init_queue+0x35/0xc0 [ 584.120967][ T9345] loop_add+0x270/0x760 [ 584.125100][ T9345] loop_control_ioctl+0x564/0x740 [ 584.130100][ T9345] ? loop_remove+0xb0/0xb0 [ 584.134490][ T9345] ? irqentry_exit+0x50/0x60 [ 584.139051][ T9345] ? sysvec_reschedule_ipi+0x84/0x160 [ 584.144401][ T9345] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 584.150005][ T9345] ? do_vfs_ioctl+0xf6/0x1a90 [ 584.154654][ T9345] ? __se_sys_ioctl+0x109/0x190 [ 584.159478][ T9345] ? loop_remove+0xb0/0xb0 [ 584.163866][ T9345] __se_sys_ioctl+0x115/0x190 [ 584.168521][ T9345] __x64_sys_ioctl+0x7b/0x90 [ 584.173181][ T9345] do_syscall_64+0x34/0x70 [ 584.177579][ T9345] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 584.183445][ T9345] RIP: 0033:0x7fa4636b90d9 [ 584.187837][ T9345] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 584.207413][ T9345] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.215802][ T9345] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 584.223748][ T9345] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 584.231694][ T9345] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 584.239643][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.247589][ T9345] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1d) 14:22:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x28) 14:22:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x34) 14:22:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1e) 14:22:36 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3e) 14:22:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x28) 14:22:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 21) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x120) 14:22:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x34) [ 584.858446][ T9381] FAULT_INJECTION: forcing a failure. [ 584.858446][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 584.871111][ T9381] CPU: 0 PID: 9381 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 584.881327][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 584.891360][ T9381] Call Trace: [ 584.894652][ T9381] dump_stack_lvl+0x1e2/0x24b [ 584.899309][ T9381] ? bfq_pos_tree_add_move+0x43e/0x43e [ 584.904744][ T9381] dump_stack+0x15/0x17 [ 584.908878][ T9381] should_fail+0x3c0/0x510 [ 584.913271][ T9381] ? blkg_alloc+0x87/0x5a0 [ 584.917661][ T9381] __should_failslab+0x9f/0xe0 [ 584.922403][ T9381] should_failslab+0x9/0x20 [ 584.926881][ T9381] kmem_cache_alloc_trace+0x3a/0x330 [ 584.932139][ T9381] ? __kasan_kmalloc+0x9/0x10 [ 584.936790][ T9381] blkg_alloc+0x87/0x5a0 [ 584.941007][ T9381] blkcg_init_queue+0x27/0x1d0 [ 584.945747][ T9381] blk_alloc_queue+0x49b/0x640 [ 584.950488][ T9381] blk_mq_init_queue+0x35/0xc0 [ 584.955247][ T9381] loop_add+0x270/0x760 [ 584.959380][ T9381] loop_control_ioctl+0x564/0x740 [ 584.964381][ T9381] ? loop_remove+0xb0/0xb0 [ 584.968772][ T9381] ? irqentry_exit+0x50/0x60 [ 584.973341][ T9381] ? sysvec_reschedule_ipi+0x84/0x160 [ 584.978709][ T9381] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 584.984319][ T9381] ? do_vfs_ioctl+0xf6/0x1a90 [ 584.988997][ T9381] ? __se_sys_ioctl+0x109/0x190 [ 584.993823][ T9381] ? loop_remove+0xb0/0xb0 [ 584.998214][ T9381] __se_sys_ioctl+0x115/0x190 [ 585.002870][ T9381] __x64_sys_ioctl+0x7b/0x90 [ 585.007437][ T9381] do_syscall_64+0x34/0x70 [ 585.011832][ T9381] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 585.017697][ T9381] RIP: 0033:0x7fa4636b90d9 [ 585.022092][ T9381] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 585.041673][ T9381] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.050061][ T9381] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 585.058009][ T9381] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 585.065959][ T9381] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 585.073991][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.081939][ T9381] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x300) 14:22:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x3e) 14:22:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3e8) 14:22:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x66) 14:22:37 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x480) 14:22:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xa9) 14:22:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 22) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x500) 14:22:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x104) [ 585.709720][ T9418] FAULT_INJECTION: forcing a failure. [ 585.709720][ T9418] name failslab, interval 1, probability 0, space 0, times 0 [ 585.722393][ T9418] CPU: 0 PID: 9418 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 585.732614][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 585.742644][ T9418] Call Trace: [ 585.745915][ T9418] dump_stack_lvl+0x1e2/0x24b [ 585.750567][ T9418] ? bfq_pos_tree_add_move+0x43e/0x43e [ 585.756003][ T9418] ? preempt_schedule_thunk+0x16/0x18 [ 585.761347][ T9418] ? find_next_bit+0xd6/0x120 [ 585.766017][ T9418] dump_stack+0x15/0x17 [ 585.770148][ T9418] should_fail+0x3c0/0x510 [ 585.774542][ T9418] ? percpu_ref_init+0xd0/0x340 [ 585.779369][ T9418] __should_failslab+0x9f/0xe0 [ 585.784109][ T9418] should_failslab+0x9/0x20 [ 585.788588][ T9418] kmem_cache_alloc_trace+0x3a/0x330 [ 585.794456][ T9418] percpu_ref_init+0xd0/0x340 [ 585.799110][ T9418] ? blk_cgroup_bio_start+0x310/0x310 [ 585.804456][ T9418] blkg_alloc+0xa4/0x5a0 [ 585.808678][ T9418] blkcg_init_queue+0x27/0x1d0 [ 585.813415][ T9418] blk_alloc_queue+0x49b/0x640 [ 585.818154][ T9418] blk_mq_init_queue+0x35/0xc0 [ 585.822892][ T9418] loop_add+0x270/0x760 [ 585.827025][ T9418] loop_control_ioctl+0x564/0x740 [ 585.832043][ T9418] ? loop_remove+0xb0/0xb0 [ 585.836435][ T9418] ? __fget_files+0x310/0x370 [ 585.841090][ T9418] ? security_file_ioctl+0xb1/0xd0 [ 585.846179][ T9418] ? loop_remove+0xb0/0xb0 [ 585.850589][ T9418] __se_sys_ioctl+0x115/0x190 [ 585.855242][ T9418] __x64_sys_ioctl+0x7b/0x90 [ 585.859828][ T9418] do_syscall_64+0x34/0x70 [ 585.864224][ T9418] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 585.870090][ T9418] RIP: 0033:0x7fa4636b90d9 [ 585.874490][ T9418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 585.894070][ T9418] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.902459][ T9418] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 585.910408][ T9418] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 585.918355][ T9418] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 585.926390][ T9418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.934338][ T9418] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x600) 14:22:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x120) 14:22:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x700) 14:22:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x300) 14:22:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x3e8) 14:22:37 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x900) 14:22:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x480) 14:22:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 23) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa00) 14:22:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x500) 14:22:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb00) 14:22:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x600) [ 586.591611][ T9466] FAULT_INJECTION: forcing a failure. [ 586.591611][ T9466] name failslab, interval 1, probability 0, space 0, times 0 [ 586.604372][ T9466] CPU: 0 PID: 9466 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 586.614592][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 586.624627][ T9466] Call Trace: [ 586.627904][ T9466] dump_stack_lvl+0x1e2/0x24b [ 586.632562][ T9466] ? bfq_pos_tree_add_move+0x43e/0x43e [ 586.637995][ T9466] ? __schedule+0x86e/0xc00 [ 586.642471][ T9466] dump_stack+0x15/0x17 [ 586.646603][ T9466] should_fail+0x3c0/0x510 [ 586.650993][ T9466] ? blk_stat_alloc_callback+0x60/0x210 [ 586.656512][ T9466] __should_failslab+0x9f/0xe0 [ 586.661281][ T9466] should_failslab+0x9/0x20 [ 586.665769][ T9466] kmem_cache_alloc_trace+0x3a/0x330 [ 586.671040][ T9466] ? schedule_preempt_disabled+0x20/0x20 [ 586.676677][ T9466] ? blk_mq_poll_stats_fn+0x130/0x130 [ 586.682035][ T9466] blk_stat_alloc_callback+0x60/0x210 [ 586.687397][ T9466] ? blk_mq_free_tag_set+0x690/0x690 [ 586.692673][ T9466] blk_mq_init_allocated_queue+0x8f/0x1a30 [ 586.698464][ T9466] ? blk_set_default_limits+0x17b/0x410 [ 586.704073][ T9466] ? blk_alloc_queue+0x574/0x640 [ 586.708985][ T9466] blk_mq_init_queue+0x6c/0xc0 [ 586.713727][ T9466] loop_add+0x270/0x760 [ 586.717860][ T9466] loop_control_ioctl+0x564/0x740 [ 586.722862][ T9466] ? loop_remove+0xb0/0xb0 [ 586.727255][ T9466] ? __fget_files+0x310/0x370 [ 586.731909][ T9466] ? security_file_ioctl+0xb1/0xd0 [ 586.736995][ T9466] ? loop_remove+0xb0/0xb0 [ 586.741409][ T9466] __se_sys_ioctl+0x115/0x190 [ 586.746062][ T9466] __x64_sys_ioctl+0x7b/0x90 [ 586.750627][ T9466] do_syscall_64+0x34/0x70 [ 586.755021][ T9466] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 586.760892][ T9466] RIP: 0033:0x7fa4636b90d9 [ 586.765283][ T9466] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 586.784864][ T9466] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.793254][ T9466] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 586.801200][ T9466] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 586.809245][ T9466] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 586.817192][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 586.825144][ T9466] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x700) 14:22:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc00) 14:22:38 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x900) 14:22:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xd00) 14:22:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 24) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xa00) 14:22:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe00) 14:22:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xf00) 14:22:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xb00) 14:22:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1100) 14:22:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xc00) [ 587.467521][ T9505] FAULT_INJECTION: forcing a failure. [ 587.467521][ T9505] name failslab, interval 1, probability 0, space 0, times 0 [ 587.480191][ T9505] CPU: 0 PID: 9505 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 587.490406][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 587.500448][ T9505] Call Trace: [ 587.503727][ T9505] dump_stack_lvl+0x1e2/0x24b [ 587.508398][ T9505] ? bfq_pos_tree_add_move+0x43e/0x43e [ 587.513837][ T9505] ? pcpu_memcg_post_alloc_hook+0x1c8/0x340 [ 587.519711][ T9505] ? __kasan_check_read+0x11/0x20 [ 587.524712][ T9505] ? preempt_schedule_irq+0xef/0x140 [ 587.529971][ T9505] ? preempt_schedule_notrace+0x140/0x140 [ 587.535662][ T9505] dump_stack+0x15/0x17 [ 587.539792][ T9505] should_fail+0x3c0/0x510 [ 587.544185][ T9505] ? blk_stat_alloc_callback+0x60/0x210 [ 587.549705][ T9505] __should_failslab+0x9f/0xe0 [ 587.554441][ T9505] should_failslab+0x9/0x20 [ 587.559614][ T9505] kmem_cache_alloc_trace+0x3a/0x330 [ 587.564875][ T9505] ? blk_mq_poll_stats_fn+0x130/0x130 [ 587.570221][ T9505] blk_stat_alloc_callback+0x60/0x210 [ 587.575568][ T9505] ? blk_mq_free_tag_set+0x690/0x690 [ 587.580827][ T9505] blk_mq_init_allocated_queue+0x8f/0x1a30 [ 587.586607][ T9505] ? blk_set_default_limits+0x17b/0x410 [ 587.592131][ T9505] ? blk_alloc_queue+0x574/0x640 [ 587.597043][ T9505] blk_mq_init_queue+0x6c/0xc0 [ 587.601781][ T9505] loop_add+0x270/0x760 [ 587.605914][ T9505] loop_control_ioctl+0x564/0x740 [ 587.610917][ T9505] ? loop_remove+0xb0/0xb0 [ 587.615311][ T9505] ? __fget_files+0x310/0x370 [ 587.619967][ T9505] ? security_file_ioctl+0xb1/0xd0 [ 587.625052][ T9505] ? loop_remove+0xb0/0xb0 [ 587.629442][ T9505] __se_sys_ioctl+0x115/0x190 [ 587.634097][ T9505] __x64_sys_ioctl+0x7b/0x90 [ 587.638661][ T9505] do_syscall_64+0x34/0x70 [ 587.643051][ T9505] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 587.648918][ T9505] RIP: 0033:0x7fa4636b90d9 [ 587.653310][ T9505] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 587.672890][ T9505] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.681282][ T9505] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 587.689243][ T9505] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 587.697198][ T9505] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 587.705158][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.713118][ T9505] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:39 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1200) 14:22:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xd00) 14:22:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 25) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xe00) 14:22:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1300) 14:22:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xf00) 14:22:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1400) [ 588.321704][ T9538] FAULT_INJECTION: forcing a failure. [ 588.321704][ T9538] name failslab, interval 1, probability 0, space 0, times 0 [ 588.334376][ T9538] CPU: 0 PID: 9538 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 588.344591][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 588.354624][ T9538] Call Trace: [ 588.357896][ T9538] dump_stack_lvl+0x1e2/0x24b [ 588.362548][ T9538] ? bfq_pos_tree_add_move+0x43e/0x43e [ 588.367982][ T9538] dump_stack+0x15/0x17 [ 588.372119][ T9538] should_fail+0x3c0/0x510 [ 588.376540][ T9538] ? blk_mq_init_allocated_queue+0xf8/0x1a30 [ 588.382492][ T9538] __should_failslab+0x9f/0xe0 [ 588.387251][ T9538] should_failslab+0x9/0x20 [ 588.391729][ T9538] kmem_cache_alloc_trace+0x3a/0x330 [ 588.396992][ T9538] ? blk_stat_alloc_callback+0x19b/0x210 [ 588.402596][ T9538] ? blk_mq_free_tag_set+0x690/0x690 [ 588.407854][ T9538] ? blk_mq_poll_stats_fn+0x130/0x130 [ 588.413197][ T9538] blk_mq_init_allocated_queue+0xf8/0x1a30 [ 588.418989][ T9538] ? blk_set_default_limits+0x17b/0x410 [ 588.424511][ T9538] ? blk_alloc_queue+0x574/0x640 [ 588.429452][ T9538] blk_mq_init_queue+0x6c/0xc0 [ 588.434206][ T9538] loop_add+0x270/0x760 [ 588.438340][ T9538] loop_control_ioctl+0x564/0x740 [ 588.443775][ T9538] ? loop_remove+0xb0/0xb0 [ 588.448166][ T9538] ? __fget_files+0x310/0x370 [ 588.452822][ T9538] ? security_file_ioctl+0xb1/0xd0 [ 588.457906][ T9538] ? loop_remove+0xb0/0xb0 [ 588.462302][ T9538] __se_sys_ioctl+0x115/0x190 [ 588.466952][ T9538] __x64_sys_ioctl+0x7b/0x90 [ 588.471515][ T9538] do_syscall_64+0x34/0x70 [ 588.475909][ T9538] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 588.481795][ T9538] RIP: 0033:0x7fa4636b90d9 [ 588.486196][ T9538] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 588.505773][ T9538] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.514161][ T9538] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 588.522123][ T9538] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 588.530077][ T9538] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 588.538028][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.546006][ T9538] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1040) 14:22:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1500) 14:22:40 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1100) 14:22:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1600) 14:22:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1700) 14:22:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1200) 14:22:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 26) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1300) 14:22:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1800) [ 589.168650][ T9575] FAULT_INJECTION: forcing a failure. [ 589.168650][ T9575] name failslab, interval 1, probability 0, space 0, times 0 [ 589.181328][ T9575] CPU: 0 PID: 9575 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 589.191548][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 589.201576][ T9575] Call Trace: [ 589.204844][ T9575] dump_stack_lvl+0x1e2/0x24b [ 589.209498][ T9575] ? panic+0x7d7/0x7d7 [ 589.213543][ T9575] ? __schedule+0x86e/0xc00 [ 589.218022][ T9575] ? bfq_pos_tree_add_move+0x43e/0x43e [ 589.223454][ T9575] dump_stack+0x15/0x17 [ 589.227588][ T9575] should_fail+0x3c0/0x510 [ 589.231983][ T9575] ? blk_mq_realloc_hw_ctxs+0xca/0x1840 [ 589.237503][ T9575] __should_failslab+0x9f/0xe0 [ 589.242243][ T9575] should_failslab+0x9/0x20 [ 589.246722][ T9575] __kmalloc+0x60/0x360 [ 589.250854][ T9575] blk_mq_realloc_hw_ctxs+0xca/0x1840 [ 589.256205][ T9575] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 589.261809][ T9575] ? find_next_bit+0xd6/0x120 [ 589.266459][ T9575] ? cpumask_next+0x11/0x30 [ 589.270938][ T9575] ? blk_mq_sysfs_init+0x1c1/0x200 [ 589.276023][ T9575] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 589.281890][ T9575] ? blk_set_default_limits+0x17b/0x410 [ 589.287417][ T9575] ? blk_alloc_queue+0x574/0x640 [ 589.292328][ T9575] blk_mq_init_queue+0x6c/0xc0 [ 589.297077][ T9575] loop_add+0x270/0x760 [ 589.301224][ T9575] loop_control_ioctl+0x564/0x740 [ 589.306221][ T9575] ? loop_remove+0xb0/0xb0 [ 589.310612][ T9575] ? __fget_files+0x310/0x370 [ 589.315263][ T9575] ? security_file_ioctl+0xb1/0xd0 [ 589.320347][ T9575] ? loop_remove+0xb0/0xb0 [ 589.324740][ T9575] __se_sys_ioctl+0x115/0x190 [ 589.329389][ T9575] __x64_sys_ioctl+0x7b/0x90 [ 589.333956][ T9575] do_syscall_64+0x34/0x70 [ 589.338351][ T9575] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 589.344216][ T9575] RIP: 0033:0x7fa4636b90d9 [ 589.348631][ T9575] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 589.368208][ T9575] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.376597][ T9575] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 589.384550][ T9575] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 589.392499][ T9575] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.400448][ T9575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.408394][ T9575] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1400) 14:22:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1900) 14:22:41 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1500) 14:22:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1a00) 14:22:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1b00) 14:22:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1600) 14:22:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c00) 14:22:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 27) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1700) 14:22:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1d00) 14:22:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1800) [ 590.025585][ T9618] FAULT_INJECTION: forcing a failure. [ 590.025585][ T9618] name failslab, interval 1, probability 0, space 0, times 0 [ 590.038248][ T9618] CPU: 0 PID: 9618 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 590.048467][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 590.058495][ T9618] Call Trace: [ 590.061763][ T9618] dump_stack_lvl+0x1e2/0x24b [ 590.066422][ T9618] ? panic+0x7d7/0x7d7 [ 590.070466][ T9618] ? bfq_pos_tree_add_move+0x43e/0x43e [ 590.075896][ T9618] ? preempt_schedule_irq+0xef/0x140 [ 590.081156][ T9618] ? preempt_schedule_notrace+0x140/0x140 [ 590.086850][ T9618] dump_stack+0x15/0x17 [ 590.090981][ T9618] should_fail+0x3c0/0x510 [ 590.095375][ T9618] ? blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 590.100982][ T9618] __should_failslab+0x9f/0xe0 [ 590.105728][ T9618] should_failslab+0x9/0x20 [ 590.110204][ T9618] __kmalloc+0x60/0x360 [ 590.114334][ T9618] ? blk_mq_hw_queue_to_node+0x101/0x120 [ 590.119942][ T9618] blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 590.125375][ T9618] ? cpumask_next+0x11/0x30 [ 590.129856][ T9618] ? blk_mq_sysfs_init+0x1c1/0x200 [ 590.134945][ T9618] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 590.140814][ T9618] ? blk_set_default_limits+0x17b/0x410 [ 590.146335][ T9618] ? blk_alloc_queue+0x574/0x640 [ 590.151251][ T9618] blk_mq_init_queue+0x6c/0xc0 [ 590.155999][ T9618] loop_add+0x270/0x760 [ 590.160131][ T9618] loop_control_ioctl+0x564/0x740 [ 590.165132][ T9618] ? loop_remove+0xb0/0xb0 [ 590.169524][ T9618] ? irqentry_exit+0x50/0x60 [ 590.174092][ T9618] ? sysvec_reschedule_ipi+0x84/0x160 [ 590.179442][ T9618] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 590.185222][ T9618] ? do_vfs_ioctl+0xf6/0x1a90 [ 590.189876][ T9618] ? __se_sys_ioctl+0x109/0x190 [ 590.194699][ T9618] ? loop_remove+0xb0/0xb0 [ 590.199092][ T9618] __se_sys_ioctl+0x115/0x190 [ 590.203746][ T9618] __x64_sys_ioctl+0x7b/0x90 [ 590.208308][ T9618] do_syscall_64+0x34/0x70 [ 590.212701][ T9618] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 590.218565][ T9618] RIP: 0033:0x7fa4636b90d9 [ 590.223045][ T9618] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 590.242972][ T9618] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.251359][ T9618] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 590.259309][ T9618] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 590.267255][ T9618] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 590.275202][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 590.283151][ T9618] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:42 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1e00) 14:22:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1900) 14:22:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1f00) 14:22:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1a00) 14:22:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2000) 14:22:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 28) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1b00) 14:22:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2001) 14:22:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1c00) [ 590.880410][ T9651] FAULT_INJECTION: forcing a failure. [ 590.880410][ T9651] name failslab, interval 1, probability 0, space 0, times 0 [ 590.893058][ T9651] CPU: 0 PID: 9651 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 590.903276][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 590.913305][ T9651] Call Trace: [ 590.916575][ T9651] dump_stack_lvl+0x1e2/0x24b [ 590.921229][ T9651] ? panic+0x7d7/0x7d7 [ 590.925275][ T9651] ? bfq_pos_tree_add_move+0x43e/0x43e [ 590.930710][ T9651] ? preempt_schedule+0xd9/0xe0 [ 590.935535][ T9651] ? __kasan_check_read+0x11/0x20 [ 590.940533][ T9651] dump_stack+0x15/0x17 [ 590.944664][ T9651] should_fail+0x3c0/0x510 [ 590.949056][ T9651] ? blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 590.954667][ T9651] __should_failslab+0x9f/0xe0 [ 590.959406][ T9651] should_failslab+0x9/0x20 [ 590.963883][ T9651] __kmalloc+0x60/0x360 [ 590.968012][ T9651] blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 590.973448][ T9651] ? cpumask_next+0x11/0x30 [ 590.977927][ T9651] ? blk_mq_sysfs_init+0x1c1/0x200 [ 590.983011][ T9651] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 590.988880][ T9651] ? blk_set_default_limits+0x17b/0x410 [ 590.994399][ T9651] ? blk_alloc_queue+0x574/0x640 [ 590.999315][ T9651] blk_mq_init_queue+0x6c/0xc0 [ 591.004058][ T9651] loop_add+0x270/0x760 [ 591.008189][ T9651] loop_control_ioctl+0x564/0x740 [ 591.013189][ T9651] ? loop_remove+0xb0/0xb0 [ 591.017587][ T9651] ? __fget_files+0x310/0x370 [ 591.022269][ T9651] ? security_file_ioctl+0xb1/0xd0 [ 591.027356][ T9651] ? loop_remove+0xb0/0xb0 [ 591.031750][ T9651] __se_sys_ioctl+0x115/0x190 [ 591.036403][ T9651] __x64_sys_ioctl+0x7b/0x90 [ 591.041320][ T9651] do_syscall_64+0x34/0x70 [ 591.045716][ T9651] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 591.051585][ T9651] RIP: 0033:0x7fa4636b90d9 [ 591.056065][ T9651] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 591.075648][ T9651] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.084038][ T9651] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 591.091985][ T9651] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 591.099931][ T9651] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 591.107882][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.115830][ T9651] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:42 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1d00) 14:22:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2800) 14:22:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1e00) 14:22:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3000) 14:22:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1f00) 14:22:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 29) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3400) 14:22:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x2000) 14:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3e00) [ 591.736469][ T9692] FAULT_INJECTION: forcing a failure. [ 591.736469][ T9692] name failslab, interval 1, probability 0, space 0, times 0 [ 591.749130][ T9692] CPU: 0 PID: 9692 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 591.759357][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 591.769406][ T9692] Call Trace: [ 591.772679][ T9692] dump_stack_lvl+0x1e2/0x24b [ 591.777333][ T9692] ? panic+0x7d7/0x7d7 [ 591.781380][ T9692] ? bfq_pos_tree_add_move+0x43e/0x43e [ 591.786810][ T9692] dump_stack+0x15/0x17 [ 591.790943][ T9692] should_fail+0x3c0/0x510 [ 591.795334][ T9692] ? sbitmap_init_node+0x148/0x3d0 [ 591.800426][ T9692] __should_failslab+0x9f/0xe0 [ 591.805171][ T9692] should_failslab+0x9/0x20 [ 591.809649][ T9692] __kmalloc+0x60/0x360 [ 591.813782][ T9692] sbitmap_init_node+0x148/0x3d0 [ 591.818696][ T9692] blk_mq_realloc_hw_ctxs+0x896/0x1840 [ 591.824129][ T9692] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 591.830002][ T9692] ? blk_set_default_limits+0x17b/0x410 [ 591.835554][ T9692] ? blk_alloc_queue+0x574/0x640 [ 591.840466][ T9692] blk_mq_init_queue+0x6c/0xc0 [ 591.845209][ T9692] loop_add+0x270/0x760 [ 591.849346][ T9692] loop_control_ioctl+0x564/0x740 [ 591.854433][ T9692] ? loop_remove+0xb0/0xb0 [ 591.858845][ T9692] ? __fget_files+0x310/0x370 [ 591.863517][ T9692] ? security_file_ioctl+0xb1/0xd0 [ 591.868612][ T9692] ? loop_remove+0xb0/0xb0 [ 591.873009][ T9692] __se_sys_ioctl+0x115/0x190 [ 591.877669][ T9692] __x64_sys_ioctl+0x7b/0x90 [ 591.882244][ T9692] do_syscall_64+0x34/0x70 [ 591.886650][ T9692] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 591.892520][ T9692] RIP: 0033:0x7fa4636b90d9 [ 591.896915][ T9692] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 591.916583][ T9692] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.924972][ T9692] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 591.932919][ T9692] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 591.940865][ T9692] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 591.948812][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.956762][ T9692] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:43 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8004) 14:22:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x2001) 14:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe803) 14:22:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, 0x0, 0x0) 14:22:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x2800) 14:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc0000) 14:22:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 30) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x3000) 14:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x100080) 14:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x219278) [ 592.597748][ T9731] FAULT_INJECTION: forcing a failure. [ 592.597748][ T9731] name failslab, interval 1, probability 0, space 0, times 0 [ 592.610440][ T9731] CPU: 0 PID: 9731 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 592.620678][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 592.630709][ T9731] Call Trace: [ 592.633980][ T9731] dump_stack_lvl+0x1e2/0x24b [ 592.638638][ T9731] ? bfq_pos_tree_add_move+0x43e/0x43e [ 592.644069][ T9731] dump_stack+0x15/0x17 [ 592.648204][ T9731] should_fail+0x3c0/0x510 [ 592.652600][ T9731] ? blk_alloc_flush_queue+0x7a/0x250 [ 592.658060][ T9731] __should_failslab+0x9f/0xe0 [ 592.662801][ T9731] should_failslab+0x9/0x20 [ 592.667278][ T9731] kmem_cache_alloc_trace+0x3a/0x330 [ 592.672539][ T9731] blk_alloc_flush_queue+0x7a/0x250 [ 592.677713][ T9731] blk_mq_realloc_hw_ctxs+0xa81/0x1840 [ 592.683165][ T9731] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 592.689039][ T9731] ? blk_set_default_limits+0x17b/0x410 [ 592.694567][ T9731] ? blk_alloc_queue+0x574/0x640 [ 592.699486][ T9731] blk_mq_init_queue+0x6c/0xc0 [ 592.704236][ T9731] loop_add+0x270/0x760 [ 592.708374][ T9731] loop_control_ioctl+0x564/0x740 [ 592.713374][ T9731] ? loop_remove+0xb0/0xb0 [ 592.717769][ T9731] ? irqentry_exit+0x50/0x60 [ 592.722335][ T9731] ? sysvec_reschedule_ipi+0x84/0x160 [ 592.727683][ T9731] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 592.733297][ T9731] ? do_vfs_ioctl+0xf6/0x1a90 [ 592.738033][ T9731] ? __se_sys_ioctl+0x109/0x190 [ 592.742861][ T9731] ? loop_remove+0xb0/0xb0 [ 592.747250][ T9731] __se_sys_ioctl+0x115/0x190 [ 592.751904][ T9731] __x64_sys_ioctl+0x7b/0x90 [ 592.756470][ T9731] do_syscall_64+0x34/0x70 [ 592.760862][ T9731] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 592.766735][ T9731] RIP: 0033:0x7fa4636b90d9 [ 592.771129][ T9731] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 592.790706][ T9731] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.799095][ T9731] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 592.807042][ T9731] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 592.814986][ T9731] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 592.822931][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.830886][ T9731] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:44 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x3400) 14:22:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff) 14:22:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1000000) 14:22:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, 0x0, 0x0) 14:22:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2000000) 14:22:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x3e00) 14:22:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 31) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x4010) 14:22:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) [ 593.455461][ T9765] FAULT_INJECTION: forcing a failure. [ 593.455461][ T9765] name failslab, interval 1, probability 0, space 0, times 0 [ 593.468164][ T9765] CPU: 0 PID: 9765 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 593.478376][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 593.488499][ T9765] Call Trace: [ 593.491792][ T9765] dump_stack_lvl+0x1e2/0x24b [ 593.496446][ T9765] ? bfq_pos_tree_add_move+0x43e/0x43e [ 593.501879][ T9765] dump_stack+0x15/0x17 [ 593.506011][ T9765] should_fail+0x3c0/0x510 [ 593.510403][ T9765] ? blk_alloc_flush_queue+0xe0/0x250 [ 593.515750][ T9765] __should_failslab+0x9f/0xe0 [ 593.520506][ T9765] should_failslab+0x9/0x20 [ 593.524984][ T9765] __kmalloc+0x60/0x360 [ 593.529115][ T9765] ? kmem_cache_alloc_trace+0x1dd/0x330 [ 593.534634][ T9765] ? blk_alloc_flush_queue+0x7a/0x250 [ 593.539979][ T9765] blk_alloc_flush_queue+0xe0/0x250 [ 593.545151][ T9765] blk_mq_realloc_hw_ctxs+0xa81/0x1840 [ 593.550588][ T9765] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 593.556455][ T9765] ? blk_set_default_limits+0x17b/0x410 [ 593.561976][ T9765] ? blk_alloc_queue+0x574/0x640 [ 593.566888][ T9765] blk_mq_init_queue+0x6c/0xc0 [ 593.571634][ T9765] loop_add+0x270/0x760 [ 593.575764][ T9765] loop_control_ioctl+0x564/0x740 [ 593.580767][ T9765] ? loop_remove+0xb0/0xb0 [ 593.585166][ T9765] ? irqentry_exit+0x50/0x60 [ 593.589728][ T9765] ? sysvec_reschedule_ipi+0x84/0x160 [ 593.595077][ T9765] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 593.600687][ T9765] ? do_vfs_ioctl+0xf6/0x1a90 [ 593.605339][ T9765] ? __se_sys_ioctl+0x109/0x190 [ 593.610166][ T9765] ? loop_remove+0xb0/0xb0 [ 593.614558][ T9765] __se_sys_ioctl+0x115/0x190 [ 593.619209][ T9765] __x64_sys_ioctl+0x7b/0x90 [ 593.623771][ T9765] do_syscall_64+0x34/0x70 [ 593.628165][ T9765] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 593.634037][ T9765] RIP: 0033:0x7fa4636b90d9 [ 593.638431][ T9765] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 593.658071][ T9765] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.666475][ T9765] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 593.674436][ T9765] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 593.682390][ T9765] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.690337][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 593.698300][ T9765] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x6600) 14:22:45 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4000000) 14:22:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x8004) 14:22:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x5000000) 14:22:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xa900) 14:22:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, 0x0, 0x0) 14:22:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 32) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x6000000) 14:22:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xe0fe) 14:22:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7000000) 14:22:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xe803) [ 594.303812][ T9806] FAULT_INJECTION: forcing a failure. [ 594.303812][ T9806] name failslab, interval 1, probability 0, space 0, times 0 [ 594.316489][ T9806] CPU: 0 PID: 9806 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 594.326799][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 594.336832][ T9806] Call Trace: [ 594.340103][ T9806] dump_stack_lvl+0x1e2/0x24b [ 594.344759][ T9806] ? panic+0x7d7/0x7d7 [ 594.348801][ T9806] ? bfq_pos_tree_add_move+0x43e/0x43e [ 594.354240][ T9806] ? __kasan_check_read+0x11/0x20 [ 594.359325][ T9806] ? preempt_schedule_irq+0xef/0x140 [ 594.364586][ T9806] dump_stack+0x15/0x17 [ 594.368720][ T9806] should_fail+0x3c0/0x510 [ 594.373112][ T9806] ? __alloc_disk_node+0x75/0x330 [ 594.378109][ T9806] __should_failslab+0x9f/0xe0 [ 594.382849][ T9806] should_failslab+0x9/0x20 [ 594.387329][ T9806] kmem_cache_alloc_trace+0x3a/0x330 [ 594.392587][ T9806] __alloc_disk_node+0x75/0x330 [ 594.397413][ T9806] loop_add+0x341/0x760 [ 594.401546][ T9806] loop_control_ioctl+0x564/0x740 [ 594.406544][ T9806] ? __rcu_read_unlock+0x4c/0x90 [ 594.411457][ T9806] ? loop_remove+0xb0/0xb0 [ 594.415850][ T9806] ? __fget_files+0x310/0x370 [ 594.420506][ T9806] ? security_file_ioctl+0xb1/0xd0 [ 594.425595][ T9806] ? loop_remove+0xb0/0xb0 [ 594.429986][ T9806] __se_sys_ioctl+0x115/0x190 [ 594.434636][ T9806] __x64_sys_ioctl+0x7b/0x90 [ 594.439295][ T9806] do_syscall_64+0x34/0x70 [ 594.443690][ T9806] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 594.449556][ T9806] RIP: 0033:0x7fa4636b90d9 [ 594.453948][ T9806] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 594.473538][ T9806] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.481970][ T9806] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 594.489930][ T9806] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 594.497888][ T9806] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 594.505853][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 594.513821][ T9806] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8000000) 14:22:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x40000) 14:22:46 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x9000000) 14:22:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xc0000) 14:22:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa000000) 14:22:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x100000) 14:22:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 33) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb000000) 14:22:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x100080) 14:22:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x219278) 14:22:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc000000) [ 595.167755][ T9845] FAULT_INJECTION: forcing a failure. [ 595.167755][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 595.180469][ T9845] CPU: 