68bf98a01c09d6218ddbfa5d7589566d03fb7e3b8e4b8ae6d05d19eb5f6bc1d83953b22", 0x1000}, {&(0x7f0000001240)="7d6ded75794ede7769cb48276bc9b6e69629bef6372839acfab948160dcc158be2611c5e181b0736ebb71f741266bf47312f38b720ad7f69e1a6ec91a0d6ad013f922b3bf509f2814df90ae154d1789f20d34c95ebe5fa1795669e790ab199e84286f4d8582969387ac8b83884c33814b42140b2dcb1537be2b7f36c594b8b92b5b48a8717ba05548e2b6690c68a00a510b58c51708dd5c8daf0c19481e8b721d813511f805cb366f64d4a517b8c1299e0", 0xb1}, {&(0x7f0000001300)="0af39e4bbbb53df695d07caffe592f7851462ff2913484a9ef267d5450dd8a5c7056b47a9ed36c3d45c4e27a2669cee79ec019ad6b01a1494d27f8baa829fbc776e70fd200d23194d9179794fb11f89216fc121695e8ce134f9cd2ddf5fb3215f797d8e848f329459c73c2e2c7d382b79d16bb101ebbfb0c3bffec1490a8b3a54dc7ae33687ff9a13d122d9db0457d1dd3ec68ef5f7d99e41c9911ac23370c929915c9d6193cbf2c44e96edfdf0ece617014059f9c83542e4f97c3f804ddf4d84469941bbd72cdaae05094eb39c044ec9e4392627ab15dc83fe702becb6cd13e28f15d4d58bb8f5bf80f0a99e5c85eb39198b8b652f65cd5", 0xf8}, {&(0x7f0000001400)="e00eb6d7f3a842fe58352c63e4f89c1b1cf39605d2e8aaf935f98bec1cb204bcec3b69eef49e3a8c4d734343328c5f73caecc5ce6e49594fe33714979e65d6009ec70f81bedbf3ed6c9157fdf5f01e37312ea6542b37d501cc4f94bf55447f3e816903d610df2c124eceeafbcef59cf0b350475232ec0342d131aa0aad90fae5b3fbac75c0bf1a0f9e06a9b5850efc9c4e2c6d68597ca55d1404a737dc5921cbdc0bb5161bd3c9a98573f4b9bc10d14a8e1a11ad86e1788d32a161632bf5fbcf05099d040689a9c00058e59a61fa", 0xce}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="fdcfb8fb68292635ff1e85f69a748642e6360d1190c067e51cde16dfd973acd45169da1c9402539c2bf284bc5ca9f76a7f84da35878bf450ab8ddc8938456b680d99e55e8f1215c4234323917dc0614218fdd964bef0dfef5435c751d7107bf43a83de", 0x63}], 0x6, 0x0, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="c5cc40e35a1a45c2b6e1ea6ec3e7a705c7d2e9bb095fa96f15576f5d84ead2c3593ee52069e596252107139be8e391e3572dfab7e292669e7ae9104e04b93baf9a476e620f2f580ed35371c21874f2ca8f3a117a1dccf392695a8c6380294ecdb21bc2e2231c859aa7fa314ec34e", 0x6e}], 0x1}}, {{&(0x7f0000002680)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002700)="baad461b5836f87219b3beec66950e59ec86076543ebaf919acbf3cd06bf66f0e4c763c40bca4b382ec80dcb8de25a3c7dfafe03fef29278ec516fc1d109501408332192aef40cb68a0127eb980324a6637ceb90e2489998d3c6aafd3e8989da0648da56422727dba498a2b2bb51bc8cf9efdd24b66a6b204f7475a98b171cbcc98a827bbe1611c6ed711def3f2e9c4d73674ca5b0e1bfa21656927fc3", 0x9d}], 0x1, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xb0, 0x4040810}}, {{&(0x7f0000002f00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000002f80)="28e7e141659f41e3e7fdcfdc029435a7fb5fb0541e66e03b728e3bbddefce883bf5d1ddf9d0086983f3cc76521f4d47281d66a0d32fedf93792b25f63c9dd6002754391c8e49a289bc3e21dd8ab8496c1880aff0d7f8a2114a0af907ba8bc7ffed739a7452207019f1b15ee15e0a81823fc6d513764439c2237010258914c3107f0f64c34ca66c3e4970e89abaeaf807330e567c5915e341a2b27549b6b033efde7b52c18edb29896ca0aab4170b23622f567daf63fe9177a9a8a106bbb754c7f9e5d076b8d0883832163129d9e4d231dea34743d437f0281d", 0xd9}, {&(0x7f0000003080)="579facec7678f305fde05c8bf62e791ba1fdb5e89cf2716d1e95a980ae1a6acd21ad6670d21b587f9704bf71deb78c576c4bd47230e19974efd9f61272affd077750abba947817215049419410472ae783d4df2ea359d0e96a888fd6", 0x5c}], 0x2, &(0x7f0000003380)=ANY=[@ANYBLOB='\x00', @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x160, 0x2000005}}], 0x4, 0x8000) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r2, r10, 0x0, 0x20000023896) 22:17:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x40, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) r2 = fcntl$dupfd(r0, 0x0, r1) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', r2, &(0x7f0000000140)='./file0/file0\x00', 0x1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 22:17:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc0000000000000000000000000b000014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setuid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) (async) r4 = socket$tipc(0x1e, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) (async) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000003340)='devices.allow\x00', 0x2, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="7d6ded75794ede7769cb48276bc9b6e69629bef6372839acfab948160dcc158be2611c5e181b0736ebb71f741266bf47312f38b720ad7f69e1a6ec91a0d6ad013f922b3bf509f2814df90ae154d1789f20d34c95ebe5fa1795669e790ab199e84286f4d8582969387ac8b83884c33814b42140b2dcb1537be2b7f36c594b8b92b5b48a8717ba05548e2b6690c68a00a510b58c51708dd5c8daf0c19481e8b721d813511f805cb366f64d4a517b8c1299e0", 0xb1}, {&(0x7f0000001300)="0af39e4bbbb53df695d07caffe592f7851462ff2913484a9ef267d5450dd8a5c7056b47a9ed36c3d45c4e27a2669cee79ec019ad6b01a1494d27f8baa829fbc776e70fd200d23194d9179794fb11f89216fc121695e8ce134f9cd2ddf5fb3215f797d8e848f329459c73c2e2c7d382b79d16bb101ebbfb0c3bffec1490a8b3a54dc7ae33687ff9a13d122d9db0457d1dd3ec68ef5f7d99e41c9911ac23370c929915c9d6193cbf2c44e96edfdf0ece617014059f9c83542e4f97c3f804ddf4d84469941bbd72cdaae05094eb39c044ec9e4392627ab15dc83fe702becb6cd13e28f15d4d58bb8f5bf80f0a99e5c85eb39198b8b652f65cd5", 0xf8}, {&(0x7f0000001400)="e00eb6d7f3a842fe58352c63e4f89c1b1cf39605d2e8aaf935f98bec1cb204bcec3b69eef49e3a8c4d734343328c5f73caecc5ce6e49594fe33714979e65d6009ec70f81bedbf3ed6c9157fdf5f01e37312ea6542b37d501cc4f94bf55447f3e816903d610df2c124eceeafbcef59cf0b350475232ec0342d131aa0aad90fae5b3fbac75c0bf1a0f9e06a9b5850efc9c4e2c6d68597ca55d1404a737dc5921cbdc0bb5161bd3c9a98573f4b9bc10d14a8e1a11ad86e1788d32a161632bf5fbcf05099d040689a9c00058e59a61fa", 0xce}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="fdcfb8fb68292635ff1e85f69a748642e6360d1190c067e51cde16dfd973acd45169da1c9402539c2bf284bc5ca9f76a7f84da35878bf450ab8ddc8938456b680d99e55e8f1215c4234323917dc0614218fdd964bef0dfef5435c751d7107bf43a83de", 0x63}], 0x6, 0x0, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="c5cc40e35a1a45c2b6e1ea6ec3e7a705c7d2e9bb095fa96f15576f5d84ead2c3593ee52069e596252107139be8e391e3572dfab7e292669e7ae9104e04b93baf9a476e620f2f580ed35371c21874f2ca8f3a117a1dccf392695a8c6380294ecdb21bc2e2231c859aa7fa314ec34e", 0x6e}], 0x1}}, {{&(0x7f0000002680)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002700)="baad461b5836f87219b3beec66950e59ec86076543ebaf919acbf3cd06bf66f0e4c763c40bca4b382ec80dcb8de25a3c7dfafe03fef29278ec516fc1d109501408332192aef40cb68a0127eb980324a6637ceb90e2489998d3c6aafd3e8989da0648da56422727dba498a2b2bb51bc8cf9efdd24b66a6b204f7475a98b171cbcc98a827bbe1611c6ed711def3f2e9c4d73674ca5b0e1bfa21656927fc3", 0x9d}], 0x1, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xb0, 0x4040810}}, {{&(0x7f0000002f00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000002f80)="28e7e141659f41e3e7fdcfdc029435a7fb5fb0541e66e03b728e3bbddefce883bf5d1ddf9d0086983f3cc76521f4d47281d66a0d32fedf93792b25f63c9dd6002754391c8e49a289bc3e21dd8ab8496c1880aff0d7f8a2114a0af907ba8bc7ffed739a7452207019f1b15ee15e0a81823fc6d513764439c2237010258914c3107f0f64c34ca66c3e4970e89abaeaf807330e567c5915e341a2b27549b6b033efde7b52c18edb29896ca0aab4170b23622f567daf63fe9177a9a8a106bbb754c7f9e5d076b8d0883832163129d9e4d231dea34743d437f0281d", 0xd9}, {&(0x7f0000003080)="579facec7678f305fde05c8bf62e791ba1fdb5e89cf2716d1e95a980ae1a6acd21ad6670d21b587f9704bf71deb78c576c4bd47230e19974efd9f61272affd077750abba947817215049419410472ae783d4df2ea359d0e96a888fd6", 0x5c}], 0x2, &(0x7f0000003380)=ANY=[@ANYBLOB='\x00', @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x160, 0x2000005}}], 0x4, 0x8000) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r2, r10, 0x0, 0x20000023896) 22:17:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc0000000000000000000000000d000014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:09 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x120) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="182000150000000427b0b71b99060af25272114448fd0091cd000000000000850000000e000000850000000e00000095d3080000001f556f681ac6b1e463440e36fae770facdb2e602fe59d76be47f88c287f826608a000000000000000000f4ad057e00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) dup2(r1, r0) 22:17:09 executing program 5: mkdir(0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="6c90caf65b1a3cf86a5afbc91815f38cf3dd18b7897e8ba74e3f613c29c1b4673f72ec37012271e3dbd17f09e4dbe3945ab91997f20a0580382269389dde50c1da625d00ae43b466f2b74e47911cef09775e9704e016d3e4a7c7e1c332cdf646b95ac037f4ec9987b11ad4cc", 0x6c}, {&(0x7f00000002c0)="6e4df010bcdaed84be7e67f2943b9c5f3c574653d10939d39cc5e87c9e4ee88184e21691c3836b16410e0fd92a0c86265dcea9c4f3ce5e1c15f03d664fe1db7dc945008ca3c9177c519026995a043ab58abcbd4a3b906012fa132be2722f9c20f497c963ff719f31d8342295cbb2dedb226cabc8788f44d33fda34ec6259d1882cfa95cd559028306a1f3d27f5234f37acb47b6977da24b01f5cca2a9e4652141c42aeed329e0f46a0fe0712b6458fa0a7459b7451af95ee6d57f7aadfb46c82cb28f8a43340869eab9869ad47375494dfbbde8e87c7125a8f1495971459bd63f93d4978cfceefcc7ac308082a314e8a1630109b174a9c553ae3c6", 0xfb}], 0x2, &(0x7f00000003c0)=[{0x30, 0xff, 0xe39, "21d872f4ba79358c42d51978f4a8cd2422df5190dfde215885bdaf48f7b8"}, {0x40, 0x6, 0x80000000, "2404f2ac7b58d121682fa20dedc43aff3773c5ede2600f58d065249181dc88f58c3ef6491796357fb568963c7b96"}, {0xe8, 0x110, 0x1, "28b844858e2956178044cbdfeec448d0eaaae2e8c2818c7469e247ee8708f662dbe1a30c9061662d84eaf911ea7dc5eaca101bb35a2e774a4a6169a625e556a2dacb04ab15fa0e77d026df21d23a75446b483a7737a512883fdf7bd99b09c0e51a93a49f5862eaa41969d7fd45e09ee4c44053b92acf8a0840d4ea0ae836d5bed1204025da7ef349c72596d543a47a440208073736e95bf4cfdd568811e6d1902706b3568915334f2335df1ef92ccb365dc0bda251b9407f59340164afe96f1cb722e5fcfb3c5a70477545f8e999735c1c04ee5f75"}], 0x158}}, {{&(0x7f0000000540)=@sco={0x1f, @none}, 0x80, &(0x7f0000000140)=[{&(0x7f00000005c0)="919963e310fc75b10a2b711c14a5ee83cf68a02e3317ee73e2aea3bc9d9cc8152301a95769ad300250ff343e6ae25cd31b0a4fa3e8f5de02af20cb8560b10781181832f9c43f182f90bce01c59974c1fb168154a0b0cfea8a75cfaad3ba8f1f7db4abc019a7f5a07eb6d8daadfcd82a5d7f05f6bb260ac6e61a6c519c3a3323ae0", 0x81}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/917], 0x328}}], 0x2, 0x4000880) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000400000000000000010000000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 27) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000010000014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000011000014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000021000014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc0000000000000000000000002f000014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1149.998600][ T829] FAULT_INJECTION: forcing a failure. [ 1149.998600][ T829] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.011810][ T829] CPU: 0 PID: 829 Comm: syz-executor.4 Not tainted 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1150.021944][ T829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1150.032008][ T829] Call Trace: [ 1150.035283][ T829] dump_stack_lvl+0x1e2/0x24b [ 1150.039937][ T829] ? panic+0x7d7/0x7d7 [ 1150.043982][ T829] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1150.049415][ T829] dump_stack+0x15/0x17 [ 1150.053566][ T829] should_fail+0x3c0/0x510 [ 1150.057968][ T829] ? blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 1150.063581][ T829] __should_failslab+0x9f/0xe0 [ 1150.068327][ T829] should_failslab+0x9/0x20 [ 1150.072806][ T829] __kmalloc+0x60/0x360 [ 1150.076940][ T829] ? blk_mq_hw_queue_to_node+0x101/0x120 [ 1150.082549][ T829] blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 1150.087984][ T829] ? cpumask_next+0x11/0x30 [ 1150.092463][ T829] ? blk_mq_sysfs_init+0x1c1/0x200 [ 1150.097560][ T829] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 1150.103425][ T829] ? blk_set_default_limits+0x17b/0x410 [ 1150.108945][ T829] ? blk_alloc_queue+0x574/0x640 [ 1150.113854][ T829] blk_mq_init_queue+0x6c/0xc0 [ 1150.118590][ T829] loop_add+0x270/0x760 [ 1150.122719][ T829] loop_control_ioctl+0x564/0x740 [ 1150.127735][ T829] ? preempt_schedule_notrace+0x140/0x140 [ 1150.133439][ T829] ? loop_remove+0xb0/0xb0 [ 1150.137838][ T829] ? __fget_files+0x310/0x370 [ 1150.142512][ T829] ? security_file_ioctl+0xb1/0xd0 [ 1150.147617][ T829] ? loop_remove+0xb0/0xb0 [ 1150.152010][ T829] __se_sys_ioctl+0x115/0x190 [ 1150.156663][ T829] __x64_sys_ioctl+0x7b/0x90 [ 1150.161230][ T829] do_syscall_64+0x34/0x70 [ 1150.165632][ T829] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1150.171506][ T829] RIP: 0033:0x7f7994738279 [ 1150.175899][ T829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1150.195488][ T829] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1150.203875][ T829] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1150.211819][ T829] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1150.219763][ T829] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.227706][ T829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.235662][ T829] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1150.254195][ T829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=829 comm=syz-executor.4 22:17:09 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e000000061c85a3adce2caf95d8ab6ecd134495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc0000000000000000000000003a000014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x40, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) r2 = fcntl$dupfd(r0, 0x0, r1) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', r2, &(0x7f0000000140)='./file0/file0\x00', 0x1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 22:17:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000030014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x40, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) r2 = fcntl$dupfd(r0, 0x0, r1) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', r2, &(0x7f0000000140)='./file0/file0\x00', 0x1) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x40, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) fcntl$dupfd(r0, 0x0, r1) (async) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', r2, &(0x7f0000000140)='./file0/file0\x00', 0x1) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r3, r4, 0x0, 0x20000023896) (async) 22:17:10 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x120) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="182000150000000427b0b71b99060af25272114448fd0091cd000000000000850000000e000000850000000e00000095d3080000001f556f681ac6b1e463440e36fae770facdb2e602fe59d76be47f88c287f826608a000000000000000000f4ad057e00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) dup2(r1, r0) mkdir(&(0x7f0000000240)='./file0\x00', 0x120) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="182000150000000427b0b71b99060af25272114448fd0091cd000000000000850000000e000000850000000e00000095d3080000001f556f681ac6b1e463440e36fae770facdb2e602fe59d76be47f88c287f826608a000000000000000000f4ad057e00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) dup2(r1, r0) (async) 22:17:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000050014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0xfffffffffffffffd, 0x8000000000000001) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000180)={0x18}, 0xfffffe0c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)) r3 = fsmount(0xffffffffffffffff, 0x1, 0x2) r4 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r4, &(0x7f0000000180)={0x18}, 0xfffffe0c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x6, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x1}], &(0x7f00000002c0)='syzkaller\x00', 0x80000000, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0xd, 0x1, 0x3f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}, 0x80) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 22:17:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 28) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:10 executing program 5: mkdir(0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="6c90caf65b1a3cf86a5afbc91815f38cf3dd18b7897e8ba74e3f613c29c1b4673f72ec37012271e3dbd17f09e4dbe3945ab91997f20a0580382269389dde50c1da625d00ae43b466f2b74e47911cef09775e9704e016d3e4a7c7e1c332cdf646b95ac037f4ec9987b11ad4cc", 0x6c}, {&(0x7f00000002c0)="6e4df010bcdaed84be7e67f2943b9c5f3c574653d10939d39cc5e87c9e4ee88184e21691c3836b16410e0fd92a0c86265dcea9c4f3ce5e1c15f03d664fe1db7dc945008ca3c9177c519026995a043ab58abcbd4a3b906012fa132be2722f9c20f497c963ff719f31d8342295cbb2dedb226cabc8788f44d33fda34ec6259d1882cfa95cd559028306a1f3d27f5234f37acb47b6977da24b01f5cca2a9e4652141c42aeed329e0f46a0fe0712b6458fa0a7459b7451af95ee6d57f7aadfb46c82cb28f8a43340869eab9869ad47375494dfbbde8e87c7125a8f1495971459bd63f93d4978cfceefcc7ac308082a314e8a1630109b174a9c553ae3c6", 0xfb}], 0x2, &(0x7f00000003c0)=[{0x30, 0xff, 0xe39, "21d872f4ba79358c42d51978f4a8cd2422df5190dfde215885bdaf48f7b8"}, {0x40, 0x6, 0x80000000, "2404f2ac7b58d121682fa20dedc43aff3773c5ede2600f58d065249181dc88f58c3ef6491796357fb568963c7b96"}, {0xe8, 0x110, 0x1, "28b844858e2956178044cbdfeec448d0eaaae2e8c2818c7469e247ee8708f662dbe1a30c9061662d84eaf911ea7dc5eaca101bb35a2e774a4a6169a625e556a2dacb04ab15fa0e77d026df21d23a75446b483a7737a512883fdf7bd99b09c0e51a93a49f5862eaa41969d7fd45e09ee4c44053b92acf8a0840d4ea0ae836d5bed1204025da7ef349c72596d543a47a440208073736e95bf4cfdd568811e6d1902706b3568915334f2335df1ef92ccb365dc0bda251b9407f59340164afe96f1cb722e5fcfb3c5a70477545f8e999735c1c04ee5f75"}], 0x158}}, {{&(0x7f0000000540)=@sco={0x1f, @none}, 0x80, &(0x7f0000000140)=[{&(0x7f00000005c0)="919963e310fc75b10a2b711c14a5ee83cf68a02e3317ee73e2aea3bc9d9cc8152301a95769ad300250ff343e6ae25cd31b0a4fa3e8f5de02af20cb8560b10781181832f9c43f182f90bce01c59974c1fb168154a0b0cfea8a75cfaad3ba8f1f7db4abc019a7f5a07eb6d8daadfcd82a5d7f05f6bb260ac6e61a6c519c3a3323ae0", 0x81}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/917], 0x328}}], 0x2, 0x4000880) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000400000000000000010000000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000060014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000070014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1150.860162][ T873] FAULT_INJECTION: forcing a failure. [ 1150.860162][ T873] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.873019][ T873] CPU: 0 PID: 873 Comm: syz-executor.4 Not tainted 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1150.883147][ T873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1150.893176][ T873] Call Trace: [ 1150.896500][ T873] dump_stack_lvl+0x1e2/0x24b [ 1150.901148][ T873] ? panic+0x7d7/0x7d7 [ 1150.905192][ T873] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1150.910627][ T873] ? ___ratelimit+0x423/0x580 [ 1150.915279][ T873] dump_stack+0x15/0x17 [ 1150.919409][ T873] should_fail+0x3c0/0x510 [ 1150.923799][ T873] ? blk_mq_realloc_hw_ctxs+0x802/0x1840 [ 1150.929406][ T873] __should_failslab+0x9f/0xe0 [ 1150.934142][ T873] should_failslab+0x9/0x20 [ 1150.938615][ T873] __kmalloc+0x60/0x360 [ 1150.942742][ T873] ? blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 1150.948346][ T873] blk_mq_realloc_hw_ctxs+0x802/0x1840 [ 1150.953779][ T873] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 1150.959643][ T873] ? blk_set_default_limits+0x17b/0x410 [ 1150.965177][ T873] ? blk_alloc_queue+0x574/0x640 [ 1150.970100][ T873] blk_mq_init_queue+0x6c/0xc0 [ 1150.974836][ T873] loop_add+0x270/0x760 [ 1150.978986][ T873] loop_control_ioctl+0x564/0x740 [ 1150.983992][ T873] ? loop_remove+0xb0/0xb0 [ 1150.988409][ T873] ? irqentry_exit+0x50/0x60 [ 1150.992988][ T873] ? sysvec_reschedule_ipi+0x84/0x160 [ 1150.998340][ T873] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1151.003988][ T873] ? do_vfs_ioctl+0xf6/0x1a90 [ 1151.008903][ T873] ? __se_sys_ioctl+0x109/0x190 [ 1151.013737][ T873] ? loop_remove+0xb0/0xb0 [ 1151.018147][ T873] __se_sys_ioctl+0x115/0x190 [ 1151.022807][ T873] __x64_sys_ioctl+0x7b/0x90 [ 1151.027382][ T873] do_syscall_64+0x34/0x70 [ 1151.031778][ T873] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1151.037645][ T873] RIP: 0033:0x7f7994738279 [ 1151.042042][ T873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1151.061621][ T873] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.070011][ T873] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1151.077959][ T873] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1151.085904][ T873] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1151.093847][ T873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1151.101792][ T873] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1151.120890][ T873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=873 comm=syz-executor.4 22:17:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e00000085ff03000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000140)='./file0\x00', 0x144) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x4000, 0x400, &(0x7f0000000240)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000340)='./file0\x00', 0x80) 22:17:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000090014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:10 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x120) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="182000150000000427b0b71b99060af25272114448fd0091cd000000000000850000000e000000850000000e00000095d3080000001f556f681ac6b1e463440e36fae770facdb2e602fe59d76be47f88c287f826608a000000000000000000f4ad057e00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x540c) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) dup2(r1, r0) 22:17:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000a0014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000b0014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000940c0014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000d0014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) (async) sendfile(r0, r1, &(0x7f0000000080)=0xfffffffffffffffd, 0x8000000000000001) (async) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000180)={0x18}, 0xfffffe0c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)) (async) r3 = fsmount(0xffffffffffffffff, 0x1, 0x2) (async) r4 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r4, &(0x7f0000000180)={0x18}, 0xfffffe0c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x6, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x1}], &(0x7f00000002c0)='syzkaller\x00', 0x80000000, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0xd, 0x1, 0x3f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}, 0x80) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 22:17:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 29) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:10 executing program 5: mkdir(0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="6c90caf65b1a3cf86a5afbc91815f38cf3dd18b7897e8ba74e3f613c29c1b4673f72ec37012271e3dbd17f09e4dbe3945ab91997f20a0580382269389dde50c1da625d00ae43b466f2b74e47911cef09775e9704e016d3e4a7c7e1c332cdf646b95ac037f4ec9987b11ad4cc", 0x6c}, {&(0x7f00000002c0)="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", 0xfb}], 0x2, &(0x7f00000003c0)=[{0x30, 0xff, 0xe39, "21d872f4ba79358c42d51978f4a8cd2422df5190dfde215885bdaf48f7b8"}, {0x40, 0x6, 0x80000000, "2404f2ac7b58d121682fa20dedc43aff3773c5ede2600f58d065249181dc88f58c3ef6491796357fb568963c7b96"}, {0xe8, 0x110, 0x1, "28b844858e2956178044cbdfeec448d0eaaae2e8c2818c7469e247ee8708f662dbe1a30c9061662d84eaf911ea7dc5eaca101bb35a2e774a4a6169a625e556a2dacb04ab15fa0e77d026df21d23a75446b483a7737a512883fdf7bd99b09c0e51a93a49f5862eaa41969d7fd45e09ee4c44053b92acf8a0840d4ea0ae836d5bed1204025da7ef349c72596d543a47a440208073736e95bf4cfdd568811e6d1902706b3568915334f2335df1ef92ccb365dc0bda251b9407f59340164afe96f1cb722e5fcfb3c5a70477545f8e999735c1c04ee5f75"}], 0x158}}, {{&(0x7f0000000540)=@sco={0x1f, @none}, 0x80, &(0x7f0000000140)=[{&(0x7f00000005c0)="919963e310fc75b10a2b711c14a5ee83cf68a02e3317ee73e2aea3bc9d9cc8152301a95769ad300250ff343e6ae25cd31b0a4fa3e8f5de02af20cb8560b10781181832f9c43f182f90bce01c59974c1fb168154a0b0cfea8a75cfaad3ba8f1f7db4abc019a7f5a07eb6d8daadfcd82a5d7f05f6bb260ac6e61a6c519c3a3323ae0", 0x81}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="88000000000000000d000000010100003bdee330abe63ee77516afe0cd2019689a77ba85429b9c2524b67589025ee1ff271064f534aa507ed85f5a483544f3c2d6ea483aae0dc2624ab67e219c8f03b94f2724cdde72f17747e8706f132c4df68891129b33cc5f52a29ed298477df345e1125df7d10b95298f9f5d224509fec467b2dbd7b9c99900f8009ddab54c00000c010000010100005d04acba958099760baa5226ae49152889d3716863e178cf210d1a42c269d5d73e1107f031aaf133e40a0da470f00e56af64107248b29613e3b7a6c8907296710efe7a7812933b3a2f1dc79c28238df52f30a3b21238092499261bbb3f5976a97d580c89addb4430a6a3c325bd8fb43a1d22ca7e4a733db33a623e15047905e28c75da9fbeec954db7c8d9a4850905008818b379c1c5dadb98ea8f79988cc0b8e0076d5f2dac2e15e721dea2e9fffef58f6a117cfeb3ab20e90c2baee88e1a4df287a29d70a8f02697430539320c04b431c397870e4bed0775151b1f67563fae11615baad6080000b800000000000000ff000000070000009cbd3043f5e637795822fa47d1d40484fff694a71f53b63346a03e8e7b980f5b03152691b790bdf3e75220971f97e38985a5d860c8d83de07d1d3c0613bee0dd8e6b796fbc041c73c47d6df1b56d66bf60dad62c86eea019e24b58d5fca8610a54bca23715af5b505e31c71e05d5548f452f64e21cf495dd3fa475bfa3343778589d2491e95fe3c648bed5bde9fda7e3cbda02e6d7e1bf5d65a37789211177ae89e9000000000000f00000000000000019010000030000003f04641eedf6a55d598f4780b28849fa2bf8392e1a86cd8622d1de68f6c4f0e64e2dba46dd6aa8f5584bc189740500ba360531c5167592350445146e9dd222716adef3429ca6d94767db6b076f0f8cd5a5a9f2dbd33518d033d86762a198d3862dcf182e21741c8a8c2a2b2b3b2f0c42817fe2c7e74aad12c8bbe3baedcabc0aea70e43333536342db2744aaf80f5631265f2f9afde4ca75071e0ad691010e1b382c2f49c96e3600924a57d92879b5e7226f6241fae88fbe0e007737efc3ace986126a85681bfede63b698c8c394000000000000abef9dacfecbf9934e91a8b79663b3e1a6ce438954a2a1b68726107a626701850cb9eaae750268d80300000000000000ebb31b05333ce8be3bf11451229a93cb367777a77b80e07c5b4f209b0d42b603f2fe8924626561d2e24094467c62ee4e84803bbd862cc4a79832f01b3e00"/917], 0x328}}], 0x2, 0x4000880) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000400000000000000010000000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000110014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000200014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1151.718234][ T930] FAULT_INJECTION: forcing a failure. [ 1151.718234][ T930] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.730858][ T930] CPU: 1 PID: 930 Comm: syz-executor.4 Not tainted 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1151.740985][ T930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1151.751017][ T930] Call Trace: [ 1151.754286][ T930] dump_stack_lvl+0x1e2/0x24b [ 1151.758937][ T930] ? panic+0x7d7/0x7d7 [ 1151.762985][ T930] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1151.768437][ T930] dump_stack+0x15/0x17 [ 1151.772569][ T930] should_fail+0x3c0/0x510 [ 1151.776959][ T930] ? sbitmap_init_node+0x148/0x3d0 [ 1151.782046][ T930] __should_failslab+0x9f/0xe0 [ 1151.786786][ T930] should_failslab+0x9/0x20 [ 1151.791264][ T930] __kmalloc+0x60/0x360 [ 1151.795394][ T930] sbitmap_init_node+0x148/0x3d0 [ 1151.800307][ T930] blk_mq_realloc_hw_ctxs+0x896/0x1840 [ 1151.805747][ T930] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 1151.811618][ T930] ? blk_set_default_limits+0x17b/0x410 [ 1151.817137][ T930] ? blk_alloc_queue+0x574/0x640 [ 1151.822046][ T930] blk_mq_init_queue+0x6c/0xc0 [ 1151.826786][ T930] loop_add+0x270/0x760 [ 1151.830916][ T930] loop_control_ioctl+0x564/0x740 [ 1151.835915][ T930] ? loop_remove+0xb0/0xb0 [ 1151.840305][ T930] ? __fget_files+0x310/0x370 [ 1151.844956][ T930] ? security_file_ioctl+0xb1/0xd0 [ 1151.850040][ T930] ? loop_remove+0xb0/0xb0 [ 1151.854427][ T930] __se_sys_ioctl+0x115/0x190 [ 1151.859079][ T930] __x64_sys_ioctl+0x7b/0x90 [ 1151.863645][ T930] do_syscall_64+0x34/0x70 [ 1151.868060][ T930] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1151.873926][ T930] RIP: 0033:0x7f7994738279 [ 1151.878318][ T930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1151.897895][ T930] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.906279][ T930] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1151.914224][ T930] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1151.922168][ T930] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1151.930112][ T930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1151.938063][ T930] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1151.948102][ T930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=930 comm=syz-executor.4 22:17:11 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e00000085ff03000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000140)='./file0\x00', 0x144) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x4000, 0x400, &(0x7f0000000240)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x80) 22:17:11 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x18) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnetconf={0x3c, 0x52, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xfffff52d}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_FORWARDING={0x8, 0x2, 0xcc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20028000}, 0x800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000210014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="00040000000000000000850000000e00000085001700000e00000095c90017c1b813ecd079bc0fe5a2799ab448a24fd1f8728c94465f15bf08abc4dcdd636328367fc907130cd228b7ca63e259b2f21fa81eda3709e3d5143ebdcaba03c7f9ff66caf65fea2f9b701660e400466f5f1bf6af2f283b63396f0d08df33e4000c3dbda95806f81de1524d9d9c77274da4f30771785b264084bb5ed39c906653832c114e490a4dddc250562fba61f20de07fe0ac38d3ae3819fa2ca73a2abe458104d627f8a8636baaeb61581e85cd53564b8163aa82128da2575cc771e8488196777f95b589864eff2234eab6c2452d9eca2f0e8053b7944b3860382027ce1b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000002f0014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000003a0014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc0000000000000000000000000c940014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (rerun: 32) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) (async) sendfile(r0, r1, &(0x7f0000000080)=0xfffffffffffffffd, 0x8000000000000001) (async) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000180)={0x18}, 0xfffffe0c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)) r3 = fsmount(0xffffffffffffffff, 0x1, 0x2) (async) r4 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r4, &(0x7f0000000180)={0x18}, 0xfffffe0c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x6, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x1}], &(0x7f00000002c0)='syzkaller\x00', 0x80000000, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0xd, 0x1, 0x3f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}, 0x80) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 22:17:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000020000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 30) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000028000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e8ee78063e11398f7000000850000ae8594550095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/30}) [ 1152.468323][ T949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1152.478159][ T949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1152.499385][ T960] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1152.509107][ T960] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1152.593647][ T965] FAULT_INJECTION: forcing a failure. [ 1152.593647][ T965] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.606483][ T965] CPU: 0 PID: 965 Comm: syz-executor.4 Not tainted 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1152.616611][ T965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1152.626638][ T965] Call Trace: [ 1152.629910][ T965] dump_stack_lvl+0x1e2/0x24b [ 1152.634561][ T965] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1152.639994][ T965] ? __do_softirq+0x596/0x596 [ 1152.644645][ T965] dump_stack+0x15/0x17 [ 1152.648776][ T965] should_fail+0x3c0/0x510 [ 1152.653167][ T965] ? blk_alloc_flush_queue+0x7a/0x250 [ 1152.658513][ T965] __should_failslab+0x9f/0xe0 [ 1152.663248][ T965] should_failslab+0x9/0x20 [ 1152.667723][ T965] kmem_cache_alloc_trace+0x3a/0x330 [ 1152.672981][ T965] blk_alloc_flush_queue+0x7a/0x250 [ 1152.678150][ T965] blk_mq_realloc_hw_ctxs+0xa81/0x1840 [ 1152.683583][ T965] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 1152.689450][ T965] ? blk_set_default_limits+0x17b/0x410 [ 1152.694967][ T965] ? blk_alloc_queue+0x574/0x640 [ 1152.699876][ T965] blk_mq_init_queue+0x6c/0xc0 [ 1152.704611][ T965] loop_add+0x270/0x760 [ 1152.708742][ T965] loop_control_ioctl+0x564/0x740 [ 1152.713737][ T965] ? loop_remove+0xb0/0xb0 [ 1152.718125][ T965] ? __fget_files+0x310/0x370 [ 1152.722778][ T965] ? security_file_ioctl+0xb1/0xd0 [ 1152.727861][ T965] ? loop_remove+0xb0/0xb0 [ 1152.732250][ T965] __se_sys_ioctl+0x115/0x190 [ 1152.736900][ T965] __x64_sys_ioctl+0x7b/0x90 [ 1152.741488][ T965] do_syscall_64+0x34/0x70 [ 1152.745877][ T965] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1152.751739][ T965] RIP: 0033:0x7f7994738279 [ 1152.756131][ T965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1152.775727][ T965] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1152.784129][ T965] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1152.792081][ T965] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1152.800032][ T965] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1152.807990][ T965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1152.815944][ T965] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1152.834544][ T965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=965 comm=syz-executor.4 22:17:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000034000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e00000085ff03000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x144) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x4000, 0x400, &(0x7f0000000240)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x80) 22:17:12 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x18) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnetconf={0x3c, 0x52, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xfffff52d}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_FORWARDING={0x8, 0x2, 0xcc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20028000}, 0x800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x18) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000140)=0xc) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnetconf={0x3c, 0x52, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xfffff52d}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_FORWARDING={0x8, 0x2, 0xcc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20028000}, 0x800) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0x20000023896) (async) 22:17:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="00040000000000000000850000000e00000085001700000e00000095c90017c1b813ecd079bc0fe5a2799ab448a24fd1f8728c94465f15bf08abc4dcdd636328367fc907130cd228b7ca63e259b2f21fa81eda3709e3d5143ebdcaba03c7f9ff66caf65fea2f9b701660e400466f5f1bf6af2f283b63396f0d08df33e4000c3dbda95806f81de1524d9d9c77274da4f30771785b264084bb5ed39c906653832c114e490a4dddc250562fba61f20de07fe0ac38d3ae3819fa2ca73a2abe458104d627f8a8636baaeb61581e85cd53564b8163aa82128da2575cc771e8488196777f95b589864eff2234eab6c2452d9eca2f0e8053b7944b3860382027ce1b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000020014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000030014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000040014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000050014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000060014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1152.982742][ T967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1152.992706][ T967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 22:17:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 31) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000070014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e8ee78063e11398f7000000850000ae8594550095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async, rerun: 32) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) (rerun: 32) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/30}) 22:17:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000080014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1153.426770][ T1006] FAULT_INJECTION: forcing a failure. [ 1153.426770][ T1006] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.439511][ T1006] CPU: 0 PID: 1006 Comm: syz-executor.4 Not tainted 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1153.449726][ T1006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1153.459753][ T1006] Call Trace: [ 1153.463021][ T1006] dump_stack_lvl+0x1e2/0x24b [ 1153.467673][ T1006] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1153.473107][ T1006] dump_stack+0x15/0x17 [ 1153.477343][ T1006] should_fail+0x3c0/0x510 [ 1153.481759][ T1006] ? blk_alloc_flush_queue+0xe0/0x250 [ 1153.487121][ T1006] __should_failslab+0x9f/0xe0 [ 1153.491867][ T1006] should_failslab+0x9/0x20 [ 1153.496345][ T1006] __kmalloc+0x60/0x360 [ 1153.500478][ T1006] ? kmem_cache_alloc_trace+0x1dd/0x330 [ 1153.506012][ T1006] ? blk_alloc_flush_queue+0x7a/0x250 [ 1153.511381][ T1006] blk_alloc_flush_queue+0xe0/0x250 [ 1153.516568][ T1006] blk_mq_realloc_hw_ctxs+0xa81/0x1840 [ 1153.522018][ T1006] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 1153.527887][ T1006] ? blk_set_default_limits+0x17b/0x410 [ 1153.533407][ T1006] ? blk_alloc_queue+0x574/0x640 [ 1153.538319][ T1006] blk_mq_init_queue+0x6c/0xc0 [ 1153.543058][ T1006] loop_add+0x270/0x760 [ 1153.547186][ T1006] loop_control_ioctl+0x564/0x740 [ 1153.552184][ T1006] ? loop_remove+0xb0/0xb0 [ 1153.556575][ T1006] ? irqentry_exit+0x50/0x60 [ 1153.561138][ T1006] ? sysvec_reschedule_ipi+0x84/0x160 [ 1153.566499][ T1006] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1153.572107][ T1006] ? do_vfs_ioctl+0xf6/0x1a90 [ 1153.576755][ T1006] ? __se_sys_ioctl+0x109/0x190 [ 1153.581579][ T1006] ? loop_remove+0xb0/0xb0 [ 1153.585966][ T1006] __se_sys_ioctl+0x115/0x190 [ 1153.590615][ T1006] __x64_sys_ioctl+0x7b/0x90 [ 1153.595178][ T1006] do_syscall_64+0x34/0x70 [ 1153.599570][ T1006] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1153.605432][ T1006] RIP: 0033:0x7f7994738279 [ 1153.609824][ T1006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1153.629399][ T1006] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.637786][ T1006] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1153.645729][ T1006] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1153.653672][ T1006] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1153.661614][ T1006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1153.669575][ T1006] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1153.688310][ T1006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1006 comm=syz-executor.4 22:17:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18002300000000041200000000000000850000050e000000000000000e00000094"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:13 executing program 5: mkdir(0x0, 0x0) (async, rerun: 