0 PID: 9845 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 595.190705][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 595.200736][ T9845] Call Trace: [ 595.204003][ T9845] dump_stack_lvl+0x1e2/0x24b [ 595.208685][ T9845] ? bfq_pos_tree_add_move+0x43e/0x43e [ 595.214379][ T9845] dump_stack+0x15/0x17 [ 595.218516][ T9845] should_fail+0x3c0/0x510 [ 595.222908][ T9845] ? disk_expand_part_tbl+0x1b9/0x3f0 [ 595.228254][ T9845] __should_failslab+0x9f/0xe0 [ 595.232994][ T9845] should_failslab+0x9/0x20 [ 595.237475][ T9845] __kmalloc+0x60/0x360 [ 595.241617][ T9845] disk_expand_part_tbl+0x1b9/0x3f0 [ 595.246799][ T9845] __alloc_disk_node+0x112/0x330 [ 595.251711][ T9845] loop_add+0x341/0x760 [ 595.255841][ T9845] loop_control_ioctl+0x564/0x740 [ 595.260844][ T9845] ? __kasan_check_read+0x11/0x20 [ 595.265844][ T9845] ? loop_remove+0xb0/0xb0 [ 595.270239][ T9845] ? __fget_files+0x310/0x370 [ 595.274892][ T9845] ? security_file_ioctl+0xb1/0xd0 [ 595.279978][ T9845] ? loop_remove+0xb0/0xb0 [ 595.284374][ T9845] __se_sys_ioctl+0x115/0x190 [ 595.289024][ T9845] __x64_sys_ioctl+0x7b/0x90 [ 595.293591][ T9845] do_syscall_64+0x34/0x70 [ 595.297993][ T9845] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 595.303950][ T9845] RIP: 0033:0x7fa4636b90d9 [ 595.308347][ T9845] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 595.328104][ T9845] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.336511][ T9845] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 595.344979][ T9845] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 595.352931][ T9845] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 595.360879][ T9845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 595.368828][ T9845] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:47 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff) 14:22:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xd000000) 14:22:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1000000) 14:22:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe000000) 14:22:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 34) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xf000000) 14:22:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1040000) 14:22:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x10000000) 14:22:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x2000000) [ 596.024540][ T9881] FAULT_INJECTION: forcing a failure. [ 596.024540][ T9881] name failslab, interval 1, probability 0, space 0, times 0 [ 596.037299][ T9881] CPU: 0 PID: 9881 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 596.047520][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 596.057553][ T9881] Call Trace: [ 596.060824][ T9881] dump_stack_lvl+0x1e2/0x24b [ 596.065478][ T9881] ? panic+0x7d7/0x7d7 [ 596.069527][ T9881] ? bfq_pos_tree_add_move+0x43e/0x43e [ 596.074958][ T9881] ? find_next_bit+0x5b/0x120 [ 596.079608][ T9881] ? find_next_bit+0xd6/0x120 [ 596.084260][ T9881] ? cpumask_next+0x11/0x30 [ 596.088743][ T9881] dump_stack+0x15/0x17 [ 596.092878][ T9881] should_fail+0x3c0/0x510 [ 596.097269][ T9881] ? percpu_ref_init+0xd0/0x340 [ 596.102097][ T9881] __should_failslab+0x9f/0xe0 [ 596.106836][ T9881] should_failslab+0x9/0x20 [ 596.111311][ T9881] kmem_cache_alloc_trace+0x3a/0x330 [ 596.116578][ T9881] percpu_ref_init+0xd0/0x340 [ 596.121236][ T9881] ? hd_ref_init+0x50/0x50 [ 596.125629][ T9881] hd_ref_init+0x27/0x50 [ 596.129844][ T9881] __alloc_disk_node+0x1be/0x330 [ 596.134755][ T9881] loop_add+0x341/0x760 [ 596.138883][ T9881] loop_control_ioctl+0x564/0x740 [ 596.143879][ T9881] ? loop_remove+0xb0/0xb0 [ 596.148268][ T9881] ? __fget_files+0x310/0x370 [ 596.152921][ T9881] ? security_file_ioctl+0xb1/0xd0 [ 596.158032][ T9881] ? loop_remove+0xb0/0xb0 [ 596.162427][ T9881] __se_sys_ioctl+0x115/0x190 [ 596.167084][ T9881] __x64_sys_ioctl+0x7b/0x90 [ 596.171740][ T9881] do_syscall_64+0x34/0x70 [ 596.176135][ T9881] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 596.182000][ T9881] RIP: 0033:0x7fa4636b90d9 [ 596.186400][ T9881] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 596.205980][ T9881] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.214368][ T9881] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 596.222321][ T9881] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 596.230268][ T9881] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 596.238216][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 596.246162][ T9881] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:48 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) 14:22:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x11000000) 14:22:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x12000000) 14:22:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x4000000) 14:22:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 35) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x5000000) 14:22:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x13000000) [ 596.876711][ T9920] FAULT_INJECTION: forcing a failure. [ 596.876711][ T9920] name failslab, interval 1, probability 0, space 0, times 0 [ 596.889387][ T9920] CPU: 0 PID: 9920 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 596.899604][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 596.909635][ T9920] Call Trace: [ 596.912906][ T9920] dump_stack_lvl+0x1e2/0x24b [ 596.917559][ T9920] ? bfq_pos_tree_add_move+0x43e/0x43e [ 596.923020][ T9920] dump_stack+0x15/0x17 [ 596.927154][ T9920] should_fail+0x3c0/0x510 [ 596.931544][ T9920] ? rand_initialize_disk+0x4f/0xa8 [ 596.936715][ T9920] __should_failslab+0x9f/0xe0 [ 596.941475][ T9920] should_failslab+0x9/0x20 [ 596.945955][ T9920] kmem_cache_alloc_trace+0x3a/0x330 [ 596.951213][ T9920] ? __kasan_check_write+0x14/0x20 [ 596.956308][ T9920] ? percpu_ref_init+0x237/0x340 [ 596.961223][ T9920] ? hd_ref_init+0x50/0x50 [ 596.965614][ T9920] rand_initialize_disk+0x4f/0xa8 [ 596.970613][ T9920] __alloc_disk_node+0x29a/0x330 [ 596.975538][ T9920] loop_add+0x341/0x760 [ 596.979669][ T9920] loop_control_ioctl+0x564/0x740 [ 596.984665][ T9920] ? loop_remove+0xb0/0xb0 [ 596.989057][ T9920] ? __fget_files+0x310/0x370 [ 596.993716][ T9920] ? security_file_ioctl+0xb1/0xd0 [ 596.998815][ T9920] ? loop_remove+0xb0/0xb0 [ 597.003216][ T9920] __se_sys_ioctl+0x115/0x190 [ 597.007868][ T9920] __x64_sys_ioctl+0x7b/0x90 [ 597.012436][ T9920] do_syscall_64+0x34/0x70 [ 597.016827][ T9920] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 597.022698][ T9920] RIP: 0033:0x7fa4636b90d9 [ 597.027091][ T9920] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 597.046756][ T9920] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.055143][ T9920] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 597.063108][ T9920] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 597.071053][ T9920] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 597.079000][ T9920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.086971][ T9920] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x6000000) 14:22:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x14000000) 14:22:48 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x15000000) 14:22:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x7000000) 14:22:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x16000000) 14:22:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x8000000) 14:22:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, 0x0, 0x0) 14:22:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 36) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x17000000) 14:22:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x9000000) 14:22:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xa000000) 14:22:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x18000000) [ 597.735202][ T9961] FAULT_INJECTION: forcing a failure. [ 597.735202][ T9961] name failslab, interval 1, probability 0, space 0, times 0 [ 597.747868][ T9961] CPU: 0 PID: 9961 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 597.758086][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 597.768116][ T9961] Call Trace: [ 597.771385][ T9961] dump_stack_lvl+0x1e2/0x24b [ 597.776040][ T9961] ? panic+0x7d7/0x7d7 [ 597.780086][ T9961] ? bfq_pos_tree_add_move+0x43e/0x43e [ 597.785519][ T9961] dump_stack+0x15/0x17 [ 597.789651][ T9961] should_fail+0x3c0/0x510 [ 597.794044][ T9961] ? device_create+0x11d/0x2e0 [ 597.798782][ T9961] __should_failslab+0x9f/0xe0 [ 597.803520][ T9961] should_failslab+0x9/0x20 [ 597.807997][ T9961] kmem_cache_alloc_trace+0x3a/0x330 [ 597.813260][ T9961] ? vsnprintf+0x1fa/0x1cd0 [ 597.817738][ T9961] device_create+0x11d/0x2e0 [ 597.822303][ T9961] ? root_device_unregister+0x80/0x80 [ 597.827654][ T9961] ? _raw_spin_unlock_irq+0x4e/0x70 [ 597.832913][ T9961] bdi_register_va+0x94/0x600 [ 597.837571][ T9961] ? __switch_to_asm+0x34/0x60 [ 597.842309][ T9961] bdi_register+0xd1/0x120 [ 597.846704][ T9961] ? __device_add_disk+0x536/0x11d0 [ 597.851878][ T9961] ? bdi_register_va+0x600/0x600 [ 597.856793][ T9961] ? vsnprintf+0x1bfd/0x1cd0 [ 597.861359][ T9961] ? __kasan_check_read+0x11/0x20 [ 597.866359][ T9961] ? blk_alloc_devt+0xd4/0x320 [ 597.871105][ T9961] __device_add_disk+0x5cb/0x11d0 [ 597.876106][ T9961] ? device_add_disk+0x40/0x40 [ 597.880849][ T9961] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 597.886458][ T9961] ? vsnprintf+0x1bf3/0x1cd0 [ 597.891028][ T9961] ? device_add_disk+0x17/0x40 [ 597.895767][ T9961] device_add_disk+0x2a/0x40 [ 597.900334][ T9961] loop_add+0x58f/0x760 [ 597.904474][ T9961] loop_control_ioctl+0x564/0x740 [ 597.909515][ T9961] ? loop_remove+0xb0/0xb0 [ 597.913910][ T9961] ? __fget_files+0x310/0x370 [ 597.918563][ T9961] ? security_file_ioctl+0xb1/0xd0 [ 597.923645][ T9961] ? loop_remove+0xb0/0xb0 [ 597.928037][ T9961] __se_sys_ioctl+0x115/0x190 [ 597.932688][ T9961] __x64_sys_ioctl+0x7b/0x90 [ 597.937258][ T9961] do_syscall_64+0x34/0x70 [ 597.941652][ T9961] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 597.947520][ T9961] RIP: 0033:0x7fa4636b90d9 [ 597.951914][ T9961] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 597.971517][ T9961] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.979912][ T9961] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 597.987859][ T9961] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 597.995813][ T9961] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 598.003764][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 598.011719][ T9961] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 598.020083][ T9961] ------------[ cut here ]------------ [ 598.025590][ T9961] WARNING: CPU: 0 PID: 9961 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 598.034632][ T9961] Modules linked in: [ 598.038581][ T9961] CPU: 0 PID: 9961 Comm: syz-executor.3 Not tainted 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 598.048834][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 598.058919][ T9961] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 598.064739][ T9961] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 598.084389][ T9961] RSP: 0018:ffffc90008267bc0 EFLAGS: 00010287 [ 598.090495][ T9961] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 598.098490][ T9961] RDX: ffffc90004b48000 RSI: 0000000000027a20 RDI: 0000000000027a21 [ 598.106472][ T9961] RBP: ffffc90008267d08 R08: ffffffff82411a26 R09: fffffbfff0c859a7 [ 598.114467][ T9961] R10: fffffbfff0c859a7 R11: 1ffffffff0c859a6 R12: 0000000000000007 [ 598.122564][ T9961] R13: ffff88815fb90000 R14: ffff888113e50338 R15: ffff888113e50000 [ 598.130564][ T9961] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 598.139546][ T9961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.146144][ T9961] CR2: 00007fa4623e9ff8 CR3: 00000001199ad000 CR4: 00000000003506b0 [ 598.154151][ T9961] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 598.162150][ T9961] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 598.170165][ T9961] Call Trace: [ 598.173475][ T9961] ? device_add_disk+0x40/0x40 [ 598.178252][ T9961] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 598.183918][ T9961] ? vsnprintf+0x1bf3/0x1cd0 [ 598.188624][ T9961] ? device_add_disk+0x17/0x40 [ 598.193404][ T9961] device_add_disk+0x2a/0x40 [ 598.198004][ T9961] loop_add+0x58f/0x760 [ 598.202196][ T9961] loop_control_ioctl+0x564/0x740 [ 598.207239][ T9961] ? loop_remove+0xb0/0xb0 [ 598.211681][ T9961] ? __fget_files+0x310/0x370 [ 598.216369][ T9961] ? security_file_ioctl+0xb1/0xd0 [ 598.221503][ T9961] ? loop_remove+0xb0/0xb0 [ 598.225927][ T9961] __se_sys_ioctl+0x115/0x190 [ 598.230668][ T9961] __x64_sys_ioctl+0x7b/0x90 [ 598.235269][ T9961] do_syscall_64+0x34/0x70 [ 598.239708][ T9961] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 598.245607][ T9961] RIP: 0033:0x7fa4636b90d9 [ 598.250043][ T9961] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 598.269794][ T9961] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.278237][ T9961] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 598.286243][ T9961] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 598.294245][ T9961] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 598.302276][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 598.310270][ T9961] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 598.318253][ T9961] ---[ end trace 3a2d5a045bb1ff33 ]--- [ 598.393853][ T411] udevd[411]: setting mode of /dev/loop0 to 060660 failed: No such file or directory 14:22:49 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, 0x0, 0x0) 14:22:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 37) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xb000000) 14:22:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x19000000) [ 598.506287][ T411] udevd[411]: setting owner of /dev/loop0 to uid=0, gid=6 failed: No such file or directory [ 598.518003][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xc000000) [ 598.632834][ T9986] FAULT_INJECTION: forcing a failure. [ 598.632834][ T9986] name failslab, interval 1, probability 0, space 0, times 0 [ 598.645556][ T9986] CPU: 0 PID: 9986 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 598.657159][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 598.667189][ T9986] Call Trace: [ 598.670461][ T9986] dump_stack_lvl+0x1e2/0x24b [ 598.675114][ T9986] ? panic+0x7d7/0x7d7 [ 598.679160][ T9986] ? bfq_pos_tree_add_move+0x43e/0x43e [ 598.684591][ T9986] dump_stack+0x15/0x17 [ 598.688727][ T9986] should_fail+0x3c0/0x510 [ 598.693262][ T9986] ? kvasprintf_const+0x139/0x180 [ 598.698283][ T9986] __should_failslab+0x9f/0xe0 [ 598.703036][ T9986] should_failslab+0x9/0x20 [ 598.707541][ T9986] __kmalloc_track_caller+0x5f/0x350 [ 598.712804][ T9986] ? __hrtimer_init+0x17b/0x260 [ 598.717637][ T9986] kstrdup_const+0x55/0x90 [ 598.722030][ T9986] kvasprintf_const+0x139/0x180 [ 598.726860][ T9986] kobject_set_name_vargs+0x61/0x120 [ 598.732122][ T9986] device_create+0x222/0x2e0 [ 598.736688][ T9986] ? __irq_exit_rcu+0x41/0x150 [ 598.741426][ T9986] ? irq_exit_rcu+0x9/0x10 [ 598.745818][ T9986] ? sysvec_call_function_single+0xcb/0xe0 [ 598.751598][ T9986] ? root_device_unregister+0x80/0x80 [ 598.756945][ T9986] bdi_register_va+0x94/0x600 [ 598.761596][ T9986] bdi_register+0xd1/0x120 [ 598.765987][ T9986] ? __device_add_disk+0x536/0x11d0 [ 598.771156][ T9986] ? bdi_register_va+0x600/0x600 [ 598.776069][ T9986] ? vsnprintf+0x1bfd/0x1cd0 [ 598.780635][ T9986] ? __kasan_check_read+0x11/0x20 [ 598.785634][ T9986] ? blk_alloc_devt+0xd4/0x320 [ 598.790545][ T9986] __device_add_disk+0x5cb/0x11d0 [ 598.795543][ T9986] ? device_add_disk+0x40/0x40 [ 598.800279][ T9986] ? loop_add+0x3b0/0x760 [ 598.804581][ T9986] ? vsprintf+0x40/0x40 [ 598.808708][ T9986] device_add_disk+0x2a/0x40 [ 598.813275][ T9986] loop_add+0x58f/0x760 [ 598.817403][ T9986] loop_control_ioctl+0x564/0x740 [ 598.822401][ T9986] ? loop_remove+0xb0/0xb0 [ 598.826793][ T9986] ? __fget_files+0x310/0x370 [ 598.831443][ T9986] ? security_file_ioctl+0xb1/0xd0 [ 598.836526][ T9986] ? loop_remove+0xb0/0xb0 [ 598.840918][ T9986] __se_sys_ioctl+0x115/0x190 [ 598.845568][ T9986] __x64_sys_ioctl+0x7b/0x90 [ 598.850130][ T9986] do_syscall_64+0x34/0x70 [ 598.854537][ T9986] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 598.860399][ T9986] RIP: 0033:0x7fa4636b90d9 [ 598.864789][ T9986] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 598.884365][ T9986] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.892751][ T9986] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 598.900696][ T9986] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 598.908732][ T9986] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 598.916675][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 598.924619][ T9986] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xd000000) [ 598.932612][ C0] sched: RT throttling activated [ 598.959045][ T9986] ------------[ cut here ]------------ [ 598.964662][ T9986] WARNING: CPU: 0 PID: 9986 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 598.973716][ T9986] Modules linked in: [ 598.977643][ T9986] CPU: 0 PID: 9986 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 598.989431][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 598.999522][ T9986] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 599.005338][ T9986] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 599.024988][ T9986] RSP: 0018:ffffc900083dfbc0 EFLAGS: 00010283 [ 599.031095][ T9986] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 599.039085][ T9986] RDX: ffffc90004b48000 RSI: 0000000000029ed2 RDI: 0000000000029ed3 [ 599.047067][ T9986] RBP: ffffc900083dfd08 R08: ffffffff82411a26 R09: 0000000000000003 [ 599.055065][ T9986] R10: fffff5200107be85 R11: 1ffff9200107be84 R12: 0000000000000007 [ 599.063058][ T9986] R13: ffff88810e436000 R14: ffff88810d859338 R15: ffff88810d859000 [ 599.071050][ T9986] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 599.080032][ T9986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.086623][ T9986] CR2: 0000555556463728 CR3: 000000010c876000 CR4: 00000000003526b0 [ 599.094631][ T9986] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 599.102623][ T9986] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 599.110625][ T9986] Call Trace: [ 599.113924][ T9986] ? device_add_disk+0x40/0x40 [ 599.118723][ T9986] ? loop_add+0x3b0/0x760 [ 599.123099][ T9986] ? vsprintf+0x40/0x40 [ 599.127292][ T9986] device_add_disk+0x2a/0x40 [ 599.131995][ T9986] loop_add+0x58f/0x760 [ 599.136158][ T9986] loop_control_ioctl+0x564/0x740 [ 599.141202][ T9986] ? loop_remove+0xb0/0xb0 [ 599.145632][ T9986] ? __fget_files+0x310/0x370 [ 599.150331][ T9986] ? security_file_ioctl+0xb1/0xd0 [ 599.155449][ T9986] ? loop_remove+0xb0/0xb0 [ 599.159881][ T9986] __se_sys_ioctl+0x115/0x190 [ 599.164566][ T9986] __x64_sys_ioctl+0x7b/0x90 [ 599.169182][ T9986] do_syscall_64+0x34/0x70 [ 599.173605][ T9986] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 599.179687][ T9986] RIP: 0033:0x7fa4636b90d9 [ 599.184113][ T9986] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 599.203752][ T9986] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.212200][ T9986] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 599.220188][ T9986] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 599.228168][ T9986] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 599.236157][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.244163][ T9986] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 599.252162][ T9986] ---[ end trace 3a2d5a045bb1ff34 ]--- [ 599.293285][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, 0x0, 0x0) 14:22:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1a000000) 14:22:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xe000000) 14:22:50 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 38) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1b000000) 14:22:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xf000000) 14:22:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c000000) 14:22:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1d000000) 14:22:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x10000000) [ 599.573718][T10030] FAULT_INJECTION: forcing a failure. [ 599.573718][T10030] name failslab, interval 1, probability 0, space 0, times 0 [ 599.586409][T10030] CPU: 0 PID: 10030 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 599.598102][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 599.608302][T10030] Call Trace: [ 599.611569][T10030] dump_stack_lvl+0x1e2/0x24b [ 599.616219][T10030] ? panic+0x7d7/0x7d7 [ 599.620356][T10030] ? bfq_pos_tree_add_move+0x43e/0x43e [ 599.625785][T10030] dump_stack+0x15/0x17 [ 599.629912][T10030] should_fail+0x3c0/0x510 [ 599.634476][T10030] ? device_add+0xbe/0xbd0 [ 599.638867][T10030] __should_failslab+0x9f/0xe0 [ 599.643604][T10030] should_failslab+0x9/0x20 [ 599.648091][T10030] kmem_cache_alloc_trace+0x3a/0x330 [ 599.653391][T10030] ? __kasan_check_write+0x14/0x20 [ 599.658490][T10030] device_add+0xbe/0xbd0 [ 599.662720][T10030] ? kfree_const+0x39/0x40 [ 599.667123][T10030] ? kobject_set_name_vargs+0xce/0x120 [ 599.672564][T10030] device_create+0x258/0x2e0 [ 599.677139][T10030] ? root_device_unregister+0x80/0x80 [ 599.682487][T10030] bdi_register_va+0x94/0x600 [ 599.687141][T10030] ? memset_erms+0xb/0x10 [ 599.691442][T10030] bdi_register+0xd1/0x120 [ 599.695831][T10030] ? __device_add_disk+0x536/0x11d0 [ 599.701027][T10030] ? bdi_register_va+0x600/0x600 [ 599.705939][T10030] ? vsnprintf+0x1bfd/0x1cd0 [ 599.710591][T10030] ? __kasan_check_read+0x11/0x20 [ 599.715591][T10030] ? blk_alloc_devt+0xd4/0x320 [ 599.720328][T10030] __device_add_disk+0x5cb/0x11d0 [ 599.725324][T10030] ? device_add_disk+0x40/0x40 [ 599.730063][T10030] ? loop_add+0x3b0/0x760 [ 599.734453][T10030] ? vsprintf+0x40/0x40 [ 599.738582][T10030] device_add_disk+0x2a/0x40 [ 599.743144][T10030] loop_add+0x58f/0x760 [ 599.747272][T10030] loop_control_ioctl+0x564/0x740 [ 599.752276][T10030] ? loop_remove+0xb0/0xb0 [ 599.756673][T10030] ? irqentry_exit+0x50/0x60 [ 599.761237][T10030] ? sysvec_reschedule_ipi+0x84/0x160 [ 599.766580][T10030] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 599.772186][T10030] ? do_vfs_ioctl+0xf6/0x1a90 [ 599.776835][T10030] ? loop_remove+0xb0/0xb0 [ 599.781231][T10030] __se_sys_ioctl+0x115/0x190 [ 599.785887][T10030] __x64_sys_ioctl+0x7b/0x90 [ 599.790447][T10030] do_syscall_64+0x34/0x70 [ 599.794840][T10030] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 599.800704][T10030] RIP: 0033:0x7fa4636b90d9 [ 599.805092][T10030] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 599.824764][T10030] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.833147][T10030] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 599.841091][T10030] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 599.849034][T10030] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 599.856993][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.864942][T10030] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 599.874066][T10030] ------------[ cut here ]------------ [ 599.879590][T10030] WARNING: CPU: 0 PID: 10030 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 599.888710][T10030] Modules linked in: [ 599.892630][T10030] CPU: 0 PID: 10030 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 599.904357][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 599.914450][T10030] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 599.920276][T10030] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 599.940021][T10030] RSP: 0018:ffffc900085f7bc0 EFLAGS: 00010287 [ 599.946124][T10030] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 599.954134][T10030] RDX: ffffc90004b48000 RSI: 000000000002a1a4 RDI: 000000000002a1a5 [ 599.962141][T10030] RBP: ffffc900085f7d08 R08: ffffffff82411a26 R09: 0000000000000003 [ 599.970135][T10030] R10: fffff520010bee8d R11: 1ffff920010bee8c R12: 0000000000000007 [ 599.978116][T10030] R13: ffff88810b36e000 R14: ffff88811f4cb338 R15: ffff88811f4cb000 [ 599.986110][T10030] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 599.995061][T10030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.001718][T10030] CR2: 00007fa4623e9ff8 CR3: 0000000114e9a000 CR4: 00000000003526b0 [ 600.009719][T10030] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 600.017699][T10030] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 600.025685][T10030] Call Trace: [ 600.029026][T10030] ? device_add_disk+0x40/0x40 [ 600.033800][T10030] ? loop_add+0x3b0/0x760 [ 600.038137][T10030] ? vsprintf+0x40/0x40 [ 600.042319][T10030] device_add_disk+0x2a/0x40 [ 600.046920][T10030] loop_add+0x58f/0x760 [ 600.051106][T10030] loop_control_ioctl+0x564/0x740 [ 600.056140][T10030] ? loop_remove+0xb0/0xb0 [ 600.060575][T10030] ? irqentry_exit+0x50/0x60 [ 600.065170][T10030] ? sysvec_reschedule_ipi+0x84/0x160 [ 600.070556][T10030] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 600.076199][T10030] ? do_vfs_ioctl+0xf6/0x1a90 [ 600.080899][T10030] ? loop_remove+0xb0/0xb0 [ 600.085322][T10030] __se_sys_ioctl+0x115/0x190 [ 600.090061][T10030] __x64_sys_ioctl+0x7b/0x90 [ 600.094685][T10030] do_syscall_64+0x34/0x70 [ 600.099127][T10030] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 600.105027][T10030] RIP: 0033:0x7fa4636b90d9 [ 600.109467][T10030] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 600.129113][T10030] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.137550][T10030] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 600.145546][T10030] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 600.153536][T10030] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 600.161700][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.169697][T10030] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 600.177687][T10030] ---[ end trace 3a2d5a045bb1ff35 ]--- [ 600.286050][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 39) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:51 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1e000000) 14:22:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x10400000) 14:22:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x11000000) 14:22:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1f000000) [ 600.488006][T10053] FAULT_INJECTION: forcing a failure. [ 600.488006][T10053] name failslab, interval 1, probability 0, space 0, times 0 [ 600.500713][T10053] CPU: 0 PID: 10053 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 600.512416][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 600.522452][T10053] Call Trace: [ 600.525735][T10053] dump_stack_lvl+0x1e2/0x24b [ 600.530410][T10053] ? bfq_pos_tree_add_move+0x43e/0x43e [ 600.535862][T10053] dump_stack+0x15/0x17 [ 600.540027][T10053] should_fail+0x3c0/0x510 [ 600.544424][T10053] ? __kernfs_new_node+0x99/0x6e0 [ 600.549422][T10053] __should_failslab+0x9f/0xe0 [ 600.554165][T10053] should_failslab+0x9/0x20 [ 600.558643][T10053] __kmalloc_track_caller+0x5f/0x350 [ 600.563905][T10053] ? release_firmware_map_entry+0x194/0x194 [ 600.569774][T10053] kstrdup_const+0x55/0x90 [ 600.574167][T10053] __kernfs_new_node+0x99/0x6e0 [ 600.578992][T10053] ? preempt_schedule_notrace+0x140/0x140 [ 600.584688][T10053] ? kernfs_new_node+0x170/0x170 [ 600.589600][T10053] ? irqentry_exit+0x50/0x60 [ 600.594170][T10053] ? sysvec_reschedule_ipi+0x84/0x160 [ 600.599517][T10053] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 600.605125][T10053] kernfs_create_dir_ns+0x9b/0x230 [ 600.610214][T10053] sysfs_create_dir_ns+0x181/0x390 [ 600.615301][T10053] ? sysfs_warn_dup+0xa0/0xa0 [ 600.619955][T10053] ? kobject_add_internal+0x6b3/0xda0 [ 600.625300][T10053] kobject_add_internal+0x766/0xda0 [ 600.630473][T10053] kobject_add+0x14c/0x210 [ 600.634864][T10053] ? kobject_init+0x1e0/0x1e0 [ 600.639516][T10053] ? mutex_unlock+0x29/0xf0 [ 600.643993][T10053] ? get_device_parent+0x2c5/0x430 [ 600.649080][T10053] device_add+0x3ca/0xbd0 [ 600.653389][T10053] device_create+0x258/0x2e0 [ 600.658248][T10053] ? sysvec_reschedule_ipi+0x84/0x160 [ 600.663596][T10053] ? root_device_unregister+0x80/0x80 [ 600.668944][T10053] ? number+0xd9b/0x1040 [ 600.673166][T10053] bdi_register_va+0x94/0x600 [ 600.677838][T10053] bdi_register+0xd1/0x120 [ 600.682237][T10053] ? irqentry_exit+0x50/0x60 [ 600.686809][T10053] ? sysvec_reschedule_ipi+0x84/0x160 [ 600.692169][T10053] ? __device_add_disk+0x536/0x11d0 [ 600.697366][T10053] ? bdi_register_va+0x600/0x600 [ 600.702293][T10053] ? __kasan_check_read+0x11/0x20 [ 600.707307][T10053] ? blk_alloc_devt+0xd4/0x320 [ 600.712052][T10053] __device_add_disk+0x5cb/0x11d0 [ 600.717058][T10053] ? device_add_disk+0x40/0x40 [ 600.721814][T10053] ? loop_add+0x3b0/0x760 [ 600.726119][T10053] ? vsprintf+0x40/0x40 [ 600.730249][T10053] ? device_initialize+0x217/0x3a0 [ 600.735334][T10053] device_add_disk+0x2a/0x40 [ 600.739900][T10053] loop_add+0x58f/0x760 [ 600.744036][T10053] loop_control_ioctl+0x564/0x740 [ 600.749034][T10053] ? loop_remove+0xb0/0xb0 [ 600.753428][T10053] ? __fget_files+0x310/0x370 [ 600.758083][T10053] ? security_file_ioctl+0xb1/0xd0 [ 600.763168][T10053] ? loop_remove+0xb0/0xb0 [ 600.767564][T10053] __se_sys_ioctl+0x115/0x190 [ 600.772226][T10053] __x64_sys_ioctl+0x7b/0x90 [ 600.776794][T10053] do_syscall_64+0x34/0x70 [ 600.781185][T10053] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 600.787051][T10053] RIP: 0033:0x7fa4636b90d9 [ 600.791443][T10053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 600.811021][T10053] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.819410][T10053] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 600.827357][T10053] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 600.835304][T10053] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 600.843249][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.851199][T10053] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 600.859349][T10053] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 600.867355][T10053] ------------[ cut here ]------------ [ 600.872844][T10053] WARNING: CPU: 0 PID: 10053 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 600.881965][T10053] Modules linked in: [ 600.885895][T10053] CPU: 0 PID: 10053 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 600.897620][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 600.907725][T10053] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 600.913556][T10053] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 600.933255][T10053] RSP: 0018:ffffc90008727bc0 EFLAGS: 00010283 [ 600.939341][T10053] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 600.947321][T10053] RDX: ffffc90004b48000 RSI: 0000000000034b3d RDI: 0000000000034b3e [ 600.955317][T10053] RBP: ffffc90008727d08 R08: ffffffff82411a26 R09: ffffc90008727610 [ 600.963319][T10053] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 600.971313][T10053] R13: ffff88811f7c6000 R14: ffff88811f7c3338 R15: ffff88811f7c3000 [ 600.979303][T10053] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 600.988240][T10053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.994932][T10053] CR2: 00007fa4623e9ff8 CR3: 000000016884b000 CR4: 00000000003506b0 [ 601.002926][T10053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 601.010919][T10053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 601.018913][T10053] Call Trace: [ 601.022223][T10053] ? device_add_disk+0x40/0x40 [ 601.026995][T10053] ? loop_add+0x3b0/0x760 [ 601.031346][T10053] ? vsprintf+0x40/0x40 [ 601.035518][T10053] ? device_initialize+0x217/0x3a0 [ 601.040652][T10053] device_add_disk+0x2a/0x40 [ 601.045251][T10053] loop_add+0x58f/0x760 [ 601.049424][T10053] loop_control_ioctl+0x564/0x740 [ 601.054454][T10053] ? loop_remove+0xb0/0xb0 [ 601.058895][T10053] ? __fget_files+0x310/0x370 [ 601.063589][T10053] ? security_file_ioctl+0xb1/0xd0 [ 601.068719][T10053] ? loop_remove+0xb0/0xb0 [ 601.073153][T10053] __se_sys_ioctl+0x115/0x190 [ 601.077838][T10053] __x64_sys_ioctl+0x7b/0x90 [ 601.082459][T10053] do_syscall_64+0x34/0x70 [ 601.086886][T10053] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 601.092795][T10053] RIP: 0033:0x7fa4636b90d9 [ 601.097217][T10053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 601.116840][T10053] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.125298][T10053] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 601.133287][T10053] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 601.141287][T10053] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 601.149283][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 601.157261][T10053] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 601.165268][T10053] ---[ end trace 3a2d5a045bb1ff36 ]--- [ 601.198515][ T23] audit: type=1400 audit(1670682172.610:295): avc: denied { unlink } for pid=142 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 14:22:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x12000000) 14:22:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 40) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x13000000) 14:22:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x20000000) 14:22:52 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 601.355398][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x14000000) 14:22:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x20010000) [ 601.473841][T10081] FAULT_INJECTION: forcing a failure. [ 601.473841][T10081] name failslab, interval 1, probability 0, space 0, times 0 [ 601.486572][T10081] CPU: 0 PID: 10081 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 601.498262][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 601.508300][T10081] Call Trace: [ 601.511572][T10081] dump_stack_lvl+0x1e2/0x24b [ 601.516226][T10081] ? panic+0x7d7/0x7d7 [ 601.520268][T10081] ? bfq_pos_tree_add_move+0x43e/0x43e [ 601.525698][T10081] dump_stack+0x15/0x17 [ 601.529832][T10081] should_fail+0x3c0/0x510 [ 601.534223][T10081] __should_failslab+0x9f/0xe0 [ 601.538965][T10081] should_failslab+0x9/0x20 [ 601.543441][T10081] kmem_cache_alloc+0x3f/0x300 [ 601.548183][T10081] ? __kernfs_new_node+0xdb/0x6e0 [ 601.553190][T10081] __kernfs_new_node+0xdb/0x6e0 [ 601.558019][T10081] ? stack_trace_save+0x12d/0x1f0 [ 601.563021][T10081] ? kernfs_new_node+0x170/0x170 [ 601.567934][T10081] ? stack_trace_snprint+0x100/0x100 [ 601.573195][T10081] ? stack_trace_save+0x12d/0x1f0 [ 601.578197][T10081] ? __kasan_check_write+0x14/0x20 [ 601.583287][T10081] ? device_add+0xbe/0xbd0 [ 601.587687][T10081] kernfs_create_dir_ns+0x9b/0x230 [ 601.592773][T10081] sysfs_create_dir_ns+0x181/0x390 [ 601.597873][T10081] ? sysfs_warn_dup+0xa0/0xa0 [ 601.602527][T10081] ? sched_clock_cpu+0x1b/0x3b0 [ 601.607352][T10081] ? sched_clock+0x3a/0x40 [ 601.611741][T10081] kobject_add_internal+0x766/0xda0 [ 601.616928][T10081] kobject_add+0x14c/0x210 [ 601.621329][T10081] ? _raw_spin_lock+0xa3/0x1b0 [ 601.626072][T10081] ? kobject_init+0x1e0/0x1e0 [ 601.630721][T10081] ? mutex_unlock+0x29/0xf0 [ 601.635200][T10081] ? get_device_parent+0x2c5/0x430 [ 601.640285][T10081] device_add+0x3ca/0xbd0 [ 601.644591][T10081] device_create+0x258/0x2e0 [ 601.649165][T10081] ? root_device_unregister+0x80/0x80 [ 601.654517][T10081] ? __kasan_check_read+0x11/0x20 [ 601.659514][T10081] ? preempt_schedule_irq+0xef/0x140 [ 601.664772][T10081] ? preempt_schedule_notrace+0x140/0x140 [ 601.670466][T10081] bdi_register_va+0x94/0x600 [ 601.675118][T10081] bdi_register+0xd1/0x120 [ 601.679511][T10081] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 601.685118][T10081] ? __device_add_disk+0x536/0x11d0 [ 601.690286][T10081] ? bdi_register_va+0x600/0x600 [ 601.695201][T10081] ? elevator_init_mq+0x3db/0x500 [ 601.700205][T10081] ? blk_alloc_devt+0xd4/0x320 [ 601.704965][T10081] __device_add_disk+0x5cb/0x11d0 [ 601.709994][T10081] ? kasan_check_range+0x1ff/0x2e0 [ 601.715092][T10081] ? device_add_disk+0x40/0x40 [ 601.719841][T10081] ? loop_add+0x3b0/0x760 [ 601.724155][T10081] ? vsprintf+0x40/0x40 [ 601.728305][T10081] device_add_disk+0x2a/0x40 [ 601.732881][T10081] loop_add+0x58f/0x760 [ 601.737025][T10081] loop_control_ioctl+0x564/0x740 [ 601.742031][T10081] ? loop_remove+0xb0/0xb0 [ 601.746424][T10081] ? __fget_files+0x310/0x370 [ 601.751075][T10081] ? security_file_ioctl+0xb1/0xd0 [ 601.756169][T10081] ? loop_remove+0xb0/0xb0 [ 601.760560][T10081] __se_sys_ioctl+0x115/0x190 [ 601.765216][T10081] __x64_sys_ioctl+0x7b/0x90 [ 601.769787][T10081] do_syscall_64+0x34/0x70 [ 601.774179][T10081] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 601.780045][T10081] RIP: 0033:0x7fa4636b90d9 [ 601.784435][T10081] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 601.804028][T10081] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.812420][T10081] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 601.820368][T10081] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 601.828316][T10081] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 601.836264][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 601.844212][T10081] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 601.852779][T10081] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 601.860762][T10081] ------------[ cut here ]------------ [ 601.866239][T10081] WARNING: CPU: 0 PID: 10081 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 601.875360][T10081] Modules linked in: [ 601.879303][T10081] CPU: 0 PID: 10081 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 601.891128][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 601.901224][T10081] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 601.907040][T10081] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 601.926742][T10081] RSP: 0018:ffffc9000886fbc0 EFLAGS: 00010283 [ 601.932847][T10081] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 601.940849][T10081] RDX: ffffc90004b48000 RSI: 0000000000035fc0 RDI: 0000000000035fc1 [ 601.948849][T10081] RBP: ffffc9000886fd08 R08: ffffffff82411a26 R09: ffffc9000886f610 [ 601.956837][T10081] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 601.964835][T10081] R13: ffff888113fa7000 R14: ffff88811f7c4338 R15: ffff88811f7c4000 [ 601.972832][T10081] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 601.981786][T10081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.988388][T10081] CR2: 00007fa4623e9ff8 CR3: 000000010d265000 CR4: 00000000003506b0 [ 601.996377][T10081] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 602.004370][T10081] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 602.012370][T10081] Call Trace: [ 602.015668][T10081] ? kasan_check_range+0x1ff/0x2e0 [ 602.020808][T10081] ? device_add_disk+0x40/0x40 [ 602.025582][T10081] ? loop_add+0x3b0/0x760 [ 602.030018][T10081] ? vsprintf+0x40/0x40 [ 602.034185][T10081] device_add_disk+0x2a/0x40 [ 602.038800][T10081] loop_add+0x58f/0x760 [ 602.042965][T10081] loop_control_ioctl+0x564/0x740 [ 602.047998][T10081] ? loop_remove+0xb0/0xb0 [ 602.052437][T10081] ? __fget_files+0x310/0x370 [ 602.057127][T10081] ? security_file_ioctl+0xb1/0xd0 [ 602.062256][T10081] ? loop_remove+0xb0/0xb0 [ 602.066684][T10081] __se_sys_ioctl+0x115/0x190 [ 602.071393][T10081] __x64_sys_ioctl+0x7b/0x90 [ 602.076000][T10081] do_syscall_64+0x34/0x70 [ 602.080436][T10081] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 602.086331][T10081] RIP: 0033:0x7fa4636b90d9 [ 602.090770][T10081] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 602.110403][T10081] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.118851][T10081] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 602.126917][T10081] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 602.134927][T10081] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 602.142919][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 602.150911][T10081] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 602.158910][T10081] ---[ end trace 3a2d5a045bb1ff37 ]--- 14:22:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 41) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:53 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x28000000) [ 602.323231][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x15000000) 14:22:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x34000000) 14:22:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x16000000) [ 602.479664][T10114] FAULT_INJECTION: forcing a failure. [ 602.479664][T10114] name failslab, interval 1, probability 0, space 0, times 0 [ 602.492337][T10114] CPU: 0 PID: 10114 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 602.504811][T10114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 602.514843][T10114] Call Trace: [ 602.518113][T10114] dump_stack_lvl+0x1e2/0x24b [ 602.522772][T10114] ? bfq_pos_tree_add_move+0x43e/0x43e [ 602.528238][T10114] ? sysvec_reschedule_ipi+0x84/0x160 [ 602.533600][T10114] dump_stack+0x15/0x17 [ 602.537745][T10114] should_fail+0x3c0/0x510 [ 602.542233][T10114] __should_failslab+0x9f/0xe0 [ 602.546981][T10114] should_failslab+0x9/0x20 [ 602.551470][T10114] kmem_cache_alloc+0x3f/0x300 [ 602.556246][T10114] ? radix_tree_node_alloc+0x194/0x3c0 [ 602.561707][T10114] radix_tree_node_alloc+0x194/0x3c0 [ 602.566980][T10114] ? kernfs_create_dir_ns+0x9b/0x230 [ 602.572239][T10114] ? sysfs_create_dir_ns+0x181/0x390 [ 602.577503][T10114] ? kobject_add_internal+0x766/0xda0 [ 602.582937][T10114] ? device_add+0x3ca/0xbd0 [ 602.587414][T10114] idr_get_free+0x2d8/0x990 [ 602.591894][T10114] ? __x64_sys_ioctl+0x7b/0x90 [ 602.596635][T10114] idr_alloc_cyclic+0x1ef/0x5d0 [ 602.601460][T10114] ? idr_alloc+0x2f0/0x2f0 [ 602.605858][T10114] ? __kasan_check_write+0x14/0x20 [ 602.610945][T10114] ? _raw_spin_lock+0xa3/0x1b0 [ 602.615683][T10114] ? __radix_tree_preload+0x361/0x3e0 [ 602.621029][T10114] ? kmem_cache_alloc+0x1a4/0x300 [ 602.626028][T10114] __kernfs_new_node+0x124/0x6e0 [ 602.630944][T10114] ? preempt_schedule_notrace+0x140/0x140 [ 602.636634][T10114] ? kernfs_new_node+0x170/0x170 [ 602.641545][T10114] ? irqentry_exit+0x50/0x60 [ 602.646108][T10114] ? sysvec_reschedule_ipi+0x84/0x160 [ 602.651453][T10114] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 602.657060][T10114] kernfs_create_dir_ns+0x9b/0x230 [ 602.662165][T10114] sysfs_create_dir_ns+0x181/0x390 [ 602.667275][T10114] ? sysfs_warn_dup+0xa0/0xa0 [ 602.671931][T10114] ? kobject_add_internal+0x1f1/0xda0 [ 602.677297][T10114] ? kobject_add_internal+0x248/0xda0 [ 602.682653][T10114] kobject_add_internal+0x766/0xda0 [ 602.687830][T10114] kobject_add+0x14c/0x210 [ 602.692226][T10114] ? _raw_spin_lock+0xa3/0x1b0 [ 602.696963][T10114] ? kobject_init+0x1e0/0x1e0 [ 602.701616][T10114] ? mutex_unlock+0x29/0xf0 [ 602.706095][T10114] ? get_device_parent+0x2c5/0x430 [ 602.711181][T10114] device_add+0x3ca/0xbd0 [ 602.715491][T10114] device_create+0x258/0x2e0 [ 602.720056][T10114] ? root_device_unregister+0x80/0x80 [ 602.725404][T10114] ? __kasan_check_read+0x11/0x20 [ 602.730406][T10114] ? preempt_schedule_irq+0xef/0x140 [ 602.735663][T10114] ? preempt_schedule_notrace+0x140/0x140 [ 602.741354][T10114] bdi_register_va+0x94/0x600 [ 602.746006][T10114] bdi_register+0xd1/0x120 [ 602.750399][T10114] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 602.756008][T10114] ? __device_add_disk+0x536/0x11d0 [ 602.761184][T10114] ? bdi_register_va+0x600/0x600 [ 602.766095][T10114] ? blk_alloc_devt+0xeb/0x320 [ 602.770839][T10114] __device_add_disk+0x5cb/0x11d0 [ 602.775851][T10114] ? device_add_disk+0x40/0x40 [ 602.780590][T10114] ? loop_add+0x3b0/0x760 [ 602.784896][T10114] ? vsprintf+0x40/0x40 [ 602.789032][T10114] device_add_disk+0x2a/0x40 [ 602.793598][T10114] loop_add+0x58f/0x760 [ 602.797728][T10114] loop_control_ioctl+0x564/0x740 [ 602.802727][T10114] ? loop_remove+0xb0/0xb0 [ 602.807176][T10114] ? __fget_files+0x310/0x370 [ 602.811831][T10114] ? security_file_ioctl+0xb1/0xd0 [ 602.816922][T10114] ? loop_remove+0xb0/0xb0 [ 602.821314][T10114] __se_sys_ioctl+0x115/0x190 [ 602.825968][T10114] __x64_sys_ioctl+0x7b/0x90 [ 602.830533][T10114] do_syscall_64+0x34/0x70 [ 602.834925][T10114] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 602.840886][T10114] RIP: 0033:0x7fa4636b90d9 [ 602.845281][T10114] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 602.864858][T10114] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.873247][T10114] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 602.881285][T10114] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 602.889233][T10114] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 602.897181][T10114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 602.905127][T10114] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3e000000) 14:22:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x17000000) [ 603.044026][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x18000000) 14:22:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x78922100) 14:22:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x19000000) 14:22:54 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x80001000) 14:22:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 42) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x80040000) 14:22:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1a000000) 14:22:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe8030000) [ 603.335717][T10157] FAULT_INJECTION: forcing a failure. [ 603.335717][T10157] name failslab, interval 1, probability 0, space 0, times 0 [ 603.348446][T10157] CPU: 0 PID: 10157 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 603.360145][T10157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 603.370193][T10157] Call Trace: [ 603.373472][T10157] dump_stack_lvl+0x1e2/0x24b [ 603.378129][T10157] ? bfq_pos_tree_add_move+0x43e/0x43e [ 603.383567][T10157] dump_stack+0x15/0x17 [ 603.387706][T10157] should_fail+0x3c0/0x510 [ 603.392100][T10157] __should_failslab+0x9f/0xe0 [ 603.396840][T10157] should_failslab+0x9/0x20 [ 603.401317][T10157] kmem_cache_alloc+0x3f/0x300 [ 603.406054][T10157] ? radix_tree_node_alloc+0x194/0x3c0 [ 603.411488][T10157] radix_tree_node_alloc+0x194/0x3c0 [ 603.416749][T10157] ? kernfs_create_dir_ns+0x9b/0x230 [ 603.422030][T10157] ? sysfs_create_dir_ns+0x181/0x390 [ 603.427310][T10157] ? kobject_add_internal+0x766/0xda0 [ 603.432676][T10157] ? device_add+0x3ca/0xbd0 [ 603.437207][T10157] idr_get_free+0x2d8/0x990 [ 603.441695][T10157] ? __x64_sys_ioctl+0x7b/0x90 [ 603.446455][T10157] idr_alloc_cyclic+0x1ef/0x5d0 [ 603.451293][T10157] ? idr_alloc+0x2f0/0x2f0 [ 603.455695][T10157] ? _raw_spin_lock+0xbe/0x1b0 [ 603.460439][T10157] ? __radix_tree_preload+0x361/0x3e0 [ 603.465809][T10157] ? kmem_cache_alloc+0x1a4/0x300 [ 603.470822][T10157] __kernfs_new_node+0x124/0x6e0 [ 603.475741][T10157] ? kernfs_new_node+0x170/0x170 [ 603.480662][T10157] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 603.486277][T10157] ? device_namespace+0xa0/0xa0 [ 603.491112][T10157] ? device_get_ownership+0x25/0xa0 [ 603.496309][T10157] ? __sanitizer_cov_trace_pc+0x4a/0x60 [ 603.501840][T10157] kernfs_create_dir_ns+0x9b/0x230 [ 603.506934][T10157] sysfs_create_dir_ns+0x181/0x390 [ 603.512049][T10157] ? sysfs_warn_dup+0xa0/0xa0 [ 603.516703][T10157] ? __kasan_check_read+0x11/0x20 [ 603.521707][T10157] ? preempt_schedule_irq+0xef/0x140 [ 603.526966][T10157] ? preempt_schedule_notrace+0x140/0x140 [ 603.532664][T10157] kobject_add_internal+0x766/0xda0 [ 603.537840][T10157] kobject_add+0x14c/0x210 [ 603.542234][T10157] ? kobject_init+0x1e0/0x1e0 [ 603.546888][T10157] ? mutex_unlock+0x29/0xf0 [ 603.551369][T10157] ? get_device_parent+0x2c5/0x430 [ 603.556459][T10157] device_add+0x3ca/0xbd0 [ 603.560762][T10157] device_create+0x258/0x2e0 [ 603.565427][T10157] ? sysvec_reschedule_ipi+0x84/0x160 [ 603.570775][T10157] ? root_device_unregister+0x80/0x80 [ 603.576124][T10157] bdi_register_va+0x94/0x600 [ 603.580774][T10157] bdi_register+0xd1/0x120 [ 603.585172][T10157] ? preempt_schedule_notrace+0x140/0x140 [ 603.590862][T10157] ? __device_add_disk+0x536/0x11d0 [ 603.596030][T10157] ? bdi_register_va+0x600/0x600 [ 603.600951][T10157] ? __kasan_check_read+0x11/0x20 [ 603.606036][T10157] ? blk_alloc_devt+0xd4/0x320 [ 603.610773][T10157] __device_add_disk+0x5cb/0x11d0 [ 603.615774][T10157] ? device_add_disk+0x40/0x40 [ 603.620516][T10157] ? loop_add+0x3b0/0x760 [ 603.624817][T10157] ? vsprintf+0x40/0x40 [ 603.628943][T10157] ? device_initialize+0x2a1/0x3a0 [ 603.634030][T10157] device_add_disk+0x2a/0x40 [ 603.638595][T10157] loop_add+0x58f/0x760 [ 603.642726][T10157] loop_control_ioctl+0x564/0x740 [ 603.647737][T10157] ? loop_remove+0xb0/0xb0 [ 603.652124][T10157] ? irqentry_exit+0x50/0x60 [ 603.656689][T10157] ? sysvec_reschedule_ipi+0x84/0x160 [ 603.662037][T10157] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 603.667649][T10157] ? do_vfs_ioctl+0xf6/0x1a90 [ 603.672299][T10157] ? loop_remove+0xb0/0xb0 [ 603.676689][T10157] __se_sys_ioctl+0x115/0x190 [ 603.681338][T10157] __x64_sys_ioctl+0x7b/0x90 [ 603.685919][T10157] do_syscall_64+0x34/0x70 [ 603.690321][T10157] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 603.696194][T10157] RIP: 0033:0x7fa4636b90d9 [ 603.700592][T10157] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 603.720178][T10157] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.728566][T10157] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 603.736510][T10157] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 603.744457][T10157] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 603.752402][T10157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 603.760347][T10157] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1b000000) 14:22:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xfdfdffff) 14:22:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1c000000) [ 603.918780][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1d000000) 14:22:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xffff8000) 14:22:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1e000000) 14:22:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 43) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:55 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xfffffdfd) 14:22:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1f000000) 14:22:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x20000000) 14:22:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x200000003) [ 604.193821][T10204] FAULT_INJECTION: forcing a failure. [ 604.193821][T10204] name failslab, interval 1, probability 0, space 0, times 0 [ 604.206479][T10204] CPU: 0 PID: 10204 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 604.218165][T10204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 604.228192][T10204] Call Trace: [ 604.231458][T10204] dump_stack_lvl+0x1e2/0x24b [ 604.236113][T10204] ? bfq_pos_tree_add_move+0x43e/0x43e [ 604.241543][T10204] dump_stack+0x15/0x17 [ 604.245673][T10204] should_fail+0x3c0/0x510 [ 604.250061][T10204] __should_failslab+0x9f/0xe0 [ 604.254799][T10204] should_failslab+0x9/0x20 [ 604.259273][T10204] kmem_cache_alloc+0x3f/0x300 [ 604.264009][T10204] ? radix_tree_node_alloc+0x194/0x3c0 [ 604.269438][T10204] radix_tree_node_alloc+0x194/0x3c0 [ 604.274693][T10204] ? kernfs_create_dir_ns+0x9b/0x230 [ 604.280036][T10204] ? sysfs_create_dir_ns+0x181/0x390 [ 604.285307][T10204] ? kobject_add_internal+0x766/0xda0 [ 604.290660][T10204] ? device_add+0x3ca/0xbd0 [ 604.295144][T10204] idr_get_free+0x2d8/0x990 [ 604.299624][T10204] ? __x64_sys_ioctl+0x7b/0x90 [ 604.304373][T10204] idr_alloc_cyclic+0x1ef/0x5d0 [ 604.309204][T10204] ? idr_alloc+0x2f0/0x2f0 [ 604.313602][T10204] ? __kasan_check_write+0x14/0x20 [ 604.318690][T10204] ? _raw_spin_lock+0xa3/0x1b0 [ 604.323428][T10204] ? __radix_tree_preload+0x361/0x3e0 [ 604.328772][T10204] ? kmem_cache_alloc+0x1a4/0x300 [ 604.333772][T10204] __kernfs_new_node+0x124/0x6e0 [ 604.338681][T10204] ? _raw_spin_unlock_irq+0x4e/0x70 [ 604.343852][T10204] ? kernfs_new_node+0x170/0x170 [ 604.348766][T10204] ? __schedule+0x86e/0xc00 [ 604.353243][T10204] ? release_firmware_map_entry+0x194/0x194 [ 604.359108][T10204] kernfs_create_dir_ns+0x9b/0x230 [ 604.364201][T10204] sysfs_create_dir_ns+0x181/0x390 [ 604.369295][T10204] ? sysfs_warn_dup+0xa0/0xa0 [ 604.373945][T10204] ? irqentry_exit+0x50/0x60 [ 604.378507][T10204] ? sysvec_reschedule_ipi+0x84/0x160 [ 604.383854][T10204] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 604.389461][T10204] kobject_add_internal+0x766/0xda0 [ 604.394634][T10204] kobject_add+0x14c/0x210 [ 604.399022][T10204] ? _raw_spin_lock+0xa3/0x1b0 [ 604.403759][T10204] ? kobject_init+0x1e0/0x1e0 [ 604.408411][T10204] ? mutex_unlock+0x29/0xf0 [ 604.412890][T10204] ? get_device_parent+0x2c5/0x430 [ 604.417974][T10204] device_add+0x3ca/0xbd0 [ 604.422277][T10204] device_create+0x258/0x2e0 [ 604.426839][T10204] ? root_device_unregister+0x80/0x80 [ 604.432181][T10204] ? __kasan_check_read+0x11/0x20 [ 604.437179][T10204] ? preempt_schedule_irq+0xef/0x140 [ 604.442433][T10204] ? preempt_schedule_notrace+0x140/0x140 [ 604.448127][T10204] bdi_register_va+0x94/0x600 [ 604.453210][T10204] bdi_register+0xd1/0x120 [ 604.457599][T10204] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 604.463212][T10204] ? __device_add_disk+0x536/0x11d0 [ 604.468385][T10204] ? bdi_register_va+0x600/0x600 [ 604.473297][T10204] ? blk_alloc_devt+0x2c7/0x320 [ 604.478122][T10204] __device_add_disk+0x5cb/0x11d0 [ 604.483117][T10204] ? device_add_disk+0x40/0x40 [ 604.487853][T10204] ? irqentry_exit+0x50/0x60 [ 604.492416][T10204] ? loop_add+0x3b0/0x760 [ 604.496718][T10204] ? vsprintf+0x40/0x40 [ 604.500851][T10204] device_add_disk+0x2a/0x40 [ 604.505415][T10204] loop_add+0x58f/0x760 [ 604.509546][T10204] loop_control_ioctl+0x564/0x740 [ 604.514543][T10204] ? loop_remove+0xb0/0xb0 [ 604.518932][T10204] ? __fget_files+0x310/0x370 [ 604.523588][T10204] ? security_file_ioctl+0xb1/0xd0 [ 604.528670][T10204] ? loop_remove+0xb0/0xb0 [ 604.533060][T10204] __se_sys_ioctl+0x115/0x190 [ 604.537717][T10204] __x64_sys_ioctl+0x7b/0x90 [ 604.542278][T10204] do_syscall_64+0x34/0x70 [ 604.546668][T10204] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 604.552533][T10204] RIP: 0033:0x7fa4636b90d9 [ 604.556921][T10204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 604.576499][T10204] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.584888][T10204] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 604.592832][T10204] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 604.600778][T10204] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 604.608723][T10204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 604.616668][T10204] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:22:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x20010000) 14:22:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7f4d58b5c700) 14:22:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x600}, 0x0) 14:22:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc000000000000) 14:22:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x28000000) 14:22:56 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 44) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x34000000) 14:22:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x10000000000000) [ 605.048960][T10238] FAULT_INJECTION: forcing a failure. [ 605.048960][T10238] name failslab, interval 1, probability 0, space 0, times 0 [ 605.061728][T10238] CPU: 0 PID: 10238 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 605.073417][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 605.083446][T10238] Call Trace: [ 605.086716][T10238] dump_stack_lvl+0x1e2/0x24b [ 605.091371][T10238] ? panic+0x7d7/0x7d7 [ 605.095413][T10238] ? bfq_pos_tree_add_move+0x43e/0x43e [ 605.100853][T10238] ? _raw_spin_lock+0xa3/0x1b0 [ 605.105589][T10238] ? __radix_tree_preload+0x361/0x3e0 [ 605.110931][T10238] dump_stack+0x15/0x17 [ 605.115085][T10238] should_fail+0x3c0/0x510 [ 605.119511][T10238] __should_failslab+0x9f/0xe0 [ 605.124268][T10238] should_failslab+0x9/0x20 [ 605.128764][T10238] kmem_cache_alloc+0x3f/0x300 [ 605.133527][T10238] ? __kernfs_new_node+0xdb/0x6e0 [ 605.138540][T10238] __kernfs_new_node+0xdb/0x6e0 [ 605.143376][T10238] ? kernfs_activate+0x409/0x420 [ 605.148291][T10238] ? kernfs_add_one+0x4c5/0x5e0 [ 605.153116][T10238] ? kernfs_new_node+0x170/0x170 [ 605.158027][T10238] ? __kernfs_create_file+0x1fb/0x270 [ 605.163372][T10238] kernfs_new_node+0x97/0x170 [ 605.168116][T10238] kernfs_create_link+0xb8/0x210 [ 605.173027][T10238] sysfs_do_create_link_sd+0x89/0x110 [ 605.178370][T10238] sysfs_create_link+0x68/0x80 [ 605.183106][T10238] device_add_class_symlinks+0xdb/0x2a0 [ 605.188886][T10238] device_add+0x4c3/0xbd0 [ 605.193189][T10238] device_create+0x258/0x2e0 [ 605.197749][T10238] ? root_device_unregister+0x80/0x80 [ 605.203094][T10238] bdi_register_va+0x94/0x600 [ 605.207744][T10238] bdi_register+0xd1/0x120 [ 605.212135][T10238] ? __device_add_disk+0x536/0x11d0 [ 605.217304][T10238] ? bdi_register_va+0x600/0x600 [ 605.222216][T10238] ? __kasan_check_read+0x11/0x20 [ 605.227213][T10238] ? blk_alloc_devt+0xd4/0x320 [ 605.231952][T10238] __device_add_disk+0x5cb/0x11d0 [ 605.236949][T10238] ? device_add_disk+0x40/0x40 [ 605.241688][T10238] ? sysvec_reschedule_ipi+0x84/0x160 [ 605.247033][T10238] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 605.252638][T10238] ? vsnprintf+0x1bf3/0x1cd0 [ 605.257200][T10238] device_add_disk+0x2a/0x40 [ 605.261763][T10238] loop_add+0x58f/0x760 [ 605.265891][T10238] loop_control_ioctl+0x564/0x740 [ 605.270887][T10238] ? loop_remove+0xb0/0xb0 [ 605.275280][T10238] ? __fget_files+0x310/0x370 [ 605.279929][T10238] ? security_file_ioctl+0xb1/0xd0 [ 605.285011][T10238] ? loop_remove+0xb0/0xb0 [ 605.289413][T10238] __se_sys_ioctl+0x115/0x190 [ 605.294072][T10238] __x64_sys_ioctl+0x7b/0x90 [ 605.298644][T10238] do_syscall_64+0x34/0x70 [ 605.303048][T10238] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 605.308919][T10238] RIP: 0033:0x7fa4636b90d9 [ 605.313314][T10238] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 605.332907][T10238] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.341315][T10238] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 605.349270][T10238] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 605.357220][T10238] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 605.365175][T10238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 605.373128][T10238] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 605.382119][T10238] ------------[ cut here ]------------ [ 605.387604][T10238] WARNING: CPU: 0 PID: 10238 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 605.396731][T10238] Modules linked in: [ 605.400669][T10238] CPU: 0 PID: 10238 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 605.412393][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 605.422653][T10238] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 605.428478][T10238] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 605.448124][T10238] RSP: 0018:ffffc900090e7bc0 EFLAGS: 00010283 [ 605.454234][T10238] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 605.462258][T10238] RDX: ffffc90004b48000 RSI: 000000000003034e RDI: 000000000003034f [ 605.470251][T10238] RBP: ffffc900090e7d08 R08: ffffffff82411a26 R09: ffffc900090e7610 [ 605.478259][T10238] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 605.486271][T10238] R13: ffff8881150f8000 R14: ffff88815d6a2338 R15: ffff88815d6a2000 [ 605.494281][T10238] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 605.503320][T10238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.510011][T10238] CR2: 00007fa4623e9ff8 CR3: 000000010f372000 CR4: 00000000003506b0 [ 605.518003][T10238] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 605.525997][T10238] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 605.534181][T10238] Call Trace: [ 605.537492][T10238] ? device_add_disk+0x40/0x40 [ 605.542462][T10238] ? sysvec_reschedule_ipi+0x84/0x160 [ 605.547841][T10238] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 605.553496][T10238] ? vsnprintf+0x1bf3/0x1cd0 [ 605.558098][T10238] device_add_disk+0x2a/0x40 [ 605.562717][T10238] loop_add+0x58f/0x760 [ 605.566882][T10238] loop_control_ioctl+0x564/0x740 [ 605.571928][T10238] ? loop_remove+0xb0/0xb0 [ 605.576348][T10238] ? __fget_files+0x310/0x370 [ 605.581046][T10238] ? security_file_ioctl+0xb1/0xd0 [ 605.586161][T10238] ? loop_remove+0xb0/0xb0 [ 605.590636][T10238] __se_sys_ioctl+0x115/0x190 [ 605.595321][T10238] __x64_sys_ioctl+0x7b/0x90 [ 605.599932][T10238] do_syscall_64+0x34/0x70 [ 605.604358][T10238] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 605.610267][T10238] RIP: 0033:0x7fa4636b90d9 [ 605.614688][T10238] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 605.634347][T10238] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.642803][T10238] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 14:22:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1000016e48ec77) [ 605.650792][T10238] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 605.658810][T10238] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 605.666831][T10238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 605.674871][T10238] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 605.682878][T10238] ---[ end trace 3a2d5a045bb1ff38 ]--- [ 605.721359][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x3e000000) 14:22:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) 14:22:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 45) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x10008000000000) 14:22:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x66000000) 14:22:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x30000000000000) [ 605.989790][T10263] FAULT_INJECTION: forcing a failure. [ 605.989790][T10263] name failslab, interval 1, probability 0, space 0, times 0 [ 606.002554][T10263] CPU: 0 PID: 10263 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 606.014241][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 606.024305][T10263] Call Trace: [ 606.027573][T10263] dump_stack_lvl+0x1e2/0x24b [ 606.032225][T10263] ? panic+0x7d7/0x7d7 [ 606.036266][T10263] ? bfq_pos_tree_add_move+0x43e/0x43e [ 606.041698][T10263] ? compat_start_thread+0x80/0x80 [ 606.046780][T10263] dump_stack+0x15/0x17 [ 606.050919][T10263] should_fail+0x3c0/0x510 [ 606.055310][T10263] __should_failslab+0x9f/0xe0 [ 606.060049][T10263] should_failslab+0x9/0x20 [ 606.064526][T10263] kmem_cache_alloc+0x3f/0x300 [ 606.069265][T10263] ? __switch_to_asm+0x34/0x60 [ 606.074001][T10263] ? __kernfs_new_node+0xdb/0x6e0 [ 606.079003][T10263] __kernfs_new_node+0xdb/0x6e0 [ 606.083826][T10263] ? release_firmware_map_entry+0x194/0x194 [ 606.089690][T10263] ? kernfs_add_one+0x4c5/0x5e0 [ 606.094514][T10263] ? kernfs_new_node+0x170/0x170 [ 606.099435][T10263] ? preempt_schedule+0xd9/0xe0 [ 606.104258][T10263] ? __kasan_check_read+0x11/0x20 [ 606.109253][T10263] ? preempt_schedule_common+0xcb/0x100 [ 606.114770][T10263] ? preempt_schedule+0xd9/0xe0 [ 606.119591][T10263] ? schedule_preempt_disabled+0x20/0x20 [ 606.125198][T10263] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 606.130803][T10263] kernfs_new_node+0x97/0x170 [ 606.135456][T10263] kernfs_create_link+0xb8/0x210 [ 606.140366][T10263] sysfs_do_create_link_sd+0x89/0x110 [ 606.145739][T10263] sysfs_create_link+0x68/0x80 [ 606.150488][T10263] device_add_class_symlinks+0xdb/0x2a0 [ 606.156003][T10263] device_add+0x4c3/0xbd0 [ 606.160304][T10263] device_create+0x258/0x2e0 [ 606.164867][T10263] ? root_device_unregister+0x80/0x80 [ 606.170210][T10263] bdi_register_va+0x94/0x600 [ 606.174860][T10263] ? memset_erms+0xb/0x10 [ 606.179430][T10263] bdi_register+0xd1/0x120 [ 606.183825][T10263] ? __device_add_disk+0x536/0x11d0 [ 606.188992][T10263] ? bdi_register_va+0x600/0x600 [ 606.194078][T10263] ? vsnprintf+0x1bfd/0x1cd0 [ 606.198657][T10263] ? __kasan_check_read+0x11/0x20 [ 606.203654][T10263] ? blk_alloc_devt+0xd4/0x320 [ 606.208391][T10263] __device_add_disk+0x5cb/0x11d0 [ 606.213390][T10263] ? device_add_disk+0x40/0x40 [ 606.218128][T10263] ? loop_add+0x3b0/0x760 [ 606.222469][T10263] ? vsprintf+0x40/0x40 [ 606.226597][T10263] device_add_disk+0x2a/0x40 [ 606.231159][T10263] loop_add+0x58f/0x760 [ 606.235288][T10263] loop_control_ioctl+0x564/0x740 [ 606.240286][T10263] ? __kasan_check_read+0x11/0x20 [ 606.245282][T10263] ? loop_remove+0xb0/0xb0 [ 606.249671][T10263] ? __fget_files+0x310/0x370 [ 606.254326][T10263] ? security_file_ioctl+0xb1/0xd0 [ 606.259500][T10263] ? loop_remove+0xb0/0xb0 [ 606.263888][T10263] __se_sys_ioctl+0x115/0x190 [ 606.268540][T10263] __x64_sys_ioctl+0x7b/0x90 [ 606.273102][T10263] do_syscall_64+0x34/0x70 [ 606.277491][T10263] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 606.283354][T10263] RIP: 0033:0x7fa4636b90d9 [ 606.287744][T10263] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 606.307584][T10263] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.315973][T10263] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 606.323918][T10263] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 606.331861][T10263] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 606.339806][T10263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.347777][T10263] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 606.356678][T10263] ------------[ cut here ]------------ [ 606.362186][T10263] WARNING: CPU: 0 PID: 10263 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 606.371307][T10263] Modules linked in: [ 606.375234][T10263] CPU: 0 PID: 10263 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 606.386959][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 606.397053][T10263] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 606.402887][T10263] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 606.422585][T10263] RSP: 0018:ffffc9000920fbc0 EFLAGS: 00010287 [ 606.428709][T10263] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 606.436727][T10263] RDX: ffffc90004b48000 RSI: 0000000000034677 RDI: 0000000000034678 [ 606.444760][T10263] RBP: ffffc9000920fd08 R08: ffffffff82411a26 R09: ffffc9000920f610 [ 606.452809][T10263] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 606.460814][T10263] R13: ffff88810f6f7000 R14: ffff8881143e2338 R15: ffff8881143e2000 [ 606.468809][T10263] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 606.477747][T10263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 606.484362][T10263] CR2: 00007fa4623e9ff8 CR3: 000000010a225000 CR4: 00000000003526b0 [ 606.492383][T10263] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 606.500385][T10263] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 606.508383][T10263] Call Trace: [ 606.511698][T10263] ? device_add_disk+0x40/0x40 [ 606.516473][T10263] ? loop_add+0x3b0/0x760 [ 606.520825][T10263] ? vsprintf+0x40/0x40 [ 606.524988][T10263] device_add_disk+0x2a/0x40 [ 606.529597][T10263] loop_add+0x58f/0x760 [ 606.533779][T10263] loop_control_ioctl+0x564/0x740 [ 606.538835][T10263] ? __kasan_check_read+0x11/0x20 [ 606.543871][T10263] ? loop_remove+0xb0/0xb0 [ 606.548297][T10263] ? __fget_files+0x310/0x370 [ 606.552996][T10263] ? security_file_ioctl+0xb1/0xd0 [ 606.558114][T10263] ? loop_remove+0xb0/0xb0 [ 606.562555][T10263] __se_sys_ioctl+0x115/0x190 [ 606.567239][T10263] __x64_sys_ioctl+0x7b/0x90 [ 606.571847][T10263] do_syscall_64+0x34/0x70 [ 606.576271][T10263] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 606.582183][T10263] RIP: 0033:0x7fa4636b90d9 [ 606.586610][T10263] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 606.606256][T10263] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.614707][T10263] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 606.622699][T10263] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 606.630692][T10263] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 606.638681][T10263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.646667][T10263] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 606.654806][T10263] ---[ end trace 3a2d5a045bb1ff39 ]--- 14:22:58 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 606.747465][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) 14:22:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 46) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x78922100) 14:22:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff00000000) 14:22:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc7b5584d7f0000) 14:22:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x80001000) [ 606.974049][T10294] FAULT_INJECTION: forcing a failure. [ 606.974049][T10294] name failslab, interval 1, probability 0, space 0, times 0 [ 606.986724][T10294] CPU: 0 PID: 10294 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 606.998426][T10294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 607.008461][T10294] Call Trace: [ 607.011732][T10294] dump_stack_lvl+0x1e2/0x24b [ 607.016384][T10294] ? panic+0x7d7/0x7d7 [ 607.020432][T10294] ? sysvec_reschedule_ipi+0x84/0x160 [ 607.025780][T10294] ? bfq_pos_tree_add_move+0x43e/0x43e [ 607.031297][T10294] dump_stack+0x15/0x17 [ 607.035429][T10294] should_fail+0x3c0/0x510 [ 607.039847][T10294] __should_failslab+0x9f/0xe0 [ 607.044583][T10294] should_failslab+0x9/0x20 [ 607.049070][T10294] kmem_cache_alloc+0x3f/0x300 [ 607.053898][T10294] ? __kernfs_new_node+0xdb/0x6e0 [ 607.058896][T10294] __kernfs_new_node+0xdb/0x6e0 [ 607.063722][T10294] ? kernfs_new_node+0x170/0x170 [ 607.068634][T10294] ? __kasan_check_write+0x14/0x20 [ 607.073718][T10294] ? mutex_unlock+0x29/0xf0 [ 607.078197][T10294] ? kernfs_activate+0x409/0x420 [ 607.083111][T10294] kernfs_new_node+0x97/0x170 [ 607.087762][T10294] kernfs_create_link+0xb8/0x210 [ 607.092677][T10294] sysfs_do_create_link_sd+0x89/0x110 [ 607.098024][T10294] sysfs_create_link+0x68/0x80 [ 607.102763][T10294] device_add_class_symlinks+0x222/0x2a0 [ 607.108375][T10294] device_add+0x4c3/0xbd0 [ 607.112685][T10294] device_create+0x258/0x2e0 [ 607.117253][T10294] ? root_device_unregister+0x80/0x80 [ 607.122601][T10294] ? number+0xcc2/0x1040 [ 607.126836][T10294] ? number+0xd9b/0x1040 [ 607.131056][T10294] bdi_register_va+0x94/0x600 [ 607.135706][T10294] bdi_register+0xd1/0x120 [ 607.140103][T10294] ? __device_add_disk+0x536/0x11d0 [ 607.145274][T10294] ? bdi_register_va+0x600/0x600 [ 607.150183][T10294] ? vsnprintf+0x1bfd/0x1cd0 [ 607.154748][T10294] ? __kasan_check_read+0x11/0x20 [ 607.159752][T10294] ? blk_alloc_devt+0xd4/0x320 [ 607.164490][T10294] __device_add_disk+0x5cb/0x11d0 [ 607.169494][T10294] ? device_add_disk+0x40/0x40 [ 607.174233][T10294] ? loop_add+0x3b0/0x760 [ 607.178538][T10294] ? vsprintf+0x40/0x40 [ 607.182669][T10294] device_add_disk+0x2a/0x40 [ 607.187231][T10294] loop_add+0x58f/0x760 [ 607.191365][T10294] loop_control_ioctl+0x564/0x740 [ 607.196365][T10294] ? loop_remove+0xb0/0xb0 [ 607.200756][T10294] ? irqentry_exit+0x50/0x60 [ 607.205318][T10294] ? sysvec_reschedule_ipi+0x84/0x160 [ 607.210664][T10294] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 607.216273][T10294] ? do_vfs_ioctl+0xf6/0x1a90 [ 607.220923][T10294] ? __se_sys_ioctl+0x109/0x190 [ 607.225754][T10294] ? loop_remove+0xb0/0xb0 [ 607.230148][T10294] __se_sys_ioctl+0x115/0x190 [ 607.234807][T10294] __x64_sys_ioctl+0x7b/0x90 [ 607.239371][T10294] do_syscall_64+0x34/0x70 [ 607.243764][T10294] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 607.249630][T10294] RIP: 0033:0x7fa4636b90d9 [ 607.254024][T10294] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 607.273618][T10294] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.282011][T10294] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 607.289958][T10294] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 607.297905][T10294] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.305937][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.313886][T10294] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 607.322938][T10294] ------------[ cut here ]------------ [ 607.328529][T10294] WARNING: CPU: 0 PID: 10294 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 607.337641][T10294] Modules linked in: [ 607.341589][T10294] CPU: 0 PID: 10294 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 607.353317][T10294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 607.363407][T10294] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 607.369242][T10294] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 607.388948][T10294] RSP: 0018:ffffc900093afbc0 EFLAGS: 00010287 [ 607.395025][T10294] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 607.403025][T10294] RDX: ffffc90004b48000 RSI: 0000000000031f8f RDI: 0000000000031f90 [ 607.411019][T10294] RBP: ffffc900093afd08 R08: ffffffff82411a26 R09: ffffc900093af610 [ 607.419022][T10294] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 607.427013][T10294] R13: ffff888114ca6000 R14: ffff888113c81338 R15: ffff888113c81000 [ 607.435012][T10294] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 607.444056][T10294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.450659][T10294] CR2: 00007fa4623e9ff8 CR3: 00000001183bd000 CR4: 00000000003526b0 [ 607.458694][T10294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 607.466675][T10294] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 607.474663][T10294] Call Trace: [ 607.477974][T10294] ? device_add_disk+0x40/0x40 [ 607.482776][T10294] ? loop_add+0x3b0/0x760 [ 607.487117][T10294] ? vsprintf+0x40/0x40 [ 607.491293][T10294] device_add_disk+0x2a/0x40 [ 607.495892][T10294] loop_add+0x58f/0x760 [ 607.500069][T10294] loop_control_ioctl+0x564/0x740 [ 607.505098][T10294] ? loop_remove+0xb0/0xb0 [ 607.509526][T10294] ? irqentry_exit+0x50/0x60 [ 607.514126][T10294] ? sysvec_reschedule_ipi+0x84/0x160 [ 607.519526][T10294] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 607.525168][T10294] ? do_vfs_ioctl+0xf6/0x1a90 [ 607.529877][T10294] ? __se_sys_ioctl+0x109/0x190 [ 607.534739][T10294] ? loop_remove+0xb0/0xb0 [ 607.539191][T10294] __se_sys_ioctl+0x115/0x190 [ 607.543963][T10294] __x64_sys_ioctl+0x7b/0x90 [ 607.548576][T10294] do_syscall_64+0x34/0x70 [ 607.553002][T10294] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 607.558914][T10294] RIP: 0033:0x7fa4636b90d9 [ 607.563339][T10294] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 607.583152][T10294] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.591594][T10294] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 607.599595][T10294] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 607.607578][T10294] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.615576][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.623574][T10294] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 607.631578][T10294] ---[ end trace 3a2d5a045bb1ff3a ]--- [ 607.664084][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:22:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) 14:22:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 47) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:22:59 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:22:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x100000000000000) 14:22:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x80040000) 14:22:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xa9000000) 14:22:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x200000000000000) [ 607.951097][T10323] FAULT_INJECTION: forcing a failure. [ 607.951097][T10323] name failslab, interval 1, probability 0, space 0, times 0 [ 607.963821][T10323] CPU: 0 PID: 10323 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 607.975516][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 607.985636][T10323] Call Trace: [ 607.988911][T10323] dump_stack_lvl+0x1e2/0x24b [ 607.993564][T10323] ? panic+0x7d7/0x7d7 [ 607.997607][T10323] ? bfq_pos_tree_add_move+0x43e/0x43e [ 608.003126][T10323] ? ___ratelimit+0xb2/0x600 [ 608.007721][T10323] dump_stack+0x15/0x17 [ 608.011852][T10323] should_fail+0x3c0/0x510 [ 608.016243][T10323] __should_failslab+0x9f/0xe0 [ 608.020985][T10323] should_failslab+0x9/0x20 [ 608.025462][T10323] kmem_cache_alloc+0x3f/0x300 [ 608.030207][T10323] ? __kernfs_new_node+0xdb/0x6e0 [ 608.035207][T10323] __kernfs_new_node+0xdb/0x6e0 [ 608.040032][T10323] ? kernfs_new_node+0x170/0x170 [ 608.044944][T10323] ? sysvec_reschedule_ipi+0x84/0x160 [ 608.050300][T10323] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 608.055913][T10323] ? device_add_class_symlinks+0xe6/0x2a0 [ 608.061606][T10323] kernfs_new_node+0x97/0x170 [ 608.066257][T10323] kernfs_create_link+0xb8/0x210 [ 608.071170][T10323] sysfs_do_create_link_sd+0x89/0x110 [ 608.076519][T10323] sysfs_create_link+0x68/0x80 [ 608.081260][T10323] device_add_class_symlinks+0x222/0x2a0 [ 608.086865][T10323] device_add+0x4c3/0xbd0 [ 608.091172][T10323] device_create+0x258/0x2e0 [ 608.095910][T10323] ? sysvec_reschedule_ipi+0x84/0x160 [ 608.101258][T10323] ? root_device_unregister+0x80/0x80 [ 608.106609][T10323] bdi_register_va+0x94/0x600 [ 608.111265][T10323] bdi_register+0xd1/0x120 [ 608.115659][T10323] ? irqentry_exit+0x50/0x60 [ 608.120224][T10323] ? sysvec_reschedule_ipi+0x84/0x160 [ 608.125595][T10323] ? __device_add_disk+0x536/0x11d0 [ 608.130859][T10323] ? bdi_register_va+0x600/0x600 [ 608.135773][T10323] ? __device_add_disk+0x536/0x11d0 [ 608.140949][T10323] __device_add_disk+0x5cb/0x11d0 [ 608.145952][T10323] ? device_add_disk+0x40/0x40 [ 608.150690][T10323] ? loop_add+0x3b0/0x760 [ 608.154999][T10323] ? vsprintf+0x40/0x40 [ 608.159132][T10323] device_add_disk+0x2a/0x40 [ 608.163699][T10323] loop_add+0x58f/0x760 [ 608.167833][T10323] loop_control_ioctl+0x564/0x740 [ 608.172833][T10323] ? loop_remove+0xb0/0xb0 [ 608.177240][T10323] ? __fget_files+0x310/0x370 [ 608.181900][T10323] ? security_file_ioctl+0xb1/0xd0 [ 608.186989][T10323] ? loop_remove+0xb0/0xb0 [ 608.191382][T10323] __se_sys_ioctl+0x115/0x190 [ 608.196042][T10323] __x64_sys_ioctl+0x7b/0x90 [ 608.200607][T10323] do_syscall_64+0x34/0x70 [ 608.204999][T10323] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 608.210865][T10323] RIP: 0033:0x7fa4636b90d9 [ 608.215259][T10323] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 608.234840][T10323] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.243232][T10323] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 608.251179][T10323] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 608.259130][T10323] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 608.267076][T10323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 608.275632][T10323] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 608.284595][T10323] ------------[ cut here ]------------ [ 608.290103][T10323] WARNING: CPU: 0 PID: 10323 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 608.299244][T10323] Modules linked in: [ 608.303179][T10323] CPU: 0 PID: 10323 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 608.314909][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 608.325175][T10323] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 608.331001][T10323] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 608.350693][T10323] RSP: 0018:ffffc90009527bc0 EFLAGS: 00010287 [ 608.356792][T10323] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 608.364792][T10323] RDX: ffffc90004b48000 RSI: 000000000002f771 RDI: 000000000002f772 [ 608.372786][T10323] RBP: ffffc90009527d08 R08: ffffffff82411a26 R09: ffffc90009527610 [ 608.380813][T10323] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 608.388808][T10323] R13: ffff888118468000 R14: ffff888118469338 R15: ffff888118469000 [ 608.396791][T10323] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 608.405741][T10323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.412359][T10323] CR2: 00007fa4623e9ff8 CR3: 00000001123d7000 CR4: 00000000003526b0 [ 608.420367][T10323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.428364][T10323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.436340][T10323] Call Trace: [ 608.439662][T10323] ? device_add_disk+0x40/0x40 [ 608.444436][T10323] ? loop_add+0x3b0/0x760 [ 608.448787][T10323] ? vsprintf+0x40/0x40 [ 608.452952][T10323] device_add_disk+0x2a/0x40 [ 608.457558][T10323] loop_add+0x58f/0x760 [ 608.461737][T10323] loop_control_ioctl+0x564/0x740 [ 608.466772][T10323] ? loop_remove+0xb0/0xb0 [ 608.471229][T10323] ? __fget_files+0x310/0x370 [ 608.475922][T10323] ? security_file_ioctl+0xb1/0xd0 [ 608.481053][T10323] ? loop_remove+0xb0/0xb0 [ 608.485623][T10323] __se_sys_ioctl+0x115/0x190 [ 608.490356][T10323] __x64_sys_ioctl+0x7b/0x90 [ 608.494972][T10323] do_syscall_64+0x34/0x70 [ 608.499420][T10323] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 608.505331][T10323] RIP: 0033:0x7fa4636b90d9 [ 608.509777][T10323] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 608.529434][T10323] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.537878][T10323] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 608.545877][T10323] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 608.553874][T10323] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 608.561868][T10323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 608.569862][T10323] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 608.577860][T10323] ---[ end trace 3a2d5a045bb1ff3b ]--- [ 608.630639][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 48) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x300000000000000) 14:23:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x80001000) 14:23:00 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, 0x0, 0x0) 14:23:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x300000002000000) 14:23:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xa9ffffff) 14:23:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x400000000000000) [ 608.892642][T10349] FAULT_INJECTION: forcing a failure. [ 608.892642][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 608.905317][T10349] CPU: 0 PID: 10349 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 608.917010][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 608.927040][T10349] Call Trace: [ 608.930312][T10349] dump_stack_lvl+0x1e2/0x24b [ 608.934967][T10349] ? panic+0x7d7/0x7d7 [ 608.939011][T10349] ? bfq_pos_tree_add_move+0x43e/0x43e [ 608.944451][T10349] ? selinux_kernfs_init_security+0x1a8/0x760 [ 608.950491][T10349] dump_stack+0x15/0x17 [ 608.954623][T10349] should_fail+0x3c0/0x510 [ 608.959036][T10349] __should_failslab+0x9f/0xe0 [ 608.963780][T10349] should_failslab+0x9/0x20 [ 608.968258][T10349] kmem_cache_alloc+0x3f/0x300 [ 608.973006][T10349] ? __kernfs_new_node+0xdb/0x6e0 [ 608.978007][T10349] __kernfs_new_node+0xdb/0x6e0 [ 608.982835][T10349] ? __kasan_check_write+0x14/0x20 [ 608.988007][T10349] ? mutex_lock+0xb2/0x1e0 [ 608.992399][T10349] ? mutex_trylock+0x180/0x180 [ 608.997136][T10349] ? kernfs_new_node+0x170/0x170 [ 609.002051][T10349] ? __kasan_check_write+0x14/0x20 [ 609.007136][T10349] ? mutex_unlock+0x29/0xf0 [ 609.011614][T10349] ? kernfs_activate+0x409/0x420 [ 609.016527][T10349] kernfs_new_node+0x97/0x170 [ 609.021181][T10349] __kernfs_create_file+0x4a/0x270 [ 609.026270][T10349] sysfs_add_file_mode_ns+0x273/0x320 [ 609.031619][T10349] internal_create_group+0x55e/0xf50 [ 609.036887][T10349] ? sysfs_create_group+0x30/0x30 [ 609.041889][T10349] sysfs_create_groups+0x5d/0x130 [ 609.046889][T10349] device_add_attrs+0x8b/0x3e0 [ 609.051625][T10349] ? device_add_class_symlinks+0x27c/0x2a0 [ 609.057407][T10349] device_add+0x4e6/0xbd0 [ 609.061715][T10349] device_create+0x258/0x2e0 [ 609.066283][T10349] ? root_device_unregister+0x80/0x80 [ 609.071723][T10349] ? __kasan_check_read+0x11/0x20 [ 609.076727][T10349] ? preempt_schedule_irq+0xef/0x140 [ 609.081987][T10349] ? preempt_schedule_notrace+0x140/0x140 [ 609.087681][T10349] bdi_register_va+0x94/0x600 [ 609.092333][T10349] bdi_register+0xd1/0x120 [ 609.096729][T10349] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 609.102336][T10349] ? __device_add_disk+0x536/0x11d0 [ 609.107510][T10349] ? bdi_register_va+0x600/0x600 [ 609.112424][T10349] ? blk_alloc_devt+0x2c7/0x320 [ 609.117269][T10349] __device_add_disk+0x5cb/0x11d0 [ 609.122272][T10349] ? device_add_disk+0x40/0x40 [ 609.127013][T10349] ? irqentry_exit+0x50/0x60 [ 609.131581][T10349] ? loop_add+0x3b0/0x760 [ 609.135888][T10349] ? vsprintf+0x40/0x40 [ 609.140024][T10349] device_add_disk+0x2a/0x40 [ 609.144593][T10349] loop_add+0x58f/0x760 [ 609.148728][T10349] loop_control_ioctl+0x564/0x740 [ 609.153730][T10349] ? loop_remove+0xb0/0xb0 [ 609.158125][T10349] ? __fget_files+0x310/0x370 [ 609.162782][T10349] ? security_file_ioctl+0xb1/0xd0 [ 609.167872][T10349] ? loop_remove+0xb0/0xb0 [ 609.172266][T10349] __se_sys_ioctl+0x115/0x190 [ 609.176920][T10349] __x64_sys_ioctl+0x7b/0x90 [ 609.181486][T10349] do_syscall_64+0x34/0x70 [ 609.185879][T10349] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 609.191786][T10349] RIP: 0033:0x7fa4636b90d9 [ 609.196186][T10349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 609.215768][T10349] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.224160][T10349] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 609.232110][T10349] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 609.240062][T10349] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 609.248009][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 609.255957][T10349] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 609.265023][T10349] ------------[ cut here ]------------ [ 609.270617][T10349] WARNING: CPU: 0 PID: 10349 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 609.279738][T10349] Modules linked in: [ 609.283668][T10349] CPU: 0 PID: 10349 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 609.295404][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 609.305507][T10349] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 609.311336][T10349] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 609.331024][T10349] RSP: 0018:ffffc900091d7bc0 EFLAGS: 00010287 [ 609.337089][T10349] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 609.345088][T10349] RDX: ffffc90004b48000 RSI: 000000000003569f RDI: 00000000000356a0 [ 609.353516][T10349] RBP: ffffc900091d7d08 R08: ffffffff82411a26 R09: ffffc900091d7610 [ 609.361536][T10349] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 609.369533][T10349] R13: ffff88810f668000 R14: ffff88810f66f338 R15: ffff88810f66f000 [ 609.377517][T10349] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 609.386467][T10349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.393090][T10349] CR2: 00007fa4623e9ff8 CR3: 0000000112669000 CR4: 00000000003526b0 [ 609.401094][T10349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 609.409085][T10349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 609.417059][T10349] Call Trace: [ 609.420409][T10349] ? device_add_disk+0x40/0x40 [ 609.425194][T10349] ? irqentry_exit+0x50/0x60 [ 609.429805][T10349] ? loop_add+0x3b0/0x760 [ 609.434146][T10349] ? vsprintf+0x40/0x40 [ 609.438314][T10349] device_add_disk+0x2a/0x40 [ 609.442943][T10349] loop_add+0x58f/0x760 [ 609.447103][T10349] loop_control_ioctl+0x564/0x740 [ 609.452150][T10349] ? loop_remove+0xb0/0xb0 [ 609.456575][T10349] ? __fget_files+0x310/0x370 [ 609.461275][T10349] ? security_file_ioctl+0xb1/0xd0 [ 609.466393][T10349] ? loop_remove+0xb0/0xb0 [ 609.470829][T10349] __se_sys_ioctl+0x115/0x190 [ 609.475515][T10349] __x64_sys_ioctl+0x7b/0x90 [ 609.480137][T10349] do_syscall_64+0x34/0x70 [ 609.484567][T10349] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 609.490477][T10349] RIP: 0033:0x7fa4636b90d9 [ 609.494902][T10349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 609.514573][T10349] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.523058][T10349] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 609.531065][T10349] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 609.539075][T10349] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 609.547073][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 609.555077][T10349] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 609.563085][T10349] ---[ end trace 3a2d5a045bb1ff3c ]--- 14:23:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1000016e48ec77) 14:23:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:01 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, 0x0, 0x0) 14:23:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 49) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xe8030000) 14:23:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xf2ffffff) 14:23:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x28000000) [ 609.781556][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 609.897898][T10376] FAULT_INJECTION: forcing a failure. [ 609.897898][T10376] name failslab, interval 1, probability 0, space 0, times 0 [ 609.910571][T10376] CPU: 0 PID: 10376 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 609.922267][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 609.932303][T10376] Call Trace: [ 609.935571][T10376] dump_stack_lvl+0x1e2/0x24b [ 609.940226][T10376] ? panic+0x7d7/0x7d7 [ 609.944272][T10376] ? bfq_pos_tree_add_move+0x43e/0x43e [ 609.949718][T10376] ? __schedule+0x86e/0xc00 [ 609.954204][T10376] dump_stack+0x15/0x17 [ 609.958344][T10376] should_fail+0x3c0/0x510 [ 609.962737][T10376] __should_failslab+0x9f/0xe0 [ 609.967481][T10376] should_failslab+0x9/0x20 [ 609.971962][T10376] kmem_cache_alloc+0x3f/0x300 [ 609.976703][T10376] ? __kernfs_new_node+0xdb/0x6e0 [ 609.981703][T10376] ? preempt_schedule_notrace+0x140/0x140 [ 609.987396][T10376] __kernfs_new_node+0xdb/0x6e0 [ 609.992226][T10376] ? __kasan_check_write+0x14/0x20 [ 609.997312][T10376] ? mutex_lock+0xb2/0x1e0 [ 610.001705][T10376] ? mutex_trylock+0x180/0x180 [ 610.006443][T10376] ? kernfs_new_node+0x170/0x170 [ 610.011359][T10376] ? __kasan_check_write+0x14/0x20 [ 610.016444][T10376] ? mutex_unlock+0x29/0xf0 [ 610.020925][T10376] ? kernfs_activate+0x409/0x420 [ 610.025844][T10376] kernfs_new_node+0x97/0x170 [ 610.030498][T10376] __kernfs_create_file+0x4a/0x270 [ 610.035587][T10376] sysfs_add_file_mode_ns+0x273/0x320 [ 610.040936][T10376] internal_create_group+0x55e/0xf50 [ 610.046197][T10376] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 610.051809][T10376] ? sysfs_create_group+0x30/0x30 [ 610.056807][T10376] ? kernfs_put+0x48/0x540 [ 610.061206][T10376] ? kernfs_create_link+0x1a0/0x210 [ 610.066382][T10376] sysfs_create_groups+0x5d/0x130 [ 610.071387][T10376] device_add_attrs+0x8b/0x3e0 [ 610.076128][T10376] ? device_add_class_symlinks+0x27c/0x2a0 [ 610.081911][T10376] device_add+0x4e6/0xbd0 [ 610.086218][T10376] device_create+0x258/0x2e0 [ 610.090785][T10376] ? root_device_unregister+0x80/0x80 [ 610.096137][T10376] ? __kasan_check_read+0x11/0x20 [ 610.101145][T10376] ? preempt_schedule_irq+0xef/0x140 [ 610.106406][T10376] ? preempt_schedule_notrace+0x140/0x140 [ 610.112099][T10376] bdi_register_va+0x94/0x600 [ 610.116754][T10376] bdi_register+0xd1/0x120 [ 610.121150][T10376] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 610.126761][T10376] ? __device_add_disk+0x536/0x11d0 [ 610.131935][T10376] ? bdi_register_va+0x600/0x600 [ 610.136851][T10376] ? elevator_init_mq+0xf1/0x500 [ 610.141763][T10376] ? blk_alloc_devt+0xd4/0x320 [ 610.146504][T10376] __device_add_disk+0x5cb/0x11d0 [ 610.151504][T10376] ? device_add_disk+0x40/0x40 [ 610.156244][T10376] ? loop_add+0x3b0/0x760 [ 610.160638][T10376] ? vsprintf+0x40/0x40 [ 610.164777][T10376] ? device_initialize+0x25c/0x3a0 [ 610.169950][T10376] device_add_disk+0x2a/0x40 [ 610.174514][T10376] loop_add+0x58f/0x760 [ 610.178643][T10376] loop_control_ioctl+0x564/0x740 [ 610.183644][T10376] ? __irq_exit_rcu+0x41/0x150 [ 610.188385][T10376] ? loop_remove+0xb0/0xb0 [ 610.192776][T10376] ? irq_exit_rcu+0x9/0x10 [ 610.197190][T10376] ? sysvec_call_function_single+0xcb/0xe0 [ 610.202971][T10376] ? asm_sysvec_call_function_single+0x12/0x20 [ 610.209103][T10376] ? do_vfs_ioctl+0xf6/0x1a90 [ 610.213755][T10376] ? __se_sys_ioctl+0x109/0x190 [ 610.218582][T10376] ? loop_remove+0xb0/0xb0 [ 610.222970][T10376] __se_sys_ioctl+0x115/0x190 [ 610.227625][T10376] __x64_sys_ioctl+0x7b/0x90 [ 610.232188][T10376] do_syscall_64+0x34/0x70 [ 610.236578][T10376] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 610.242443][T10376] RIP: 0033:0x7fa4636b90d9 [ 610.246834][T10376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 610.266412][T10376] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.274799][T10376] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 610.282745][T10376] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 610.290688][T10376] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.298636][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 610.306586][T10376] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 610.315747][T10376] ------------[ cut here ]------------ [ 610.321255][T10376] WARNING: CPU: 0 PID: 10376 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 610.330375][T10376] Modules linked in: [ 610.334308][T10376] CPU: 0 PID: 10376 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 610.346032][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 610.356122][T10376] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 610.361971][T10376] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 610.381610][T10376] RSP: 0018:ffffc900097d7bc0 EFLAGS: 00010283 [ 610.387701][T10376] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 610.395695][T10376] RDX: ffffc90004b48000 RSI: 000000000003c2b4 RDI: 000000000003c2b5 [ 610.403694][T10376] RBP: ffffc900097d7d08 R08: ffffffff82411a26 R09: ffffc900097d7610 [ 610.411685][T10376] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 610.420025][T10376] R13: ffff88811420d000 R14: ffff888114208338 R15: ffff888114208000 [ 610.428004][T10376] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 610.436952][T10376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.443620][T10376] CR2: 00007fa4623e9ff8 CR3: 000000011917b000 CR4: 00000000003526b0 [ 610.451628][T10376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 610.459620][T10376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 610.467638][T10376] Call Trace: [ 610.471022][T10376] ? device_add_disk+0x40/0x40 [ 610.475842][T10376] ? loop_add+0x3b0/0x760 [ 610.480214][T10376] ? vsprintf+0x40/0x40 [ 610.484381][T10376] ? device_initialize+0x25c/0x3a0 [ 610.489514][T10376] device_add_disk+0x2a/0x40 [ 610.494112][T10376] loop_add+0x58f/0x760 [ 610.498282][T10376] loop_control_ioctl+0x564/0x740 [ 610.503332][T10376] ? __irq_exit_rcu+0x41/0x150 [ 610.508105][T10376] ? loop_remove+0xb0/0xb0 [ 610.512542][T10376] ? irq_exit_rcu+0x9/0x10 [ 610.516965][T10376] ? sysvec_call_function_single+0xcb/0xe0 [ 610.522793][T10376] ? asm_sysvec_call_function_single+0x12/0x20 [ 610.529007][T10376] ? do_vfs_ioctl+0xf6/0x1a90 [ 610.533695][T10376] ? __se_sys_ioctl+0x109/0x190 [ 610.538567][T10376] ? loop_remove+0xb0/0xb0 [ 610.542989][T10376] __se_sys_ioctl+0x115/0x190 [ 610.547673][T10376] __x64_sys_ioctl+0x7b/0x90 [ 610.552286][T10376] do_syscall_64+0x34/0x70 [ 610.556708][T10376] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 610.562638][T10376] RIP: 0033:0x7fa4636b90d9 [ 610.567058][T10376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 610.586691][T10376] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.595321][T10376] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 610.603328][T10376] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 610.611319][T10376] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.619326][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 610.627307][T10376] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 610.635323][T10376] ---[ end trace 3a2d5a045bb1ff3d ]--- 14:23:02 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, 0x0, 0x0) 14:23:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xf3ffffff) 14:23:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 50) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x500000000000000) 14:23:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x28000000) 14:23:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xfdfdffff) 14:23:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x600000000000000) [ 610.965924][T10402] FAULT_INJECTION: forcing a failure. [ 610.965924][T10402] name failslab, interval 1, probability 0, space 0, times 0 [ 610.978613][T10402] CPU: 0 PID: 10402 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 610.990321][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 611.000365][T10402] Call Trace: [ 611.003635][T10402] dump_stack_lvl+0x1e2/0x24b [ 611.008286][T10402] ? panic+0x7d7/0x7d7 [ 611.012332][T10402] ? selinux_kernfs_init_security+0x197/0x760 [ 611.018369][T10402] ? bfq_pos_tree_add_move+0x43e/0x43e [ 611.023800][T10402] ? selinux_kernfs_init_security+0x1a8/0x760 [ 611.029837][T10402] dump_stack+0x15/0x17 [ 611.033967][T10402] should_fail+0x3c0/0x510 [ 611.038357][T10402] __should_failslab+0x9f/0xe0 [ 611.043102][T10402] should_failslab+0x9/0x20 [ 611.047588][T10402] kmem_cache_alloc+0x3f/0x300 [ 611.052324][T10402] ? __kernfs_new_node+0xdb/0x6e0 [ 611.057321][T10402] __kernfs_new_node+0xdb/0x6e0 [ 611.062147][T10402] ? __kasan_check_write+0x14/0x20 [ 611.067232][T10402] ? mutex_lock+0xb2/0x1e0 [ 611.071621][T10402] ? mutex_trylock+0x180/0x180 [ 611.076355][T10402] ? kernfs_new_node+0x170/0x170 [ 611.081265][T10402] ? __kasan_check_write+0x14/0x20 [ 611.086347][T10402] ? mutex_unlock+0x29/0xf0 [ 611.090824][T10402] ? kernfs_activate+0x409/0x420 [ 611.095734][T10402] kernfs_new_node+0x97/0x170 [ 611.100384][T10402] __kernfs_create_file+0x4a/0x270 [ 611.105474][T10402] sysfs_add_file_mode_ns+0x273/0x320 [ 611.110819][T10402] internal_create_group+0x55e/0xf50 [ 611.116078][T10402] ? sysfs_create_group+0x30/0x30 [ 611.121075][T10402] ? kernfs_put+0x48/0x540 [ 611.125469][T10402] ? kernfs_create_link+0x1a0/0x210 [ 611.130641][T10402] sysfs_create_groups+0x5d/0x130 [ 611.135637][T10402] device_add_attrs+0x8b/0x3e0 [ 611.140375][T10402] ? device_add_class_symlinks+0x27c/0x2a0 [ 611.146239][T10402] device_add+0x4e6/0xbd0 [ 611.150543][T10402] device_create+0x258/0x2e0 [ 611.155114][T10402] ? root_device_unregister+0x80/0x80 [ 611.160459][T10402] ? number+0xd9b/0x1040 [ 611.164676][T10402] bdi_register_va+0x94/0x600 [ 611.169332][T10402] bdi_register+0xd1/0x120 [ 611.173725][T10402] ? __device_add_disk+0x536/0x11d0 [ 611.178893][T10402] ? bdi_register_va+0x600/0x600 [ 611.183804][T10402] ? vsnprintf+0x1bfd/0x1cd0 [ 611.188367][T10402] ? __kasan_check_read+0x11/0x20 [ 611.193363][T10402] ? blk_alloc_devt+0xd4/0x320 [ 611.198100][T10402] __device_add_disk+0x5cb/0x11d0 [ 611.203098][T10402] ? device_add_disk+0x40/0x40 [ 611.207837][T10402] ? loop_add+0x3b0/0x760 [ 611.212139][T10402] ? vsprintf+0x40/0x40 [ 611.216269][T10402] device_add_disk+0x2a/0x40 [ 611.220835][T10402] loop_add+0x58f/0x760 [ 611.224968][T10402] loop_control_ioctl+0x564/0x740 [ 611.229964][T10402] ? loop_remove+0xb0/0xb0 [ 611.234360][T10402] ? __fget_files+0x310/0x370 [ 611.239014][T10402] ? security_file_ioctl+0xb1/0xd0 [ 611.244097][T10402] ? loop_remove+0xb0/0xb0 [ 611.248486][T10402] __se_sys_ioctl+0x115/0x190 [ 611.253138][T10402] __x64_sys_ioctl+0x7b/0x90 [ 611.257702][T10402] do_syscall_64+0x34/0x70 [ 611.262092][T10402] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 611.267958][T10402] RIP: 0033:0x7fa4636b90d9 [ 611.272350][T10402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 611.291929][T10402] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.300515][T10402] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 611.308466][T10402] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 611.316412][T10402] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 611.324357][T10402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.332305][T10402] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 611.341407][T10402] ------------[ cut here ]------------ [ 611.347094][T10402] WARNING: CPU: 0 PID: 10402 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 611.356220][T10402] Modules linked in: [ 611.360165][T10402] CPU: 0 PID: 10402 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 611.371888][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 611.381984][T10402] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 611.387797][T10402] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 611.407440][T10402] RSP: 0018:ffffc9000994fbc0 EFLAGS: 00010283 [ 611.413552][T10402] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 611.421631][T10402] RDX: ffffc90004b48000 RSI: 00000000000363f1 RDI: 00000000000363f2 [ 611.429620][T10402] RBP: ffffc9000994fd08 R08: ffffffff82411a26 R09: ffffc9000994f610 [ 611.437606][T10402] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 611.445598][T10402] R13: ffff88810d66e000 R14: ffff88815e90e338 R15: ffff88815e90e000 [ 611.453589][T10402] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 611.462597][T10402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.469194][T10402] CR2: 00007fa4623e9ff8 CR3: 000000016883c000 CR4: 00000000003526b0 [ 611.477182][T10402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 611.485172][T10402] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 611.493224][T10402] Call Trace: [ 611.496549][T10402] ? device_add_disk+0x40/0x40 [ 611.501365][T10402] ? loop_add+0x3b0/0x760 [ 611.505720][T10402] ? vsprintf+0x40/0x40 [ 611.509900][T10402] device_add_disk+0x2a/0x40 [ 611.514504][T10402] loop_add+0x58f/0x760 [ 611.518689][T10402] loop_control_ioctl+0x564/0x740 [ 611.523722][T10402] ? loop_remove+0xb0/0xb0 [ 611.528150][T10402] ? __fget_files+0x310/0x370 [ 611.532852][T10402] ? security_file_ioctl+0xb1/0xd0 [ 611.537972][T10402] ? loop_remove+0xb0/0xb0 [ 611.542408][T10402] __se_sys_ioctl+0x115/0x190 [ 611.547090][T10402] __x64_sys_ioctl+0x7b/0x90 [ 611.551762][T10402] do_syscall_64+0x34/0x70 [ 611.556280][T10402] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 611.562195][T10402] RIP: 0033:0x7fa4636b90d9 [ 611.566625][T10402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 611.586270][T10402] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.594725][T10402] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 611.602719][T10402] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 611.610708][T10402] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 611.618754][T10402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.626779][T10402] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 611.634792][T10402] ---[ end trace 3a2d5a045bb1ff3e ]--- 14:23:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 51) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xfee00000) 14:23:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) 14:23:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x700000000000000) 14:23:03 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 14:23:03 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, 0x0, 0x0) 14:23:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xffff8000) [ 611.835570][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x800000000000000) [ 611.958148][T10431] FAULT_INJECTION: forcing a failure. [ 611.958148][T10431] name failslab, interval 1, probability 0, space 0, times 0 [ 611.970822][T10431] CPU: 0 PID: 10431 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 611.982513][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 611.992538][T10431] Call Trace: [ 611.995805][T10431] dump_stack_lvl+0x1e2/0x24b [ 612.000458][T10431] ? panic+0x7d7/0x7d7 [ 612.004503][T10431] ? bfq_pos_tree_add_move+0x43e/0x43e [ 612.009948][T10431] dump_stack+0x15/0x17 [ 612.014082][T10431] should_fail+0x3c0/0x510 [ 612.018478][T10431] __should_failslab+0x9f/0xe0 [ 612.023216][T10431] should_failslab+0x9/0x20 [ 612.027692][T10431] kmem_cache_alloc+0x3f/0x300 [ 612.032429][T10431] ? __kernfs_new_node+0xdb/0x6e0 [ 612.037426][T10431] __kernfs_new_node+0xdb/0x6e0 [ 612.042254][T10431] ? __kasan_check_read+0x11/0x20 [ 612.047255][T10431] ? preempt_schedule_irq+0xef/0x140 [ 612.052511][T10431] ? kernfs_new_node+0x170/0x170 [ 612.057422][T10431] ? irqentry_exit+0x50/0x60 [ 612.061984][T10431] ? sysvec_reschedule_ipi+0x84/0x160 [ 612.067329][T10431] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 612.072937][T10431] ? __kasan_check_write+0x14/0x20 [ 612.078024][T10431] kernfs_create_dir_ns+0x9b/0x230 [ 612.083108][T10431] internal_create_group+0x29d/0xf50 [ 612.088365][T10431] ? sysfs_create_group+0x30/0x30 [ 612.093361][T10431] ? sysfs_create_group+0x30/0x30 [ 612.098371][T10431] sysfs_create_group+0x1f/0x30 [ 612.103193][T10431] dpm_sysfs_add+0x5d/0x290 [ 612.107671][T10431] device_add+0x52c/0xbd0 [ 612.111972][T10431] device_create+0x258/0x2e0 [ 612.116534][T10431] ? root_device_unregister+0x80/0x80 [ 612.121882][T10431] ? __kasan_check_read+0x11/0x20 [ 612.126878][T10431] ? preempt_schedule_irq+0xef/0x140 [ 612.132136][T10431] ? preempt_schedule_notrace+0x140/0x140 [ 612.137828][T10431] bdi_register_va+0x94/0x600 [ 612.142478][T10431] bdi_register+0xd1/0x120 [ 612.146875][T10431] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 612.152569][T10431] ? __device_add_disk+0x536/0x11d0 [ 612.157738][T10431] ? bdi_register_va+0x600/0x600 [ 612.162648][T10431] ? blk_alloc_devt+0x2c7/0x320 [ 612.167472][T10431] __device_add_disk+0x5cb/0x11d0 [ 612.172472][T10431] ? device_add_disk+0x40/0x40 [ 612.177209][T10431] ? loop_add+0x3b0/0x760 [ 612.181511][T10431] ? vsprintf+0x40/0x40 [ 612.185645][T10431] device_add_disk+0x2a/0x40 [ 612.190207][T10431] loop_add+0x58f/0x760 [ 612.194337][T10431] loop_control_ioctl+0x564/0x740 [ 612.199333][T10431] ? loop_remove+0xb0/0xb0 [ 612.203723][T10431] ? irqentry_exit+0x50/0x60 [ 612.208287][T10431] ? sysvec_reschedule_ipi+0x84/0x160 [ 612.213634][T10431] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 612.219240][T10431] ? do_vfs_ioctl+0xf6/0x1a90 [ 612.223892][T10431] ? __se_sys_ioctl+0x109/0x190 [ 612.228719][T10431] ? loop_remove+0xb0/0xb0 [ 612.233108][T10431] __se_sys_ioctl+0x115/0x190 [ 612.237775][T10431] __x64_sys_ioctl+0x7b/0x90 [ 612.242339][T10431] do_syscall_64+0x34/0x70 [ 612.246728][T10431] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 612.252598][T10431] RIP: 0033:0x7fa4636b90d9 [ 612.256990][T10431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 612.276588][T10431] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.285074][T10431] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 612.293018][T10431] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 612.300964][T10431] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 612.308907][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 612.316857][T10431] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 612.326066][T10431] ------------[ cut here ]------------ [ 612.331570][T10431] WARNING: CPU: 0 PID: 10431 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 612.340686][T10431] Modules linked in: [ 612.344617][T10431] CPU: 0 PID: 10431 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 612.356348][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 612.366438][T10431] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 612.372261][T10431] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 612.391946][T10431] RSP: 0018:ffffc90009ae7bc0 EFLAGS: 00010283 [ 612.398097][T10431] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 612.406095][T10431] RDX: ffffc90004b48000 RSI: 0000000000035b31 RDI: 0000000000035b32 [ 612.414083][T10431] RBP: ffffc90009ae7d08 R08: ffffffff82411a26 R09: ffffc90009ae7610 [ 612.422136][T10431] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 612.430127][T10431] R13: ffff88811cef2000 R14: ffff88815d05e338 R15: ffff88815d05e000 [ 612.438108][T10431] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 612.447055][T10431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.453669][T10431] CR2: 00007fa4623e9ff8 CR3: 00000001188f9000 CR4: 00000000003506b0 [ 612.461672][T10431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 612.469744][T10431] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 612.477716][T10431] Call Trace: [ 612.481052][T10431] ? device_add_disk+0x40/0x40 [ 612.485822][T10431] ? loop_add+0x3b0/0x760 [ 612.490178][T10431] ? vsprintf+0x40/0x40 [ 612.494341][T10431] device_add_disk+0x2a/0x40 [ 612.498965][T10431] loop_add+0x58f/0x760 [ 612.503128][T10431] loop_control_ioctl+0x564/0x740 [ 612.508157][T10431] ? loop_remove+0xb0/0xb0 [ 612.512604][T10431] ? irqentry_exit+0x50/0x60 [ 612.517214][T10431] ? sysvec_reschedule_ipi+0x84/0x160 [ 612.522611][T10431] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 612.528255][T10431] ? do_vfs_ioctl+0xf6/0x1a90 [ 612.532951][T10431] ? __se_sys_ioctl+0x109/0x190 [ 612.537809][T10431] ? loop_remove+0xb0/0xb0 [ 612.542244][T10431] __se_sys_ioctl+0x115/0x190 [ 612.546934][T10431] __x64_sys_ioctl+0x7b/0x90 [ 612.551570][T10431] do_syscall_64+0x34/0x70 [ 612.556002][T10431] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 612.561952][T10431] RIP: 0033:0x7fa4636b90d9 [ 612.566388][T10431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 612.586048][T10431] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.594508][T10431] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 612.602503][T10431] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 612.610490][T10431] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 612.618488][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 612.626470][T10431] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 612.634474][T10431] ---[ end trace 3a2d5a045bb1ff3f ]--- [ 612.689360][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:04 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 14:23:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) 14:23:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 52) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:04 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xfffffdfd) 14:23:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x900000000000000) 14:23:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xffffffa9) [ 612.948240][T10460] FAULT_INJECTION: forcing a failure. [ 612.948240][T10460] name failslab, interval 1, probability 0, space 0, times 0 [ 612.960910][T10460] CPU: 0 PID: 10460 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 612.972601][T10460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 612.982630][T10460] Call Trace: [ 612.985897][T10460] dump_stack_lvl+0x1e2/0x24b [ 612.990551][T10460] ? panic+0x7d7/0x7d7 [ 612.994595][T10460] ? switch_mm_irqs_off+0x2ca/0x990 [ 612.999773][T10460] ? bfq_pos_tree_add_move+0x43e/0x43e [ 613.005205][T10460] ? _raw_spin_unlock_irq+0x4e/0x70 [ 613.010374][T10460] dump_stack+0x15/0x17 [ 613.014504][T10460] should_fail+0x3c0/0x510 [ 613.018893][T10460] __should_failslab+0x9f/0xe0 [ 613.023630][T10460] should_failslab+0x9/0x20 [ 613.028109][T10460] kmem_cache_alloc+0x3f/0x300 [ 613.032847][T10460] ? __kernfs_new_node+0xdb/0x6e0 [ 613.037847][T10460] ? release_firmware_map_entry+0x194/0x194 [ 613.043714][T10460] __kernfs_new_node+0xdb/0x6e0 [ 613.048536][T10460] ? preempt_schedule_notrace+0x140/0x140 [ 613.054232][T10460] ? kernfs_new_node+0x170/0x170 [ 613.059145][T10460] ? irqentry_exit+0x50/0x60 [ 613.063716][T10460] ? sysvec_reschedule_ipi+0x84/0x160 [ 613.069062][T10460] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 613.074668][T10460] kernfs_new_node+0x97/0x170 [ 613.079317][T10460] __kernfs_create_file+0x4a/0x270 [ 613.084401][T10460] sysfs_add_file_mode_ns+0x273/0x320 [ 613.089746][T10460] sysfs_merge_group+0x207/0x460 [ 613.094656][T10460] ? sysfs_remove_groups+0xb0/0xb0 [ 613.099737][T10460] ? device_add_attrs+0x2ce/0x3e0 [ 613.104735][T10460] ? devtmpfs_work_loop+0x1040/0x1070 [ 613.110078][T10460] dpm_sysfs_add+0xcf/0x290 [ 613.114551][T10460] device_add+0x52c/0xbd0 [ 613.118855][T10460] device_create+0x258/0x2e0 [ 613.123417][T10460] ? root_device_unregister+0x80/0x80 [ 613.128763][T10460] ? number+0x2d7/0x1040 [ 613.132978][T10460] ? number+0xd9b/0x1040 [ 613.137194][T10460] bdi_register_va+0x94/0x600 [ 613.141850][T10460] bdi_register+0xd1/0x120 [ 613.146239][T10460] ? __device_add_disk+0x536/0x11d0 [ 613.151409][T10460] ? bdi_register_va+0x600/0x600 [ 613.156328][T10460] ? vsnprintf+0x1bfd/0x1cd0 [ 613.161065][T10460] ? __kasan_check_read+0x11/0x20 [ 613.166060][T10460] ? blk_alloc_devt+0xd4/0x320 [ 613.170794][T10460] __device_add_disk+0x5cb/0x11d0 [ 613.175792][T10460] ? device_add_disk+0x40/0x40 [ 613.180527][T10460] ? loop_add+0x3b0/0x760 [ 613.184831][T10460] ? vsprintf+0x40/0x40 [ 613.188962][T10460] device_add_disk+0x2a/0x40 [ 613.193524][T10460] loop_add+0x58f/0x760 [ 613.197654][T10460] loop_control_ioctl+0x564/0x740 [ 613.202655][T10460] ? loop_remove+0xb0/0xb0 [ 613.207048][T10460] ? __fget_files+0x310/0x370 [ 613.211697][T10460] ? security_file_ioctl+0xb1/0xd0 [ 613.216780][T10460] ? loop_remove+0xb0/0xb0 [ 613.221171][T10460] __se_sys_ioctl+0x115/0x190 [ 613.225821][T10460] __x64_sys_ioctl+0x7b/0x90 [ 613.230387][T10460] do_syscall_64+0x34/0x70 [ 613.234778][T10460] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 613.240730][T10460] RIP: 0033:0x7fa4636b90d9 [ 613.245121][T10460] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 613.264696][T10460] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.273083][T10460] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 613.281029][T10460] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 613.288975][T10460] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 613.296922][T10460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 613.304874][T10460] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 613.314296][T10460] ------------[ cut here ]------------ [ 613.319900][T10460] WARNING: CPU: 0 PID: 10460 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 613.329022][T10460] Modules linked in: [ 613.332955][T10460] CPU: 0 PID: 10460 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 613.344680][T10460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 613.354764][T10460] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 613.360593][T10460] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 613.380294][T10460] RSP: 0018:ffffc90009c2fbc0 EFLAGS: 00010287 [ 613.386369][T10460] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 613.394364][T10460] RDX: ffffc90004b48000 RSI: 00000000000355e6 RDI: 00000000000355e7 [ 613.402356][T10460] RBP: ffffc90009c2fd08 R08: ffffffff82411a26 R09: ffffc90009c2f610 [ 613.410373][T10460] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 613.418366][T10460] R13: ffff88811061b000 R14: ffff88811bac5338 R15: ffff88811bac5000 [ 613.426346][T10460] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 613.435282][T10460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.441918][T10460] CR2: 00007fa4623e9ff8 CR3: 00000001665a6000 CR4: 00000000003526b0 [ 613.449927][T10460] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 613.457907][T10460] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 613.465897][T10460] Call Trace: [ 613.469229][T10460] ? device_add_disk+0x40/0x40 [ 613.474001][T10460] ? loop_add+0x3b0/0x760 [ 613.478402][T10460] ? vsprintf+0x40/0x40 [ 613.482601][T10460] device_add_disk+0x2a/0x40 [ 613.487224][T10460] loop_add+0x58f/0x760 [ 613.491428][T10460] loop_control_ioctl+0x564/0x740 [ 613.496465][T10460] ? loop_remove+0xb0/0xb0 [ 613.500930][T10460] ? __fget_files+0x310/0x370 [ 613.505620][T10460] ? security_file_ioctl+0xb1/0xd0 [ 613.510752][T10460] ? loop_remove+0xb0/0xb0 [ 613.515177][T10460] __se_sys_ioctl+0x115/0x190 [ 613.519879][T10460] __x64_sys_ioctl+0x7b/0x90 [ 613.524473][T10460] do_syscall_64+0x34/0x70 [ 613.528931][T10460] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 613.534834][T10460] RIP: 0033:0x7fa4636b90d9 [ 613.539273][T10460] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 613.558903][T10460] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.567347][T10460] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 613.575342][T10460] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 613.583331][T10460] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 613.591331][T10460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 613.599320][T10460] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 613.607386][T10460] ---[ end trace 3a2d5a045bb1ff40 ]--- 14:23:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) 14:23:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xfffffff2) 14:23:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 53) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:05 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 14:23:05 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xa00000000000000) 14:23:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xfffffff3) 14:23:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xb00000000000000) 14:23:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x200000003) [ 613.937101][T10494] FAULT_INJECTION: forcing a failure. [ 613.937101][T10494] name failslab, interval 1, probability 0, space 0, times 0 [ 613.949806][T10494] CPU: 0 PID: 10494 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 613.961490][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 613.971520][T10494] Call Trace: [ 613.974788][T10494] dump_stack_lvl+0x1e2/0x24b [ 613.979440][T10494] ? bfq_pos_tree_add_move+0x43e/0x43e [ 613.984880][T10494] ? radix_tree_node_alloc+0x59/0x3c0 [ 613.990236][T10494] dump_stack+0x15/0x17 [ 613.994366][T10494] should_fail+0x3c0/0x510 [ 613.998766][T10494] __should_failslab+0x9f/0xe0 [ 614.003518][T10494] should_failslab+0x9/0x20 [ 614.007995][T10494] kmem_cache_alloc+0x3f/0x300 [ 614.012733][T10494] ? radix_tree_node_alloc+0x194/0x3c0 [ 614.018167][T10494] radix_tree_node_alloc+0x194/0x3c0 [ 614.023427][T10494] ? kernfs_new_node+0x97/0x170 [ 614.028262][T10494] ? __kernfs_create_file+0x4a/0x270 [ 614.033543][T10494] ? sysfs_add_file_mode_ns+0x273/0x320 [ 614.039064][T10494] ? dpm_sysfs_add+0xcf/0x290 [ 614.043715][T10494] idr_get_free+0x2d8/0x990 [ 614.048192][T10494] ? __se_sys_ioctl+0x115/0x190 [ 614.053031][T10494] idr_alloc_cyclic+0x1ef/0x5d0 [ 614.057861][T10494] ? idr_alloc+0x2f0/0x2f0 [ 614.062254][T10494] ? __kasan_check_write+0x14/0x20 [ 614.067340][T10494] ? _raw_spin_lock+0xa3/0x1b0 [ 614.072077][T10494] ? __radix_tree_preload+0x361/0x3e0 [ 614.077420][T10494] ? kmem_cache_alloc+0x1a4/0x300 [ 614.082428][T10494] __kernfs_new_node+0x124/0x6e0 [ 614.087339][T10494] ? __kasan_check_write+0x14/0x20 [ 614.092424][T10494] ? kernfs_new_node+0x170/0x170 [ 614.097332][T10494] ? preempt_schedule_irq+0xef/0x140 [ 614.102588][T10494] ? preempt_schedule_notrace+0x140/0x140 [ 614.108281][T10494] ? __kasan_check_write+0x14/0x20 [ 614.113366][T10494] ? mutex_unlock+0x29/0xf0 [ 614.117845][T10494] ? irqentry_exit+0x50/0x60 [ 614.122413][T10494] ? sysvec_reschedule_ipi+0x84/0x160 [ 614.127761][T10494] kernfs_new_node+0x97/0x170 [ 614.132412][T10494] __kernfs_create_file+0x4a/0x270 [ 614.137497][T10494] sysfs_add_file_mode_ns+0x273/0x320 [ 614.142845][T10494] sysfs_merge_group+0x207/0x460 [ 614.147762][T10494] ? sysfs_remove_groups+0xb0/0xb0 [ 614.152879][T10494] ? device_add_attrs+0xfa/0x3e0 [ 614.157792][T10494] dpm_sysfs_add+0xcf/0x290 [ 614.162268][T10494] device_add+0x52c/0xbd0 [ 614.166582][T10494] device_create+0x258/0x2e0 [ 614.171145][T10494] ? root_device_unregister+0x80/0x80 [ 614.176491][T10494] ? __kasan_check_read+0x11/0x20 [ 614.181489][T10494] ? preempt_schedule_irq+0xef/0x140 [ 614.186752][T10494] ? preempt_schedule_notrace+0x140/0x140 [ 614.192446][T10494] bdi_register_va+0x94/0x600 [ 614.197095][T10494] bdi_register+0xd1/0x120 [ 614.201489][T10494] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 614.207097][T10494] ? __device_add_disk+0x536/0x11d0 [ 614.212273][T10494] ? bdi_register_va+0x600/0x600 [ 614.217186][T10494] ? __kasan_check_read+0x11/0x20 [ 614.222294][T10494] ? blk_alloc_devt+0xd4/0x320 [ 614.227032][T10494] __device_add_disk+0x5cb/0x11d0 [ 614.232030][T10494] ? device_add_disk+0x40/0x40 [ 614.236803][T10494] ? loop_add+0x3b0/0x760 [ 614.241106][T10494] ? vsprintf+0x40/0x40 [ 614.245234][T10494] device_add_disk+0x2a/0x40 [ 614.249796][T10494] loop_add+0x58f/0x760 [ 614.253926][T10494] loop_control_ioctl+0x564/0x740 [ 614.258921][T10494] ? loop_remove+0xb0/0xb0 [ 614.263313][T10494] ? __fget_files+0x310/0x370 [ 614.267966][T10494] ? security_file_ioctl+0xb1/0xd0 [ 614.273136][T10494] ? loop_remove+0xb0/0xb0 [ 614.277527][T10494] __se_sys_ioctl+0x115/0x190 [ 614.282177][T10494] __x64_sys_ioctl+0x7b/0x90 [ 614.286742][T10494] do_syscall_64+0x34/0x70 [ 614.291184][T10494] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 614.297052][T10494] RIP: 0033:0x7fa4636b90d9 [ 614.301446][T10494] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 614.321022][T10494] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.329410][T10494] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 614.337353][T10494] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 614.345475][T10494] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 614.353420][T10494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 614.361367][T10494] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 614.449786][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xc00000000000000) 14:23:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x777ef367eeaf) 14:23:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xd00000000000000) 14:23:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 54) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x7fa706221700) 14:23:06 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 14:23:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe00000000000000) 14:23:06 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:06 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x600}, 0x0) 14:23:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xe0fe00000000) 14:23:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xf00000000000000) 14:23:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x4000000000000) [ 614.791998][T10535] FAULT_INJECTION: forcing a failure. [ 614.791998][T10535] name failslab, interval 1, probability 0, space 0, times 0 [ 614.804672][T10535] CPU: 0 PID: 10535 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 614.816361][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 614.826402][T10535] Call Trace: [ 614.829679][T10535] dump_stack_lvl+0x1e2/0x24b [ 614.834344][T10535] ? panic+0x7d7/0x7d7 [ 614.838394][T10535] ? bfq_pos_tree_add_move+0x43e/0x43e [ 614.843832][T10535] dump_stack+0x15/0x17 [ 614.847967][T10535] should_fail+0x3c0/0x510 [ 614.852361][T10535] __should_failslab+0x9f/0xe0 [ 614.857099][T10535] should_failslab+0x9/0x20 [ 614.861576][T10535] kmem_cache_alloc+0x3f/0x300 [ 614.866311][T10535] ? __kernfs_new_node+0xdb/0x6e0 [ 614.871315][T10535] __kernfs_new_node+0xdb/0x6e0 [ 614.876137][T10535] ? __kasan_check_write+0x14/0x20 [ 614.881222][T10535] ? mutex_lock+0xb2/0x1e0 [ 614.885612][T10535] ? mutex_trylock+0x180/0x180 [ 614.890349][T10535] ? kernfs_new_node+0x170/0x170 [ 614.895260][T10535] ? __kasan_check_write+0x14/0x20 [ 614.900344][T10535] ? mutex_unlock+0x29/0xf0 [ 614.904819][T10535] ? kernfs_activate+0x409/0x420 [ 614.909730][T10535] kernfs_new_node+0x97/0x170 [ 614.914379][T10535] __kernfs_create_file+0x4a/0x270 [ 614.919465][T10535] sysfs_add_file_mode_ns+0x273/0x320 [ 614.924895][T10535] sysfs_merge_group+0x207/0x460 [ 614.929805][T10535] ? sysfs_remove_groups+0xb0/0xb0 [ 614.934891][T10535] dpm_sysfs_add+0xcf/0x290 [ 614.939383][T10535] device_add+0x52c/0xbd0 [ 614.943709][T10535] device_create+0x258/0x2e0 [ 614.948288][T10535] ? root_device_unregister+0x80/0x80 [ 614.953655][T10535] ? number+0x4b8/0x1040 [ 614.957878][T10535] ? number+0xd9b/0x1040 [ 614.962103][T10535] bdi_register_va+0x94/0x600 [ 614.966763][T10535] bdi_register+0xd1/0x120 [ 614.971161][T10535] ? irqentry_exit+0x50/0x60 [ 614.975747][T10535] ? sysvec_reschedule_ipi+0x84/0x160 [ 614.981095][T10535] ? __device_add_disk+0x536/0x11d0 [ 614.986268][T10535] ? bdi_register_va+0x600/0x600 [ 614.991177][T10535] ? __device_add_disk+0x536/0x11d0 [ 614.996348][T10535] __device_add_disk+0x5cb/0x11d0 [ 615.001349][T10535] ? device_add_disk+0x40/0x40 [ 615.006088][T10535] ? loop_add+0x3b0/0x760 [ 615.010391][T10535] ? vsprintf+0x40/0x40 [ 615.014528][T10535] device_add_disk+0x2a/0x40 [ 615.019093][T10535] loop_add+0x58f/0x760 [ 615.023225][T10535] loop_control_ioctl+0x564/0x740 [ 615.028225][T10535] ? loop_remove+0xb0/0xb0 [ 615.032616][T10535] ? __fget_files+0x310/0x370 [ 615.037269][T10535] ? security_file_ioctl+0xb1/0xd0 [ 615.042350][T10535] ? loop_remove+0xb0/0xb0 [ 615.046740][T10535] __se_sys_ioctl+0x115/0x190 [ 615.051391][T10535] __x64_sys_ioctl+0x7b/0x90 [ 615.055954][T10535] do_syscall_64+0x34/0x70 [ 615.060439][T10535] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 615.066301][T10535] RIP: 0033:0x7fa4636b90d9 [ 615.070694][T10535] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 615.090275][T10535] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.098670][T10535] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 615.106613][T10535] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 615.114556][T10535] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 615.122502][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.130447][T10535] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 615.139751][T10535] ------------[ cut here ]------------ [ 615.145238][T10535] WARNING: CPU: 0 PID: 10535 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 615.154365][T10535] Modules linked in: [ 615.158297][T10535] CPU: 0 PID: 10535 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 615.170026][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 615.180115][T10535] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 615.185930][T10535] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 615.205581][T10535] RSP: 0018:ffffc9000a047bc0 EFLAGS: 00010283 [ 615.211691][T10535] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 615.219685][T10535] RDX: ffffc90004b48000 RSI: 0000000000032ecd RDI: 0000000000032ece [ 615.227667][T10535] RBP: ffffc9000a047d08 R08: ffffffff82411a26 R09: ffffc9000a047610 [ 615.235658][T10535] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 615.243659][T10535] R13: ffff888114214000 R14: ffff888114213338 R15: ffff888114213000 [ 615.251652][T10535] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 615.260678][T10535] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.267358][T10535] CR2: 00007fa4623e9ff8 CR3: 0000000117125000 CR4: 00000000003526b0 [ 615.275360][T10535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 615.283437][T10535] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 615.291436][T10535] Call Trace: [ 615.294745][T10535] ? device_add_disk+0x40/0x40 [ 615.299530][T10535] ? loop_add+0x3b0/0x760 [ 615.303864][T10535] ? vsprintf+0x40/0x40 [ 615.308030][T10535] device_add_disk+0x2a/0x40 [ 615.312639][T10535] loop_add+0x58f/0x760 [ 615.316801][T10535] loop_control_ioctl+0x564/0x740 [ 615.321847][T10535] ? loop_remove+0xb0/0xb0 [ 615.326276][T10535] ? __fget_files+0x310/0x370 [ 615.330972][T10535] ? security_file_ioctl+0xb1/0xd0 [ 615.336089][T10535] ? loop_remove+0xb0/0xb0 [ 615.340525][T10535] __se_sys_ioctl+0x115/0x190 [ 615.345207][T10535] __x64_sys_ioctl+0x7b/0x90 [ 615.349826][T10535] do_syscall_64+0x34/0x70 [ 615.354264][T10535] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 615.360175][T10535] RIP: 0033:0x7fa4636b90d9 [ 615.364598][T10535] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 615.384226][T10535] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.392686][T10535] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 615.400676][T10535] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 615.408702][T10535] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 615.416686][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.424776][T10535] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 615.432777][T10535] ---[ end trace 3a2d5a045bb1ff41 ]--- 14:23:07 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:07 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x600}, 0x0) 14:23:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 55) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:07 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1000000000000000) 14:23:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xc000000000000) 14:23:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x10000000000000) [ 615.751826][T10562] FAULT_INJECTION: forcing a failure. [ 615.751826][T10562] name failslab, interval 1, probability 0, space 0, times 0 [ 615.764529][T10562] CPU: 0 PID: 10562 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 615.776215][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 615.786269][T10562] Call Trace: [ 615.789537][T10562] dump_stack_lvl+0x1e2/0x24b [ 615.794192][T10562] ? panic+0x7d7/0x7d7 [ 615.798234][T10562] ? bfq_pos_tree_add_move+0x43e/0x43e [ 615.803664][T10562] ? __schedule+0x86e/0xc00 [ 615.808152][T10562] dump_stack+0x15/0x17 [ 615.812283][T10562] should_fail+0x3c0/0x510 [ 615.816693][T10562] __should_failslab+0x9f/0xe0 [ 615.821446][T10562] should_failslab+0x9/0x20 [ 615.825931][T10562] kmem_cache_alloc+0x3f/0x300 [ 615.830699][T10562] ? __kernfs_new_node+0xdb/0x6e0 [ 615.835714][T10562] ? preempt_schedule_notrace+0x140/0x140 [ 615.841414][T10562] __kernfs_new_node+0xdb/0x6e0 [ 615.846249][T10562] ? __kasan_check_write+0x14/0x20 [ 615.851345][T10562] ? mutex_lock+0xb2/0x1e0 [ 615.855737][T10562] ? mutex_trylock+0x180/0x180 [ 615.860476][T10562] ? kernfs_new_node+0x170/0x170 [ 615.865411][T10562] ? __kasan_check_write+0x14/0x20 [ 615.870504][T10562] ? mutex_unlock+0x29/0xf0 [ 615.874989][T10562] ? kernfs_activate+0x409/0x420 [ 615.879905][T10562] kernfs_new_node+0x97/0x170 [ 615.884562][T10562] __kernfs_create_file+0x4a/0x270 [ 615.889655][T10562] sysfs_add_file_mode_ns+0x273/0x320 [ 615.895005][T10562] sysfs_merge_group+0x207/0x460 [ 615.899917][T10562] ? sysfs_remove_groups+0xb0/0xb0 [ 615.905109][T10562] ? bus_add_device+0x91/0x400 [ 615.909851][T10562] ? bus_add_device+0x3e1/0x400 [ 615.914676][T10562] dpm_sysfs_add+0xcf/0x290 [ 615.919153][T10562] device_add+0x52c/0xbd0 [ 615.923454][T10562] device_create+0x258/0x2e0 [ 615.928015][T10562] ? root_device_unregister+0x80/0x80 [ 615.933358][T10562] ? number+0xcc2/0x1040 [ 615.937574][T10562] ? number+0xd9b/0x1040 [ 615.941795][T10562] bdi_register_va+0x94/0x600 [ 615.946444][T10562] bdi_register+0xd1/0x120 [ 615.950834][T10562] ? __device_add_disk+0x536/0x11d0 [ 615.956003][T10562] ? bdi_register_va+0x600/0x600 [ 615.960915][T10562] ? vsnprintf+0x1bfd/0x1cd0 [ 615.965478][T10562] ? __kasan_check_read+0x11/0x20 [ 615.970474][T10562] ? blk_alloc_devt+0xd4/0x320 [ 615.975214][T10562] __device_add_disk+0x5cb/0x11d0 [ 615.980213][T10562] ? device_add_disk+0x40/0x40 [ 615.985039][T10562] ? loop_add+0x3b0/0x760 [ 615.989342][T10562] ? vsprintf+0x40/0x40 [ 615.993471][T10562] device_add_disk+0x2a/0x40 [ 615.998039][T10562] loop_add+0x58f/0x760 [ 616.002169][T10562] loop_control_ioctl+0x564/0x740 [ 616.007168][T10562] ? loop_remove+0xb0/0xb0 [ 616.011558][T10562] ? __fget_files+0x310/0x370 [ 616.016208][T10562] ? security_file_ioctl+0xb1/0xd0 [ 616.021300][T10562] ? loop_remove+0xb0/0xb0 [ 616.025700][T10562] __se_sys_ioctl+0x115/0x190 [ 616.030350][T10562] __x64_sys_ioctl+0x7b/0x90 [ 616.034913][T10562] do_syscall_64+0x34/0x70 [ 616.039302][T10562] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 616.045168][T10562] RIP: 0033:0x7fa4636b90d9 [ 616.049559][T10562] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 616.069142][T10562] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.077536][T10562] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 616.085484][T10562] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 616.093433][T10562] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 616.101383][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 616.109327][T10562] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 616.118404][T10562] ------------[ cut here ]------------ [ 616.123888][T10562] WARNING: CPU: 0 PID: 10562 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 616.133012][T10562] Modules linked in: [ 616.136939][T10562] CPU: 0 PID: 10562 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 616.148669][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 616.158936][T10562] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 616.164754][T10562] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 616.184465][T10562] RSP: 0018:ffffc9000a147bc0 EFLAGS: 00010283 [ 616.190577][T10562] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 616.198586][T10562] RDX: ffffc90004b48000 RSI: 0000000000035c33 RDI: 0000000000035c34 [ 616.206567][T10562] RBP: ffffc9000a147d08 R08: ffffffff82411a26 R09: ffffc9000a147610 [ 616.214572][T10562] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 616.222593][T10562] R13: ffff88811d572000 R14: ffff88811d577338 R15: ffff88811d577000 [ 616.230595][T10562] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 616.239546][T10562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.246137][T10562] CR2: 00007fa4623e9ff8 CR3: 000000016193b000 CR4: 00000000003526b0 [ 616.254132][T10562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 616.262125][T10562] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 616.270129][T10562] Call Trace: [ 616.273441][T10562] ? device_add_disk+0x40/0x40 [ 616.278216][T10562] ? loop_add+0x3b0/0x760 [ 616.282575][T10562] ? vsprintf+0x40/0x40 [ 616.286748][T10562] device_add_disk+0x2a/0x40 [ 616.291373][T10562] loop_add+0x58f/0x760 [ 616.295681][T10562] loop_control_ioctl+0x564/0x740 [ 616.300723][T10562] ? loop_remove+0xb0/0xb0 [ 616.305147][T10562] ? __fget_files+0x310/0x370 [ 616.309861][T10562] ? security_file_ioctl+0xb1/0xd0 [ 616.314979][T10562] ? loop_remove+0xb0/0xb0 [ 616.319416][T10562] __se_sys_ioctl+0x115/0x190 [ 616.324100][T10562] __x64_sys_ioctl+0x7b/0x90 [ 616.328747][T10562] do_syscall_64+0x34/0x70 [ 616.333176][T10562] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 616.339097][T10562] RIP: 0033:0x7fa4636b90d9 [ 616.343526][T10562] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 616.363177][T10562] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.371632][T10562] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 616.379626][T10562] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 616.387608][T10562] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 616.395621][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 616.403619][T10562] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 616.411626][T10562] ---[ end trace 3a2d5a045bb1ff42 ]--- [ 616.439632][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1100000000000000) 14:23:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x12000000) 14:23:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 56) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:08 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x600}, 0x0) 14:23:08 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1000016a456075) 14:23:08 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 616.720125][T10586] FAULT_INJECTION: forcing a failure. [ 616.720125][T10586] name failslab, interval 1, probability 0, space 0, times 0 [ 616.732814][T10586] CPU: 0 PID: 10586 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 616.744504][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 616.754539][T10586] Call Trace: [ 616.757807][T10586] dump_stack_lvl+0x1e2/0x24b [ 616.762458][T10586] ? panic+0x7d7/0x7d7 [ 616.766501][T10586] ? bfq_pos_tree_add_move+0x43e/0x43e [ 616.771945][T10586] dump_stack+0x15/0x17 [ 616.776075][T10586] should_fail+0x3c0/0x510 [ 616.780470][T10586] __should_failslab+0x9f/0xe0 [ 616.785209][T10586] should_failslab+0x9/0x20 [ 616.789684][T10586] kmem_cache_alloc+0x3f/0x300 [ 616.794420][T10586] ? __kernfs_new_node+0xdb/0x6e0 [ 616.799422][T10586] ? preempt_schedule_irq+0xef/0x140 [ 616.804692][T10586] __kernfs_new_node+0xdb/0x6e0 [ 616.809516][T10586] ? __kasan_check_write+0x14/0x20 [ 616.814602][T10586] ? mutex_lock+0xb2/0x1e0 [ 616.819000][T10586] ? mutex_trylock+0x180/0x180 [ 616.823736][T10586] ? kernfs_new_node+0x170/0x170 [ 616.828648][T10586] ? __kasan_check_write+0x14/0x20 [ 616.833736][T10586] ? mutex_unlock+0x29/0xf0 [ 616.838212][T10586] ? kernfs_activate+0x409/0x420 [ 616.843123][T10586] kernfs_new_node+0x97/0x170 [ 616.847774][T10586] __kernfs_create_file+0x4a/0x270 [ 616.852861][T10586] sysfs_add_file_mode_ns+0x273/0x320 [ 616.858212][T10586] sysfs_merge_group+0x207/0x460 [ 616.863125][T10586] ? sysfs_remove_groups+0xb0/0xb0 [ 616.868210][T10586] dpm_sysfs_add+0xcf/0x290 [ 616.872688][T10586] device_add+0x52c/0xbd0 [ 616.876994][T10586] device_create+0x258/0x2e0 [ 616.881588][T10586] ? root_device_unregister+0x80/0x80 [ 616.886935][T10586] ? number+0xd9b/0x1040 [ 616.891151][T10586] bdi_register_va+0x94/0x600 [ 616.895800][T10586] bdi_register+0xd1/0x120 [ 616.900192][T10586] ? irqentry_exit+0x50/0x60 [ 616.904758][T10586] ? __device_add_disk+0x536/0x11d0 [ 616.909928][T10586] ? bdi_register_va+0x600/0x600 [ 616.914841][T10586] __device_add_disk+0x5cb/0x11d0 [ 616.919846][T10586] ? device_add_disk+0x40/0x40 [ 616.924585][T10586] ? loop_add+0x3b0/0x760 [ 616.928889][T10586] ? vsprintf+0x40/0x40 [ 616.933019][T10586] device_add_disk+0x2a/0x40 [ 616.937587][T10586] loop_add+0x58f/0x760 [ 616.941719][T10586] loop_control_ioctl+0x564/0x740 [ 616.946804][T10586] ? loop_remove+0xb0/0xb0 [ 616.951192][T10586] ? irqentry_exit+0x50/0x60 [ 616.955755][T10586] ? sysvec_reschedule_ipi+0x84/0x160 [ 616.961103][T10586] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 616.966709][T10586] ? do_vfs_ioctl+0xf6/0x1a90 [ 616.971358][T10586] ? __se_sys_ioctl+0x109/0x190 [ 616.976181][T10586] ? loop_remove+0xb0/0xb0 [ 616.980658][T10586] __se_sys_ioctl+0x115/0x190 [ 616.985330][T10586] __x64_sys_ioctl+0x7b/0x90 [ 616.990003][T10586] do_syscall_64+0x34/0x70 [ 616.994397][T10586] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 617.000262][T10586] RIP: 0033:0x7fa4636b90d9 [ 617.004825][T10586] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 617.024489][T10586] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.032879][T10586] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 617.040833][T10586] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 617.048779][T10586] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 617.056736][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 617.064684][T10586] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 617.073937][T10586] ------------[ cut here ]------------ [ 617.079441][T10586] WARNING: CPU: 0 PID: 10586 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 617.088568][T10586] Modules linked in: [ 617.092498][T10586] CPU: 0 PID: 10586 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 617.104228][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 617.114312][T10586] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 617.120135][T10586] Code: ff ff e8 07 fa 2b ff 0f 0b e9 28 f3 ff ff e8 fb f9 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 e4 f9 2b ff <0f> 0b e9 60 f7 ff ff e8 d8 f9 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 617.139788][T10586] RSP: 0018:ffffc9000a29fbc0 EFLAGS: 00010287 [ 617.145882][T10586] RAX: ffffffff824122cc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 617.153883][T10586] RDX: ffffc90004b48000 RSI: 0000000000033d2c RDI: 0000000000033d2d [ 617.161882][T10586] RBP: ffffc9000a29fd08 R08: ffffffff82411a26 R09: ffffc9000a29f610 [ 617.169873][T10586] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 617.177851][T10586] R13: ffff88815e867000 R14: ffff888115d4b338 R15: ffff888115d4b000 [ 617.185846][T10586] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 617.194794][T10586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.201411][T10586] CR2: 00007fa4623e9ff8 CR3: 000000010c1f0000 CR4: 00000000003506b0 [ 617.209412][T10586] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 617.217391][T10586] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 617.225379][T10586] Call Trace: [ 617.228701][T10586] ? device_add_disk+0x40/0x40 [ 617.233484][T10586] ? loop_add+0x3b0/0x760 [ 617.237819][T10586] ? vsprintf+0x40/0x40 [ 617.242003][T10586] device_add_disk+0x2a/0x40 [ 617.246601][T10586] loop_add+0x58f/0x760 [ 617.250780][T10586] loop_control_ioctl+0x564/0x740 [ 617.255810][T10586] ? loop_remove+0xb0/0xb0 [ 617.260300][T10586] ? irqentry_exit+0x50/0x60 [ 617.264884][T10586] ? sysvec_reschedule_ipi+0x84/0x160 [ 617.270453][T10586] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 617.276093][T10586] ? do_vfs_ioctl+0xf6/0x1a90 [ 617.280785][T10586] ? __se_sys_ioctl+0x109/0x190 [ 617.285644][T10586] ? loop_remove+0xb0/0xb0 [ 617.290187][T10586] __se_sys_ioctl+0x115/0x190 [ 617.294871][T10586] __x64_sys_ioctl+0x7b/0x90 [ 617.299488][T10586] do_syscall_64+0x34/0x70 [ 617.303915][T10586] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 617.309826][T10586] RIP: 0033:0x7fa4636b90d9 [ 617.314252][T10586] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 617.333969][T10586] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.342433][T10586] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 617.350456][T10586] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 617.358442][T10586] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 14:23:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1200000000000000) 14:23:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x10008000000000) [ 617.366433][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 617.374427][T10586] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 617.382449][T10586] ---[ end trace 3a2d5a045bb1ff43 ]--- 14:23:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 57) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) [ 617.518570][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:09 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:09 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x172206a77f0000) 14:23:09 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1300000000000000) 14:23:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x30000000000000) [ 617.694365][T10618] FAULT_INJECTION: forcing a failure. [ 617.694365][T10618] name failslab, interval 1, probability 0, space 0, times 0 [ 617.707131][T10618] CPU: 0 PID: 10618 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 617.718829][T10618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 617.728862][T10618] Call Trace: [ 617.732132][T10618] dump_stack_lvl+0x1e2/0x24b [ 617.736958][T10618] ? bfq_pos_tree_add_move+0x43e/0x43e [ 617.742392][T10618] ? sysvec_reschedule_ipi+0x84/0x160 [ 617.747735][T10618] dump_stack+0x15/0x17 [ 617.751865][T10618] should_fail+0x3c0/0x510 [ 617.756255][T10618] ? kobject_uevent_env+0x26c/0x730 [ 617.761428][T10618] __should_failslab+0x9f/0xe0 [ 617.766166][T10618] should_failslab+0x9/0x20 [ 617.770646][T10618] kmem_cache_alloc_trace+0x3a/0x330 [ 617.775951][T10618] ? __kasan_check_write+0x14/0x20 [ 617.781036][T10618] ? mutex_lock+0xb2/0x1e0 [ 617.785426][T10618] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 617.791032][T10618] ? dev_uevent_filter+0xb0/0xb0 [ 617.796029][T10618] kobject_uevent_env+0x26c/0x730 [ 617.801033][T10618] ? __kasan_check_write+0x14/0x20 [ 617.806128][T10618] kobject_uevent+0x1f/0x30 [ 617.810607][T10618] device_add+0x79c/0xbd0 [ 617.814913][T10618] device_create+0x258/0x2e0 [ 617.819478][T10618] ? root_device_unregister+0x80/0x80 [ 617.824826][T10618] ? sysvec_reschedule_ipi+0x84/0x160 [ 617.830171][T10618] bdi_register_va+0x94/0x600 [ 617.834822][T10618] bdi_register+0xd1/0x120 [ 617.839215][T10618] ? __device_add_disk+0x536/0x11d0 [ 617.844385][T10618] ? bdi_register_va+0x600/0x600 [ 617.849298][T10618] ? vsnprintf+0x1bfd/0x1cd0 [ 617.854124][T10618] ? __kasan_check_read+0x11/0x20 [ 617.859122][T10618] ? blk_alloc_devt+0xd4/0x320 [ 617.863861][T10618] __device_add_disk+0x5cb/0x11d0 [ 617.868860][T10618] ? device_add_disk+0x40/0x40 [ 617.873595][T10618] ? loop_add+0x3b0/0x760 [ 617.877902][T10618] ? vsprintf+0x40/0x40 [ 617.882034][T10618] device_add_disk+0x2a/0x40 [ 617.886598][T10618] loop_add+0x58f/0x760 [ 617.890728][T10618] loop_control_ioctl+0x564/0x740 [ 617.895757][T10618] ? loop_remove+0xb0/0xb0 [ 617.900151][T10618] ? __fget_files+0x310/0x370 [ 617.904802][T10618] ? security_file_ioctl+0xb1/0xd0 [ 617.909888][T10618] ? loop_remove+0xb0/0xb0 [ 617.914280][T10618] __se_sys_ioctl+0x115/0x190 [ 617.918945][T10618] __x64_sys_ioctl+0x7b/0x90 [ 617.923512][T10618] do_syscall_64+0x34/0x70 [ 617.927905][T10618] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 617.933776][T10618] RIP: 0033:0x7fa4636b90d9 [ 617.938175][T10618] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 617.957753][T10618] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.966139][T10618] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 617.974094][T10618] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 617.982045][T10618] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 617.989989][T10618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 617.998023][T10618] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 618.037865][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1400000000000000) 14:23:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff00000000) 14:23:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1500000000000000) 14:23:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x100000000000000) 14:23:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1600000000000000) 14:23:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 58) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x104000000000000) 14:23:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1700000000000000) 14:23:09 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x19000000) 14:23:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x30000000000000) [ 618.538016][T10656] FAULT_INJECTION: forcing a failure. [ 618.538016][T10656] name failslab, interval 1, probability 0, space 0, times 0 [ 618.550669][T10656] CPU: 0 PID: 10656 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 618.562369][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 618.572397][T10656] Call Trace: [ 618.575669][T10656] dump_stack_lvl+0x1e2/0x24b [ 618.580323][T10656] ? panic+0x7d7/0x7d7 [ 618.584405][T10656] ? bfq_pos_tree_add_move+0x43e/0x43e [ 618.589854][T10656] dump_stack+0x15/0x17 [ 618.594000][T10656] should_fail+0x3c0/0x510 [ 618.598402][T10656] ? kobject_get_path+0xb8/0x1a0 [ 618.603322][T10656] __should_failslab+0x9f/0xe0 [ 618.608081][T10656] should_failslab+0x9/0x20 [ 618.612595][T10656] __kmalloc+0x60/0x360 [ 618.616733][T10656] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 618.622347][T10656] kobject_get_path+0xb8/0x1a0 [ 618.627093][T10656] kobject_uevent_env+0x282/0x730 [ 618.632096][T10656] ? device_add+0x583/0xbd0 [ 618.636580][T10656] kobject_uevent+0x1f/0x30 [ 618.641055][T10656] device_add+0x79c/0xbd0 [ 618.645357][T10656] device_create+0x258/0x2e0 [ 618.649930][T10656] ? root_device_unregister+0x80/0x80 [ 618.655282][T10656] ? number+0xd9b/0x1040 [ 618.659514][T10656] bdi_register_va+0x94/0x600 [ 618.664178][T10656] bdi_register+0xd1/0x120 [ 618.668588][T10656] ? __device_add_disk+0x536/0x11d0 [ 618.673777][T10656] ? bdi_register_va+0x600/0x600 [ 618.678694][T10656] ? vsnprintf+0x1bfd/0x1cd0 [ 618.683260][T10656] ? __kasan_check_read+0x11/0x20 [ 618.688257][T10656] ? blk_alloc_devt+0xd4/0x320 [ 618.692993][T10656] __device_add_disk+0x5cb/0x11d0 [ 618.697996][T10656] ? device_add_disk+0x40/0x40 [ 618.702731][T10656] ? loop_add+0x3b0/0x760 [ 618.707034][T10656] ? vsprintf+0x40/0x40 [ 618.711164][T10656] device_add_disk+0x2a/0x40 [ 618.715728][T10656] loop_add+0x58f/0x760 [ 618.719859][T10656] loop_control_ioctl+0x564/0x740 [ 618.724856][T10656] ? loop_remove+0xb0/0xb0 [ 618.729262][T10656] ? __fget_files+0x310/0x370 [ 618.733941][T10656] ? security_file_ioctl+0xb1/0xd0 [ 618.739042][T10656] ? loop_remove+0xb0/0xb0 [ 618.743436][T10656] __se_sys_ioctl+0x115/0x190 [ 618.748089][T10656] __x64_sys_ioctl+0x7b/0x90 [ 618.752678][T10656] do_syscall_64+0x34/0x70 [ 618.757067][T10656] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 618.762933][T10656] RIP: 0033:0x7fa4636b90d9 [ 618.767323][T10656] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 14:23:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1800000000000000) [ 618.786901][T10656] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.795292][T10656] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 618.803237][T10656] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 618.811184][T10656] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 618.819216][T10656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 618.827257][T10656] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:23:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x200000000000000) 14:23:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x19000000) 14:23:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x30000000000000) 14:23:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1900000000000000) [ 619.002834][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x19000000) 14:23:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 59) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) 14:23:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x300000000000000) 14:23:10 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1a00000000000000) 14:23:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x300000002000000) 14:23:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1b00000000000000) [ 619.390237][T10705] FAULT_INJECTION: forcing a failure. [ 619.390237][T10705] name failslab, interval 1, probability 0, space 0, times 0 [ 619.402889][T10705] CPU: 0 PID: 10705 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 619.414581][T10705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 619.424629][T10705] Call Trace: [ 619.427898][T10705] dump_stack_lvl+0x1e2/0x24b [ 619.432555][T10705] ? bfq_pos_tree_add_move+0x43e/0x43e [ 619.437987][T10705] dump_stack+0x15/0x17 [ 619.442118][T10705] should_fail+0x3c0/0x510 [ 619.446511][T10705] __should_failslab+0x9f/0xe0 [ 619.451249][T10705] should_failslab+0x9/0x20 [ 619.455724][T10705] kmem_cache_alloc+0x3f/0x300 [ 619.460462][T10705] ? __alloc_skb+0x7e/0x580 [ 619.464938][T10705] __alloc_skb+0x7e/0x580 [ 619.469242][T10705] alloc_uevent_skb+0x7f/0x230 [ 619.473978][T10705] kobject_uevent_net_broadcast+0x321/0x5a0 [ 619.479846][T10705] kobject_uevent_env+0x540/0x730 [ 619.484847][T10705] kobject_uevent+0x1f/0x30 [ 619.489327][T10705] device_add+0x79c/0xbd0 [ 619.493652][T10705] device_create+0x258/0x2e0 [ 619.498221][T10705] ? sysvec_reschedule_ipi+0x84/0x160 [ 619.503571][T10705] ? root_device_unregister+0x80/0x80 [ 619.508931][T10705] ? number+0xd9b/0x1040 [ 619.513149][T10705] bdi_register_va+0x94/0x600 [ 619.517803][T10705] bdi_register+0xd1/0x120 [ 619.522193][T10705] ? irqentry_exit+0x50/0x60 [ 619.526760][T10705] ? __device_add_disk+0x536/0x11d0 [ 619.531931][T10705] ? bdi_register_va+0x600/0x600 [ 619.536856][T10705] ? __kasan_check_read+0x11/0x20 [ 619.541856][T10705] ? blk_alloc_devt+0xd4/0x320 [ 619.546591][T10705] __device_add_disk+0x5cb/0x11d0 [ 619.551595][T10705] ? device_add_disk+0x40/0x40 [ 619.556337][T10705] ? irqentry_exit+0x50/0x60 [ 619.560902][T10705] ? loop_add+0x3b0/0x760 [ 619.565209][T10705] ? vsprintf+0x40/0x40 [ 619.569361][T10705] device_add_disk+0x2a/0x40 [ 619.573929][T10705] loop_add+0x58f/0x760 [ 619.578059][T10705] loop_control_ioctl+0x564/0x740 [ 619.583059][T10705] ? loop_remove+0xb0/0xb0 [ 619.587450][T10705] ? __fget_files+0x310/0x370 [ 619.592113][T10705] ? security_file_ioctl+0xb1/0xd0 [ 619.597198][T10705] ? loop_remove+0xb0/0xb0 [ 619.601595][T10705] __se_sys_ioctl+0x115/0x190 [ 619.606248][T10705] __x64_sys_ioctl+0x7b/0x90 [ 619.610844][T10705] do_syscall_64+0x34/0x70 [ 619.615235][T10705] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 619.621104][T10705] RIP: 0033:0x7fa4636b90d9 [ 619.625495][T10705] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 619.645071][T10705] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.653463][T10705] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 619.661410][T10705] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 619.669354][T10705] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 619.677298][T10705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 619.685258][T10705] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 619.733263][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c00000000000000) 14:23:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x400000000000000) 14:23:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1d00000000000000) 14:23:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x500000000000000) 14:23:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 60) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c00000000000000) 14:23:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x600000000000000) 14:23:11 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1e00000000000000) 14:23:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:11 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1f00000000000000) [ 620.237818][T10740] FAULT_INJECTION: forcing a failure. [ 620.237818][T10740] name failslab, interval 1, probability 0, space 0, times 0 [ 620.250489][T10740] CPU: 0 PID: 10740 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 620.262182][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 620.272210][T10740] Call Trace: [ 620.275477][T10740] dump_stack_lvl+0x1e2/0x24b [ 620.280137][T10740] ? bfq_pos_tree_add_move+0x43e/0x43e [ 620.285585][T10740] ? __alloc_skb+0x69/0x580 [ 620.290068][T10740] dump_stack+0x15/0x17 [ 620.294221][T10740] should_fail+0x3c0/0x510 [ 620.298620][T10740] __should_failslab+0x9f/0xe0 [ 620.303365][T10740] should_failslab+0x9/0x20 [ 620.307849][T10740] kmem_cache_alloc+0x3f/0x300 [ 620.312595][T10740] ? __alloc_skb+0x7e/0x580 [ 620.317077][T10740] __alloc_skb+0x7e/0x580 [ 620.321407][T10740] alloc_uevent_skb+0x7f/0x230 [ 620.326165][T10740] kobject_uevent_net_broadcast+0x321/0x5a0 [ 620.332045][T10740] kobject_uevent_env+0x540/0x730 [ 620.337052][T10740] kobject_uevent+0x1f/0x30 [ 620.341533][T10740] device_add+0x79c/0xbd0 [ 620.345841][T10740] device_create+0x258/0x2e0 [ 620.350406][T10740] ? root_device_unregister+0x80/0x80 [ 620.355753][T10740] ? switch_mm_irqs_off+0x2ca/0x990 [ 620.360924][T10740] bdi_register_va+0x94/0x600 [ 620.365573][T10740] bdi_register+0xd1/0x120 [ 620.369962][T10740] ? __device_add_disk+0x536/0x11d0 [ 620.375136][T10740] ? bdi_register_va+0x600/0x600 [ 620.380051][T10740] ? __kasan_check_read+0x11/0x20 [ 620.385050][T10740] ? blk_alloc_devt+0xd4/0x320 [ 620.389786][T10740] __device_add_disk+0x5cb/0x11d0 [ 620.394787][T10740] ? device_add_disk+0x40/0x40 [ 620.399529][T10740] ? sysvec_reschedule_ipi+0x84/0x160 [ 620.404878][T10740] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 620.410484][T10740] ? vsnprintf+0x1bf3/0x1cd0 [ 620.415052][T10740] device_add_disk+0x2a/0x40 [ 620.419615][T10740] loop_add+0x58f/0x760 [ 620.423745][T10740] loop_control_ioctl+0x564/0x740 [ 620.428742][T10740] ? loop_remove+0xb0/0xb0 [ 620.433132][T10740] ? __fget_files+0x310/0x370 [ 620.437783][T10740] ? security_file_ioctl+0xb1/0xd0 [ 620.442871][T10740] ? loop_remove+0xb0/0xb0 [ 620.447260][T10740] __se_sys_ioctl+0x115/0x190 [ 620.451928][T10740] __x64_sys_ioctl+0x7b/0x90 [ 620.456504][T10740] do_syscall_64+0x34/0x70 [ 620.460909][T10740] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 620.466783][T10740] RIP: 0033:0x7fa4636b90d9 [ 620.471184][T10740] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 620.490853][T10740] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.499246][T10740] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 620.507192][T10740] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 620.515143][T10740] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 620.523090][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 620.531035][T10740] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 620.563520][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2000000000000000) 14:23:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x700000000000000) 14:23:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2001000000000000) 14:23:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x800000000000000) 14:23:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 61) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2800000000000000) 14:23:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x900000000000000) 14:23:12 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xa00000000000000) 14:23:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4000000) 14:23:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3400000000000000) [ 621.087457][T10782] FAULT_INJECTION: forcing a failure. [ 621.087457][T10782] name failslab, interval 1, probability 0, space 0, times 0 [ 621.100220][T10782] CPU: 0 PID: 10782 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 621.111921][T10782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 621.121956][T10782] Call Trace: [ 621.125223][T10782] dump_stack_lvl+0x1e2/0x24b [ 621.129881][T10782] ? panic+0x7d7/0x7d7 [ 621.133925][T10782] ? bfq_pos_tree_add_move+0x43e/0x43e [ 621.139362][T10782] dump_stack+0x15/0x17 [ 621.143492][T10782] should_fail+0x3c0/0x510 [ 621.147893][T10782] ? alloc_uevent_skb+0x7f/0x230 [ 621.152801][T10782] __should_failslab+0x9f/0xe0 [ 621.157538][T10782] should_failslab+0x9/0x20 [ 621.162016][T10782] __kmalloc_track_caller+0x5f/0x350 [ 621.167361][T10782] ? kmem_cache_alloc+0x1a4/0x300 [ 621.172363][T10782] ? __alloc_skb+0x7e/0x580 [ 621.176840][T10782] ? alloc_uevent_skb+0x7f/0x230 [ 621.181748][T10782] __alloc_skb+0xbe/0x580 [ 621.186049][T10782] alloc_uevent_skb+0x7f/0x230 [ 621.190793][T10782] kobject_uevent_net_broadcast+0x321/0x5a0 [ 621.196657][T10782] kobject_uevent_env+0x540/0x730 [ 621.201653][T10782] kobject_uevent+0x1f/0x30 [ 621.206131][T10782] device_add+0x79c/0xbd0 [ 621.210437][T10782] device_create+0x258/0x2e0 [ 621.215002][T10782] ? sysvec_reschedule_ipi+0x84/0x160 [ 621.220350][T10782] ? root_device_unregister+0x80/0x80 [ 621.225695][T10782] bdi_register_va+0x94/0x600 [ 621.230344][T10782] bdi_register+0xd1/0x120 [ 621.234739][T10782] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 621.240343][T10782] ? __device_add_disk+0x536/0x11d0 [ 621.245514][T10782] ? bdi_register_va+0x600/0x600 [ 621.250428][T10782] ? __kasan_check_read+0x11/0x20 [ 621.255424][T10782] ? blk_alloc_devt+0xd4/0x320 [ 621.260159][T10782] __device_add_disk+0x5cb/0x11d0 [ 621.265165][T10782] ? device_add_disk+0x40/0x40 [ 621.269902][T10782] ? sysvec_reschedule_ipi+0x84/0x160 [ 621.275250][T10782] ? loop_add+0x3b0/0x760 [ 621.279554][T10782] ? vsprintf+0x40/0x40 [ 621.283684][T10782] device_add_disk+0x2a/0x40 [ 621.288250][T10782] loop_add+0x58f/0x760 [ 621.292381][T10782] loop_control_ioctl+0x564/0x740 [ 621.297382][T10782] ? loop_remove+0xb0/0xb0 [ 621.301775][T10782] ? __fget_files+0x310/0x370 [ 621.306429][T10782] ? security_file_ioctl+0xb1/0xd0 [ 621.311514][T10782] ? loop_remove+0xb0/0xb0 [ 621.315902][T10782] __se_sys_ioctl+0x115/0x190 [ 621.320552][T10782] __x64_sys_ioctl+0x7b/0x90 [ 621.325120][T10782] do_syscall_64+0x34/0x70 [ 621.329513][T10782] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 621.335377][T10782] RIP: 0033:0x7fa4636b90d9 [ 621.339769][T10782] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 621.359348][T10782] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.367737][T10782] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 621.375681][T10782] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 621.383626][T10782] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 621.391570][T10782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 621.399517][T10782] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:23:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3e00000000000000) 14:23:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xb00000000000000) 14:23:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x4000000) 14:23:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x77ec486e01001000) 14:23:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 62) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xc00000000000000) 14:23:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:13 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7892210000000000) 14:23:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xd00000000000000) 14:23:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8004000000000000) [ 621.934613][T10822] FAULT_INJECTION: forcing a failure. [ 621.934613][T10822] name failslab, interval 1, probability 0, space 0, times 0 [ 621.947286][T10822] CPU: 0 PID: 10822 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 621.958975][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 621.969003][T10822] Call Trace: [ 621.972276][T10822] dump_stack_lvl+0x1e2/0x24b [ 621.976926][T10822] ? bfq_pos_tree_add_move+0x43e/0x43e [ 621.982360][T10822] dump_stack+0x15/0x17 [ 621.986490][T10822] should_fail+0x3c0/0x510 [ 621.990883][T10822] __should_failslab+0x9f/0xe0 [ 621.995621][T10822] should_failslab+0x9/0x20 [ 622.000099][T10822] kmem_cache_alloc+0x3f/0x300 [ 622.004846][T10822] ? __d_alloc+0x2d/0x6b0 [ 622.009150][T10822] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 622.014925][T10822] __d_alloc+0x2d/0x6b0 [ 622.019056][T10822] ? avc_has_perm_noaudit+0x358/0x4c0 [ 622.024405][T10822] d_alloc_parallel+0xe6/0x1330 [ 622.029227][T10822] ? avc_has_perm_noaudit+0x2ed/0x4c0 [ 622.034572][T10822] ? __kasan_check_read+0x11/0x20 [ 622.039569][T10822] ? avc_denied+0x1b0/0x1b0 [ 622.044047][T10822] ? finish_task_switch+0x130/0x580 [ 622.049222][T10822] ? d_hash_and_lookup+0x200/0x200 [ 622.054323][T10822] ? selinux_inode_permission+0x439/0x670 [ 622.060017][T10822] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 622.065795][T10822] __lookup_slow+0x14e/0x400 [ 622.070358][T10822] ? __d_lookup+0x4da/0x530 [ 622.074838][T10822] ? lookup_one_len+0x6a0/0x6a0 [ 622.079661][T10822] lookup_one_len+0x43d/0x6a0 [ 622.084310][T10822] ? try_lookup_one_len+0x660/0x660 [ 622.089489][T10822] ? __down_write+0x119/0x320 [ 622.094141][T10822] start_creating+0x166/0x320 [ 622.098796][T10822] debugfs_create_dir+0x27/0x450 [ 622.103705][T10822] bdi_register_va+0x260/0x600 [ 622.108443][T10822] bdi_register+0xd1/0x120 [ 622.112836][T10822] ? __device_add_disk+0x536/0x11d0 [ 622.118007][T10822] ? bdi_register_va+0x600/0x600 [ 622.122919][T10822] ? vsnprintf+0x1bfd/0x1cd0 [ 622.127488][T10822] ? __kasan_check_read+0x11/0x20 [ 622.132487][T10822] ? blk_alloc_devt+0xd4/0x320 [ 622.137225][T10822] __device_add_disk+0x5cb/0x11d0 [ 622.142223][T10822] ? device_add_disk+0x40/0x40 [ 622.146959][T10822] ? loop_add+0x3b0/0x760 [ 622.151264][T10822] ? vsprintf+0x40/0x40 [ 622.155403][T10822] device_add_disk+0x2a/0x40 [ 622.159967][T10822] loop_add+0x58f/0x760 [ 622.164105][T10822] loop_control_ioctl+0x564/0x740 [ 622.169116][T10822] ? sysvec_reschedule_ipi+0x84/0x160 [ 622.174462][T10822] ? loop_remove+0xb0/0xb0 [ 622.178856][T10822] ? security_file_ioctl+0xb1/0xd0 [ 622.183938][T10822] ? loop_remove+0xb0/0xb0 [ 622.188332][T10822] __se_sys_ioctl+0x115/0x190 [ 622.192981][T10822] __x64_sys_ioctl+0x7b/0x90 [ 622.197544][T10822] do_syscall_64+0x34/0x70 [ 622.201933][T10822] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 622.207802][T10822] RIP: 0033:0x7fa4636b90d9 [ 622.212192][T10822] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 622.231768][T10822] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.240156][T10822] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 622.248105][T10822] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 622.256052][T10822] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 622.264001][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 622.272381][T10822] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 622.361991][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xe00000000000000) 14:23:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xe803000000000000) 14:23:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xf00000000000000) 14:23:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xfdfdffff00000000) 14:23:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 63) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1000000000000000) 14:23:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8004000000000000) 14:23:14 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) 14:23:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xffffffff00000000) 14:23:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1040000000000000) 14:23:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x500) [ 622.784333][T10862] FAULT_INJECTION: forcing a failure. [ 622.784333][T10862] name failslab, interval 1, probability 0, space 0, times 0 [ 622.797008][T10862] CPU: 0 PID: 10862 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 622.808703][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 622.818730][T10862] Call Trace: [ 622.821997][T10862] dump_stack_lvl+0x1e2/0x24b [ 622.826650][T10862] ? bfq_pos_tree_add_move+0x43e/0x43e [ 622.832086][T10862] ? __kasan_check_read+0x11/0x20 [ 622.837082][T10862] dump_stack+0x15/0x17 [ 622.841210][T10862] should_fail+0x3c0/0x510 [ 622.845598][T10862] __should_failslab+0x9f/0xe0 [ 622.850335][T10862] should_failslab+0x9/0x20 [ 622.854812][T10862] kmem_cache_alloc+0x3f/0x300 [ 622.859547][T10862] ? skb_clone+0x1d6/0x3b0 [ 622.863935][T10862] skb_clone+0x1d6/0x3b0 [ 622.868152][T10862] netlink_broadcast_filtered+0x654/0x1200 [ 622.873932][T10862] netlink_broadcast+0x3a/0x50 [ 622.878667][T10862] kobject_uevent_net_broadcast+0x3b1/0x5a0 [ 622.884534][T10862] kobject_uevent_env+0x540/0x730 [ 622.889532][T10862] kobject_uevent+0x1f/0x30 [ 622.894016][T10862] device_add+0x79c/0xbd0 [ 622.898317][T10862] device_create+0x258/0x2e0 [ 622.902880][T10862] ? root_device_unregister+0x80/0x80 [ 622.908225][T10862] ? __kasan_check_read+0x11/0x20 [ 622.913220][T10862] ? preempt_schedule_irq+0xef/0x140 [ 622.918477][T10862] ? preempt_schedule_notrace+0x140/0x140 [ 622.924168][T10862] bdi_register_va+0x94/0x600 [ 622.928819][T10862] bdi_register+0xd1/0x120 [ 622.933214][T10862] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 622.938822][T10862] ? __device_add_disk+0x536/0x11d0 [ 622.943992][T10862] ? bdi_register_va+0x600/0x600 [ 622.948907][T10862] ? elevator_init_mq+0x290/0x500 [ 622.953904][T10862] ? blk_alloc_devt+0xd4/0x320 [ 622.958647][T10862] __device_add_disk+0x5cb/0x11d0 [ 622.963648][T10862] ? device_add_disk+0x40/0x40 [ 622.968391][T10862] ? loop_add+0x3b0/0x760 [ 622.972694][T10862] ? vsprintf+0x40/0x40 [ 622.976825][T10862] device_add_disk+0x2a/0x40 [ 622.981387][T10862] loop_add+0x58f/0x760 [ 622.985524][T10862] loop_control_ioctl+0x564/0x740 [ 622.990521][T10862] ? loop_remove+0xb0/0xb0 [ 622.994911][T10862] ? irqentry_exit+0x50/0x60 [ 622.999472][T10862] ? sysvec_reschedule_ipi+0x84/0x160 [ 623.004821][T10862] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 623.010430][T10862] ? do_vfs_ioctl+0xf6/0x1a90 [ 623.015081][T10862] ? __se_sys_ioctl+0x109/0x190 [ 623.019907][T10862] ? loop_remove+0xb0/0xb0 [ 623.024297][T10862] __se_sys_ioctl+0x115/0x190 [ 623.028945][T10862] __x64_sys_ioctl+0x7b/0x90 [ 623.033507][T10862] do_syscall_64+0x34/0x70 [ 623.037903][T10862] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 623.043769][T10862] RIP: 0033:0x7fa4636b90d9 [ 623.048160][T10862] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 623.067738][T10862] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.076129][T10862] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 623.084075][T10862] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 623.092023][T10862] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 623.099971][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 623.107921][T10862] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:23:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1100000000000000) 14:23:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000000000000a6090000000000000500000000000000b6020000000000008000000000000000d202000000000000ffffff7f00000000720b0000000000009f0d0000000000003d0900000300000004000000000000007d0a000000000000ffffffff000000003b1001c0000000002f0e000000000000da0b00000000000004000000000000002b080000000000000500000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000340)="47d1841e00200000c4c1eddf6900b8010000000f01c126440f01dfc4417e113648b800000080000000000f23d80f21f835000000a00f23f83e2ef342ac0f20d835200000000f22d866b857000f00d0450f09", 0x52}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/dev_mcast\x00') getdents(r4, &(0x7f0000000080)=""/84, 0x54) getdents(r4, 0xffffffffffffffff, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r5, &(0x7f0000000080)=""/84, 0x54) getdents(r5, 0xffffffffffffffff, 0x18) getdents(r5, &(0x7f0000000180)=""/34, 0x22) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0xc0, 0x0, 0x8}, 0x18) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000200)=""/102) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x420802, 0x0) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)={0x4000, 0xd000, 0x7, 0x3, 0x3}) 14:23:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1200000000000000) 14:23:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 64) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000000000000a6090000000000000500000000000000b6020000000000008000000000000000d202000000000000ffffff7f00000000720b0000000000009f0d0000000000003d0900000300000004000000000000007d0a000000000000ffffffff000000003b1001c0000000002f0e000000000000da0b00000000000004000000000000002b080000000000000500000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000340)="47d1841e00200000c4c1eddf6900b8010000000f01c126440f01dfc4417e113648b800000080000000000f23d80f21f835000000a00f23f83e2ef342ac0f20d835200000000f22d866b857000f00d0450f09", 0x52}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/dev_mcast\x00') getdents(r4, &(0x7f0000000080)=""/84, 0x54) getdents(r4, 0xffffffffffffffff, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r5, &(0x7f0000000080)=""/84, 0x54) getdents(r5, 0xffffffffffffffff, 0x18) getdents(r5, &(0x7f0000000180)=""/34, 0x22) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0xc0, 0x0, 0x8}, 0x18) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000200)=""/102) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x420802, 0x0) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)={0x4000, 0xd000, 0x7, 0x3, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000000000000a6090000000000000500000000000000b6020000000000008000000000000000d202000000000000ffffff7f00000000720b0000000000009f0d0000000000003d0900000300000004000000000000007d0a000000000000ffffffff000000003b1001c0000000002f0e000000000000da0b00000000000004000000000000002b080000000000000500000000000000"]) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000340)="47d1841e00200000c4c1eddf6900b8010000000f01c126440f01dfc4417e113648b800000080000000000f23d80f21f835000000a00f23f83e2ef342ac0f20d835200000000f22d866b857000f00d0450f09", 0x52}], 0x1, 0x0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/dev_mcast\x00') (async) getdents(r4, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r4, 0xffffffffffffffff, 0x18) (async) syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (async) getdents(r5, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r5, 0xffffffffffffffff, 0x18) (async) getdents(r5, &(0x7f0000000180)=""/34, 0x22) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0xc0, 0x0, 0x8}, 0x18) (async) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000200)=""/102) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x420802, 0x0) (async) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)={0x4000, 0xd000, 0x7, 0x3, 0x3}) (async) 14:23:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1300000000000000) 14:23:14 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) 14:23:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000000000000a6090000000000000500000000000000b6020000000000008000000000000000d202000000000000ffffff7f00000000720b0000000000009f0d0000000000003d0900000300000004000000000000007d0a000000000000ffffffff000000003b1001c0000000002f0e000000000000da0b00000000000004000000000000002b080000000000000500000000000000"]) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000340)="47d1841e00200000c4c1eddf6900b8010000000f01c126440f01dfc4417e113648b800000080000000000f23d80f21f835000000a00f23f83e2ef342ac0f20d835200000000f22d866b857000f00d0450f09", 0x52}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/dev_mcast\x00') getdents(r4, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r4, 0xffffffffffffffff, 0x18) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r5, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r5, 0xffffffffffffffff, 0x18) getdents(r5, &(0x7f0000000180)=""/34, 0x22) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0xc0, 0x0, 0x8}, 0x18) (async) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000200)=""/102) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x420802, 0x0) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)={0x4000, 0xd000, 0x7, 0x3, 0x3}) 14:23:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1400000000000000) [ 623.637504][T10923] FAULT_INJECTION: forcing a failure. [ 623.637504][T10923] name failslab, interval 1, probability 0, space 0, times 0 [ 623.650221][T10923] CPU: 0 PID: 10923 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 623.661926][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 623.671964][T10923] Call Trace: [ 623.675237][T10923] dump_stack_lvl+0x1e2/0x24b [ 623.679903][T10923] ? panic+0x7d7/0x7d7 [ 623.683956][T10923] ? bfq_pos_tree_add_move+0x43e/0x43e [ 623.689390][T10923] dump_stack+0x15/0x17 [ 623.693530][T10923] should_fail+0x3c0/0x510 [ 623.697936][T10923] __should_failslab+0x9f/0xe0 [ 623.702674][T10923] should_failslab+0x9/0x20 [ 623.707147][T10923] kmem_cache_alloc+0x3f/0x300 [ 623.711885][T10923] ? new_inode_pseudo+0x7c/0x220 [ 623.716795][T10923] ? try_lookup_one_len+0x660/0x660 [ 623.721971][T10923] new_inode_pseudo+0x7c/0x220 [ 623.726706][T10923] new_inode+0x28/0x1c0 [ 623.730838][T10923] ? start_creating+0x206/0x320 [ 623.735660][T10923] debugfs_create_dir+0xf3/0x450 [ 623.740571][T10923] bdi_register_va+0x260/0x600 [ 623.745308][T10923] bdi_register+0xd1/0x120 [ 623.749701][T10923] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 623.755311][T10923] ? __device_add_disk+0x536/0x11d0 [ 623.760481][T10923] ? bdi_register_va+0x600/0x600 [ 623.765392][T10923] ? blk_alloc_devt+0x86/0x320 [ 623.770129][T10923] ? __sanitizer_cov_trace_pc+0x46/0x60 [ 623.775647][T10923] ? blk_alloc_devt+0xd4/0x320 [ 623.780385][T10923] __device_add_disk+0x5cb/0x11d0 [ 623.785387][T10923] ? device_add_disk+0x40/0x40 [ 623.790125][T10923] ? loop_add+0x3b0/0x760 [ 623.794427][T10923] ? vsprintf+0x40/0x40 [ 623.798561][T10923] device_add_disk+0x2a/0x40 [ 623.803225][T10923] loop_add+0x58f/0x760 [ 623.807361][T10923] loop_control_ioctl+0x564/0x740 [ 623.812358][T10923] ? loop_remove+0xb0/0xb0 [ 623.816748][T10923] ? __fget_files+0x310/0x370 [ 623.821398][T10923] ? security_file_ioctl+0xb1/0xd0 [ 623.826484][T10923] ? loop_remove+0xb0/0xb0 [ 623.830874][T10923] __se_sys_ioctl+0x115/0x190 [ 623.835526][T10923] __x64_sys_ioctl+0x7b/0x90 [ 623.840090][T10923] do_syscall_64+0x34/0x70 [ 623.844485][T10923] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 623.850349][T10923] RIP: 0033:0x7fa4636b90d9 [ 623.854742][T10923] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 623.874319][T10923] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.882704][T10923] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 623.890648][T10923] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 623.898596][T10923] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 623.906541][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 623.914486][T10923] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 623.922599][T10923] debugfs: out of free dentries, can not create directory '7:0' [ 623.997686][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000300)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x1) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) r5 = openat2(r3, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x680, 0x12e, 0x10}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r6, &(0x7f0000000080)=""/84, 0x54) getdents(r6, 0xffffffffffffffff, 0x18) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f0000000340)={0xc1, 0x0, 0x2}) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000001c0)="66b90d03000066b8ce17000066ba000000000f309a0000d500f30f1efb66b80500000066b9baba00000f01c10f09baf80c66b8a841ec8966efbafc0cec0f01d1f40f20e06635004000000f22e066b8bbce00000f23c80f21f866350c0020000f23f8", 0x62}], 0x1, 0x10, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:23:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1500000000000000) 14:23:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000300)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) r5 = openat2(r3, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x680, 0x12e, 0x10}, 0x18) (async, rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (rerun: 64) getdents(r6, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r6, 0xffffffffffffffff, 0x18) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f0000000340)={0xc1, 0x0, 0x2}) (async) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000001c0)="66b90d03000066b8ce17000066ba000000000f309a0000d500f30f1efb66b80500000066b9baba00000f01c10f09baf80c66b8a841ec8966efbafc0cec0f01d1f40f20e06635004000000f22e066b8bbce00000f23c80f21f866350c0020000f23f8", 0x62}], 0x1, 0x10, &(0x7f0000000280), 0x0) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 64) [ 624.131056][ T23] audit: type=1400 audit(1670682195.560:296): avc: denied { setattr } for pid=10928 comm="syz-executor.5" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 14:23:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x18) 14:23:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1600000000000000) 14:23:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 65) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000300)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) r5 = openat2(r3, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x680, 0x12e, 0x10}, 0x18) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r6, &(0x7f0000000080)=""/84, 0x54) getdents(r6, 0xffffffffffffffff, 0x18) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f0000000340)={0xc1, 0x0, 0x2}) (async) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000001c0)="66b90d03000066b8ce17000066ba000000000f309a0000d500f30f1efb66b80500000066b9baba00000f01c10f09baf80c66b8a841ec8966efbafc0cec0f01d1f40f20e06635004000000f22e066b8bbce00000f23c80f21f866350c0020000f23f8", 0x62}], 0x1, 0x10, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:23:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1700000000000000) 14:23:15 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) 14:23:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1800000000000000) [ 624.481091][T10967] FAULT_INJECTION: forcing a failure. [ 624.481091][T10967] name failslab, interval 1, probability 0, space 0, times 0 [ 624.493756][T10967] CPU: 0 PID: 10967 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 624.505447][T10967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 624.515478][T10967] Call Trace: [ 624.518745][T10967] dump_stack_lvl+0x1e2/0x24b [ 624.523395][T10967] ? bfq_pos_tree_add_move+0x43e/0x43e [ 624.528826][T10967] ? sysvec_reschedule_ipi+0x84/0x160 [ 624.534177][T10967] dump_stack+0x15/0x17 [ 624.538307][T10967] should_fail+0x3c0/0x510 [ 624.542698][T10967] __should_failslab+0x9f/0xe0 [ 624.547438][T10967] should_failslab+0x9/0x20 [ 624.551913][T10967] kmem_cache_alloc+0x3f/0x300 [ 624.556656][T10967] ? security_inode_alloc+0x29/0x140 [ 624.561916][T10967] security_inode_alloc+0x29/0x140 [ 624.567097][T10967] inode_init_always+0x710/0x970 [ 624.572027][T10967] new_inode_pseudo+0x93/0x220 [ 624.576785][T10967] new_inode+0x28/0x1c0 [ 624.581022][T10967] ? start_creating+0x206/0x320 [ 624.585856][T10967] debugfs_create_dir+0xf3/0x450 [ 624.590777][T10967] bdi_register_va+0x260/0x600 [ 624.595524][T10967] bdi_register+0xd1/0x120 [ 624.599920][T10967] ? irqentry_exit+0x50/0x60 [ 624.604486][T10967] ? __device_add_disk+0x536/0x11d0 [ 624.609653][T10967] ? bdi_register_va+0x600/0x600 [ 624.614567][T10967] __device_add_disk+0x5cb/0x11d0 [ 624.619568][T10967] ? device_add_disk+0x40/0x40 [ 624.624307][T10967] ? loop_add+0x3b0/0x760 [ 624.628609][T10967] ? vsprintf+0x40/0x40 [ 624.632737][T10967] device_add_disk+0x2a/0x40 [ 624.637301][T10967] loop_add+0x58f/0x760 [ 624.641433][T10967] loop_control_ioctl+0x564/0x740 [ 624.646433][T10967] ? sysvec_reschedule_ipi+0x84/0x160 [ 624.651777][T10967] ? loop_remove+0xb0/0xb0 [ 624.656168][T10967] ? security_file_ioctl+0x85/0xd0 [ 624.661250][T10967] ? security_file_ioctl+0xb1/0xd0 [ 624.666340][T10967] ? loop_remove+0xb0/0xb0 [ 624.670731][T10967] __se_sys_ioctl+0x115/0x190 [ 624.675404][T10967] __x64_sys_ioctl+0x7b/0x90 [ 624.679980][T10967] do_syscall_64+0x34/0x70 [ 624.684380][T10967] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 624.690258][T10967] RIP: 0033:0x7fa4636b90d9 [ 624.694656][T10967] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 624.714237][T10967] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.722714][T10967] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 624.730660][T10967] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 624.738608][T10967] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.746557][T10967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 624.754502][T10967] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 624.762597][T10967] debugfs: out of free dentries, can not create directory '7:0' [ 624.791750][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r1, &(0x7f0000000080)=""/84, 0x54) getdents(r1, 0xffffffffffffffff, 0x18) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r5, &(0x7f0000000080)=""/84, 0x54) getdents(r5, 0xffffffffffffffff, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r6, &(0x7f0000000080)=""/84, 0x54) getdents(r6, 0xffffffffffffffff, 0x18) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="df13b9880200000f320f01c2c422719c55a748b80e000000010000000f23d00f21f835200000000f23f866420fc772b2660fd016660f380323c7442400cf360000c744240263930000c7442406000000000f011424cf", 0x56}], 0x1, 0xc, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:23:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1900000000000000) 14:23:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1a00000000000000) 14:23:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r1, &(0x7f0000000080)=""/84, 0x54) getdents(r1, 0xffffffffffffffff, 0x18) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r5, &(0x7f0000000080)=""/84, 0x54) getdents(r5, 0xffffffffffffffff, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r6, &(0x7f0000000080)=""/84, 0x54) getdents(r6, 0xffffffffffffffff, 0x18) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="df13b9880200000f320f01c2c422719c55a748b80e000000010000000f23d00f21f835200000000f23f866420fc772b2660fd016660f380323c7442400cf360000c744240263930000c7442406000000000f011424cf", 0x56}], 0x1, 0xc, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (async) getdents(r1, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r1, 0xffffffffffffffff, 0x18) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r2) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (async) getdents(r5, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r5, 0xffffffffffffffff, 0x18) (async) syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (async) getdents(r6, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r6, 0xffffffffffffffff, 0x18) (async) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="df13b9880200000f320f01c2c422719c55a748b80e000000010000000f23d00f21f835200000000f23f866420fc772b2660fd016660f380323c7442400cf360000c744240263930000c7442406000000000f011424cf", 0x56}], 0x1, 0xc, &(0x7f0000000240), 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 14:23:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1b00000000000000) 14:23:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 66) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r1, &(0x7f0000000080)=""/84, 0x54) getdents(r1, 0xffffffffffffffff, 0x18) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r5, &(0x7f0000000080)=""/84, 0x54) getdents(r5, 0xffffffffffffffff, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r6, &(0x7f0000000080)=""/84, 0x54) getdents(r6, 0xffffffffffffffff, 0x18) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="df13b9880200000f320f01c2c422719c55a748b80e000000010000000f23d00f21f835200000000f23f866420fc772b2660fd016660f380323c7442400cf360000c744240263930000c7442406000000000f011424cf", 0x56}], 0x1, 0xc, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (async) getdents(r1, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r1, 0xffffffffffffffff, 0x18) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r2) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (async) getdents(r5, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r5, 0xffffffffffffffff, 0x18) (async) syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (async) getdents(r6, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r6, 0xffffffffffffffff, 0x18) (async) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="df13b9880200000f320f01c2c422719c55a748b80e000000010000000f23d00f21f835200000000f23f866420fc772b2660fd016660f380323c7442400cf360000c744240263930000c7442406000000000f011424cf", 0x56}], 0x1, 0xc, &(0x7f0000000240), 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 14:23:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1c00000000000000) 14:23:16 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) [ 625.327337][T11030] FAULT_INJECTION: forcing a failure. [ 625.327337][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 625.340152][T11030] CPU: 0 PID: 11030 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 625.351855][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 625.361977][T11030] Call Trace: [ 625.365252][T11030] dump_stack_lvl+0x1e2/0x24b [ 625.369915][T11030] ? bfq_pos_tree_add_move+0x43e/0x43e [ 625.375355][T11030] ? __kasan_check_read+0x11/0x20 [ 625.380356][T11030] ? preempt_schedule_irq+0xef/0x140 [ 625.385617][T11030] dump_stack+0x15/0x17 [ 625.389747][T11030] should_fail+0x3c0/0x510 [ 625.394145][T11030] __should_failslab+0x9f/0xe0 [ 625.398890][T11030] should_failslab+0x9/0x20 [ 625.403389][T11030] kmem_cache_alloc+0x3f/0x300 [ 625.408157][T11030] ? security_inode_alloc+0x29/0x140 [ 625.413436][T11030] security_inode_alloc+0x29/0x140 [ 625.418536][T11030] inode_init_always+0x710/0x970 [ 625.423470][T11030] new_inode_pseudo+0x93/0x220 [ 625.428222][T11030] new_inode+0x28/0x1c0 [ 625.432366][T11030] ? start_creating+0x206/0x320 [ 625.437202][T11030] debugfs_create_dir+0xf3/0x450 [ 625.442138][T11030] bdi_register_va+0x260/0x600 [ 625.446905][T11030] bdi_register+0xd1/0x120 [ 625.451312][T11030] ? __device_add_disk+0x536/0x11d0 [ 625.456494][T11030] ? bdi_register_va+0x600/0x600 [ 625.461417][T11030] ? vsnprintf+0x1bfd/0x1cd0 [ 625.465993][T11030] ? __kasan_check_read+0x11/0x20 [ 625.470993][T11030] ? blk_alloc_devt+0xd4/0x320 [ 625.475733][T11030] __device_add_disk+0x5cb/0x11d0 [ 625.480734][T11030] ? device_add_disk+0x40/0x40 [ 625.485476][T11030] ? loop_add+0x3b0/0x760 [ 625.489783][T11030] ? vsprintf+0x40/0x40 [ 625.493938][T11030] device_add_disk+0x2a/0x40 [ 625.498506][T11030] loop_add+0x58f/0x760 [ 625.502637][T11030] loop_control_ioctl+0x564/0x740 [ 625.507659][T11030] ? loop_remove+0xb0/0xb0 [ 625.512065][T11030] ? __fget_files+0x310/0x370 [ 625.516726][T11030] ? security_file_ioctl+0xb1/0xd0 [ 625.521827][T11030] ? loop_remove+0xb0/0xb0 [ 625.526232][T11030] __se_sys_ioctl+0x115/0x190 [ 625.530892][T11030] __x64_sys_ioctl+0x7b/0x90 [ 625.535458][T11030] do_syscall_64+0x34/0x70 [ 625.539850][T11030] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 625.545717][T11030] RIP: 0033:0x7fa4636b90d9 [ 625.550111][T11030] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 625.569714][T11030] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.578103][T11030] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 625.586063][T11030] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 625.594019][T11030] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 625.601981][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 625.609943][T11030] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 625.618271][T11030] debugfs: out of free dentries, can not create directory '7:0' 14:23:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/videobuf2_v4l2', 0x400, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:23:17 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1d00000000000000) 14:23:17 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1e00000000000000) 14:23:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/videobuf2_v4l2', 0x400, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/videobuf2_v4l2', 0x400, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 14:23:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x1f00000000000000) 14:23:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x2000000000000000) 14:23:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 67) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/videobuf2_v4l2', 0x400, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:23:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x2001000000000000) [ 626.183372][T11076] FAULT_INJECTION: forcing a failure. [ 626.183372][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 626.196257][T11076] CPU: 0 PID: 11076 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 626.208035][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 626.218070][T11076] Call Trace: [ 626.221341][T11076] dump_stack_lvl+0x1e2/0x24b [ 626.226084][T11076] ? bfq_pos_tree_add_move+0x43e/0x43e [ 626.231607][T11076] dump_stack+0x15/0x17 [ 626.235874][T11076] should_fail+0x3c0/0x510 [ 626.240269][T11076] __should_failslab+0x9f/0xe0 [ 626.245008][T11076] should_failslab+0x9/0x20 [ 626.249486][T11076] kmem_cache_alloc+0x3f/0x300 [ 626.254224][T11076] ? new_inode_pseudo+0x7c/0x220 [ 626.259149][T11076] new_inode_pseudo+0x7c/0x220 [ 626.263890][T11076] new_inode+0x28/0x1c0 [ 626.268022][T11076] ? start_creating+0x206/0x320 [ 626.272853][T11076] __debugfs_create_file+0x143/0x4a0 [ 626.278119][T11076] ? up_write+0x19/0xd0 [ 626.282251][T11076] debugfs_create_file+0x4a/0x60 [ 626.287169][T11076] bdi_register_va+0x2ab/0x600 [ 626.291910][T11076] bdi_register+0xd1/0x120 [ 626.296302][T11076] ? irqentry_exit+0x50/0x60 [ 626.300879][T11076] ? __device_add_disk+0x536/0x11d0 [ 626.306051][T11076] ? bdi_register_va+0x600/0x600 [ 626.311071][T11076] ? __kasan_check_read+0x11/0x20 [ 626.316069][T11076] ? blk_alloc_devt+0xd4/0x320 [ 626.320894][T11076] __device_add_disk+0x5cb/0x11d0 [ 626.325900][T11076] ? device_add_disk+0x40/0x40 [ 626.330650][T11076] ? irqentry_exit+0x50/0x60 [ 626.335214][T11076] ? loop_add+0x3b0/0x760 [ 626.339518][T11076] ? vsprintf+0x40/0x40 [ 626.343648][T11076] device_add_disk+0x2a/0x40 [ 626.348211][T11076] loop_add+0x58f/0x760 [ 626.352341][T11076] loop_control_ioctl+0x564/0x740 [ 626.357337][T11076] ? loop_remove+0xb0/0xb0 [ 626.361739][T11076] ? __fget_files+0x310/0x370 [ 626.366396][T11076] ? security_file_ioctl+0xb1/0xd0 [ 626.371482][T11076] ? loop_remove+0xb0/0xb0 [ 626.375871][T11076] __se_sys_ioctl+0x115/0x190 [ 626.380520][T11076] __x64_sys_ioctl+0x7b/0x90 [ 626.385091][T11076] do_syscall_64+0x34/0x70 [ 626.389483][T11076] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 626.395347][T11076] RIP: 0033:0x7fa4636b90d9 [ 626.399749][T11076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 626.419325][T11076] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.427715][T11076] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 626.435669][T11076] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 626.443714][T11076] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 626.451665][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 626.459610][T11076] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 626.467883][T11076] debugfs: out of free dentries, can not create file 'stats' 14:23:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x2800000000000000) 14:23:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x201, 0x0, 0x10000, 0x2000, &(0x7f0000010000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:23:18 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xc020660b, 0x0) 14:23:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x3400000000000000) 14:23:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x201, 0x0, 0x10000, 0x2000, &(0x7f0000010000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x201, 0x0, 0x10000, 0x2000, &(0x7f0000010000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 14:23:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x3e00000000000000) 14:23:18 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 68) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x201, 0x0, 0x10000, 0x2000, &(0x7f0000010000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x201, 0x0, 0x10000, 0x2000, &(0x7f0000010000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 14:23:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x6600000000000000) 14:23:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x7560456a01001000) 14:23:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = dup2(r2, r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d666c34da7748e33cd7", @ANYRESHEX=r3, @ANYBLOB="2c776664816f3d", @ANYRESHEX=r2, @ANYBLOB=',access=client,privport,debug=0x0000000000007fff,loose,version=9p2000.u,version=9p2000.u,debug=0x0000000028e7dff1,fscache,msize=0x0000000000000008,smackfsroot=/dev/kvm\x00,\x00']) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 627.038860][T11134] FAULT_INJECTION: forcing a failure. [ 627.038860][T11134] name failslab, interval 1, probability 0, space 0, times 0 [ 627.051602][T11134] CPU: 0 PID: 11134 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 627.063293][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 627.073320][T11134] Call Trace: [ 627.076590][T11134] dump_stack_lvl+0x1e2/0x24b [ 627.081242][T11134] ? bfq_pos_tree_add_move+0x43e/0x43e [ 627.086673][T11134] ? __lookup_slow+0x2f7/0x400 [ 627.091410][T11134] ? lookup_one_len+0x6a0/0x6a0 [ 627.096317][T11134] dump_stack+0x15/0x17 [ 627.100449][T11134] should_fail+0x3c0/0x510 [ 627.104842][T11134] __should_failslab+0x9f/0xe0 [ 627.109581][T11134] should_failslab+0x9/0x20 [ 627.114057][T11134] kmem_cache_alloc+0x3f/0x300 [ 627.118794][T11134] ? new_inode_pseudo+0x7c/0x220 [ 627.123704][T11134] new_inode_pseudo+0x7c/0x220 [ 627.128439][T11134] new_inode+0x28/0x1c0 [ 627.132571][T11134] ? start_creating+0x206/0x320 [ 627.137395][T11134] __debugfs_create_file+0x143/0x4a0 [ 627.142654][T11134] ? up_write+0x19/0xd0 [ 627.146808][T11134] debugfs_create_file+0x4a/0x60 [ 627.151720][T11134] bdi_register_va+0x2ab/0x600 [ 627.156456][T11134] bdi_register+0xd1/0x120 [ 627.160844][T11134] ? irqentry_exit+0x50/0x60 [ 627.165411][T11134] ? __device_add_disk+0x536/0x11d0 [ 627.170583][T11134] ? bdi_register_va+0x600/0x600 [ 627.175498][T11134] ? elevator_init_mq+0x37a/0x500 [ 627.180495][T11134] ? blk_alloc_devt+0xd4/0x320 [ 627.185232][T11134] __device_add_disk+0x5cb/0x11d0 [ 627.190232][T11134] ? device_add_disk+0x40/0x40 [ 627.194980][T11134] ? sysvec_reschedule_ipi+0x84/0x160 [ 627.200331][T11134] ? loop_add+0x3b0/0x760 [ 627.204636][T11134] ? vsprintf+0x40/0x40 [ 627.208766][T11134] device_add_disk+0x2a/0x40 [ 627.213331][T11134] loop_add+0x58f/0x760 [ 627.217461][T11134] loop_control_ioctl+0x564/0x740 [ 627.222460][T11134] ? loop_remove+0xb0/0xb0 [ 627.226847][T11134] ? __fget_files+0x310/0x370 [ 627.231497][T11134] ? security_file_ioctl+0xb1/0xd0 [ 627.236580][T11134] ? loop_remove+0xb0/0xb0 [ 627.240974][T11134] __se_sys_ioctl+0x115/0x190 [ 627.245625][T11134] __x64_sys_ioctl+0x7b/0x90 [ 627.250188][T11134] do_syscall_64+0x34/0x70 [ 627.254576][T11134] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 627.260443][T11134] RIP: 0033:0x7fa4636b90d9 [ 627.264834][T11134] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 627.284411][T11134] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.292803][T11134] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 627.300748][T11134] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 627.308955][T11134] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 627.316900][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.324846][T11134] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 627.332938][T11134] debugfs: out of free dentries, can not create file 'stats' 14:23:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x7892210000000000) 14:23:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x81a0ae8c, 0x0) 14:23:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = dup2(r2, r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d666c34da7748e33cd7", @ANYRESHEX=r3, @ANYBLOB="2c776664816f3d", @ANYRESHEX=r2, @ANYBLOB=',access=client,privport,debug=0x0000000000007fff,loose,version=9p2000.u,version=9p2000.u,debug=0x0000000028e7dff1,fscache,msize=0x0000000000000008,smackfsroot=/dev/kvm\x00,\x00']) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) dup2(r2, r0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d666c34da7748e33cd7", @ANYRESHEX=r3, @ANYBLOB="2c776664816f3d", @ANYRESHEX=r2, @ANYBLOB=',access=client,privport,debug=0x0000000000007fff,loose,version=9p2000.u,version=9p2000.u,debug=0x0000000028e7dff1,fscache,msize=0x0000000000000008,smackfsroot=/dev/kvm\x00,\x00']) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 14:23:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x8004000000000000) 14:23:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = dup2(r2, r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d666c34da7748e33cd7", @ANYRESHEX=r3, @ANYBLOB="2c776664816f3d", @ANYRESHEX=r2, @ANYBLOB=',access=client,privport,debug=0x0000000000007fff,loose,version=9p2000.u,version=9p2000.u,debug=0x0000000028e7dff1,fscache,msize=0x0000000000000008,smackfsroot=/dev/kvm\x00,\x00']) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:23:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4b49, 0x0) 14:23:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 69) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xa900000000000000) 14:23:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:23:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4b49, 0x0) 14:23:19 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xa9ffffff00000000) 14:23:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 627.885017][T11194] FAULT_INJECTION: forcing a failure. [ 627.885017][T11194] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 627.898304][T11194] CPU: 0 PID: 11194 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 627.910085][T11194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 627.920116][T11194] Call Trace: [ 627.923384][T11194] dump_stack_lvl+0x1e2/0x24b [ 627.928037][T11194] ? bfq_pos_tree_add_move+0x43e/0x43e [ 627.933473][T11194] ? __schedule+0x86e/0xc00 [ 627.937955][T11194] dump_stack+0x15/0x17 [ 627.942088][T11194] should_fail+0x3c0/0x510 [ 627.946481][T11194] should_fail_alloc_page+0x50/0x60 [ 627.951656][T11194] __alloc_pages_nodemask+0x1c0/0x890 [ 627.957002][T11194] ? preempt_schedule_notrace+0x140/0x140 [ 627.962700][T11194] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 627.968225][T11194] ? __kasan_check_write+0x14/0x20 [ 627.973311][T11194] ? lockref_get+0x1b3/0x2a0 [ 627.977876][T11194] __get_free_pages+0xe/0x30 [ 627.982443][T11194] selinux_genfs_get_sid+0x56/0x250 [ 627.987615][T11194] inode_doinit_with_dentry+0x858/0x1030 [ 627.993224][T11194] ? sb_finish_set_opts+0x7f0/0x7f0 [ 627.998398][T11194] ? current_time+0x1c4/0x310 [ 628.003057][T11194] selinux_d_instantiate+0x27/0x40 [ 628.008144][T11194] security_d_instantiate+0xa5/0x100 [ 628.013404][T11194] d_instantiate+0x55/0x90 [ 628.017799][T11194] __debugfs_create_file+0x2d7/0x4a0 [ 628.023057][T11194] ? up_write+0x19/0xd0 [ 628.027275][T11194] debugfs_create_file+0x4a/0x60 [ 628.032188][T11194] bdi_register_va+0x2ab/0x600 [ 628.036928][T11194] bdi_register+0xd1/0x120 [ 628.041324][T11194] ? number+0xce3/0x1040 [ 628.045553][T11194] ? __device_add_disk+0x536/0x11d0 [ 628.050725][T11194] ? bdi_register_va+0x600/0x600 [ 628.055644][T11194] ? vsnprintf+0x1bfd/0x1cd0 [ 628.060213][T11194] ? __kasan_check_read+0x11/0x20 [ 628.065215][T11194] ? blk_alloc_devt+0xd4/0x320 [ 628.069952][T11194] __device_add_disk+0x5cb/0x11d0 [ 628.074955][T11194] ? device_add_disk+0x40/0x40 [ 628.079701][T11194] ? loop_add+0x3b0/0x760 [ 628.084005][T11194] ? vsprintf+0x40/0x40 [ 628.088135][T11194] device_add_disk+0x2a/0x40 [ 628.092704][T11194] loop_add+0x58f/0x760 [ 628.096836][T11194] loop_control_ioctl+0x564/0x740 [ 628.101839][T11194] ? loop_remove+0xb0/0xb0 [ 628.106237][T11194] ? irqentry_exit+0x50/0x60 [ 628.110803][T11194] ? sysvec_reschedule_ipi+0x84/0x160 [ 628.116149][T11194] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 628.121756][T11194] ? do_vfs_ioctl+0xf6/0x1a90 [ 628.126409][T11194] ? loop_remove+0xb0/0xb0 [ 628.130800][T11194] __se_sys_ioctl+0x115/0x190 [ 628.135453][T11194] __x64_sys_ioctl+0x7b/0x90 [ 628.140016][T11194] do_syscall_64+0x34/0x70 [ 628.144409][T11194] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 628.150277][T11194] RIP: 0033:0x7fa4636b90d9 [ 628.154670][T11194] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 628.174260][T11194] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.182648][T11194] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 628.190603][T11194] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 628.198549][T11194] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 628.206496][T11194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 628.214465][T11194] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 628.313112][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xafee67f37e770000) 14:23:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xa9ffffff00000000) 14:23:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 14:23:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xe803000000000000) 14:23:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 70) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:23:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xf2ffffff00000000) 14:23:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) (fail_nth: 1) 14:23:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) [ 628.743614][T11240] FAULT_INJECTION: forcing a failure. [ 628.743614][T11240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 628.756885][T11240] CPU: 0 PID: 11240 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 628.768581][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 628.778784][T11240] Call Trace: [ 628.782054][T11240] dump_stack_lvl+0x1e2/0x24b [ 628.786709][T11240] ? bfq_pos_tree_add_move+0x43e/0x43e [ 628.792147][T11240] dump_stack+0x15/0x17 [ 628.796278][T11240] should_fail+0x3c0/0x510 [ 628.800672][T11240] should_fail_alloc_page+0x50/0x60 [ 628.805850][T11240] __alloc_pages_nodemask+0x1c0/0x890 [ 628.811197][T11240] ? loop_control_ioctl+0x564/0x740 [ 628.816374][T11240] ? __se_sys_ioctl+0x115/0x190 [ 628.821200][T11240] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 628.826732][T11240] ? selinux_genfs_get_sid+0x2d/0x250 [ 628.832083][T11240] __get_free_pages+0xe/0x30 [ 628.836649][T11240] selinux_genfs_get_sid+0x56/0x250 [ 628.841823][T11240] inode_doinit_with_dentry+0x858/0x1030 [ 628.847430][T11240] ? sb_finish_set_opts+0x7f0/0x7f0 [ 628.852604][T11240] ? current_time+0x1c4/0x310 [ 628.857342][T11240] selinux_d_instantiate+0x27/0x40 [ 628.862431][T11240] security_d_instantiate+0xa5/0x100 [ 628.867690][T11240] d_instantiate+0x55/0x90 [ 628.872088][T11240] __debugfs_create_file+0x2d7/0x4a0 [ 628.877347][T11240] ? up_write+0x19/0xd0 [ 628.881477][T11240] debugfs_create_file+0x4a/0x60 [ 628.886389][T11240] bdi_register_va+0x2ab/0x600 [ 628.891130][T11240] bdi_register+0xd1/0x120 [ 628.895531][T11240] ? irq_exit_rcu+0x9/0x10 [ 628.899924][T11240] ? __device_add_disk+0x536/0x11d0 [ 628.905097][T11240] ? bdi_register_va+0x600/0x600 [ 628.910011][T11240] __device_add_disk+0x5cb/0x11d0 [ 628.915010][T11240] ? device_add_disk+0x40/0x40 [ 628.919755][T11240] ? loop_add+0x3b0/0x760 [ 628.924061][T11240] ? vsprintf+0x40/0x40 [ 628.928197][T11240] device_add_disk+0x2a/0x40 [ 628.932767][T11240] loop_add+0x58f/0x760 [ 628.936901][T11240] loop_control_ioctl+0x564/0x740 [ 628.941903][T11240] ? loop_remove+0xb0/0xb0 [ 628.946297][T11240] ? sysvec_reschedule_ipi+0x84/0x160 [ 628.951647][T11240] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 628.957258][T11240] ? loop_remove+0xb0/0xb0 [ 628.961651][T11240] ? do_vfs_ioctl+0xf6/0x1a90 [ 628.966309][T11240] ? __se_sys_ioctl+0xa6/0x190 [ 628.971046][T11240] ? __se_sys_ioctl+0x109/0x190 [ 628.975957][T11240] ? loop_control_ioctl+0x1/0x740 [ 628.980956][T11240] ? loop_remove+0xb0/0xb0 [ 628.985359][T11240] __se_sys_ioctl+0x115/0x190 [ 628.990011][T11240] __x64_sys_ioctl+0x7b/0x90 [ 628.994581][T11240] do_syscall_64+0x34/0x70 [ 628.998976][T11240] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 629.004843][T11240] RIP: 0033:0x7fa4636b90d9 [ 629.009238][T11240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 629.028816][T11240] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.037216][T11240] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 629.045162][T11240] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 629.053113][T11240] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 629.061157][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 629.069107][T11240] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:23:20 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) (fail_nth: 1) 14:23:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) (fail_nth: 1) [ 629.155167][T11242] FAULT_INJECTION: forcing a failure. [ 629.155167][T11242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.189376][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 629.257397][T11242] CPU: 1 PID: 11242 Comm: syz-executor.1 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 629.269147][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 629.279194][T11242] Call Trace: [ 629.282470][T11242] dump_stack_lvl+0x1e2/0x24b [ 629.287125][T11242] ? bfq_pos_tree_add_move+0x43e/0x43e [ 629.292563][T11242] ? preempt_schedule_irq+0xef/0x140 [ 629.297830][T11242] ? preempt_schedule_notrace+0x140/0x140 [ 629.303525][T11242] ? check_stack_object+0xf7/0x130 [ 629.308613][T11242] dump_stack+0x15/0x17 [ 629.312744][T11242] should_fail+0x3c0/0x510 [ 629.317139][T11242] should_fail_usercopy+0x1a/0x20 [ 629.322145][T11242] _copy_from_user+0x20/0xd0 [ 629.326757][T11242] __copy_msghdr_from_user+0xaf/0x730 [ 629.332190][T11242] ? __ia32_sys_shutdown+0x70/0x70 [ 629.337276][T11242] __sys_sendmsg+0x270/0x460 [ 629.341842][T11242] ? rw_verify_area+0x1c2/0x360 [ 629.346667][T11242] ? ____sys_sendmsg+0x8e0/0x8e0 [ 629.351604][T11242] ? vfs_write+0x8e1/0xf80 [ 629.355996][T11242] ? mutex_trylock+0x180/0x180 [ 629.360771][T11242] __x64_sys_sendmsg+0x7f/0x90 [ 629.365511][T11242] do_syscall_64+0x34/0x70 [ 629.369903][T11242] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 629.375771][T11242] RIP: 0033:0x7efe8f56f0d9 [ 629.380167][T11242] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 629.399765][T11242] RSP: 002b:00007efe8e2c1168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.408157][T11242] RAX: ffffffffffffffda RBX: 00007efe8f68f050 RCX: 00007efe8f56f0d9 [ 629.416110][T11242] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 629.424060][T11242] RBP: 00007efe8e2c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 629.432006][T11242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.440040][T11242] R13: 00007ffea56f22af R14: 00007efe8e2c1300 R15: 0000000000022000 [ 629.449457][T11250] FAULT_INJECTION: forcing a failure. [ 629.449457][T11250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.462805][T11250] CPU: 0 PID: 11250 Comm: syz-executor.2 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 629.474504][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 629.484542][T11250] Call Trace: [ 629.487814][T11250] dump_stack_lvl+0x1e2/0x24b [ 629.492468][T11250] ? bfq_pos_tree_add_move+0x43e/0x43e [ 629.497905][T11250] ? trace_spf_vma_access+0x100/0x100 [ 629.503252][T11250] ? __kasan_slab_free+0x11/0x20 [ 629.508162][T11250] ? check_stack_object+0xf7/0x130 [ 629.513247][T11250] dump_stack+0x15/0x17 [ 629.517380][T11250] should_fail+0x3c0/0x510 [ 629.521772][T11250] should_fail_usercopy+0x1a/0x20 [ 629.526772][T11250] _copy_from_user+0x20/0xd0 [ 629.531426][T11250] __copy_msghdr_from_user+0xaf/0x730 [ 629.536781][T11250] ? __ia32_sys_shutdown+0x70/0x70 [ 629.541872][T11250] __sys_sendmsg+0x270/0x460 [ 629.546447][T11250] ? rw_verify_area+0x1c2/0x360 [ 629.551280][T11250] ? ____sys_sendmsg+0x8e0/0x8e0 [ 629.556190][T11250] ? vfs_write+0x8e1/0xf80 [ 629.560586][T11250] ? mutex_trylock+0x180/0x180 [ 629.565333][T11250] ? ksys_write+0x25f/0x2c0 [ 629.569814][T11250] ? debug_smp_processor_id+0x17/0x20 [ 629.575160][T11250] __x64_sys_sendmsg+0x7f/0x90 [ 629.579908][T11250] do_syscall_64+0x34/0x70 [ 629.584303][T11250] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 629.590171][T11250] RIP: 0033:0x7fbfc28930d9 [ 629.594563][T11250] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 629.614161][T11250] RSP: 002b:00007fbfc15e5168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.622581][T11250] RAX: ffffffffffffffda RBX: 00007fbfc29b3050 RCX: 00007fbfc28930d9 [ 629.630545][T11250] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 629.638500][T11250] RBP: 00007fbfc15e51d0 R08: 0000000000000000 R09: 0000000000000000 [ 629.646460][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:23:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xf3ffffff00000000) 14:23:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) (fail_nth: 2) 14:23:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 71) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) [ 629.654429][T11250] R13: 00007ffe0e627c5f R14: 00007fbfc15e5300 R15: 0000000000022000 [ 629.679097][T11255] FAULT_INJECTION: forcing a failure. [ 629.679097][T11255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.696517][T11255] CPU: 1 PID: 11255 Comm: syz-executor.4 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 629.708366][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 629.718416][T11255] Call Trace: [ 629.721695][T11255] dump_stack_lvl+0x1e2/0x24b [ 629.726350][T11255] ? bfq_pos_tree_add_move+0x43e/0x43e [ 629.731789][T11255] ? trace_spf_vma_access+0x100/0x100 [ 629.737140][T11255] ? __kasan_slab_free+0x11/0x20 [ 629.742055][T11255] ? check_stack_object+0xf7/0x130 [ 629.747141][T11255] dump_stack+0x15/0x17 [ 629.751275][T11255] should_fail+0x3c0/0x510 [ 629.755670][T11255] should_fail_usercopy+0x1a/0x20 [ 629.760672][T11255] _copy_from_user+0x20/0xd0 [ 629.765329][T11255] __copy_msghdr_from_user+0xaf/0x730 [ 629.770691][T11255] ? __ia32_sys_shutdown+0x70/0x70 [ 629.775798][T11255] __sys_sendmsg+0x270/0x460 [ 629.780380][T11255] ? rw_verify_area+0x1c2/0x360 [ 629.785218][T11255] ? ____sys_sendmsg+0x8e0/0x8e0 [ 629.790144][T11255] ? vfs_write+0x8e1/0xf80 [ 629.794550][T11255] ? mutex_trylock+0x180/0x180 [ 629.799385][T11255] ? ksys_write+0x25f/0x2c0 [ 629.803866][T11255] ? debug_smp_processor_id+0x17/0x20 [ 629.809343][T11255] __x64_sys_sendmsg+0x7f/0x90 [ 629.814108][T11255] do_syscall_64+0x34/0x70 [ 629.818512][T11255] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 629.824394][T11255] RIP: 0033:0x7f6f7b0120d9 [ 629.828793][T11255] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 629.848373][T11255] RSP: 002b:00007f6f79d43168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.856765][T11255] RAX: ffffffffffffffda RBX: 00007f6f7b132120 RCX: 00007f6f7b0120d9 [ 629.864716][T11255] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 629.872664][T11255] RBP: 00007f6f79d431d0 R08: 0000000000000000 R09: 0000000000000000 [ 629.880706][T11255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.888685][T11255] R13: 00007ffd9f95dd8f R14: 00007f6f79d43300 R15: 0000000000022000 [ 629.897758][T11262] FAULT_INJECTION: forcing a failure. [ 629.897758][T11262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.914479][T11262] CPU: 0 PID: 11262 Comm: syz-executor.1 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 629.926222][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 629.936255][T11262] Call Trace: [ 629.939530][T11262] dump_stack_lvl+0x1e2/0x24b [ 629.944187][T11262] ? panic+0x7d7/0x7d7 [ 629.948231][T11262] ? bfq_pos_tree_add_move+0x43e/0x43e [ 629.953780][T11262] dump_stack+0x15/0x17 [ 629.957922][T11262] should_fail+0x3c0/0x510 [ 629.962316][T11262] should_fail_usercopy+0x1a/0x20 [ 629.967322][T11262] _copy_from_user+0x20/0xd0 [ 629.971897][T11262] iovec_from_user+0xc9/0x320 [ 629.976565][T11262] __import_iovec+0x6d/0x3d0 [ 629.981136][T11262] ? __ia32_sys_shutdown+0x70/0x70 [ 629.986226][T11262] import_iovec+0xe5/0x120 [ 629.990621][T11262] __sys_sendmsg+0x325/0x460 [ 629.995190][T11262] ? rw_verify_area+0x1c2/0x360 [ 630.000015][T11262] ? ____sys_sendmsg+0x8e0/0x8e0 [ 630.004937][T11262] ? vfs_write+0x8e1/0xf80 [ 630.009334][T11262] ? mutex_trylock+0x180/0x180 [ 630.014073][T11262] ? ksys_write+0x25f/0x2c0 [ 630.018578][T11262] ? debug_smp_processor_id+0x17/0x20 [ 630.023926][T11262] __x64_sys_sendmsg+0x7f/0x90 [ 630.028663][T11262] do_syscall_64+0x34/0x70 [ 630.033056][T11262] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 630.038943][T11262] RIP: 0033:0x7efe8f56f0d9 [ 630.043339][T11262] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 630.062924][T11262] RSP: 002b:00007efe8e2c1168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.071316][T11262] RAX: ffffffffffffffda RBX: 00007efe8f68f050 RCX: 00007efe8f56f0d9 [ 630.079263][T11262] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 630.087208][T11262] RBP: 00007efe8e2c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 630.095157][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.103107][T11262] R13: 00007ffea56f22af R14: 00007efe8e2c1300 R15: 0000000000022000 [ 630.165629][T11274] FAULT_INJECTION: forcing a failure. [ 630.165629][T11274] name failslab, interval 1, probability 0, space 0, times 0 [ 630.178282][T11274] CPU: 0 PID: 11274 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 630.189977][T11274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 630.200010][T11274] Call Trace: [ 630.203312][T11274] dump_stack_lvl+0x1e2/0x24b [ 630.207965][T11274] ? panic+0x7d7/0x7d7 [ 630.212009][T11274] ? bfq_pos_tree_add_move+0x43e/0x43e [ 630.217445][T11274] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 630.222446][T11274] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 630.227621][T11274] dump_stack+0x15/0x17 [ 630.231753][T11274] should_fail+0x3c0/0x510 [ 630.236146][T11274] ? kobj_map+0x72/0x6f0 [ 630.240363][T11274] __should_failslab+0x9f/0xe0 [ 630.245102][T11274] should_failslab+0x9/0x20 [ 630.249582][T11274] __kmalloc+0x60/0x360 [ 630.253713][T11274] ? irqentry_exit+0x50/0x60 [ 630.258280][T11274] ? __device_add_disk+0x536/0x11d0 [ 630.263455][T11274] kobj_map+0x72/0x6f0 [ 630.267503][T11274] ? exact_match+0x20/0x20 [ 630.271897][T11274] ? bdev_check_media_change+0x4c0/0x4c0 [ 630.277505][T11274] __device_add_disk+0x663/0x11d0 [ 630.282508][T11274] ? device_add_disk+0x40/0x40 [ 630.287249][T11274] ? loop_add+0x3b0/0x760 [ 630.291554][T11274] ? vsprintf+0x40/0x40 [ 630.295687][T11274] device_add_disk+0x2a/0x40 [ 630.300254][T11274] loop_add+0x58f/0x760 [ 630.304386][T11274] loop_control_ioctl+0x564/0x740 [ 630.309395][T11274] ? loop_remove+0xb0/0xb0 [ 630.313794][T11274] ? __fget_files+0x310/0x370 [ 630.318446][T11274] ? security_file_ioctl+0xb1/0xd0 [ 630.323533][T11274] ? loop_remove+0xb0/0xb0 [ 630.327928][T11274] __se_sys_ioctl+0x115/0x190 [ 630.332582][T11274] __x64_sys_ioctl+0x7b/0x90 [ 630.337151][T11274] do_syscall_64+0x34/0x70 [ 630.341548][T11274] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 630.347413][T11274] RIP: 0033:0x7fa4636b90d9 [ 630.351809][T11274] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 630.371389][T11274] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.379780][T11274] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 630.387732][T11274] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 630.395695][T11274] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 630.403659][T11274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 630.411618][T11274] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 14:23:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) (fail_nth: 2) 14:23:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xfdfdffff00000000) [ 630.520062][ T411] udevd[411]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 14:23:22 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r0, &(0x7f0000000080)=""/84, 0x54) getdents(r0, 0xffffffffffffffff, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r1, &(0x7f0000000080)=""/84, 0x54) getdents(r1, 0xffffffffffffffff, 0x18) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getdents(r1, &(0x7f0000000040)=""/37, 0x25) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:23:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (fail_nth: 72) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa07) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) 14:23:22 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) (fail_nth: 2) 14:23:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xffffffff00000000) 14:23:22 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r0, &(0x7f0000000080)=""/84, 0x54) getdents(r0, 0xffffffffffffffff, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r1, &(0x7f0000000080)=""/84, 0x54) getdents(r1, 0xffffffffffffffff, 0x18) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getdents(r1, &(0x7f0000000040)=""/37, 0x25) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (async) getdents(r0, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r0, 0xffffffffffffffff, 0x18) (async) syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (async) getdents(r1, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r1, 0xffffffffffffffff, 0x18) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) getdents(r1, &(0x7f0000000040)=""/37, 0x25) (async) dup(r2) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 14:23:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r3, &(0x7f0000000080)=""/84, 0x54) getdents(r3, 0xffffffffffffffff, 0x18) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x3f8, 0x1, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44091}, 0x2008044) openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:23:22 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r0, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r0, 0xffffffffffffffff, 0x18) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (rerun: 64) getdents(r1, &(0x7f0000000080)=""/84, 0x54) (async, rerun: 32) getdents(r1, 0xffffffffffffffff, 0x18) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getdents(r1, &(0x7f0000000040)=""/37, 0x25) (async) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32) [ 630.735600][T11313] FAULT_INJECTION: forcing a failure. [ 630.735600][T11313] name failslab, interval 1, probability 0, space 0, times 0 [ 630.748405][T11313] CPU: 0 PID: 11313 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 630.760157][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 630.770188][T11313] Call Trace: [ 630.773458][T11313] dump_stack_lvl+0x1e2/0x24b [ 630.778111][T11313] ? panic+0x7d7/0x7d7 [ 630.782155][T11313] ? bfq_pos_tree_add_move+0x43e/0x43e [ 630.787602][T11313] ? __kasan_check_read+0x11/0x20 [ 630.792621][T11313] ? preempt_schedule_irq+0xef/0x140 [ 630.797879][T11313] ? preempt_schedule_notrace+0x140/0x140 [ 630.803577][T11313] ? __x64_sys_ioctl+0x7b/0x90 [ 630.808316][T11313] dump_stack+0x15/0x17 [ 630.812452][T11313] should_fail+0x3c0/0x510 [ 630.816853][T11313] ? kvasprintf_const+0x139/0x180 [ 630.821852][T11313] __should_failslab+0x9f/0xe0 [ 630.826591][T11313] should_failslab+0x9/0x20 [ 630.831070][T11313] __kmalloc_track_caller+0x5f/0x350 [ 630.836333][T11313] kstrdup_const+0x55/0x90 [ 630.840728][T11313] kvasprintf_const+0x139/0x180 [ 630.845558][T11313] kobject_set_name_vargs+0x61/0x120 [ 630.850816][T11313] dev_set_name+0xd1/0x120 [ 630.855207][T11313] ? __kmalloc+0x1f7/0x360 [ 630.859599][T11313] ? get_device+0x30/0x30 [ 630.863912][T11313] ? kobj_map+0x6ad/0x6f0 [ 630.868222][T11313] __device_add_disk+0x6e5/0x11d0 [ 630.873227][T11313] ? device_add_disk+0x40/0x40 [ 630.877963][T11313] ? irqentry_exit+0x50/0x60 [ 630.882532][T11313] ? vsprintf+0x40/0x40 [ 630.886750][T11313] device_add_disk+0x2a/0x40 [ 630.891320][T11313] loop_add+0x58f/0x760 [ 630.895453][T11313] loop_control_ioctl+0x564/0x740 [ 630.900453][T11313] ? loop_remove+0xb0/0xb0 [ 630.904844][T11313] ? irqentry_exit+0x50/0x60 [ 630.909412][T11313] ? sysvec_reschedule_ipi+0x84/0x160 [ 630.914758][T11313] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 630.920365][T11313] ? do_vfs_ioctl+0xf6/0x1a90 [ 630.925018][T11313] ? loop_remove+0xb0/0xb0 [ 630.929409][T11313] __se_sys_ioctl+0x115/0x190 [ 630.934062][T11313] __x64_sys_ioctl+0x7b/0x90 [ 630.938627][T11313] do_syscall_64+0x34/0x70 [ 630.943020][T11313] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 630.948889][T11313] RIP: 0033:0x7fa4636b90d9 [ 630.953282][T11313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 630.972862][T11313] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.981255][T11313] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 630.989215][T11313] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 630.997161][T11313] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.005107][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 631.013055][T11313] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 631.021292][T11313] kobject_add_internal failed for queue (error: -2 parent: (null)) [ 631.029492][T11313] ------------[ cut here ]------------ [ 631.034967][T11313] WARNING: CPU: 0 PID: 11313 at fs/sysfs/file.c:328 sysfs_create_files+0x215/0x4a0 [ 631.044261][T11313] Modules linked in: [ 631.048190][T11313] CPU: 0 PID: 11313 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 631.059922][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 631.070010][T11313] RIP: 0010:sysfs_create_files+0x215/0x4a0 [ 631.075831][T11313] Code: 24 04 48 b9 00 00 00 00 00 fc ff df 48 8b 54 24 08 4c 8b 74 24 20 eb 2b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 ab ad 9a ff <0f> 0b c7 44 24 04 ea ff ff ff 48 b9 00 00 00 00 00 fc ff df 48 8b [ 631.095532][T11313] RSP: 0018:ffffc9000820fae0 EFLAGS: 00010283 [ 631.101629][T11313] RAX: ffffffff81d26f81 RBX: ffff88811d570098 RCX: 0000000000040000 [ 631.109623][T11313] RDX: ffffc90004b48000 RSI: 000000000002ae2b RDI: 000000000002ae2c [ 631.117605][T11313] RBP: ffffc9000820fbb0 R08: ffffffff826c5268 R09: ffffed10214f1244 [ 631.125659][T11313] R10: ffffed10214f1244 R11: 1ffff110214f1243 R12: 0000000000000000 [ 631.133743][T11313] R13: ffffffff85433260 R14: ffff88811d570068 R15: ffffffff8653abc0 [ 631.141750][T11313] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 631.150719][T11313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 631.157325][T11313] CR2: 00007fa4623e9ff8 CR3: 000000011d4af000 CR4: 00000000003526b0 [ 631.165324][T11313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 631.173314][T11313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 631.181303][T11313] Call Trace: [ 631.184605][T11313] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 631.190002][T11313] ? __kasan_check_write+0x14/0x20 [ 631.195123][T11313] ? kobject_get+0xd2/0x120 [ 631.199648][T11313] __device_add_disk+0x9cb/0x11d0 [ 631.204692][T11313] ? device_add_disk+0x40/0x40 [ 631.209494][T11313] ? irqentry_exit+0x50/0x60 [ 631.214095][T11313] ? vsprintf+0x40/0x40 [ 631.218259][T11313] device_add_disk+0x2a/0x40 [ 631.222876][T11313] loop_add+0x58f/0x760 [ 631.227042][T11313] loop_control_ioctl+0x564/0x740 [ 631.232087][T11313] ? loop_remove+0xb0/0xb0 [ 631.236594][T11313] ? irqentry_exit+0x50/0x60 [ 631.241194][T11313] ? sysvec_reschedule_ipi+0x84/0x160 [ 631.246574][T11313] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 631.252224][T11313] ? do_vfs_ioctl+0xf6/0x1a90 [ 631.256911][T11313] ? loop_remove+0xb0/0xb0 [ 631.261344][T11313] __se_sys_ioctl+0x115/0x190 [ 631.266030][T11313] __x64_sys_ioctl+0x7b/0x90 [ 631.270654][T11313] do_syscall_64+0x34/0x70 [ 631.275080][T11313] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 631.280991][T11313] RIP: 0033:0x7fa4636b90d9 [ 631.285417][T11313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 631.305045][T11313] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 631.313487][T11313] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 631.321481][T11313] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 631.329489][T11313] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.337469][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 631.345457][T11313] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 631.353465][T11313] ---[ end trace 3a2d5a045bb1ff44 ]--- [ 631.358934][T11313] ------------[ cut here ]------------ [ 631.364401][T11313] kernfs: can not remove 'events', no directory [ 631.371010][T11313] WARNING: CPU: 0 PID: 11313 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 631.380852][T11313] Modules linked in: [ 631.384779][T11313] CPU: 0 PID: 11313 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 631.396521][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 631.406609][T11313] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 631.412873][T11313] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 11 0c 9b ff 48 c7 c7 80 30 2d 85 4c 89 fe 31 c0 e8 c0 27 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 f2 0b 9b ff bb fe ff ff ff 48 c7 c7 [ 631.432504][T11313] RSP: 0018:ffffc9000820fab8 EFLAGS: 00010246 [ 631.438609][T11313] RAX: dd89617ecd537a00 RBX: 0000000000000000 RCX: 0000000000040000 [ 631.446587][T11313] RDX: ffffc90004b48000 RSI: 000000000003ffff RDI: 0000000000040000 [ 631.454595][T11313] RBP: ffffc9000820fad0 R08: ffffffff815408b8 R09: fffff52001041e7d [ 631.462647][T11313] R10: fffff52001041e7d R11: 1ffff92001041e7c R12: ffffffff8653abc0 [ 631.470653][T11313] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff85433240 [ 631.478834][T11313] FS: 00007fa4623ea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 631.487780][T11313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 631.494399][T11313] CR2: 00007fa4623e9ff8 CR3: 000000011d4af000 CR4: 00000000003526b0 [ 631.502403][T11313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 631.510421][T11313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 631.518440][T11313] Call Trace: [ 631.521774][T11313] sysfs_create_files+0x40a/0x4a0 [ 631.526837][T11313] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 631.532244][T11313] ? __kasan_check_write+0x14/0x20 [ 631.537365][T11313] ? kobject_get+0xd2/0x120 [ 631.541892][T11313] __device_add_disk+0x9cb/0x11d0 [ 631.546925][T11313] ? device_add_disk+0x40/0x40 [ 631.551707][T11313] ? irqentry_exit+0x50/0x60 [ 631.556320][T11313] ? vsprintf+0x40/0x40 [ 631.560498][T11313] device_add_disk+0x2a/0x40 [ 631.565122][T11313] loop_add+0x58f/0x760 [ 631.569323][T11313] loop_control_ioctl+0x564/0x740 [ 631.574360][T11313] ? loop_remove+0xb0/0xb0 [ 631.578801][T11313] ? irqentry_exit+0x50/0x60 [ 631.583401][T11313] ? sysvec_reschedule_ipi+0x84/0x160 [ 631.588796][T11313] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 631.594442][T11313] ? do_vfs_ioctl+0xf6/0x1a90 [ 631.599142][T11313] ? loop_remove+0xb0/0xb0 [ 631.603567][T11313] __se_sys_ioctl+0x115/0x190 [ 631.608258][T11313] __x64_sys_ioctl+0x7b/0x90 [ 631.612871][T11313] do_syscall_64+0x34/0x70 [ 631.617306][T11313] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 631.623255][T11313] RIP: 0033:0x7fa4636b90d9 [ 631.627713][T11313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 631.647407][T11313] RSP: 002b:00007fa4623ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 631.655950][T11313] RAX: ffffffffffffffda RBX: 00007fa4637d9120 RCX: 00007fa4636b90d9 [ 631.663965][T11313] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 631.671970][T11313] RBP: 00007fa4623ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.679969][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 631.687952][T11313] R13: 00007ffd5852f08f R14: 00007fa4623ea300 R15: 0000000000022000 [ 631.696139][T11313] ---[ end trace 3a2d5a045bb1ff45 ]--- [ 631.701915][T11311] FAULT_INJECTION: forcing a failure. [ 631.701915][T11311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.754357][T11311] CPU: 0 PID: 11311 Comm: syz-executor.2 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 631.766087][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 631.776135][T11311] Call Trace: [ 631.779421][T11311] dump_stack_lvl+0x1e2/0x24b [ 631.784095][T11311] ? panic+0x7d7/0x7d7 [ 631.788157][T11311] ? do_anonymous_page+0xe36/0x1050 [ 631.793344][T11311] ? bfq_pos_tree_add_move+0x43e/0x43e [ 631.798782][T11311] dump_stack+0x15/0x17 [ 631.802919][T11311] should_fail+0x3c0/0x510 [ 631.807316][T11311] should_fail_usercopy+0x1a/0x20 [ 631.812316][T11311] _copy_from_user+0x20/0xd0 [ 631.816905][T11311] iovec_from_user+0xc9/0x320 [ 631.821564][T11311] __import_iovec+0x6d/0x3d0 [ 631.826136][T11311] ? __ia32_sys_shutdown+0x70/0x70 [ 631.831230][T11311] import_iovec+0xe5/0x120 [ 631.835624][T11311] __sys_sendmsg+0x325/0x460 [ 631.840195][T11311] ? rw_verify_area+0x1c2/0x360 [ 631.845020][T11311] ? ____sys_sendmsg+0x8e0/0x8e0 [ 631.849939][T11311] ? vfs_write+0x8e1/0xf80 [ 631.854432][T11311] ? mutex_trylock+0x180/0x180 [ 631.859177][T11311] ? ksys_write+0x25f/0x2c0 [ 631.863662][T11311] ? debug_smp_processor_id+0x17/0x20 [ 631.869019][T11311] __x64_sys_sendmsg+0x7f/0x90 [ 631.873776][T11311] do_syscall_64+0x34/0x70 [ 631.878179][T11311] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 631.884043][T11311] RIP: 0033:0x7fbfc28930d9 [ 631.888443][T11311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 631.908027][T11311] RSP: 002b:00007fbfc15e5168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.916415][T11311] RAX: ffffffffffffffda RBX: 00007fbfc29b3050 RCX: 00007fbfc28930d9 [ 631.924498][T11311] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 631.932551][T11311] RBP: 00007fbfc15e51d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.940506][T11311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:23:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) (fail_nth: 3) 14:23:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x3, 0x2000, 0x2000, &(0x7f000000d000/0x2000)=nil}) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x400) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000001280)="410fc7380f01d1c482259c37420f2324c744240000800000c7442402c519d3c9c7442406000000000f011c24666767660f3828bf3213c2af66b81b010f00d80fc79bae000000c4e121638760f30c67b9800000c00f3235000100000f30", 0x37}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f00000001c0)=""/4096) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 631.948456][T11311] R13: 00007ffe0e627c5f R14: 00007fbfc15e5300 R15: 0000000000022000 [ 631.956849][T11319] FAULT_INJECTION: forcing a failure. [ 631.956849][T11319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.969963][T11313] loop0: failed to create sysfs files for events [ 631.977210][T11310] ------------[ cut here ]------------ [ 631.977756][T11319] CPU: 0 PID: 11319 Comm: syz-executor.4 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 631.982813][T11310] kernfs: can not remove 'events', no directory [ 631.994387][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 631.994392][T11319] Call Trace: [ 631.994412][T11319] dump_stack_lvl+0x1e2/0x24b [ 631.994424][T11319] ? panic+0x7d7/0x7d7 [ 631.994435][T11319] ? do_anonymous_page+0xe36/0x1050 [ 631.994452][T11319] ? bfq_pos_tree_add_move+0x43e/0x43e [ 632.000773][T11310] WARNING: CPU: 1 PID: 11310 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 632.010713][T11319] dump_stack+0x15/0x17 [ 632.010723][T11319] should_fail+0x3c0/0x510 [ 632.010740][T11319] should_fail_usercopy+0x1a/0x20 [ 632.013991][T11310] Modules linked in: [ 632.018637][T11319] _copy_from_user+0x20/0xd0 [ 632.018646][T11319] iovec_from_user+0xc9/0x320 [ 632.018656][T11319] __import_iovec+0x6d/0x3d0 [ 632.018673][T11319] ? __ia32_sys_shutdown+0x70/0x70 [ 632.022720][T11310] [ 632.027877][T11319] import_iovec+0xe5/0x120 [ 632.033318][T11310] CPU: 1 PID: 11310 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 632.043073][T11319] __sys_sendmsg+0x325/0x460 [ 632.043090][T11319] ? rw_verify_area+0x1c2/0x360 [ 632.047213][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 632.051594][T11319] ? ____sys_sendmsg+0x8e0/0x8e0 [ 632.051610][T11319] ? vfs_write+0x8e1/0xf80 [ 632.056603][T11310] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 632.060460][T11319] ? mutex_trylock+0x180/0x180 [ 632.060476][T11319] ? ksys_write+0x25f/0x2c0 [ 632.065036][T11310] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 11 0c 9b ff 48 c7 c7 80 30 2d 85 4c 89 fe 31 c0 e8 c0 27 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 f2 0b 9b ff bb fe ff ff ff 48 c7 c7 [ 632.069676][T11319] ? debug_smp_processor_id+0x17/0x20 [ 632.069691][T11319] __x64_sys_sendmsg+0x7f/0x90 [ 632.074248][T11310] RSP: 0000:ffffc9000844fbf8 EFLAGS: 00010246 [ 632.079324][T11319] do_syscall_64+0x34/0x70 [ 632.079342][T11319] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 632.081633][T11310] [ 632.086020][T11319] RIP: 0033:0x7f6f7b0120d9 [ 632.097699][T11310] RAX: 2b9cfe0d47776200 RBX: 0000000000000000 RCX: 0000000000040000 [ 632.102251][T11319] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 632.102263][T11319] RSP: 002b:00007f6f79d43168 EFLAGS: 00000246 [ 632.107085][T11310] RDX: ffffc90004947000 RSI: 000000000003ffff RDI: 0000000000040000 [ 632.117100][T11319] ORIG_RAX: 000000000000002e [ 632.117109][T11319] RAX: ffffffffffffffda RBX: 00007f6f7b132120 RCX: 00007f6f7b0120d9 [ 632.117121][T11319] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 632.122031][T11310] RBP: ffffc9000844fc10 R08: ffffffff815408b8 R09: 0000000000000003 [ 632.126410][T11319] RBP: 00007f6f79d431d0 R08: 0000000000000000 R09: 0000000000000000 [ 632.132625][T11310] R10: fffff52001089ecd R11: 1ffff92001089ecc R12: 0000000000000000 [ 632.137360][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.141839][T11310] R13: ffffffff8653abc0 R14: 0000000000000000 R15: ffffffff85433240 [ 632.161400][T11319] R13: 00007ffd9f95dd8f R14: 00007f6f79d43300 R15: 0000000000022000 [ 632.189460][T11322] FAULT_INJECTION: forcing a failure. [ 632.189460][T11322] name failslab, interval 1, probability 0, space 0, times 0 [ 632.190459][T11310] FS: 00007fa46240b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 632.196288][T11322] CPU: 0 PID: 11322 Comm: syz-executor.1 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 632.202561][T11310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.222124][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 632.222128][T11322] Call Trace: [ 632.222143][T11322] dump_stack_lvl+0x1e2/0x24b [ 632.222156][T11322] ? panic+0x7d7/0x7d7 [ 632.222173][T11322] ? bfq_pos_tree_add_move+0x43e/0x43e [ 632.228222][T11310] CR2: 0000001b33521000 CR3: 000000011d4af000 CR4: 00000000003526a0 [ 632.236168][T11322] ? __kasan_check_read+0x11/0x20 [ 632.236184][T11322] dump_stack+0x15/0x17 [ 632.240833][T11310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 632.248783][T11322] should_fail+0x3c0/0x510 [ 632.248798][T11322] __should_failslab+0x9f/0xe0 [ 632.256742][T11310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 632.264688][T11322] should_failslab+0x9/0x20 [ 632.264703][T11322] kmem_cache_alloc+0x3f/0x300 [ 632.272649][T11310] Call Trace: [ 632.280591][T11322] ? exc_page_fault+0x71/0x1b0 [ 632.280607][T11322] ? __alloc_skb+0x7e/0x580 [ 632.288559][T11310] sysfs_remove_files+0xab/0x110 [ 632.296496][T11322] __alloc_skb+0x7e/0x580 [ 632.304446][T11310] del_gendisk+0x278/0xe20 [ 632.316984][T11322] ? sched_clock_cpu+0x1b/0x3b0 [ 632.317001][T11322] tipc_msg_build+0x141/0x1040 [ 632.325994][T11310] ? device_add_disk_no_queue_reg+0x30/0x30 [ 632.337657][T11322] ? memcpy+0x56/0x70 [ 632.337673][T11322] ? avc_denied+0x1b0/0x1b0 [ 632.344234][T11310] ? __radix_tree_delete+0x2ba/0x380 [ 632.354256][T11322] ? tipc_msg_fragment+0x780/0x780 [ 632.354271][T11322] __tipc_sendstream+0xacb/0x12f0 [ 632.357528][T11310] ? radix_tree_delete_item+0x261/0x360 [ 632.362170][T11322] ? tsk_advance_rx_queue+0x130/0x130 [ 632.362186][T11322] ? wait_woken+0x240/0x240 [ 632.366228][T11310] loop_remove+0x46/0xb0 [ 632.371647][T11322] tipc_sendstream+0x55/0x70 [ 632.371662][T11322] ? tipc_getsockopt+0x820/0x820 [ 632.379621][T11310] loop_control_ioctl+0x67f/0x740 [ 632.384611][T11322] ____sys_sendmsg+0x597/0x8e0 [ 632.388759][T11310] ? loop_remove+0xb0/0xb0 [ 632.396792][T11322] ? __sys_sendmsg_sock+0xc0/0xc0 [ 632.401280][T11310] ? __fget_files+0x310/0x370 [ 632.406003][T11322] ? import_iovec+0xe5/0x120 [ 632.413952][T11310] ? security_file_ioctl+0xb1/0xd0 [ 632.418413][T11322] __sys_sendmsg+0x37b/0x460 14:23:24 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) 14:23:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) (fail_nth: 3) 14:23:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r3, &(0x7f0000000080)=""/84, 0x54) getdents(r3, 0xffffffffffffffff, 0x18) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x3f8, 0x1, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44091}, 0x2008044) openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (async) getdents(r3, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r3, 0xffffffffffffffff, 0x18) (async) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x3f8, 0x1, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44091}, 0x2008044) (async) openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) [ 632.418431][T11322] ? rw_verify_area+0x1c2/0x360 [ 632.423161][T11310] ? loop_remove+0xb0/0xb0 [ 632.426421][T11322] ? ____sys_sendmsg+0x8e0/0x8e0 [ 632.431157][T11310] __se_sys_ioctl+0x115/0x190 [ 632.435621][T11322] ? vfs_write+0x8e1/0xf80 [ 632.440622][T11310] __x64_sys_ioctl+0x7b/0x90 [ 632.444914][T11322] ? mutex_trylock+0x180/0x180 [ 632.449302][T11310] do_syscall_64+0x34/0x70 [ 632.454118][T11322] ? ksys_write+0x25f/0x2c0 [ 632.458857][T11310] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 632.464717][T11322] ? debug_smp_processor_id+0x17/0x20 [ 632.468671][T11310] RIP: 0033:0x7fa4636b90d9 [ 632.473141][T11322] __x64_sys_sendmsg+0x7f/0x90 [ 632.478400][T11310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 632.483492][T11322] do_syscall_64+0x34/0x70 [ 632.488512][T11310] RSP: 002b:00007fa46240b168 EFLAGS: 00000246 [ 632.494018][T11322] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 632.499366][T11310] ORIG_RAX: 0000000000000010 [ 632.503830][T11322] RIP: 0033:0x7efe8f56f0d9 [ 632.508038][T11310] RAX: ffffffffffffffda RBX: 00007fa4637d9050 RCX: 00007fa4636b90d9 [ 632.512594][T11322] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 632.512600][T11322] RSP: 002b:00007efe8e2c1168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.517518][T11310] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 632.522502][T11322] RAX: ffffffffffffffda RBX: 00007efe8f68f050 RCX: 00007efe8f56f0d9 [ 632.522509][T11322] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 632.522522][T11322] RBP: 00007efe8e2c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 632.527255][T11310] RBP: 00007fa463714ae9 R08: 0000000000000000 R09: 0000000000000000 [ 632.531633][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.531640][T11322] R13: 00007ffea56f22af R14: 00007efe8e2c1300 R15: 0000000000022000 14:23:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') getdents(r3, &(0x7f0000000080)=""/84, 0x54) getdents(r3, 0xffffffffffffffff, 0x18) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x3f8, 0x1, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44091}, 0x2008044) openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') (async) getdents(r3, &(0x7f0000000080)=""/84, 0x54) (async) getdents(r3, 0xffffffffffffffff, 0x18) (async) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x3f8, 0x1, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44091}, 0x2008044) (async) openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="b8a3000f00d0670f1b89060000000f103965f336260f009c00000f01c2baf80c66b828449e8e66efbafc0c66b88e03000066ef0f0118ba2000ed1b290f01ca", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x4000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) [ 632.754923][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.762931][T11310] R13: 00007ffd5852f08f R14: 00007fa46240b300 R15: 0000000000022000 [ 632.770929][T11310] ---[ end trace 3a2d5a045bb1ff46 ]--- [ 632.776377][T11310] ------------[ cut here ]------------ [ 632.781947][T11310] kernfs: can not remove 'events_async', no directory [ 632.789006][T11310] WARNING: CPU: 1 PID: 11310 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 632.798870][T11310] Modules linked in: [ 632.802779][T11310] CPU: 1 PID: 11310 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 632.814527][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 632.824760][T11310] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 632.831037][T11310] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 11 0c 9b ff 48 c7 c7 80 30 2d 85 4c 89 fe 31 c0 e8 c0 27 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 f2 0b 9b ff bb fe ff ff ff 48 c7 c7 [ 632.850672][T11310] RSP: 0000:ffffc9000844fbf8 EFLAGS: 00010246 [ 632.856746][T11310] RAX: 2b9cfe0d47776200 RBX: 0000000000000000 RCX: 0000000000040000 [ 632.864747][T11310] RDX: ffffc90004947000 RSI: 000000000003ffff RDI: 0000000000040000 [ 632.872733][T11310] RBP: ffffc9000844fc10 R08: ffffffff815408b8 R09: ffffed103ee2a5e8 [ 632.880742][T11310] R10: ffffed103ee2a5e8 R11: 1ffff1103ee2a5e7 R12: 0000000000000000 [ 632.888744][T11310] R13: ffffffff8653abc0 R14: 0000000000000000 R15: ffffffff85433320 [ 632.896711][T11310] FS: 00007fa46240b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 632.905663][T11310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.912285][T11310] CR2: 0000001b33521000 CR3: 000000011d4af000 CR4: 00000000003526a0 [ 632.920281][T11310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 632.928255][T11310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 632.958624][T11310] Call Trace: [ 632.961946][T11310] sysfs_remove_files+0xab/0x110 [ 632.966874][T11310] del_gendisk+0x278/0xe20 [ 632.971358][T11310] ? device_add_disk_no_queue_reg+0x30/0x30 [ 632.977254][T11310] ? __radix_tree_delete+0x2ba/0x380 [ 632.982565][T11310] ? radix_tree_delete_item+0x261/0x360 [ 632.988113][T11310] loop_remove+0x46/0xb0 [ 632.992376][T11310] loop_control_ioctl+0x67f/0x740 [ 632.997398][T11310] ? loop_remove+0xb0/0xb0 [ 633.001831][T11310] ? __fget_files+0x310/0x370 [ 633.006504][T11310] ? security_file_ioctl+0xb1/0xd0 [ 633.011619][T11310] ? loop_remove+0xb0/0xb0 [ 633.016033][T11310] __se_sys_ioctl+0x115/0x190 [ 633.020731][T11310] __x64_sys_ioctl+0x7b/0x90 [ 633.025314][T11310] do_syscall_64+0x34/0x70 [ 633.029743][T11310] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 633.035626][T11310] RIP: 0033:0x7fa4636b90d9 [ 633.040057][T11310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 633.059673][T11310] RSP: 002b:00007fa46240b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.068065][T11310] RAX: ffffffffffffffda RBX: 00007fa4637d9050 RCX: 00007fa4636b90d9 [ 633.076047][T11310] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 633.084040][T11310] RBP: 00007fa463714ae9 R08: 0000000000000000 R09: 0000000000000000 [ 633.092023][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.100011][T11310] R13: 00007ffd5852f08f R14: 00007fa46240b300 R15: 0000000000022000 [ 633.107975][T11310] ---[ end trace 3a2d5a045bb1ff47 ]--- [ 633.113569][T11310] ------------[ cut here ]------------ [ 633.119031][T11310] kernfs: can not remove 'events_poll_msecs', no directory [ 633.126255][T11310] WARNING: CPU: 1 PID: 11310 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 633.136051][T11310] Modules linked in: [ 633.139960][T11310] CPU: 1 PID: 11310 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 633.151753][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 633.161945][T11310] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 633.168169][T11310] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 11 0c 9b ff 48 c7 c7 80 30 2d 85 4c 89 fe 31 c0 e8 c0 27 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 f2 0b 9b ff bb fe ff ff ff 48 c7 c7 [ 633.187790][T11310] RSP: 0000:ffffc9000844fbf8 EFLAGS: 00010246 [ 633.193890][T11310] RAX: 2b9cfe0d47776200 RBX: 0000000000000000 RCX: 0000000000040000 [ 633.201883][T11310] RDX: ffffc90004947000 RSI: 000000000003ffff RDI: 0000000000040000 [ 633.209863][T11310] RBP: ffffc9000844fc10 R08: ffffffff815408b8 R09: ffffed103ee24e93 [ 633.217816][T11310] R10: ffffed103ee24e93 R11: 1ffff1103ee24e92 R12: 0000000000000000 [ 633.225805][T11310] R13: ffffffff8653abc0 R14: 0000000000000000 R15: ffffffff85433380 [ 633.233785][T11310] FS: 00007fa46240b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 633.242730][T11310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.249320][T11310] CR2: 0000001b33521000 CR3: 000000011d4af000 CR4: 00000000003506a0 [ 633.257281][T11310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 633.265274][T11310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 633.273280][T11310] Call Trace: [ 633.276562][T11310] sysfs_remove_files+0xab/0x110 [ 633.281512][T11310] del_gendisk+0x278/0xe20 [ 633.285928][T11310] ? device_add_disk_no_queue_reg+0x30/0x30 [ 633.291825][T11310] ? __radix_tree_delete+0x2ba/0x380 [ 633.297113][T11310] ? radix_tree_delete_item+0x261/0x360 [ 633.302720][T11310] loop_remove+0x46/0xb0 [ 633.306953][T11310] loop_control_ioctl+0x67f/0x740 [ 633.311981][T11310] ? loop_remove+0xb0/0xb0 [ 633.316390][T11310] ? __fget_files+0x310/0x370 [ 633.321087][T11310] ? security_file_ioctl+0xb1/0xd0 [ 633.326184][T11310] ? loop_remove+0xb0/0xb0 [ 633.330605][T11310] __se_sys_ioctl+0x115/0x190 [ 633.335267][T11310] __x64_sys_ioctl+0x7b/0x90 [ 633.339873][T11310] do_syscall_64+0x34/0x70 [ 633.344287][T11310] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 633.350188][T11310] RIP: 0033:0x7fa4636b90d9 [ 633.354594][T11310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 633.374219][T11310] RSP: 002b:00007fa46240b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.382679][T11310] RAX: ffffffffffffffda RBX: 00007fa4637d9050 RCX: 00007fa4636b90d9 [ 633.390672][T11310] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 633.398666][T11310] RBP: 00007fa463714ae9 R08: 0000000000000000 R09: 0000000000000000 [ 633.406635][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.414733][T11310] R13: 00007ffd5852f08f R14: 00007fa46240b300 R15: 0000000000022000 [ 633.422716][T11310] ---[ end trace 3a2d5a045bb1ff48 ]--- [ 633.428192][T11310] ------------[ cut here ]------------ [ 633.433669][T11310] kernfs: can not remove 'bdi', no directory [ 633.439699][T11310] WARNING: CPU: 1 PID: 11310 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 633.449494][T11310] Modules linked in: [ 633.453383][T11310] CPU: 1 PID: 11310 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 633.465090][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 633.475241][T11310] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 633.481572][T11310] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 11 0c 9b ff 48 c7 c7 80 30 2d 85 4c 89 fe 31 c0 e8 c0 27 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 f2 0b 9b ff bb fe ff ff ff 48 c7 c7 [ 633.501195][T11310] RSP: 0000:ffffc9000844fc18 EFLAGS: 00010246 [ 633.507244][T11310] RAX: 2b9cfe0d47776200 RBX: 0000000000000000 RCX: 0000000000040000 [ 633.515225][T11310] RDX: ffffc90004947000 RSI: 000000000003ffff RDI: 0000000000040000 [ 633.523314][T11310] RBP: ffffc9000844fc30 R08: ffffffff815408b8 R09: ffffed103ee2a5e8 [ 633.531430][T11310] R10: ffffed103ee2a5e8 R11: 1ffff1103ee2a5e7 R12: 0000000000000240 [ 633.540020][T11310] R13: ffff88811d570030 R14: 0000000000000000 R15: ffffffff85432c20 [ 633.547996][T11310] FS: 00007fa46240b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 633.556942][T11310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.563556][T11310] CR2: 0000001b33521000 CR3: 000000011d4af000 CR4: 00000000003506a0 [ 633.571569][T11310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 633.579539][T11310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 633.587485][T11310] Call Trace: [ 633.590783][T11310] sysfs_remove_link+0x50/0x60 [ 633.595543][T11310] del_gendisk+0x7cd/0xe20 [ 633.599965][T11310] ? device_add_disk_no_queue_reg+0x30/0x30 [ 633.605850][T11310] ? __radix_tree_delete+0x2ba/0x380 [ 633.611147][T11310] ? radix_tree_delete_item+0x261/0x360 [ 633.616688][T11310] loop_remove+0x46/0xb0 [ 633.620945][T11310] loop_control_ioctl+0x67f/0x740 [ 633.625964][T11310] ? loop_remove+0xb0/0xb0 [ 633.630387][T11310] ? __fget_files+0x310/0x370 [ 633.635070][T11310] ? security_file_ioctl+0xb1/0xd0 [ 633.640214][T11310] ? loop_remove+0xb0/0xb0 [ 633.644635][T11310] __se_sys_ioctl+0x115/0x190 [ 633.649324][T11310] __x64_sys_ioctl+0x7b/0x90 [ 633.653905][T11310] do_syscall_64+0x34/0x70 [ 633.658317][T11310] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 633.664221][T11310] RIP: 0033:0x7fa4636b90d9 [ 633.668729][T11310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 633.688381][T11310] RSP: 002b:00007fa46240b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.696783][T11310] RAX: ffffffffffffffda RBX: 00007fa4637d9050 RCX: 00007fa4636b90d9 [ 633.704761][T11310] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 633.712737][T11310] RBP: 00007fa463714ae9 R08: 0000000000000000 R09: 0000000000000000 [ 633.720708][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.728681][T11310] R13: 00007ffd5852f08f R14: 00007fa46240b300 R15: 0000000000022000 [ 633.736715][T11310] ---[ end trace 3a2d5a045bb1ff49 ]--- [ 633.742908][T11310] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 633.754701][T11310] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 633.763097][T11310] CPU: 1 PID: 11310 Comm: syz-executor.3 Tainted: G W 5.10.157-syzkaller-01102-gf3226d86f8ce #0 [ 633.774786][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 633.784827][T11310] RIP: 0010:strlen+0x3a/0x80 [ 633.789394][T11310] Code: c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 633.808979][T11310] RSP: 0018:ffffc9000844fb68 EFLAGS: 00010246 [ 633.815020][T11310] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 633.822968][T11310] RDX: ffffc90004947000 RSI: 000000000003ffff RDI: 0000000000000000 [ 633.830916][T11310] RBP: ffffc9000844fb88 R08: ffffffff81d1e5ec R09: fffff52001089f75 [ 633.838872][T11310] R10: fffff52001089f75 R11: 1ffff92001089f74 R12: ffffffffffffffff [ 633.846816][T11310] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 633.854762][T11310] FS: 00007fa46240b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 633.863674][T11310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.870231][T11310] CR2: 0000001b33521000 CR3: 000000011d4af000 CR4: 00000000003506a0 [ 633.878180][T11310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 633.886213][T11310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 633.894163][T11310] Call Trace: [ 633.897432][T11310] kernfs_name_hash+0x21/0x240 [ 633.902255][T11310] kernfs_find_ns+0x72/0x280 [ 633.906820][T11310] kernfs_remove_by_name_ns+0x3a/0x110 [ 633.912251][T11310] sysfs_remove_link+0x50/0x60 [ 633.916986][T11310] del_gendisk+0xbe0/0xe20 [ 633.921378][T11310] ? device_add_disk_no_queue_reg+0x30/0x30 [ 633.927242][T11310] ? __radix_tree_delete+0x2ba/0x380 [ 633.932497][T11310] ? radix_tree_delete_item+0x261/0x360 [ 633.938016][T11310] loop_remove+0x46/0xb0 [ 633.942234][T11310] loop_control_ioctl+0x67f/0x740 [ 633.947232][T11310] ? loop_remove+0xb0/0xb0 [ 633.951643][T11310] ? __fget_files+0x310/0x370 [ 633.956294][T11310] ? security_file_ioctl+0xb1/0xd0 [ 633.961384][T11310] ? loop_remove+0xb0/0xb0 [ 633.965781][T11310] __se_sys_ioctl+0x115/0x190 [ 633.970428][T11310] __x64_sys_ioctl+0x7b/0x90 [ 633.974991][T11310] do_syscall_64+0x34/0x70 [ 633.979379][T11310] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 633.985240][T11310] RIP: 0033:0x7fa4636b90d9 [ 633.989641][T11310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 634.009221][T11310] RSP: 002b:00007fa46240b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.017610][T11310] RAX: ffffffffffffffda RBX: 00007fa4637d9050 RCX: 00007fa4636b90d9 [ 634.025559][T11310] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 634.033506][T11310] RBP: 00007fa463714ae9 R08: 0000000000000000 R09: 0000000000000000 [ 634.041451][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.049408][T11310] R13: 00007ffd5852f08f R14: 00007fa46240b300 R15: 0000000000022000 [ 634.057357][T11310] Modules linked in: [ 634.061391][T11310] ---[ end trace 3a2d5a045bb1ff4a ]--- [ 634.066836][T11310] RIP: 0010:strlen+0x3a/0x80 [ 634.071813][T11310] Code: c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 634.091447][T11310] RSP: 0018:ffffc9000844fb68 EFLAGS: 00010246 [ 634.097518][T11310] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 634.105602][T11310] RDX: ffffc90004947000 RSI: 000000000003ffff RDI: 0000000000000000 [ 634.113585][T11310] RBP: ffffc9000844fb88 R08: ffffffff81d1e5ec R09: fffff52001089f75 [ 634.121565][T11310] R10: fffff52001089f75 R11: 1ffff92001089f74 R12: ffffffffffffffff [ 634.129540][T11310] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 634.137488][T11310] FS: 00007fa46240b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 634.146416][T11310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.153089][T11310] CR2: 0000001b33521000 CR3: 000000011d4af000 CR4: 00000000003506a0 [ 634.161070][T11310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 634.169154][T11310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 634.177116][T11310] Kernel panic - not syncing: Fatal exception [ 634.183308][T11310] Kernel Offset: disabled [ 634.187612][T11310] Rebooting in 86400 seconds..