32) mkdir(0x0, 0x5a) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x18) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnetconf={0x3c, 0x52, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xfffff52d}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_FORWARDING={0x8, 0x2, 0xcc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20028000}, 0x800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:13 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="00040000000000000000850000000e00000085001700000e00000095c90017c1b813ecd079bc0fe5a2799ab448a24fd1f8728c94465f15bf08abc4dcdd636328367fc907130cd228b7ca63e259b2f21fa81eda3709e3d5143ebdcaba03c7f9ff66caf65fea2f9b701660e400466f5f1bf6af2f283b63396f0d08df33e4000c3dbda95806f81de1524d9d9c77274da4f30771785b264084bb5ed39c906653832c114e490a4dddc250562fba61f20de07fe0ac38d3ae3819fa2ca73a2abe458104d627f8a8636baaeb61581e85cd53564b8163aa82128da2575cc771e8488196777f95b589864eff2234eab6c2452d9eca2f0e8053b7944b3860382027ce1b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000090014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:13 executing program 0: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000a0014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000b0014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000d0014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 32) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000100014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e8ee78063e11398f7000000850000ae8594550095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/30}) 22:17:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000110014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1154.275587][ T1042] FAULT_INJECTION: forcing a failure. [ 1154.275587][ T1042] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.288345][ T1042] CPU: 0 PID: 1042 Comm: syz-executor.4 Not tainted 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1154.298556][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1154.308582][ T1042] Call Trace: [ 1154.311851][ T1042] dump_stack_lvl+0x1e2/0x24b [ 1154.316500][ T1042] ? panic+0x7d7/0x7d7 [ 1154.320542][ T1042] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1154.325975][ T1042] ? __kasan_check_read+0x11/0x20 [ 1154.330975][ T1042] ? preempt_schedule_irq+0xef/0x140 [ 1154.336239][ T1042] dump_stack+0x15/0x17 [ 1154.340366][ T1042] should_fail+0x3c0/0x510 [ 1154.344756][ T1042] ? __alloc_disk_node+0x75/0x330 [ 1154.349755][ T1042] __should_failslab+0x9f/0xe0 [ 1154.354495][ T1042] should_failslab+0x9/0x20 [ 1154.358974][ T1042] kmem_cache_alloc_trace+0x3a/0x330 [ 1154.364239][ T1042] __alloc_disk_node+0x75/0x330 [ 1154.369061][ T1042] loop_add+0x341/0x760 [ 1154.373189][ T1042] loop_control_ioctl+0x564/0x740 [ 1154.378186][ T1042] ? loop_remove+0xb0/0xb0 [ 1154.382573][ T1042] ? __fget_files+0x310/0x370 [ 1154.387227][ T1042] ? security_file_ioctl+0xb1/0xd0 [ 1154.392311][ T1042] ? loop_remove+0xb0/0xb0 [ 1154.396702][ T1042] __se_sys_ioctl+0x115/0x190 [ 1154.401353][ T1042] __x64_sys_ioctl+0x7b/0x90 [ 1154.405917][ T1042] do_syscall_64+0x34/0x70 [ 1154.410305][ T1042] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1154.416169][ T1042] RIP: 0033:0x7f7994738279 [ 1154.420557][ T1042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1154.440132][ T1042] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.448519][ T1042] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1154.456464][ T1042] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1154.464423][ T1042] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1154.472371][ T1042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1154.480315][ T1042] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1154.499422][ T1042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1042 comm=syz-executor.4 22:17:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000210014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee00}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18002300000000041200000000000000850000050e000000000000000e00000094"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:14 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:14 executing program 0: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000002f0014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000003a0014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000314000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 33) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6b05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd113825e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f29083e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d7b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13603b73157602100fb20b99306a7927d0c710d6ce4c8", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000514000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000614000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000714000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000914000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1155.121293][ T1074] FAULT_INJECTION: forcing a failure. [ 1155.121293][ T1074] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.133922][ T1074] CPU: 1 PID: 1074 Comm: syz-executor.4 Not tainted 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1155.144144][ T1074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1155.154184][ T1074] Call Trace: [ 1155.157463][ T1074] dump_stack_lvl+0x1e2/0x24b [ 1155.162123][ T1074] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1155.167562][ T1074] ? pcpu_memcg_post_alloc_hook+0x1c8/0x340 [ 1155.173431][ T1074] dump_stack+0x15/0x17 [ 1155.177558][ T1074] should_fail+0x3c0/0x510 [ 1155.181950][ T1074] ? disk_expand_part_tbl+0x1b9/0x3f0 [ 1155.187293][ T1074] __should_failslab+0x9f/0xe0 [ 1155.192033][ T1074] should_failslab+0x9/0x20 [ 1155.196509][ T1074] __kmalloc+0x60/0x360 [ 1155.200638][ T1074] disk_expand_part_tbl+0x1b9/0x3f0 [ 1155.205809][ T1074] __alloc_disk_node+0x112/0x330 [ 1155.210719][ T1074] loop_add+0x341/0x760 [ 1155.214850][ T1074] loop_control_ioctl+0x564/0x740 [ 1155.219847][ T1074] ? loop_remove+0xb0/0xb0 [ 1155.224235][ T1074] ? __fget_files+0x310/0x370 [ 1155.228885][ T1074] ? security_file_ioctl+0xb1/0xd0 [ 1155.233971][ T1074] ? loop_remove+0xb0/0xb0 [ 1155.238359][ T1074] __se_sys_ioctl+0x115/0x190 [ 1155.243013][ T1074] __x64_sys_ioctl+0x7b/0x90 [ 1155.247577][ T1074] do_syscall_64+0x34/0x70 [ 1155.251968][ T1074] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1155.257833][ T1074] RIP: 0033:0x7f7994738279 [ 1155.262228][ T1074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1155.281803][ T1074] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1155.290213][ T1074] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1155.298161][ T1074] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1155.306107][ T1074] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1155.314052][ T1074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1155.321996][ T1074] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1155.332032][ T1074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1074 comm=syz-executor.4 22:17:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee00}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee00}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000a14000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:14 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:14 executing program 0: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18002300000000041200000000000000850000050e000000000000000e00000094"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000b14000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000940c14000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000d14000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:15 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x2000, &(0x7f0000000280)={[{@nfs_export_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_on}, {@default_permissions}, {@xino_on}], [{@measure}, {@obj_type={'obj_type', 0x3d, '/dev/ttyS3\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/timer_list\x00'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@appraise}, {@euid_gt={'euid>', r3}}, {@euid_lt={'euid<', r1}}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 22:17:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 34) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee00}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:15 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x2000, &(0x7f0000000280)={[{@nfs_export_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_on}, {@default_permissions}, {@xino_on}], [{@measure}, {@obj_type={'obj_type', 0x3d, '/dev/ttyS3\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/timer_list\x00'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@appraise}, {@euid_gt={'euid>', r3}}, {@euid_lt={'euid<', r1}}]}) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 22:17:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000001114000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000002014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1155.974681][ T1124] FAULT_INJECTION: forcing a failure. [ 1155.974681][ T1124] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.987462][ T1124] CPU: 0 PID: 1124 Comm: syz-executor.4 Not tainted 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1155.997677][ T1124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1156.007707][ T1124] Call Trace: [ 1156.010977][ T1124] dump_stack_lvl+0x1e2/0x24b [ 1156.015642][ T1124] ? panic+0x7d7/0x7d7 [ 1156.019681][ T1124] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1156.025111][ T1124] ? find_next_bit+0xd6/0x120 [ 1156.029760][ T1124] ? cpumask_next+0x11/0x30 [ 1156.034238][ T1124] dump_stack+0x15/0x17 [ 1156.038373][ T1124] should_fail+0x3c0/0x510 [ 1156.042763][ T1124] ? percpu_ref_init+0xd0/0x340 [ 1156.047588][ T1124] __should_failslab+0x9f/0xe0 [ 1156.052338][ T1124] should_failslab+0x9/0x20 [ 1156.056814][ T1124] kmem_cache_alloc_trace+0x3a/0x330 [ 1156.062076][ T1124] percpu_ref_init+0xd0/0x340 [ 1156.066723][ T1124] ? hd_ref_init+0x50/0x50 [ 1156.071113][ T1124] hd_ref_init+0x27/0x50 [ 1156.075327][ T1124] __alloc_disk_node+0x1be/0x330 [ 1156.080236][ T1124] loop_add+0x341/0x760 [ 1156.084365][ T1124] loop_control_ioctl+0x564/0x740 [ 1156.089360][ T1124] ? loop_remove+0xb0/0xb0 [ 1156.093748][ T1124] ? irqentry_exit+0x50/0x60 [ 1156.098331][ T1124] ? sysvec_reschedule_ipi+0x84/0x160 [ 1156.103700][ T1124] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1156.109321][ T1124] ? do_vfs_ioctl+0xf6/0x1a90 [ 1156.113976][ T1124] ? loop_remove+0xb0/0xb0 [ 1156.118365][ T1124] __se_sys_ioctl+0x115/0x190 [ 1156.123017][ T1124] __x64_sys_ioctl+0x7b/0x90 [ 1156.127583][ T1124] do_syscall_64+0x34/0x70 [ 1156.131974][ T1124] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1156.137837][ T1124] RIP: 0033:0x7f7994738279 [ 1156.142227][ T1124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1156.161838][ T1124] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1156.170233][ T1124] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1156.178183][ T1124] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1156.186139][ T1124] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1156.194111][ T1124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1156.202066][ T1124] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1156.223078][ T1124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1124 comm=syz-executor.4 22:17:15 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:15 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000002114000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000002f14000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000003a14000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000c9414000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000214000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 35) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000314000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x2000, &(0x7f0000000280)={[{@nfs_export_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_on}, {@default_permissions}, {@xino_on}], [{@measure}, {@obj_type={'obj_type', 0x3d, '/dev/ttyS3\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/timer_list\x00'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@appraise}, {@euid_gt={'euid>', r3}}, {@euid_lt={'euid<', r1}}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 32) sendfile(r4, r5, 0x0, 0x20000023896) 22:17:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x434300, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000414000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1156.828343][ T1157] FAULT_INJECTION: forcing a failure. [ 1156.828343][ T1157] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.841124][ T1157] CPU: 0 PID: 1157 Comm: syz-executor.4 Not tainted 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1156.851337][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1156.861368][ T1157] Call Trace: [ 1156.864636][ T1157] dump_stack_lvl+0x1e2/0x24b [ 1156.869302][ T1157] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1156.874750][ T1157] dump_stack+0x15/0x17 [ 1156.878880][ T1157] should_fail+0x3c0/0x510 [ 1156.883271][ T1157] ? rand_initialize_disk+0x4f/0xa8 [ 1156.888446][ T1157] __should_failslab+0x9f/0xe0 [ 1156.893183][ T1157] should_failslab+0x9/0x20 [ 1156.897662][ T1157] kmem_cache_alloc_trace+0x3a/0x330 [ 1156.902919][ T1157] ? __kasan_check_write+0x14/0x20 [ 1156.908003][ T1157] ? percpu_ref_init+0x237/0x340 [ 1156.912912][ T1157] ? hd_ref_init+0x50/0x50 [ 1156.917300][ T1157] rand_initialize_disk+0x4f/0xa8 [ 1156.922297][ T1157] __alloc_disk_node+0x29a/0x330 [ 1156.927206][ T1157] loop_add+0x341/0x760 [ 1156.931356][ T1157] loop_control_ioctl+0x564/0x740 [ 1156.936372][ T1157] ? loop_remove+0xb0/0xb0 [ 1156.940787][ T1157] ? __fget_files+0x310/0x370 [ 1156.945448][ T1157] ? security_file_ioctl+0xb1/0xd0 [ 1156.950533][ T1157] ? loop_remove+0xb0/0xb0 [ 1156.954922][ T1157] __se_sys_ioctl+0x115/0x190 [ 1156.959581][ T1157] __x64_sys_ioctl+0x7b/0x90 [ 1156.964148][ T1157] do_syscall_64+0x34/0x70 [ 1156.968536][ T1157] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1156.974403][ T1157] RIP: 0033:0x7f7994738279 [ 1156.978793][ T1157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1156.998389][ T1157] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1157.006796][ T1157] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1157.014750][ T1157] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1157.022700][ T1157] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.030646][ T1157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.038594][ T1157] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1157.114348][ T1157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1157 comm=syz-executor.4 [ 1157.141541][T26548] udevd[26548]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:16 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e0000009535f47b4dd4aabd0605f31bdd5460c8cfc59a200aa8da4ec2ee2ae7f4b6974975f5800095db81a439b93110999b904fc35b39e50b17ded2cd94f9857f8c7d9d4f7bca718e7fabc8e60f70f7329ba203c25fdfc07e5fb9ecda614c6974878474"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000514000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:16 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000040)) open_tree(r1, &(0x7f0000000140)='./file0\x00', 0x8001) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000614000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:16 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 32) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000714000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 36) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000814000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x434300, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x434300, 0x0) (async) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:16 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x4000, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000914000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1157.688894][ T1189] FAULT_INJECTION: forcing a failure. [ 1157.688894][ T1189] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.701762][ T1189] CPU: 0 PID: 1189 Comm: syz-executor.4 Not tainted 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1157.711976][ T1189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1157.722005][ T1189] Call Trace: [ 1157.725274][ T1189] dump_stack_lvl+0x1e2/0x24b [ 1157.729923][ T1189] ? panic+0x7d7/0x7d7 [ 1157.733965][ T1189] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1157.739400][ T1189] ? __schedule+0x86e/0xc00 [ 1157.743877][ T1189] ? memset+0x35/0x40 [ 1157.747842][ T1189] dump_stack+0x15/0x17 [ 1157.751970][ T1189] should_fail+0x3c0/0x510 [ 1157.756356][ T1189] ? device_create+0x11d/0x2e0 [ 1157.761092][ T1189] __should_failslab+0x9f/0xe0 [ 1157.765828][ T1189] should_failslab+0x9/0x20 [ 1157.770303][ T1189] kmem_cache_alloc_trace+0x3a/0x330 [ 1157.775559][ T1189] ? preempt_schedule_irq+0xef/0x140 [ 1157.780831][ T1189] device_create+0x11d/0x2e0 [ 1157.785399][ T1189] ? irqentry_exit+0x50/0x60 [ 1157.789961][ T1189] ? sysvec_reschedule_ipi+0x84/0x160 [ 1157.795303][ T1189] ? root_device_unregister+0x80/0x80 [ 1157.800648][ T1189] bdi_register_va+0x94/0x600 [ 1157.805297][ T1189] bdi_register+0xd1/0x120 [ 1157.809687][ T1189] ? __device_add_disk+0x536/0x11d0 [ 1157.814856][ T1189] ? bdi_register_va+0x600/0x600 [ 1157.819780][ T1189] ? __kasan_check_read+0x11/0x20 [ 1157.824778][ T1189] ? blk_alloc_devt+0xd4/0x320 [ 1157.829524][ T1189] __device_add_disk+0x5cb/0x11d0 [ 1157.834525][ T1189] ? device_add_disk+0x40/0x40 [ 1157.839263][ T1189] ? sysvec_reschedule_ipi+0x84/0x160 [ 1157.844606][ T1189] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1157.850214][ T1189] ? vsnprintf+0x1bf3/0x1cd0 [ 1157.854778][ T1189] device_add_disk+0x2a/0x40 [ 1157.859358][ T1189] loop_add+0x58f/0x760 [ 1157.863494][ T1189] loop_control_ioctl+0x564/0x740 [ 1157.868503][ T1189] ? sysvec_reschedule_ipi+0x84/0x160 [ 1157.873846][ T1189] ? loop_remove+0xb0/0xb0 [ 1157.878237][ T1189] ? __fget_files+0x310/0x370 [ 1157.882890][ T1189] ? security_file_ioctl+0xb1/0xd0 [ 1157.887975][ T1189] ? loop_remove+0xb0/0xb0 [ 1157.892363][ T1189] __se_sys_ioctl+0x115/0x190 [ 1157.897017][ T1189] __x64_sys_ioctl+0x7b/0x90 [ 1157.901580][ T1189] do_syscall_64+0x34/0x70 [ 1157.905970][ T1189] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1157.911835][ T1189] RIP: 0033:0x7f7994738279 [ 1157.916227][ T1189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1157.935817][ T1189] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1157.944208][ T1189] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1157.952153][ T1189] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1157.960098][ T1189] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.968045][ T1189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.975990][ T1189] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1157.984635][ T1189] ------------[ cut here ]------------ [ 1157.990289][ T1189] WARNING: CPU: 0 PID: 1189 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1157.999469][ T1189] Modules linked in: [ 1158.003519][ T1189] CPU: 0 PID: 1189 Comm: syz-executor.4 Not tainted 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1158.013888][ T1189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1158.024120][ T1189] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1158.030058][ T1189] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1158.049842][ T1189] RSP: 0018:ffffc900017e7bc0 EFLAGS: 00010283 [ 1158.056095][ T1189] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1158.064194][ T1189] RDX: ffffc90009966000 RSI: 000000000002b2e9 RDI: 000000000002b2ea [ 1158.072313][ T1189] RBP: ffffc900017e7d08 R08: ffffffff824062e6 R09: fffffbfff0c85873 [ 1158.080429][ T1189] R10: fffffbfff0c85873 R11: 1ffffffff0c85872 R12: 0000000000000007 [ 1158.088571][ T1189] R13: ffff888116eac000 R14: ffff88810b207338 R15: ffff88810b207000 [ 1158.096695][ T1189] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1158.105771][ T1189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1158.112479][ T1189] CR2: 00007f799386bff8 CR3: 0000000119f90000 CR4: 00000000003506b0 [ 1158.120594][ T1189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1158.128707][ T1189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1158.136823][ T1189] Call Trace: [ 1158.140251][ T1189] ? device_add_disk+0x40/0x40 [ 1158.145197][ T1189] ? sysvec_reschedule_ipi+0x84/0x160 [ 1158.150749][ T1189] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1158.156533][ T1189] ? vsnprintf+0x1bf3/0x1cd0 [ 1158.161250][ T1189] device_add_disk+0x2a/0x40 [ 1158.166084][ T1189] loop_add+0x58f/0x760 [ 1158.170383][ T1189] loop_control_ioctl+0x564/0x740 [ 1158.175568][ T1189] ? sysvec_reschedule_ipi+0x84/0x160 [ 1158.181079][ T1189] ? loop_remove+0xb0/0xb0 [ 1158.185644][ T1189] ? __fget_files+0x310/0x370 [ 1158.190467][ T1189] ? security_file_ioctl+0xb1/0xd0 [ 1158.195715][ T1189] ? loop_remove+0xb0/0xb0 [ 1158.200255][ T1189] __se_sys_ioctl+0x115/0x190 [ 1158.205084][ T1189] __x64_sys_ioctl+0x7b/0x90 [ 1158.209805][ T1189] do_syscall_64+0x34/0x70 [ 1158.214353][ T1189] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1158.220386][ T1189] RIP: 0033:0x7f7994738279 [ 1158.224960][ T1189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1158.244704][ T1189] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1158.253274][ T1189] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1158.261384][ T1189] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1158.269490][ T1189] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.277594][ T1189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1158.285732][ T1189] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1158.293837][ T1189] ---[ end trace b78cd69f8ad74e4f ]--- [ 1158.369296][ T1189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1189 comm=syz-executor.4 [ 1158.388652][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:17 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e0000009535f47b4dd4aabd0605f31bdd5460c8cfc59a200aa8da4ec2ee2ae7f4b6974975f5800095db81a439b93110999b904fc35b39e50b17ded2cd94f9857f8c7d9d4f7bca718e7fabc8e60f70f7329ba203c25fdfc07e5fb9ecda614c6974878474"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000a14000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000040)) (async) open_tree(r1, &(0x7f0000000140)='./file0\x00', 0x8001) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000b14000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x434300, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x434300, 0x0) (async) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000d14000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 37) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000001014000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000001114000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000002114000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:17 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x4000, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000002f14000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1158.607612][ T1236] FAULT_INJECTION: forcing a failure. [ 1158.607612][ T1236] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.620376][ T1236] CPU: 0 PID: 1236 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1158.631979][ T1236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1158.642005][ T1236] Call Trace: [ 1158.645275][ T1236] dump_stack_lvl+0x1e2/0x24b [ 1158.649925][ T1236] ? panic+0x7d7/0x7d7 [ 1158.653968][ T1236] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1158.660019][ T1236] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1158.665452][ T1236] ? preempt_schedule+0xd9/0xe0 [ 1158.670277][ T1236] dump_stack+0x15/0x17 [ 1158.674403][ T1236] should_fail+0x3c0/0x510 [ 1158.678807][ T1236] ? kvasprintf_const+0x139/0x180 [ 1158.683808][ T1236] __should_failslab+0x9f/0xe0 [ 1158.688544][ T1236] should_failslab+0x9/0x20 [ 1158.693026][ T1236] __kmalloc_track_caller+0x5f/0x350 [ 1158.698284][ T1236] ? __hrtimer_init+0x17b/0x260 [ 1158.703109][ T1236] kstrdup_const+0x55/0x90 [ 1158.707496][ T1236] kvasprintf_const+0x139/0x180 [ 1158.712319][ T1236] kobject_set_name_vargs+0x61/0x120 [ 1158.717579][ T1236] device_create+0x222/0x2e0 [ 1158.722142][ T1236] ? root_device_unregister+0x80/0x80 [ 1158.727487][ T1236] ? switch_mm_irqs_off+0x2ca/0x990 [ 1158.732657][ T1236] ? __this_cpu_preempt_check+0x13/0x20 [ 1158.738176][ T1236] bdi_register_va+0x94/0x600 [ 1158.742829][ T1236] bdi_register+0xd1/0x120 [ 1158.747220][ T1236] ? __device_add_disk+0x536/0x11d0 [ 1158.752392][ T1236] ? bdi_register_va+0x600/0x600 [ 1158.757302][ T1236] ? __kasan_check_read+0x11/0x20 [ 1158.762297][ T1236] ? blk_alloc_devt+0xd4/0x320 [ 1158.767034][ T1236] __device_add_disk+0x5cb/0x11d0 [ 1158.772035][ T1236] ? device_add_disk+0x40/0x40 [ 1158.776775][ T1236] ? sysvec_reschedule_ipi+0x84/0x160 [ 1158.782135][ T1236] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1158.787744][ T1236] ? vsnprintf+0x1bf3/0x1cd0 [ 1158.792307][ T1236] device_add_disk+0x2a/0x40 [ 1158.796883][ T1236] loop_add+0x58f/0x760 [ 1158.801012][ T1236] loop_control_ioctl+0x564/0x740 [ 1158.806024][ T1236] ? loop_remove+0xb0/0xb0 [ 1158.810411][ T1236] ? irqentry_exit+0x50/0x60 [ 1158.814973][ T1236] ? sysvec_reschedule_ipi+0x84/0x160 [ 1158.820318][ T1236] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1158.825924][ T1236] ? loop_remove+0xb0/0xb0 [ 1158.830315][ T1236] __se_sys_ioctl+0x115/0x190 [ 1158.834974][ T1236] __x64_sys_ioctl+0x7b/0x90 [ 1158.839534][ T1236] do_syscall_64+0x34/0x70 [ 1158.843922][ T1236] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1158.849786][ T1236] RIP: 0033:0x7f7994738279 [ 1158.854176][ T1236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1158.873753][ T1236] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1158.882139][ T1236] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1158.890087][ T1236] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1158.898031][ T1236] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.905974][ T1236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1158.913920][ T1236] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1158.922540][ T1236] ------------[ cut here ]------------ [ 1158.928158][ T1236] WARNING: CPU: 0 PID: 1236 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1158.937304][ T1236] Modules linked in: [ 1158.941349][ T1236] CPU: 0 PID: 1236 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1158.953108][ T1236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1158.963318][ T1236] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1158.969263][ T1236] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1158.989128][ T1236] RSP: 0018:ffffc90001877bc0 EFLAGS: 00010283 [ 1158.995369][ T1236] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1159.003485][ T1236] RDX: ffffc90009966000 RSI: 000000000002e989 RDI: 000000000002e98a [ 1159.011611][ T1236] RBP: ffffc90001877d08 R08: ffffffff824062e6 R09: 0000000000000003 [ 1159.019744][ T1236] R10: fffff5200030ee85 R11: 1ffff9200030ee84 R12: 0000000000000007 [ 1159.027867][ T1236] R13: ffff88810b205000 R14: ffff88810b207338 R15: ffff88810b207000 [ 1159.035984][ T1236] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1159.045047][ T1236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1159.051785][ T1236] CR2: 00007f799386bff8 CR3: 000000011207c000 CR4: 00000000003506b0 [ 1159.059929][ T1236] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1159.068051][ T1236] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1159.076201][ T1236] Call Trace: [ 1159.079669][ T1236] ? device_add_disk+0x40/0x40 [ 1159.084556][ T1236] ? sysvec_reschedule_ipi+0x84/0x160 [ 1159.090080][ T1236] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1159.095868][ T1236] ? vsnprintf+0x1bf3/0x1cd0 [ 1159.100581][ T1236] device_add_disk+0x2a/0x40 [ 1159.105364][ T1236] loop_add+0x58f/0x760 [ 1159.109657][ T1236] loop_control_ioctl+0x564/0x740 [ 1159.114806][ T1236] ? loop_remove+0xb0/0xb0 [ 1159.119369][ T1236] ? irqentry_exit+0x50/0x60 [ 1159.124082][ T1236] ? sysvec_reschedule_ipi+0x84/0x160 [ 1159.129589][ T1236] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1159.135388][ T1236] ? loop_remove+0xb0/0xb0 [ 1159.139933][ T1236] __se_sys_ioctl+0x115/0x190 [ 1159.144741][ T1236] __x64_sys_ioctl+0x7b/0x90 [ 1159.149470][ T1236] do_syscall_64+0x34/0x70 [ 1159.154030][ T1236] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1159.160056][ T1236] RIP: 0033:0x7f7994738279 [ 1159.164595][ T1236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1159.184397][ T1236] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1159.192985][ T1236] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1159.201151][ T1236] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1159.209304][ T1236] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.217436][ T1236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1159.225599][ T1236] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1159.233749][ T1236] ---[ end trace b78cd69f8ad74e50 ]--- [ 1159.276460][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1159.309682][ T1236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1236 comm=syz-executor.4 22:17:18 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e0000009535f47b4dd4aabd0605f31bdd5460c8cfc59a200aa8da4ec2ee2ae7f4b6974975f5800095db81a439b93110999b904fc35b39e50b17ded2cd94f9857f8c7d9d4f7bca718e7fabc8e60f70f7329ba203c25fdfc07e5fb9ecda614c6974878474"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e0000009535f47b4dd4aabd0605f31bdd5460c8cfc59a200aa8da4ec2ee2ae7f4b6974975f5800095db81a439b93110999b904fc35b39e50b17ded2cd94f9857f8c7d9d4f7bca718e7fabc8e60f70f7329ba203c25fdfc07e5fb9ecda614c6974878474"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:18 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x6) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000003a14000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000040)) (async) open_tree(r1, &(0x7f0000000140)='./file0\x00', 0x8001) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 64) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000020000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 38) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000028000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1159.419220][ T1249] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1159.432699][ T1249] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1159.455803][ T1253] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 22:17:18 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000171100850000000e00000085e22b4d6c55b661c9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='\x00') sendfile(r0, r1, 0x0, 0x20000023896) 22:17:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000034000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1159.465199][ T1253] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1159.486930][ T1266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1159.496426][ T1266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1159.559841][ T1268] FAULT_INJECTION: forcing a failure. [ 1159.559841][ T1268] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.572605][ T1268] CPU: 0 PID: 1268 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1159.584206][ T1268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1159.594236][ T1268] Call Trace: [ 1159.597503][ T1268] dump_stack_lvl+0x1e2/0x24b [ 1159.602153][ T1268] ? panic+0x7d7/0x7d7 [ 1159.606193][ T1268] ? irqentry_exit+0x50/0x60 [ 1159.610758][ T1268] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1159.616188][ T1268] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1159.621797][ T1268] ? kvasprintf_const+0x139/0x180 [ 1159.626792][ T1268] dump_stack+0x15/0x17 [ 1159.630922][ T1268] should_fail+0x3c0/0x510 [ 1159.635311][ T1268] ? device_add+0xbe/0xbd0 [ 1159.639705][ T1268] __should_failslab+0x9f/0xe0 [ 1159.644443][ T1268] should_failslab+0x9/0x20 [ 1159.648921][ T1268] kmem_cache_alloc_trace+0x3a/0x330 [ 1159.654198][ T1268] ? __kasan_check_write+0x14/0x20 [ 1159.659284][ T1268] device_add+0xbe/0xbd0 [ 1159.663498][ T1268] ? kfree_const+0x39/0x40 [ 1159.667888][ T1268] ? kobject_set_name_vargs+0xce/0x120 [ 1159.673315][ T1268] device_create+0x258/0x2e0 [ 1159.677879][ T1268] ? __irq_exit_rcu+0x41/0x150 [ 1159.682615][ T1268] ? irq_exit_rcu+0x9/0x10 [ 1159.687003][ T1268] ? sysvec_call_function_single+0xcb/0xe0 [ 1159.692797][ T1268] ? root_device_unregister+0x80/0x80 [ 1159.698143][ T1268] bdi_register_va+0x94/0x600 [ 1159.702799][ T1268] bdi_register+0xd1/0x120 [ 1159.707187][ T1268] ? __device_add_disk+0x536/0x11d0 [ 1159.712363][ T1268] ? bdi_register_va+0x600/0x600 [ 1159.717274][ T1268] ? vsnprintf+0x1bfd/0x1cd0 [ 1159.721840][ T1268] ? __kasan_check_read+0x11/0x20 [ 1159.726834][ T1268] ? blk_alloc_devt+0xd4/0x320 [ 1159.731568][ T1268] __device_add_disk+0x5cb/0x11d0 [ 1159.736569][ T1268] ? device_add_disk+0x40/0x40 [ 1159.741307][ T1268] ? loop_add+0x440/0x760 [ 1159.745612][ T1268] ? vsprintf+0x40/0x40 [ 1159.749741][ T1268] device_add_disk+0x2a/0x40 [ 1159.754306][ T1268] loop_add+0x58f/0x760 [ 1159.758435][ T1268] loop_control_ioctl+0x564/0x740 [ 1159.763432][ T1268] ? loop_remove+0xb0/0xb0 [ 1159.767821][ T1268] ? __fget_files+0x310/0x370 [ 1159.772471][ T1268] ? security_file_ioctl+0xb1/0xd0 [ 1159.777552][ T1268] ? loop_remove+0xb0/0xb0 [ 1159.781941][ T1268] __se_sys_ioctl+0x115/0x190 [ 1159.786590][ T1268] __x64_sys_ioctl+0x7b/0x90 [ 1159.791158][ T1268] do_syscall_64+0x34/0x70 [ 1159.795546][ T1268] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1159.801412][ T1268] RIP: 0033:0x7f7994738279 [ 1159.805805][ T1268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1159.825380][ T1268] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1159.833766][ T1268] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1159.841709][ T1268] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1159.849653][ T1268] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.857597][ T1268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1159.865543][ T1268] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1159.874157][ T1268] ------------[ cut here ]------------ [ 1159.879796][ T1268] WARNING: CPU: 0 PID: 1268 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1159.888946][ T1268] Modules linked in: [ 1159.893002][ T1268] CPU: 0 PID: 1268 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1159.904786][ T1268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1159.915022][ T1268] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1159.920956][ T1268] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1159.940750][ T1268] RSP: 0018:ffffc900017b7bc0 EFLAGS: 00010283 [ 1159.946975][ T1268] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1159.955126][ T1268] RDX: ffffc90009966000 RSI: 000000000002de97 RDI: 000000000002de98 [ 1159.963239][ T1268] RBP: ffffc900017b7d08 R08: ffffffff824062e6 R09: 0000000000000003 [ 1159.971365][ T1268] R10: fffff520002f6e8d R11: 1ffff920002f6e8c R12: 0000000000000007 [ 1159.979473][ T1268] R13: ffff8881519dc000 R14: ffff888152f8f338 R15: ffff888152f8f000 [ 1159.987599][ T1268] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1159.996703][ T1268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1160.003411][ T1268] CR2: 00007f799386bff8 CR3: 000000011212f000 CR4: 00000000003506b0 [ 1160.011530][ T1268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1160.019635][ T1268] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1160.027748][ T1268] Call Trace: [ 1160.031222][ T1268] ? device_add_disk+0x40/0x40 [ 1160.036121][ T1268] ? loop_add+0x440/0x760 [ 1160.040586][ T1268] ? vsprintf+0x40/0x40 [ 1160.044894][ T1268] device_add_disk+0x2a/0x40 [ 1160.049623][ T1268] loop_add+0x58f/0x760 [ 1160.053912][ T1268] loop_control_ioctl+0x564/0x740 [ 1160.059105][ T1268] ? loop_remove+0xb0/0xb0 [ 1160.063649][ T1268] ? __fget_files+0x310/0x370 [ 1160.068492][ T1268] ? security_file_ioctl+0xb1/0xd0 [ 1160.073736][ T1268] ? loop_remove+0xb0/0xb0 [ 1160.078292][ T1268] __se_sys_ioctl+0x115/0x190 [ 1160.083095][ T1268] __x64_sys_ioctl+0x7b/0x90 [ 1160.087853][ T1268] do_syscall_64+0x34/0x70 [ 1160.092415][ T1268] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1160.098452][ T1268] RIP: 0033:0x7f7994738279 [ 1160.102996][ T1268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1160.122760][ T1268] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1160.131373][ T1268] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1160.139487][ T1268] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1160.147602][ T1268] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.155705][ T1268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.163802][ T1268] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1160.171948][ T1268] ---[ end trace b78cd69f8ad74e51 ]--- [ 1160.245669][ T1268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1268 comm=syz-executor.4 22:17:19 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x4000, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000004000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:19 executing program 5: mkdir(0x0, 0x0) (async, rerun: 32) mkdir(0x0, 0x5a) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000171100850000000e00000085e22b4d6c55b661c9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async, rerun: 32) chdir(&(0x7f0000000000)='\x00') (rerun: 32) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 39) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:19 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000028000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x6) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) [ 1160.310721][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1160.344639][ T1275] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:17:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000034000400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000300ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1160.389929][ T1289] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1160.399783][ T1289] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1160.416985][ T1293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1160.483199][ T1297] FAULT_INJECTION: forcing a failure. [ 1160.483199][ T1297] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.495890][ T1297] CPU: 1 PID: 1297 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1160.507501][ T1297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1160.517550][ T1297] Call Trace: [ 1160.520827][ T1297] dump_stack_lvl+0x1e2/0x24b [ 1160.525483][ T1297] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1160.530921][ T1297] dump_stack+0x15/0x17 [ 1160.535055][ T1297] should_fail+0x3c0/0x510 [ 1160.539452][ T1297] ? __kernfs_new_node+0x99/0x6e0 [ 1160.544471][ T1297] __should_failslab+0x9f/0xe0 [ 1160.549212][ T1297] should_failslab+0x9/0x20 [ 1160.553689][ T1297] __kmalloc_track_caller+0x5f/0x350 [ 1160.558948][ T1297] ? __kernel_text_address+0x9a/0x110 [ 1160.564291][ T1297] ? unwind_get_return_address+0x4c/0x90 [ 1160.569896][ T1297] kstrdup_const+0x55/0x90 [ 1160.574286][ T1297] __kernfs_new_node+0x99/0x6e0 [ 1160.579111][ T1297] ? stack_trace_save+0x12d/0x1f0 [ 1160.584105][ T1297] ? kernfs_new_node+0x170/0x170 [ 1160.589016][ T1297] ? stack_trace_snprint+0x100/0x100 [ 1160.594274][ T1297] ? stack_trace_save+0x12d/0x1f0 [ 1160.599273][ T1297] ? device_add+0xbe/0xbd0 [ 1160.603665][ T1297] kernfs_create_dir_ns+0x9b/0x230 [ 1160.608752][ T1297] sysfs_create_dir_ns+0x181/0x390 [ 1160.613838][ T1297] ? sysfs_warn_dup+0xa0/0xa0 [ 1160.618490][ T1297] kobject_add_internal+0x766/0xda0 [ 1160.623663][ T1297] kobject_add+0x14c/0x210 [ 1160.628054][ T1297] ? _raw_spin_lock+0xa3/0x1b0 [ 1160.632791][ T1297] ? kobject_init+0x1e0/0x1e0 [ 1160.637442][ T1297] ? __kasan_check_write+0x14/0x20 [ 1160.642526][ T1297] ? mutex_unlock+0x1d/0x40 [ 1160.646999][ T1297] ? get_device_parent+0x2c5/0x430 [ 1160.652080][ T1297] device_add+0x3ca/0xbd0 [ 1160.656381][ T1297] device_create+0x258/0x2e0 [ 1160.660945][ T1297] ? root_device_unregister+0x80/0x80 [ 1160.666292][ T1297] ? number+0xd9b/0x1040 [ 1160.670508][ T1297] bdi_register_va+0x94/0x600 [ 1160.675161][ T1297] bdi_register+0xd1/0x120 [ 1160.679570][ T1297] ? __device_add_disk+0x536/0x11d0 [ 1160.684741][ T1297] ? bdi_register_va+0x600/0x600 [ 1160.689652][ T1297] ? vsnprintf+0x1bfd/0x1cd0 [ 1160.694214][ T1297] ? __kasan_check_read+0x11/0x20 [ 1160.699210][ T1297] ? blk_alloc_devt+0xd4/0x320 [ 1160.703948][ T1297] __device_add_disk+0x5cb/0x11d0 [ 1160.708946][ T1297] ? device_add_disk+0x40/0x40 [ 1160.713684][ T1297] ? loop_add+0x440/0x760 [ 1160.717987][ T1297] ? vsprintf+0x40/0x40 [ 1160.722117][ T1297] device_add_disk+0x2a/0x40 [ 1160.726679][ T1297] loop_add+0x58f/0x760 [ 1160.730811][ T1297] loop_control_ioctl+0x564/0x740 [ 1160.735807][ T1297] ? loop_remove+0xb0/0xb0 [ 1160.740196][ T1297] ? __fget_files+0x310/0x370 [ 1160.744845][ T1297] ? security_file_ioctl+0xb1/0xd0 [ 1160.749927][ T1297] ? loop_remove+0xb0/0xb0 [ 1160.754318][ T1297] __se_sys_ioctl+0x115/0x190 [ 1160.758966][ T1297] __x64_sys_ioctl+0x7b/0x90 [ 1160.763534][ T1297] do_syscall_64+0x34/0x70 [ 1160.767926][ T1297] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1160.773788][ T1297] RIP: 0033:0x7f7994738279 [ 1160.778179][ T1297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1160.797754][ T1297] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1160.806145][ T1297] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1160.814090][ T1297] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1160.822035][ T1297] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.829978][ T1297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.837925][ T1297] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1160.846192][ T1297] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 1160.853887][ T1297] ------------[ cut here ]------------ [ 1160.859365][ T1297] WARNING: CPU: 1 PID: 1297 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1160.868384][ T1297] Modules linked in: [ 1160.872283][ T1297] CPU: 1 PID: 1297 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1160.883950][ T1297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1160.894024][ T1297] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1160.899836][ T1297] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1160.919869][ T1297] RSP: 0018:ffffc90001807bc0 EFLAGS: 00010287 [ 1160.925954][ T1297] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1160.933922][ T1297] RDX: ffffc90009966000 RSI: 00000000000334f5 RDI: 00000000000334f6 [ 1160.941896][ T1297] RBP: ffffc90001807d08 R08: ffffffff824062e6 R09: ffffc90001807610 [ 1160.949874][ T1297] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1160.957855][ T1297] R13: ffff888115ad5000 R14: ffff88810a668338 R15: ffff88810a668000 [ 1160.965849][ T1297] FS: 00007f799386c700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1160.974774][ T1297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1160.981411][ T1297] CR2: 00007f799386bff8 CR3: 0000000107dd0000 CR4: 00000000003506a0 [ 1160.989401][ T1297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1160.997382][ T1297] DR3: 000000000000003b DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1161.005358][ T1297] Call Trace: [ 1161.008649][ T1297] ? device_add_disk+0x40/0x40 [ 1161.013410][ T1297] ? loop_add+0x440/0x760 [ 1161.017750][ T1297] ? vsprintf+0x40/0x40 [ 1161.021904][ T1297] device_add_disk+0x2a/0x40 [ 1161.026499][ T1297] loop_add+0x58f/0x760 [ 1161.030653][ T1297] loop_control_ioctl+0x564/0x740 [ 1161.035706][ T1297] ? loop_remove+0xb0/0xb0 [ 1161.040117][ T1297] ? __fget_files+0x310/0x370 [ 1161.044786][ T1297] ? security_file_ioctl+0xb1/0xd0 [ 1161.049902][ T1297] ? loop_remove+0xb0/0xb0 [ 1161.054315][ T1297] __se_sys_ioctl+0x115/0x190 [ 1161.059001][ T1297] __x64_sys_ioctl+0x7b/0x90 [ 1161.063585][ T1297] do_syscall_64+0x34/0x70 [ 1161.068008][ T1297] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1161.073896][ T1297] RIP: 0033:0x7f7994738279 [ 1161.078317][ T1297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1161.097954][ T1297] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.106380][ T1297] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1161.114346][ T1297] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1161.122319][ T1297] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.130295][ T1297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.138270][ T1297] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1161.146246][ T1297] ---[ end trace b78cd69f8ad74e52 ]--- [ 1161.190758][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1161.220289][ T1297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1297 comm=syz-executor.4 22:17:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x42, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x100, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014020400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x6) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 40) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 1161.464243][ T1321] FAULT_INJECTION: forcing a failure. [ 1161.464243][ T1321] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.476940][ T1321] CPU: 0 PID: 1321 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1161.488557][ T1321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1161.498586][ T1321] Call Trace: [ 1161.501857][ T1321] dump_stack_lvl+0x1e2/0x24b [ 1161.506509][ T1321] ? panic+0x7d7/0x7d7 [ 1161.510555][ T1321] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1161.515986][ T1321] ? preempt_schedule_irq+0xef/0x140 [ 1161.521242][ T1321] ? preempt_schedule_notrace+0x140/0x140 [ 1161.526935][ T1321] ? __switch_to+0x5e4/0x1220 [ 1161.531596][ T1321] dump_stack+0x15/0x17 [ 1161.535737][ T1321] should_fail+0x3c0/0x510 [ 1161.540134][ T1321] __should_failslab+0x9f/0xe0 [ 1161.544871][ T1321] should_failslab+0x9/0x20 [ 1161.549347][ T1321] kmem_cache_alloc+0x3f/0x300 [ 1161.554083][ T1321] ? __kernfs_new_node+0xdb/0x6e0 [ 1161.559076][ T1321] __kernfs_new_node+0xdb/0x6e0 [ 1161.563898][ T1321] ? __switch_to_asm+0x36/0x70 [ 1161.568634][ T1321] ? __schedule+0x86e/0xc00 [ 1161.573111][ T1321] ? kernfs_new_node+0x170/0x170 [ 1161.578022][ T1321] ? release_firmware_map_entry+0x195/0x195 [ 1161.583888][ T1321] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1161.589494][ T1321] ? preempt_schedule+0xd9/0xe0 [ 1161.594319][ T1321] kernfs_create_dir_ns+0x9b/0x230 [ 1161.599404][ T1321] sysfs_create_dir_ns+0x181/0x390 [ 1161.604503][ T1321] ? sysfs_warn_dup+0xa0/0xa0 [ 1161.609157][ T1321] ? preempt_schedule_thunk+0x16/0x18 [ 1161.614504][ T1321] kobject_add_internal+0x766/0xda0 [ 1161.619679][ T1321] kobject_add+0x14c/0x210 [ 1161.624067][ T1321] ? _raw_spin_lock+0xa3/0x1b0 [ 1161.628804][ T1321] ? kobject_init+0x1e0/0x1e0 [ 1161.633461][ T1321] ? __kasan_check_write+0x14/0x20 [ 1161.638558][ T1321] ? mutex_unlock+0x1d/0x40 [ 1161.643049][ T1321] ? get_device_parent+0x2c5/0x430 [ 1161.648133][ T1321] device_add+0x3ca/0xbd0 [ 1161.652440][ T1321] device_create+0x258/0x2e0 [ 1161.657001][ T1321] ? root_device_unregister+0x80/0x80 [ 1161.662348][ T1321] ? number+0xd9b/0x1040 [ 1161.666566][ T1321] bdi_register_va+0x94/0x600 [ 1161.671216][ T1321] bdi_register+0xd1/0x120 [ 1161.675608][ T1321] ? irqentry_exit+0x50/0x60 [ 1161.680174][ T1321] ? __device_add_disk+0x536/0x11d0 [ 1161.685345][ T1321] ? bdi_register_va+0x600/0x600 [ 1161.690256][ T1321] ? __kasan_check_read+0x11/0x20 [ 1161.695254][ T1321] ? blk_alloc_devt+0xd4/0x320 [ 1161.700009][ T1321] __device_add_disk+0x5cb/0x11d0 [ 1161.705010][ T1321] ? device_add_disk+0x40/0x40 [ 1161.709747][ T1321] ? loop_add+0x440/0x760 [ 1161.714048][ T1321] ? vsprintf+0x40/0x40 [ 1161.718181][ T1321] device_add_disk+0x2a/0x40 [ 1161.722743][ T1321] loop_add+0x58f/0x760 [ 1161.726871][ T1321] loop_control_ioctl+0x564/0x740 [ 1161.731869][ T1321] ? loop_remove+0xb0/0xb0 [ 1161.736261][ T1321] ? irqentry_exit+0x50/0x60 [ 1161.740823][ T1321] ? sysvec_reschedule_ipi+0x84/0x160 [ 1161.746165][ T1321] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1161.751772][ T1321] ? security_file_ioctl+0xb1/0xd0 [ 1161.756860][ T1321] ? loop_remove+0xb0/0xb0 [ 1161.761248][ T1321] __se_sys_ioctl+0x115/0x190 [ 1161.765900][ T1321] __x64_sys_ioctl+0x7b/0x90 [ 1161.770463][ T1321] do_syscall_64+0x34/0x70 [ 1161.774850][ T1321] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1161.780715][ T1321] RIP: 0033:0x7f7994738279 [ 1161.785105][ T1321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1161.804681][ T1321] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.813070][ T1321] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1161.821017][ T1321] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1161.828962][ T1321] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.836917][ T1321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.844862][ T1321] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1161.852949][ T1321] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 1161.860900][ T1321] ------------[ cut here ]------------ [ 1161.866389][ T1321] WARNING: CPU: 0 PID: 1321 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1161.875436][ T1321] Modules linked in: [ 1161.879369][ T1321] CPU: 0 PID: 1321 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1161.891006][ T1321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1161.901117][ T1321] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1161.906964][ T1321] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1161.926623][ T1321] RSP: 0018:ffffc90001867bc0 EFLAGS: 00010287 [ 1161.932741][ T1321] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1161.940750][ T1321] RDX: ffffc90009966000 RSI: 000000000003970b RDI: 000000000003970c [ 1161.948764][ T1321] RBP: ffffc90001867d08 R08: ffffffff824062e6 R09: ffffc90001867610 [ 1161.956773][ T1321] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1161.964775][ T1321] R13: ffff88810f888000 R14: ffff8881529fc338 R15: ffff8881529fc000 [ 1161.972833][ T1321] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1161.981779][ T1321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1161.988429][ T1321] CR2: 00007f799386bff8 CR3: 000000011257c000 CR4: 00000000003506b0 [ 1161.996489][ T1321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1162.004465][ T1321] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1162.012495][ T1321] Call Trace: [ 1162.015829][ T1321] ? device_add_disk+0x40/0x40 [ 1162.020629][ T1321] ? loop_add+0x440/0x760 [ 1162.024992][ T1321] ? vsprintf+0x40/0x40 [ 1162.029157][ T1321] device_add_disk+0x2a/0x40 [ 1162.033755][ T1321] loop_add+0x58f/0x760 [ 1162.037936][ T1321] loop_control_ioctl+0x564/0x740 [ 1162.042969][ T1321] ? loop_remove+0xb0/0xb0 [ 1162.047421][ T1321] ? irqentry_exit+0x50/0x60 [ 1162.052025][ T1321] ? sysvec_reschedule_ipi+0x84/0x160 [ 1162.057418][ T1321] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1162.063057][ T1321] ? security_file_ioctl+0xb1/0xd0 [ 1162.068188][ T1321] ? loop_remove+0xb0/0xb0 [ 1162.072636][ T1321] __se_sys_ioctl+0x115/0x190 [ 1162.077332][ T1321] __x64_sys_ioctl+0x7b/0x90 [ 1162.081932][ T1321] do_syscall_64+0x34/0x70 [ 1162.086380][ T1321] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1162.092285][ T1321] RIP: 0033:0x7f7994738279 [ 1162.096729][ T1321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1162.116370][ T1321] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.124813][ T1321] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1162.132805][ T1321] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1162.140802][ T1321] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.148807][ T1321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1162.156802][ T1321] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1162.164801][ T1321] ---[ end trace b78cd69f8ad74e53 ]--- 22:17:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014030400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:21 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000171100850000000e00000085e22b4d6c55b661c9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000000)='\x00') sendfile(r0, r1, 0x0, 0x20000023896) [ 1162.201321][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1162.236679][ T1321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1321 comm=syz-executor.4 22:17:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async, rerun: 64) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 41) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0xfffffe0c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) 22:17:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014040400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x42, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x100, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x42, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) statx(0xffffffffffffffff, 0x0, 0x2000, 0x100, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014050400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:21 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000c000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014060400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014070400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014080400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014090400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1162.486614][ T1362] FAULT_INJECTION: forcing a failure. [ 1162.486614][ T1362] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.499357][ T1362] CPU: 0 PID: 1362 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1162.510958][ T1362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1162.521005][ T1362] Call Trace: [ 1162.524273][ T1362] dump_stack_lvl+0x1e2/0x24b [ 1162.528937][ T1362] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1162.534378][ T1362] ? irqentry_exit+0x50/0x60 [ 1162.538973][ T1362] ? sysvec_reschedule_ipi+0x84/0x160 [ 1162.544342][ T1362] dump_stack+0x15/0x17 [ 1162.548482][ T1362] should_fail+0x3c0/0x510 [ 1162.552884][ T1362] __should_failslab+0x9f/0xe0 [ 1162.557637][ T1362] should_failslab+0x9/0x20 [ 1162.562123][ T1362] kmem_cache_alloc+0x3f/0x300 [ 1162.566858][ T1362] ? radix_tree_node_alloc+0x194/0x3c0 [ 1162.572289][ T1362] radix_tree_node_alloc+0x194/0x3c0 [ 1162.577548][ T1362] idr_get_free+0x2d8/0x990 [ 1162.582042][ T1362] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1162.587668][ T1362] idr_alloc_cyclic+0x1ef/0x5d0 [ 1162.592526][ T1362] ? idr_alloc+0x2f0/0x2f0 [ 1162.596927][ T1362] ? __kasan_check_write+0x14/0x20 [ 1162.602019][ T1362] ? _raw_spin_lock+0xa3/0x1b0 [ 1162.606781][ T1362] ? __radix_tree_preload+0x361/0x3e0 [ 1162.612132][ T1362] ? kmem_cache_alloc+0x1a4/0x300 [ 1162.617137][ T1362] __kernfs_new_node+0x124/0x6e0 [ 1162.622065][ T1362] ? preempt_schedule_notrace+0x140/0x140 [ 1162.627755][ T1362] ? kernfs_new_node+0x170/0x170 [ 1162.632669][ T1362] ? irqentry_exit+0x50/0x60 [ 1162.637233][ T1362] ? sysvec_reschedule_ipi+0x84/0x160 [ 1162.642580][ T1362] kernfs_create_dir_ns+0x9b/0x230 [ 1162.647666][ T1362] sysfs_create_dir_ns+0x181/0x390 [ 1162.652748][ T1362] ? sysfs_warn_dup+0xa0/0xa0 [ 1162.657398][ T1362] ? __kasan_check_read+0x11/0x20 [ 1162.662393][ T1362] ? preempt_schedule_irq+0xef/0x140 [ 1162.667652][ T1362] kobject_add_internal+0x766/0xda0 [ 1162.672822][ T1362] kobject_add+0x14c/0x210 [ 1162.677210][ T1362] ? _raw_spin_lock+0xa3/0x1b0 [ 1162.681944][ T1362] ? kobject_init+0x1e0/0x1e0 [ 1162.686597][ T1362] ? __kasan_check_write+0x14/0x20 [ 1162.691680][ T1362] ? mutex_unlock+0x1d/0x40 [ 1162.696155][ T1362] ? get_device_parent+0x2c5/0x430 [ 1162.701241][ T1362] device_add+0x3ca/0xbd0 [ 1162.705542][ T1362] device_create+0x258/0x2e0 [ 1162.710104][ T1362] ? __kasan_check_read+0x11/0x20 [ 1162.715113][ T1362] ? root_device_unregister+0x80/0x80 [ 1162.720455][ T1362] ? number+0xd9b/0x1040 [ 1162.724672][ T1362] bdi_register_va+0x94/0x600 [ 1162.729322][ T1362] bdi_register+0xd1/0x120 [ 1162.733710][ T1362] ? irqentry_exit+0x50/0x60 [ 1162.738273][ T1362] ? __device_add_disk+0x536/0x11d0 [ 1162.743443][ T1362] ? bdi_register_va+0x600/0x600 [ 1162.748359][ T1362] ? blk_alloc_devt+0xd4/0x320 [ 1162.753098][ T1362] __device_add_disk+0x5cb/0x11d0 [ 1162.758099][ T1362] ? device_add_disk+0x40/0x40 [ 1162.762833][ T1362] ? loop_add+0x440/0x760 [ 1162.767140][ T1362] ? vsprintf+0x40/0x40 [ 1162.771277][ T1362] device_add_disk+0x2a/0x40 [ 1162.775855][ T1362] loop_add+0x58f/0x760 [ 1162.779984][ T1362] loop_control_ioctl+0x564/0x740 [ 1162.784982][ T1362] ? loop_remove+0xb0/0xb0 [ 1162.789372][ T1362] ? irqentry_exit+0x50/0x60 [ 1162.793936][ T1362] ? sysvec_reschedule_ipi+0x84/0x160 [ 1162.799295][ T1362] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1162.804906][ T1362] ? do_vfs_ioctl+0xf6/0x1a90 [ 1162.809556][ T1362] ? loop_remove+0xb0/0xb0 [ 1162.813947][ T1362] __se_sys_ioctl+0x115/0x190 [ 1162.818596][ T1362] __x64_sys_ioctl+0x7b/0x90 [ 1162.823158][ T1362] do_syscall_64+0x34/0x70 [ 1162.827547][ T1362] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1162.833411][ T1362] RIP: 0033:0x7f7994738279 [ 1162.837800][ T1362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1162.857376][ T1362] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.865775][ T1362] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1162.873722][ T1362] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1162.881665][ T1362] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.889608][ T1362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1162.897566][ T1362] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1162.977581][ T1362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1362 comm=syz-executor.4 22:17:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x42, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x100, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x42, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) statx(0xffffffffffffffff, 0x0, 0x2000, 0x100, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000000140a0400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 42) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0xfffffe0c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) 22:17:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001a40)={'syztnl2\x00', &(0x7f00000019c0)={'syztnl1\x00', 0x0, 0x29, 0x75, 0x1, 0x3ff, 0x44, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7, 0x1, 0x9, 0x101}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x20, &(0x7f0000001880)={&(0x7f00000016c0)=""/233, 0xe9, 0x0, &(0x7f00000017c0)=""/137, 0x89}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x9, 0x7, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4b54, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40}], &(0x7f0000000480)='syzkaller\x00', 0x80000000, 0x6a, &(0x7f00000004c0)=""/106, 0x41100, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x0, 0xd, 0xffffffff, 0x101}, 0x10, r2, r1}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r6}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x19000000}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x3, 0x7, 0x20, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x0, '\x00', r6, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x2, 0x100, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x100, 0x80, &(0x7f0000000580)) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c00)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x8, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x0, 0x1, 0x1, 0xb, 0x5, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000001ac0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xe, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000001b00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001b40)={0x1, 0x6, 0x3, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001c40)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, r9]}, 0x80) 22:17:22 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000c000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000000140b0400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0xfffffe0c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x1, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) (async) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0xfffffe0c) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r2, 0x0, 0x20000023896) (async) 22:17:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000000140d0400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014100400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014110400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014210400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1163.362007][ T1416] FAULT_INJECTION: forcing a failure. [ 1163.362007][ T1416] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.374801][ T1416] CPU: 0 PID: 1416 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1163.386425][ T1416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1163.396451][ T1416] Call Trace: [ 1163.399719][ T1416] dump_stack_lvl+0x1e2/0x24b [ 1163.404370][ T1416] ? panic+0x7d7/0x7d7 [ 1163.408420][ T1416] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1163.413853][ T1416] dump_stack+0x15/0x17 [ 1163.417980][ T1416] should_fail+0x3c0/0x510 [ 1163.422373][ T1416] __should_failslab+0x9f/0xe0 [ 1163.427113][ T1416] should_failslab+0x9/0x20 [ 1163.431591][ T1416] kmem_cache_alloc+0x3f/0x300 [ 1163.436330][ T1416] ? __switch_to_asm+0x36/0x70 [ 1163.441070][ T1416] ? __kernfs_new_node+0xdb/0x6e0 [ 1163.446064][ T1416] __kernfs_new_node+0xdb/0x6e0 [ 1163.450891][ T1416] ? release_firmware_map_entry+0x195/0x195 [ 1163.456755][ T1416] ? finish_task_switch+0x130/0x580 [ 1163.461925][ T1416] ? kernfs_new_node+0x170/0x170 [ 1163.466835][ T1416] ? __kasan_check_read+0x11/0x20 [ 1163.471834][ T1416] ? preempt_schedule_irq+0xef/0x140 [ 1163.477093][ T1416] ? __kasan_check_read+0x11/0x20 [ 1163.482088][ T1416] ? preempt_schedule_irq+0xef/0x140 [ 1163.487346][ T1416] ? preempt_schedule_notrace+0x140/0x140 [ 1163.493038][ T1416] kernfs_new_node+0x97/0x170 [ 1163.497689][ T1416] __kernfs_create_file+0x4a/0x270 [ 1163.502771][ T1416] sysfs_add_file_mode_ns+0x273/0x320 [ 1163.508117][ T1416] sysfs_create_file_ns+0x191/0x2a0 [ 1163.513286][ T1416] ? sysfs_add_file_mode_ns+0x320/0x320 [ 1163.518811][ T1416] ? __kasan_check_write+0x14/0x20 [ 1163.523896][ T1416] ? __up_read+0x16/0x100 [ 1163.528198][ T1416] device_create_file+0x110/0x1d0 [ 1163.533192][ T1416] device_add+0x496/0xbd0 [ 1163.537495][ T1416] device_create+0x258/0x2e0 [ 1163.542058][ T1416] ? __this_cpu_preempt_check+0x13/0x20 [ 1163.547576][ T1416] ? root_device_unregister+0x80/0x80 [ 1163.552920][ T1416] ? number+0xd9b/0x1040 [ 1163.557140][ T1416] bdi_register_va+0x94/0x600 [ 1163.561791][ T1416] bdi_register+0xd1/0x120 [ 1163.566183][ T1416] ? irqentry_exit+0x50/0x60 [ 1163.570743][ T1416] ? __device_add_disk+0x536/0x11d0 [ 1163.575914][ T1416] ? bdi_register_va+0x600/0x600 [ 1163.580827][ T1416] __device_add_disk+0x5cb/0x11d0 [ 1163.585823][ T1416] ? device_add_disk+0x40/0x40 [ 1163.590558][ T1416] ? loop_add+0x440/0x760 [ 1163.594860][ T1416] ? vsprintf+0x40/0x40 [ 1163.598989][ T1416] device_add_disk+0x2a/0x40 [ 1163.603551][ T1416] loop_add+0x58f/0x760 [ 1163.607682][ T1416] loop_control_ioctl+0x564/0x740 [ 1163.612681][ T1416] ? loop_remove+0xb0/0xb0 [ 1163.617085][ T1416] ? irqentry_exit+0x50/0x60 [ 1163.621647][ T1416] ? sysvec_reschedule_ipi+0x84/0x160 [ 1163.626992][ T1416] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1163.632597][ T1416] ? do_vfs_ioctl+0xf6/0x1a90 [ 1163.637246][ T1416] ? loop_remove+0xb0/0xb0 [ 1163.641638][ T1416] __se_sys_ioctl+0x115/0x190 [ 1163.646290][ T1416] __x64_sys_ioctl+0x7b/0x90 [ 1163.650856][ T1416] do_syscall_64+0x34/0x70 [ 1163.655246][ T1416] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1163.661111][ T1416] RIP: 0033:0x7f7994738279 [ 1163.665502][ T1416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1163.685079][ T1416] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1163.693467][ T1416] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1163.701410][ T1416] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1163.709371][ T1416] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1163.717328][ T1416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1163.725301][ T1416] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1163.734711][ T1416] ------------[ cut here ]------------ [ 1163.740383][ T1416] WARNING: CPU: 0 PID: 1416 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1163.749550][ T1416] Modules linked in: [ 1163.753601][ T1416] CPU: 0 PID: 1416 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1163.765358][ T1416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1163.775591][ T1416] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1163.781522][ T1416] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1163.801302][ T1416] RSP: 0018:ffffc900017e7bc0 EFLAGS: 00010283 [ 1163.807531][ T1416] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1163.815662][ T1416] RDX: ffffc90009966000 RSI: 00000000000375df RDI: 00000000000375e0 [ 1163.823759][ T1416] RBP: ffffc900017e7d08 R08: ffffffff824062e6 R09: ffffc900017e7610 [ 1163.831868][ T1416] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1163.839974][ T1416] R13: ffff888151add000 R14: ffff888151ad8338 R15: ffff888151ad8000 [ 1163.848169][ T1416] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1163.857249][ T1416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1163.863964][ T1416] CR2: 00007f799386bff8 CR3: 000000010f0cf000 CR4: 00000000003506b0 [ 1163.872082][ T1416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1163.880214][ T1416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1163.888323][ T1416] Call Trace: [ 1163.891762][ T1416] ? device_add_disk+0x40/0x40 [ 1163.896666][ T1416] ? loop_add+0x440/0x760 [ 1163.901127][ T1416] ? vsprintf+0x40/0x40 [ 1163.905427][ T1416] device_add_disk+0x2a/0x40 [ 1163.910169][ T1416] loop_add+0x58f/0x760 [ 1163.914462][ T1416] loop_control_ioctl+0x564/0x740 [ 1163.919643][ T1416] ? loop_remove+0xb0/0xb0 [ 1163.924185][ T1416] ? irqentry_exit+0x50/0x60 [ 1163.928923][ T1416] ? sysvec_reschedule_ipi+0x84/0x160 [ 1163.934425][ T1416] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1163.940193][ T1416] ? do_vfs_ioctl+0xf6/0x1a90 [ 1163.945007][ T1416] ? loop_remove+0xb0/0xb0 [ 1163.949549][ T1416] __se_sys_ioctl+0x115/0x190 [ 1163.954367][ T1416] __x64_sys_ioctl+0x7b/0x90 [ 1163.959091][ T1416] do_syscall_64+0x34/0x70 [ 1163.963634][ T1416] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1163.969713][ T1416] RIP: 0033:0x7f7994738279 [ 1163.974287][ T1416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1163.994083][ T1416] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.002662][ T1416] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1164.010772][ T1416] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1164.018881][ T1416] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.026984][ T1416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1164.035090][ T1416] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1164.043234][ T1416] ---[ end trace b78cd69f8ad74e54 ]--- [ 1164.119503][ T1416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1416 comm=syz-executor.4 22:17:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000400000000000000e3840000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnetconf={0x5c, 0x52, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x80000000}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x98}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x99}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xffffffc1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='mqueue\x00', 0x252040, &(0x7f0000000440)='\x00') statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x888002, &(0x7f0000000500)={[{@xino_auto}, {@metacopy_on}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_off}, {@index_off}, {@metacopy_on}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_off}], [{@dont_appraise}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="3f0000000000000400000000000098a0e8a9d4e6d3223dce730f1400850000000e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 43) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6b05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd113825e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f29083e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d7b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13603b73157602100fb20b99306a7927d0c710d6ce4c8", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000000142f0400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:23 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000c000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001a40)={'syztnl2\x00', &(0x7f00000019c0)={'syztnl1\x00', 0x0, 0x29, 0x75, 0x1, 0x3ff, 0x44, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7, 0x1, 0x9, 0x101}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x20, &(0x7f0000001880)={&(0x7f00000016c0)=""/233, 0xe9, 0x0, &(0x7f00000017c0)=""/137, 0x89}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x9, 0x7, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4b54, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40}], &(0x7f0000000480)='syzkaller\x00', 0x80000000, 0x6a, &(0x7f00000004c0)=""/106, 0x41100, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x0, 0xd, 0xffffffff, 0x101}, 0x10, r2, r1}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r6}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x19000000}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x3, 0x7, 0x20, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x0, '\x00', r6, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x2, 0x100, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x100, 0x80, &(0x7f0000000580)) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c00)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x8, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x0, 0x1, 0x1, 0xb, 0x5, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000001ac0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xe, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000001b00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001b40)={0x1, 0x6, 0x3, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001c40)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, r9]}, 0x80) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001a40)={'syztnl2\x00', &(0x7f00000019c0)={'syztnl1\x00', 0x0, 0x29, 0x75, 0x1, 0x3ff, 0x44, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7, 0x1, 0x9, 0x101}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x20, &(0x7f0000001880)={&(0x7f00000016c0)=""/233, 0xe9, 0x0, &(0x7f00000017c0)=""/137, 0x89}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x9, 0x7, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4b54, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40}], &(0x7f0000000480)='syzkaller\x00', 0x80000000, 0x6a, &(0x7f00000004c0)=""/106, 0x41100, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x0, 0xd, 0xffffffff, 0x101}, 0x10, r2, r1}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r6}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x19000000}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x3, 0x7, 0x20, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x0, '\x00', r6, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x2, 0x100, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x100, 0x80, &(0x7f0000000580)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r7, r8, 0x0, 0x20000023896) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c00)={0x0, 0x4, 0x10}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x8, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x0, 0x1, 0x1, 0xb, 0x5, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000001ac0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xe, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000001b00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001b40)={0x1, 0x6, 0x3, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001c40)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, r9]}, 0x80) (async) [ 1164.194646][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc000000000000000000000000000000143a0400ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000500ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000600ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014002000ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014004000ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000200ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1164.301246][ T1442] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1164.365028][ T1444] FAULT_INJECTION: forcing a failure. [ 1164.365028][ T1444] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.377774][ T1444] CPU: 0 PID: 1444 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1164.389377][ T1444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1164.399405][ T1444] Call Trace: [ 1164.402673][ T1444] dump_stack_lvl+0x1e2/0x24b [ 1164.407328][ T1444] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1164.412762][ T1444] ? __kasan_check_read+0x11/0x20 [ 1164.417758][ T1444] ? switch_mm_irqs_off+0x2ca/0x990 [ 1164.422929][ T1444] ? __this_cpu_preempt_check+0x13/0x20 [ 1164.428447][ T1444] dump_stack+0x15/0x17 [ 1164.432597][ T1444] should_fail+0x3c0/0x510 [ 1164.436986][ T1444] ? __kernfs_new_node+0x99/0x6e0 [ 1164.441995][ T1444] __should_failslab+0x9f/0xe0 [ 1164.446735][ T1444] should_failslab+0x9/0x20 [ 1164.451210][ T1444] __kmalloc_track_caller+0x5f/0x350 [ 1164.456485][ T1444] kstrdup_const+0x55/0x90 [ 1164.460873][ T1444] __kernfs_new_node+0x99/0x6e0 [ 1164.465696][ T1444] ? __kasan_check_read+0x11/0x20 [ 1164.470697][ T1444] ? preempt_schedule_irq+0xef/0x140 [ 1164.475954][ T1444] ? kernfs_new_node+0x170/0x170 [ 1164.480869][ T1444] ? irqentry_exit+0x50/0x60 [ 1164.485435][ T1444] ? sysvec_reschedule_ipi+0x84/0x160 [ 1164.490783][ T1444] kernfs_new_node+0x97/0x170 [ 1164.495435][ T1444] kernfs_create_link+0xb8/0x210 [ 1164.500346][ T1444] sysfs_do_create_link_sd+0x89/0x110 [ 1164.505693][ T1444] sysfs_create_link+0x68/0x80 [ 1164.510431][ T1444] device_add_class_symlinks+0x222/0x2a0 [ 1164.516039][ T1444] device_add+0x4c3/0xbd0 [ 1164.520351][ T1444] device_create+0x258/0x2e0 [ 1164.524942][ T1444] ? root_device_unregister+0x80/0x80 [ 1164.530289][ T1444] ? switch_mm_irqs_off+0x2ca/0x990 [ 1164.535460][ T1444] ? __this_cpu_preempt_check+0x13/0x20 [ 1164.540981][ T1444] bdi_register_va+0x94/0x600 [ 1164.545632][ T1444] bdi_register+0xd1/0x120 [ 1164.550038][ T1444] ? __device_add_disk+0x536/0x11d0 [ 1164.555213][ T1444] ? bdi_register_va+0x600/0x600 [ 1164.560142][ T1444] ? __kasan_check_read+0x11/0x20 [ 1164.565143][ T1444] ? blk_alloc_devt+0xd4/0x320 [ 1164.569883][ T1444] __device_add_disk+0x5cb/0x11d0 [ 1164.574883][ T1444] ? device_add_disk+0x40/0x40 [ 1164.579621][ T1444] ? sysvec_reschedule_ipi+0x84/0x160 [ 1164.584983][ T1444] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1164.590596][ T1444] ? vsnprintf+0x1bf3/0x1cd0 [ 1164.595170][ T1444] device_add_disk+0x2a/0x40 [ 1164.599744][ T1444] loop_add+0x58f/0x760 [ 1164.603874][ T1444] loop_control_ioctl+0x564/0x740 [ 1164.608883][ T1444] ? loop_remove+0xb0/0xb0 [ 1164.613277][ T1444] ? __fget_files+0x310/0x370 [ 1164.617939][ T1444] ? security_file_ioctl+0xb1/0xd0 [ 1164.623029][ T1444] ? loop_remove+0xb0/0xb0 [ 1164.627431][ T1444] __se_sys_ioctl+0x115/0x190 [ 1164.632102][ T1444] __x64_sys_ioctl+0x7b/0x90 [ 1164.636675][ T1444] do_syscall_64+0x34/0x70 [ 1164.641065][ T1444] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1164.646943][ T1444] RIP: 0033:0x7f7994738279 [ 1164.651337][ T1444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1164.670915][ T1444] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.679304][ T1444] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1164.687267][ T1444] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1164.695238][ T1444] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.703185][ T1444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1164.711131][ T1444] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1164.720527][ T1444] ------------[ cut here ]------------ [ 1164.726151][ T1444] WARNING: CPU: 0 PID: 1444 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1164.735303][ T1444] Modules linked in: [ 1164.739370][ T1444] CPU: 0 PID: 1444 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1164.751125][ T1444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1164.761335][ T1444] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1164.767316][ T1444] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1164.787147][ T1444] RSP: 0018:ffffc900017a7bc0 EFLAGS: 00010287 [ 1164.793353][ T1444] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1164.801467][ T1444] RDX: ffffc90009966000 RSI: 00000000000346c5 RDI: 00000000000346c6 [ 1164.809600][ T1444] RBP: ffffc900017a7d08 R08: ffffffff824062e6 R09: ffffc900017a7610 [ 1164.817719][ T1444] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1164.825851][ T1444] R13: ffff888151572000 R14: ffff888115ad5338 R15: ffff888115ad5000 [ 1164.833954][ T1444] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1164.843035][ T1444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.849759][ T1444] CR2: 00007f799386bff8 CR3: 000000010c9d3000 CR4: 00000000003506b0 [ 1164.857875][ T1444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1164.866239][ T1444] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1164.874331][ T1444] Call Trace: [ 1164.877780][ T1444] ? device_add_disk+0x40/0x40 [ 1164.882671][ T1444] ? sysvec_reschedule_ipi+0x84/0x160 [ 1164.888182][ T1444] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1164.893939][ T1444] ? vsnprintf+0x1bf3/0x1cd0 [ 1164.898686][ T1444] device_add_disk+0x2a/0x40 [ 1164.903402][ T1444] loop_add+0x58f/0x760 [ 1164.907696][ T1444] loop_control_ioctl+0x564/0x740 [ 1164.912843][ T1444] ? loop_remove+0xb0/0xb0 [ 1164.917399][ T1444] ? __fget_files+0x310/0x370 [ 1164.922214][ T1444] ? security_file_ioctl+0xb1/0xd0 [ 1164.927463][ T1444] ? loop_remove+0xb0/0xb0 [ 1164.932001][ T1444] __se_sys_ioctl+0x115/0x190 [ 1164.936825][ T1444] __x64_sys_ioctl+0x7b/0x90 [ 1164.941543][ T1444] do_syscall_64+0x34/0x70 [ 1164.946096][ T1444] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1164.952112][ T1444] RIP: 0033:0x7f7994738279 [ 1164.956670][ T1444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1164.976428][ T1444] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.985002][ T1444] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1164.993145][ T1444] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1165.001300][ T1444] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.009430][ T1444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1165.017579][ T1444] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1165.025705][ T1444] ---[ end trace b78cd69f8ad74e55 ]--- [ 1165.101558][ T1444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1444 comm=syz-executor.4 22:17:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000400000000000000e3840000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnetconf={0x5c, 0x52, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x80000000}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x98}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x99}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xffffffc1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='mqueue\x00', 0x252040, &(0x7f0000000440)='\x00') statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x888002, &(0x7f0000000500)={[{@xino_auto}, {@metacopy_on}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_off}, {@index_off}, {@metacopy_on}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_off}], [{@dont_appraise}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) sendfile(r2, r3, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000400000000000000e3840000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnetconf={0x5c, 0x52, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x80000000}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x98}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x99}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xffffffc1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) (async) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='mqueue\x00', 0x252040, &(0x7f0000000440)='\x00') (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x888002, &(0x7f0000000500)={[{@xino_auto}, {@metacopy_on}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_off}, {@index_off}, {@metacopy_on}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_off}], [{@dont_appraise}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) (async) sendfile(r2, r3, 0x0, 0x20000023896) (async) 22:17:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="3f0000000000000400000000000098a0e8a9d4e6d3223dce730f1400850000000e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 64) sendfile(r0, r1, 0x0, 0x20000023896) [ 1165.143701][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000300ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:24 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r3}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 22:17:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 44) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001a40)={'syztnl2\x00', &(0x7f00000019c0)={'syztnl1\x00', 0x0, 0x29, 0x75, 0x1, 0x3ff, 0x44, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7, 0x1, 0x9, 0x101}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x20, &(0x7f0000001880)={&(0x7f00000016c0)=""/233, 0xe9, 0x0, &(0x7f00000017c0)=""/137, 0x89}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x9, 0x7, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4b54, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40}], &(0x7f0000000480)='syzkaller\x00', 0x80000000, 0x6a, &(0x7f00000004c0)=""/106, 0x41100, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x0, 0xd, 0xffffffff, 0x101}, 0x10, r2, r1}, 0x80) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r6}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x19000000}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x3, 0x7, 0x20, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x0, '\x00', r6, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x2, 0x100, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x100, 0x80, &(0x7f0000000580)) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c00)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x8, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x0, 0x1, 0x1, 0xb, 0x5, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000001ac0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xe, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000001b00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001b40)={0x1, 0x6, 0x3, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001c40)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, r9]}, 0x80) 22:17:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000500ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000400000000000000e3840000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnetconf={0x5c, 0x52, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x80000000}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x98}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x99}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xffffffc1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='mqueue\x00', 0x252040, &(0x7f0000000440)='\x00') (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 32) mount$overlay(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x888002, &(0x7f0000000500)={[{@xino_auto}, {@metacopy_on}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_off}, {@index_off}, {@metacopy_on}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_off}], [{@dont_appraise}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) (async) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000600ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000402ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000403ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000404ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1165.236586][ T1464] __nla_validate_parse: 35 callbacks suppressed [ 1165.236597][ T1464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:17:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000405ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1165.365667][ T1501] FAULT_INJECTION: forcing a failure. [ 1165.365667][ T1501] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.378413][ T1501] CPU: 0 PID: 1501 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1165.390014][ T1501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1165.400047][ T1501] Call Trace: [ 1165.403315][ T1501] dump_stack_lvl+0x1e2/0x24b [ 1165.407966][ T1501] ? panic+0x7d7/0x7d7 [ 1165.412008][ T1501] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1165.417468][ T1501] ? irqentry_exit+0x50/0x60 [ 1165.422033][ T1501] ? sysvec_reschedule_ipi+0x84/0x160 [ 1165.427378][ T1501] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1165.432985][ T1501] dump_stack+0x15/0x17 [ 1165.437118][ T1501] should_fail+0x3c0/0x510 [ 1165.441529][ T1501] __should_failslab+0x9f/0xe0 [ 1165.446269][ T1501] should_failslab+0x9/0x20 [ 1165.450760][ T1501] kmem_cache_alloc+0x3f/0x300 [ 1165.455503][ T1501] ? __kernfs_new_node+0xdb/0x6e0 [ 1165.460503][ T1501] __kernfs_new_node+0xdb/0x6e0 [ 1165.465345][ T1501] ? __kasan_check_write+0x14/0x20 [ 1165.470429][ T1501] ? mutex_lock+0xa6/0x110 [ 1165.474820][ T1501] ? kernfs_new_node+0x170/0x170 [ 1165.479732][ T1501] ? __kasan_check_write+0x14/0x20 [ 1165.484814][ T1501] ? mutex_unlock+0x1d/0x40 [ 1165.489288][ T1501] ? kernfs_activate+0x409/0x420 [ 1165.494200][ T1501] kernfs_new_node+0x97/0x170 [ 1165.498851][ T1501] kernfs_create_link+0xb8/0x210 [ 1165.503772][ T1501] sysfs_do_create_link_sd+0x89/0x110 [ 1165.509119][ T1501] sysfs_create_link+0x68/0x80 [ 1165.513874][ T1501] device_add_class_symlinks+0x222/0x2a0 [ 1165.519481][ T1501] device_add+0x4c3/0xbd0 [ 1165.523785][ T1501] device_create+0x258/0x2e0 [ 1165.528353][ T1501] ? sysvec_reschedule_ipi+0x84/0x160 [ 1165.533696][ T1501] ? root_device_unregister+0x80/0x80 [ 1165.539052][ T1501] bdi_register_va+0x94/0x600 [ 1165.543705][ T1501] bdi_register+0xd1/0x120 [ 1165.548112][ T1501] ? __device_add_disk+0x536/0x11d0 [ 1165.553282][ T1501] ? bdi_register_va+0x600/0x600 [ 1165.558195][ T1501] ? __kasan_check_read+0x11/0x20 [ 1165.563194][ T1501] ? blk_alloc_devt+0xd4/0x320 [ 1165.567932][ T1501] __device_add_disk+0x5cb/0x11d0 [ 1165.572931][ T1501] ? device_add_disk+0x40/0x40 [ 1165.577671][ T1501] ? sysvec_reschedule_ipi+0x84/0x160 [ 1165.583015][ T1501] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1165.588622][ T1501] ? vsnprintf+0x1bf3/0x1cd0 [ 1165.593187][ T1501] device_add_disk+0x2a/0x40 [ 1165.597753][ T1501] loop_add+0x58f/0x760 [ 1165.601884][ T1501] loop_control_ioctl+0x564/0x740 [ 1165.606883][ T1501] ? loop_remove+0xb0/0xb0 [ 1165.611273][ T1501] ? __fget_files+0x310/0x370 [ 1165.615959][ T1501] ? security_file_ioctl+0xb1/0xd0 [ 1165.621044][ T1501] ? loop_remove+0xb0/0xb0 [ 1165.625440][ T1501] __se_sys_ioctl+0x115/0x190 [ 1165.630092][ T1501] __x64_sys_ioctl+0x7b/0x90 [ 1165.634666][ T1501] do_syscall_64+0x34/0x70 [ 1165.639061][ T1501] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1165.644928][ T1501] RIP: 0033:0x7f7994738279 [ 1165.649320][ T1501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1165.668899][ T1501] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1165.677289][ T1501] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1165.685251][ T1501] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1165.693202][ T1501] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.701149][ T1501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1165.709099][ T1501] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1165.718453][ T1501] ------------[ cut here ]------------ [ 1165.724089][ T1501] WARNING: CPU: 0 PID: 1501 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1165.733246][ T1501] Modules linked in: [ 1165.737320][ T1501] CPU: 0 PID: 1501 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1165.749081][ T1501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1165.759301][ T1501] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1165.765247][ T1501] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1165.785061][ T1501] RSP: 0018:ffffc900018e7bc0 EFLAGS: 00010283 [ 1165.791288][ T1501] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1165.799405][ T1501] RDX: ffffc90009966000 RSI: 00000000000340d5 RDI: 00000000000340d6 [ 1165.807520][ T1501] RBP: ffffc900018e7d08 R08: ffffffff824062e6 R09: ffffc900018e7610 [ 1165.815651][ T1501] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1165.823745][ T1501] R13: ffff888152218000 R14: ffff88815178a338 R15: ffff88815178a000 [ 1165.831859][ T1501] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1165.840923][ T1501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1165.847699][ T1501] CR2: 00007f799386bff8 CR3: 000000010f063000 CR4: 00000000003506b0 [ 1165.855846][ T1501] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1165.863975][ T1501] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1165.872106][ T1501] Call Trace: [ 1165.875603][ T1501] ? device_add_disk+0x40/0x40 [ 1165.880519][ T1501] ? sysvec_reschedule_ipi+0x84/0x160 [ 1165.886056][ T1501] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1165.891821][ T1501] ? vsnprintf+0x1bf3/0x1cd0 [ 1165.896568][ T1501] device_add_disk+0x2a/0x40 [ 1165.901288][ T1501] loop_add+0x58f/0x760 [ 1165.905591][ T1501] loop_control_ioctl+0x564/0x740 [ 1165.910743][ T1501] ? loop_remove+0xb0/0xb0 [ 1165.915334][ T1501] ? __fget_files+0x310/0x370 [ 1165.920167][ T1501] ? security_file_ioctl+0xb1/0xd0 [ 1165.925449][ T1501] ? loop_remove+0xb0/0xb0 [ 1165.930006][ T1501] __se_sys_ioctl+0x115/0x190 [ 1165.934818][ T1501] __x64_sys_ioctl+0x7b/0x90 [ 1165.939632][ T1501] do_syscall_64+0x34/0x70 [ 1165.944197][ T1501] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1165.950249][ T1501] RIP: 0033:0x7f7994738279 [ 1165.954832][ T1501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1165.974674][ T1501] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1165.983265][ T1501] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1165.991382][ T1501] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1165.999565][ T1501] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1166.007712][ T1501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1166.015837][ T1501] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1166.023962][ T1501] ---[ end trace b78cd69f8ad74e56 ]--- [ 1166.099386][ T1501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1501 comm=syz-executor.4 [ 1166.131565][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="3f0000000000000400000000000098a0e8a9d4e6d3223dce730f1400850000000e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="3f0000000000000400000000000098a0e8a9d4e6d3223dce730f1400850000000e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000406ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 45) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:25 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r3}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$FIOCLEX(r0, 0x5451) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r3}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) (async) connect$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r4, r5, 0x0, 0x20000023896) (async) 22:17:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000407ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40d42, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000408ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000409ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40d42, 0x0) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 32) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc0000000000000000000000000000001400040aff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100040000000000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="06000000", @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r2, @local, @private=0xa010102}, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) [ 1166.235527][ T1514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1166.337696][ T1560] FAULT_INJECTION: forcing a failure. [ 1166.337696][ T1560] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.350438][ T1560] CPU: 0 PID: 1560 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1166.362044][ T1560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1166.372202][ T1560] Call Trace: [ 1166.375515][ T1560] dump_stack_lvl+0x1e2/0x24b [ 1166.380187][ T1560] ? panic+0x7d7/0x7d7 [ 1166.384239][ T1560] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1166.389682][ T1560] dump_stack+0x15/0x17 [ 1166.393920][ T1560] should_fail+0x3c0/0x510 [ 1166.398327][ T1560] __should_failslab+0x9f/0xe0 [ 1166.403081][ T1560] should_failslab+0x9/0x20 [ 1166.407583][ T1560] kmem_cache_alloc+0x3f/0x300 [ 1166.412353][ T1560] ? __kernfs_new_node+0xdb/0x6e0 [ 1166.417357][ T1560] ? bpf_trace_run3+0x126/0x2c0 [ 1166.422183][ T1560] __kernfs_new_node+0xdb/0x6e0 [ 1166.427008][ T1560] ? __kasan_check_read+0x11/0x20 [ 1166.432008][ T1560] ? switch_mm_irqs_off+0x2ca/0x990 [ 1166.437193][ T1560] ? kernfs_new_node+0x170/0x170 [ 1166.442121][ T1560] ? _raw_spin_unlock_irq+0x4e/0x70 [ 1166.447300][ T1560] ? finish_task_switch+0x130/0x580 [ 1166.452491][ T1560] ? __switch_to_asm+0x36/0x70 [ 1166.457241][ T1560] ? __schedule+0x86e/0xc00 [ 1166.461731][ T1560] kernfs_new_node+0x97/0x170 [ 1166.466389][ T1560] __kernfs_create_file+0x4a/0x270 [ 1166.471500][ T1560] sysfs_add_file_mode_ns+0x273/0x320 [ 1166.476852][ T1560] internal_create_group+0x55e/0xf50 [ 1166.482119][ T1560] ? sysfs_create_group+0x30/0x30 [ 1166.487120][ T1560] sysfs_create_groups+0x5d/0x130 [ 1166.492120][ T1560] device_add_attrs+0x8b/0x3e0 [ 1166.496856][ T1560] ? device_add_class_symlinks+0x27c/0x2a0 [ 1166.502636][ T1560] device_add+0x4e6/0xbd0 [ 1166.506948][ T1560] device_create+0x258/0x2e0 [ 1166.511515][ T1560] ? root_device_unregister+0x80/0x80 [ 1166.516877][ T1560] ? __kasan_check_read+0x11/0x20 [ 1166.521877][ T1560] ? preempt_schedule_irq+0xef/0x140 [ 1166.527135][ T1560] ? preempt_schedule_notrace+0x140/0x140 [ 1166.532829][ T1560] bdi_register_va+0x94/0x600 [ 1166.537482][ T1560] bdi_register+0xd1/0x120 [ 1166.541874][ T1560] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1166.547480][ T1560] ? __device_add_disk+0x536/0x11d0 [ 1166.552652][ T1560] ? bdi_register_va+0x600/0x600 [ 1166.557570][ T1560] ? elevator_init_mq+0x290/0x500 [ 1166.562567][ T1560] ? blk_alloc_devt+0xd4/0x320 [ 1166.567313][ T1560] __device_add_disk+0x5cb/0x11d0 [ 1166.572311][ T1560] ? device_add_disk+0x40/0x40 [ 1166.577050][ T1560] ? loop_add+0x440/0x760 [ 1166.581368][ T1560] ? vsprintf+0x40/0x40 [ 1166.585510][ T1560] device_add_disk+0x2a/0x40 [ 1166.590075][ T1560] loop_add+0x58f/0x760 [ 1166.594206][ T1560] loop_control_ioctl+0x564/0x740 [ 1166.599222][ T1560] ? fput_many+0x30/0x1a0 [ 1166.603532][ T1560] ? loop_remove+0xb0/0xb0 [ 1166.607932][ T1560] ? __fget_files+0x310/0x370 [ 1166.612583][ T1560] ? security_file_ioctl+0xb1/0xd0 [ 1166.617665][ T1560] ? loop_remove+0xb0/0xb0 [ 1166.622055][ T1560] __se_sys_ioctl+0x115/0x190 [ 1166.626704][ T1560] __x64_sys_ioctl+0x7b/0x90 [ 1166.631271][ T1560] do_syscall_64+0x34/0x70 [ 1166.635662][ T1560] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1166.641527][ T1560] RIP: 0033:0x7f7994738279 [ 1166.645918][ T1560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1166.665510][ T1560] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.673904][ T1560] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1166.681852][ T1560] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1166.689801][ T1560] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1166.697764][ T1560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1166.705711][ T1560] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1166.715306][ T1560] ------------[ cut here ]------------ [ 1166.720912][ T1560] WARNING: CPU: 0 PID: 1560 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1166.730068][ T1560] Modules linked in: [ 1166.734142][ T1560] CPU: 0 PID: 1560 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1166.745902][ T1560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1166.756109][ T1560] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1166.762035][ T1560] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1166.781797][ T1560] RSP: 0018:ffffc900017e7bc0 EFLAGS: 00010283 [ 1166.788027][ T1560] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1166.796136][ T1560] RDX: ffffc90009966000 RSI: 00000000000377e8 RDI: 00000000000377e9 [ 1166.804232][ T1560] RBP: ffffc900017e7d08 R08: ffffffff824062e6 R09: ffffc900017e7610 [ 1166.812352][ T1560] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1166.820467][ T1560] R13: ffff888152f8a000 R14: ffff888152f8f338 R15: ffff888152f8f000 [ 1166.828581][ T1560] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1166.837697][ T1560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1166.844425][ T1560] CR2: 00007f799386bff8 CR3: 0000000112695000 CR4: 00000000003506b0 [ 1166.852550][ T1560] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1166.860659][ T1560] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1166.868787][ T1560] Call Trace: [ 1166.872221][ T1560] ? device_add_disk+0x40/0x40 [ 1166.877126][ T1560] ? loop_add+0x440/0x760 [ 1166.881582][ T1560] ? vsprintf+0x40/0x40 [ 1166.885904][ T1560] device_add_disk+0x2a/0x40 [ 1166.890616][ T1560] loop_add+0x58f/0x760 [ 1166.894894][ T1560] loop_control_ioctl+0x564/0x740 [ 1166.900073][ T1560] ? fput_many+0x30/0x1a0 [ 1166.904560][ T1560] ? loop_remove+0xb0/0xb0 [ 1166.909112][ T1560] ? __fget_files+0x310/0x370 [ 1166.913919][ T1560] ? security_file_ioctl+0xb1/0xd0 [ 1166.919206][ T1560] ? loop_remove+0xb0/0xb0 [ 1166.923751][ T1560] __se_sys_ioctl+0x115/0x190 [ 1166.928573][ T1560] __x64_sys_ioctl+0x7b/0x90 [ 1166.933288][ T1560] do_syscall_64+0x34/0x70 [ 1166.937840][ T1560] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1166.943855][ T1560] RIP: 0033:0x7f7994738279 [ 1166.948419][ T1560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1166.968211][ T1560] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.976840][ T1560] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1166.985022][ T1560] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1166.993262][ T1560] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1167.001438][ T1560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1167.009585][ T1560] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1167.017717][ T1560] ---[ end trace b78cd69f8ad74e57 ]--- [ 1167.093674][ T1560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1560 comm=syz-executor.4 22:17:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40d42, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40d42, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:26 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r3}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) (async) connect$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) [ 1167.141800][T26548] udevd[26548]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc0000000000000000000000000000001400040bff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 46) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc0000000000000000000000000000001400040dff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x42040) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000410ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1167.198304][ T1564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:17:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000411ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000421ff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc0000000000000000000000000000001400042fff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1167.253367][ T1588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1588 comm=syz-executor.0 [ 1167.345882][ T1603] FAULT_INJECTION: forcing a failure. [ 1167.345882][ T1603] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.358628][ T1603] CPU: 0 PID: 1603 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1167.370231][ T1603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1167.380262][ T1603] Call Trace: [ 1167.383535][ T1603] dump_stack_lvl+0x1e2/0x24b [ 1167.388187][ T1603] ? panic+0x7d7/0x7d7 [ 1167.392228][ T1603] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1167.397674][ T1603] dump_stack+0x15/0x17 [ 1167.401826][ T1603] should_fail+0x3c0/0x510 [ 1167.406219][ T1603] __should_failslab+0x9f/0xe0 [ 1167.410957][ T1603] should_failslab+0x9/0x20 [ 1167.415438][ T1603] kmem_cache_alloc+0x3f/0x300 [ 1167.420176][ T1603] ? __kernfs_new_node+0xdb/0x6e0 [ 1167.425176][ T1603] __kernfs_new_node+0xdb/0x6e0 [ 1167.430003][ T1603] ? mutex_trylock+0xb0/0xb0 [ 1167.434577][ T1603] ? kernfs_new_node+0x170/0x170 [ 1167.439490][ T1603] ? __kasan_check_write+0x14/0x20 [ 1167.444574][ T1603] ? mutex_unlock+0x1d/0x40 [ 1167.449056][ T1603] ? kernfs_activate+0x409/0x420 [ 1167.453992][ T1603] kernfs_new_node+0x97/0x170 [ 1167.458647][ T1603] __kernfs_create_file+0x4a/0x270 [ 1167.463730][ T1603] sysfs_add_file_mode_ns+0x273/0x320 [ 1167.469095][ T1603] internal_create_group+0x55e/0xf50 [ 1167.474355][ T1603] ? sysfs_create_group+0x30/0x30 [ 1167.479354][ T1603] ? kernfs_put+0x48/0x540 [ 1167.483743][ T1603] ? kernfs_create_link+0x1a0/0x210 [ 1167.488917][ T1603] sysfs_create_groups+0x5d/0x130 [ 1167.493917][ T1603] device_add_attrs+0x8b/0x3e0 [ 1167.498655][ T1603] ? device_add_class_symlinks+0x27c/0x2a0 [ 1167.504433][ T1603] device_add+0x4e6/0xbd0 [ 1167.508747][ T1603] device_create+0x258/0x2e0 [ 1167.513312][ T1603] ? root_device_unregister+0x80/0x80 [ 1167.518657][ T1603] ? __kasan_check_read+0x11/0x20 [ 1167.523657][ T1603] ? preempt_schedule_irq+0xef/0x140 [ 1167.528913][ T1603] ? preempt_schedule_notrace+0x140/0x140 [ 1167.534607][ T1603] bdi_register_va+0x94/0x600 [ 1167.539275][ T1603] bdi_register+0xd1/0x120 [ 1167.543668][ T1603] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1167.549385][ T1603] ? __device_add_disk+0x536/0x11d0 [ 1167.554566][ T1603] ? bdi_register_va+0x600/0x600 [ 1167.559507][ T1603] ? blk_alloc_devt+0x1e5/0x320 [ 1167.564332][ T1603] __device_add_disk+0x5cb/0x11d0 [ 1167.569332][ T1603] ? device_add_disk+0x40/0x40 [ 1167.574071][ T1603] ? loop_add+0x440/0x760 [ 1167.578378][ T1603] ? vsprintf+0x40/0x40 [ 1167.582508][ T1603] device_add_disk+0x2a/0x40 [ 1167.587072][ T1603] loop_add+0x58f/0x760 [ 1167.591203][ T1603] loop_control_ioctl+0x564/0x740 [ 1167.596219][ T1603] ? loop_remove+0xb0/0xb0 [ 1167.600610][ T1603] ? __fget_files+0x310/0x370 [ 1167.605271][ T1603] ? security_file_ioctl+0xb1/0xd0 [ 1167.610354][ T1603] ? loop_remove+0xb0/0xb0 [ 1167.614746][ T1603] __se_sys_ioctl+0x115/0x190 [ 1167.619401][ T1603] __x64_sys_ioctl+0x7b/0x90 [ 1167.623972][ T1603] do_syscall_64+0x34/0x70 [ 1167.628396][ T1603] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1167.634260][ T1603] RIP: 0033:0x7f7994738279 [ 1167.638652][ T1603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1167.658232][ T1603] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1167.666618][ T1603] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1167.674564][ T1603] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1167.682508][ T1603] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1167.690454][ T1603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1167.698402][ T1603] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1167.707802][ T1603] ------------[ cut here ]------------ [ 1167.713430][ T1603] WARNING: CPU: 0 PID: 1603 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1167.722598][ T1603] Modules linked in: [ 1167.726672][ T1603] CPU: 0 PID: 1603 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1167.738439][ T1603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1167.748663][ T1603] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1167.754593][ T1603] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1167.774436][ T1603] RSP: 0018:ffffc90001877bc0 EFLAGS: 00010287 [ 1167.780654][ T1603] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1167.788766][ T1603] RDX: ffffc90009966000 RSI: 0000000000035b8f RDI: 0000000000035b90 [ 1167.796914][ T1603] RBP: ffffc90001877d08 R08: ffffffff824062e6 R09: ffffc90001877610 [ 1167.805023][ T1603] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1167.813121][ T1603] R13: ffff888151555000 R14: ffff888152142338 R15: ffff888152142000 [ 1167.821235][ T1603] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1167.830320][ T1603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1167.837041][ T1603] CR2: 00007f799386bff8 CR3: 00000001194e1000 CR4: 00000000003506b0 [ 1167.845158][ T1603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1167.853269][ T1603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1167.861396][ T1603] Call Trace: [ 1167.864843][ T1603] ? device_add_disk+0x40/0x40 [ 1167.869749][ T1603] ? loop_add+0x440/0x760 [ 1167.874207][ T1603] ? vsprintf+0x40/0x40 [ 1167.878569][ T1603] device_add_disk+0x2a/0x40 [ 1167.883285][ T1603] loop_add+0x58f/0x760 [ 1167.887587][ T1603] loop_control_ioctl+0x564/0x740 [ 1167.892746][ T1603] ? loop_remove+0xb0/0xb0 [ 1167.897308][ T1603] ? __fget_files+0x310/0x370 [ 1167.902123][ T1603] ? security_file_ioctl+0xb1/0xd0 [ 1167.907371][ T1603] ? loop_remove+0xb0/0xb0 [ 1167.911909][ T1603] __se_sys_ioctl+0x115/0x190 [ 1167.916757][ T1603] __x64_sys_ioctl+0x7b/0x90 [ 1167.921473][ T1603] do_syscall_64+0x34/0x70 [ 1167.926058][ T1603] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1167.932074][ T1603] RIP: 0033:0x7f7994738279 [ 1167.936675][ T1603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1167.956828][ T1603] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1167.965438][ T1603] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1167.973542][ T1603] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1167.981675][ T1603] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1167.989804][ T1603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1167.997911][ T1603] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1168.006034][ T1603] ---[ end trace b78cd69f8ad74e58 ]--- [ 1168.061332][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1168.097295][ T1603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1603 comm=syz-executor.4 22:17:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc0000000000000000000000000000001400043aff0100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:27 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000004000000000000000085000098fa011504ad135b200c26b13d6ed2000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100040000000000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="06000000", @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r2, @local, @private=0xa010102}, 0xc) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) 22:17:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) (async) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x42040) (async) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 47) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc0000000000000000000000000000001400040003d7836f6c54557b00000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0300000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0500000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1168.192644][ T1609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1609 comm=syz-executor.0 22:17:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0600000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0800000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0900000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1168.336303][ T1638] FAULT_INJECTION: forcing a failure. [ 1168.336303][ T1638] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.348919][ T1638] CPU: 1 PID: 1638 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1168.360526][ T1638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1168.370560][ T1638] Call Trace: [ 1168.373837][ T1638] dump_stack_lvl+0x1e2/0x24b [ 1168.378491][ T1638] ? panic+0x7d7/0x7d7 [ 1168.382536][ T1638] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1168.387968][ T1638] ? selinux_kernfs_init_security+0x1a8/0x760 [ 1168.394011][ T1638] dump_stack+0x15/0x17 [ 1168.398146][ T1638] should_fail+0x3c0/0x510 [ 1168.402540][ T1638] __should_failslab+0x9f/0xe0 [ 1168.407279][ T1638] should_failslab+0x9/0x20 [ 1168.411758][ T1638] kmem_cache_alloc+0x3f/0x300 [ 1168.416514][ T1638] ? __kernfs_new_node+0xdb/0x6e0 [ 1168.421512][ T1638] __kernfs_new_node+0xdb/0x6e0 [ 1168.426340][ T1638] ? mutex_trylock+0xb0/0xb0 [ 1168.430915][ T1638] ? kernfs_new_node+0x170/0x170 [ 1168.435830][ T1638] ? __kasan_check_write+0x14/0x20 [ 1168.440914][ T1638] ? mutex_unlock+0x1d/0x40 [ 1168.445413][ T1638] ? kernfs_activate+0x409/0x420 [ 1168.450326][ T1638] kernfs_new_node+0x97/0x170 [ 1168.455002][ T1638] __kernfs_create_file+0x4a/0x270 [ 1168.460089][ T1638] sysfs_add_file_mode_ns+0x273/0x320 [ 1168.465436][ T1638] internal_create_group+0x55e/0xf50 [ 1168.470695][ T1638] ? sysfs_create_group+0x30/0x30 [ 1168.475692][ T1638] ? kernfs_put+0x48/0x540 [ 1168.480083][ T1638] ? kernfs_create_link+0x1a0/0x210 [ 1168.485256][ T1638] sysfs_create_groups+0x5d/0x130 [ 1168.490257][ T1638] device_add_attrs+0x8b/0x3e0 [ 1168.494996][ T1638] ? device_add_class_symlinks+0x27c/0x2a0 [ 1168.500862][ T1638] device_add+0x4e6/0xbd0 [ 1168.505165][ T1638] device_create+0x258/0x2e0 [ 1168.509728][ T1638] ? root_device_unregister+0x80/0x80 [ 1168.515076][ T1638] ? number+0xd9b/0x1040 [ 1168.519300][ T1638] bdi_register_va+0x94/0x600 [ 1168.523958][ T1638] bdi_register+0xd1/0x120 [ 1168.528350][ T1638] ? __device_add_disk+0x536/0x11d0 [ 1168.533521][ T1638] ? bdi_register_va+0x600/0x600 [ 1168.538448][ T1638] ? vsnprintf+0x1bfd/0x1cd0 [ 1168.543016][ T1638] ? __kasan_check_read+0x11/0x20 [ 1168.548016][ T1638] ? blk_alloc_devt+0xd4/0x320 [ 1168.552755][ T1638] __device_add_disk+0x5cb/0x11d0 [ 1168.557754][ T1638] ? device_add_disk+0x40/0x40 [ 1168.562491][ T1638] ? loop_add+0x440/0x760 [ 1168.566801][ T1638] ? vsprintf+0x40/0x40 [ 1168.570933][ T1638] device_add_disk+0x2a/0x40 [ 1168.575497][ T1638] loop_add+0x58f/0x760 [ 1168.579630][ T1638] loop_control_ioctl+0x564/0x740 [ 1168.584627][ T1638] ? loop_remove+0xb0/0xb0 [ 1168.589025][ T1638] ? __fget_files+0x310/0x370 [ 1168.593679][ T1638] ? security_file_ioctl+0xb1/0xd0 [ 1168.598761][ T1638] ? loop_remove+0xb0/0xb0 [ 1168.603151][ T1638] __se_sys_ioctl+0x115/0x190 [ 1168.607808][ T1638] __x64_sys_ioctl+0x7b/0x90 [ 1168.612372][ T1638] do_syscall_64+0x34/0x70 [ 1168.616766][ T1638] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1168.622639][ T1638] RIP: 0033:0x7f7994738279 [ 1168.627030][ T1638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1168.646607][ T1638] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1168.654996][ T1638] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1168.662942][ T1638] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1168.670889][ T1638] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1168.678835][ T1638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.686792][ T1638] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1168.695286][ T1638] ------------[ cut here ]------------ [ 1168.700757][ T1638] WARNING: CPU: 1 PID: 1638 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1168.709789][ T1638] Modules linked in: [ 1168.713690][ T1638] CPU: 1 PID: 1638 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1168.725329][ T1638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1168.735415][ T1638] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1168.741215][ T1638] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1168.760843][ T1638] RSP: 0018:ffffc90001837bc0 EFLAGS: 00010283 [ 1168.766922][ T1638] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1168.774891][ T1638] RDX: ffffc90009966000 RSI: 0000000000031d51 RDI: 0000000000031d52 [ 1168.782879][ T1638] RBP: ffffc90001837d08 R08: ffffffff824062e6 R09: ffffc90001837610 [ 1168.790872][ T1638] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1168.798856][ T1638] R13: ffff88811653f000 R14: ffff88811653a338 R15: ffff88811653a000 [ 1168.806855][ T1638] FS: 00007f799386c700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1168.815795][ T1638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.822379][ T1638] CR2: 00007f799386bff8 CR3: 0000000115966000 CR4: 00000000003506a0 [ 1168.830378][ T1638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1168.838383][ T1638] DR3: 000000000000003b DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1168.846372][ T1638] Call Trace: [ 1168.849666][ T1638] ? device_add_disk+0x40/0x40 [ 1168.854429][ T1638] ? loop_add+0x440/0x760 [ 1168.858797][ T1638] ? vsprintf+0x40/0x40 [ 1168.862948][ T1638] device_add_disk+0x2a/0x40 [ 1168.867546][ T1638] loop_add+0x58f/0x760 [ 1168.871698][ T1638] loop_control_ioctl+0x564/0x740 [ 1168.876725][ T1638] ? loop_remove+0xb0/0xb0 [ 1168.881133][ T1638] ? __fget_files+0x310/0x370 [ 1168.885821][ T1638] ? security_file_ioctl+0xb1/0xd0 [ 1168.890927][ T1638] ? loop_remove+0xb0/0xb0 [ 1168.895349][ T1638] __se_sys_ioctl+0x115/0x190 [ 1168.900018][ T1638] __x64_sys_ioctl+0x7b/0x90 [ 1168.904605][ T1638] do_syscall_64+0x34/0x70 [ 1168.909049][ T1638] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1168.914952][ T1638] RIP: 0033:0x7f7994738279 [ 1168.919372][ T1638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1168.938982][ T1638] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1168.947407][ T1638] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1168.955387][ T1638] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1168.963375][ T1638] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1168.971403][ T1638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.979407][ T1638] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1168.987390][ T1638] ---[ end trace b78cd69f8ad74e59 ]--- [ 1169.024707][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1169.061285][ T1638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1638 comm=syz-executor.4 22:17:28 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000004000000000000000085000098fa011504ad135b200c26b13d6ed2000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023896) 22:17:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async, rerun: 64) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100040000000000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="06000000", @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) (async, rerun: 64) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (rerun: 32) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r2, @local, @private=0xa010102}, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) 22:17:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 48) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0a00000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x42040) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) (async) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x42040) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@gettfilter={0x5c, 0x2e, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xe}, {0x7, 0xb}, {0x3, 0xfff3}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x5c45557c}, {0x8, 0xb, 0x736}, {0x8, 0xb, 0x42}, {0x8, 0xb, 0x8e}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x90) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) 22:17:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0b00000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@gettfilter={0x5c, 0x2e, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xe}, {0x7, 0xb}, {0x3, 0xfff3}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x5c45557c}, {0x8, 0xb, 0x736}, {0x8, 0xb, 0x42}, {0x8, 0xb, 0x8e}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x90) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@gettfilter={0x5c, 0x2e, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xe}, {0x7, 0xb}, {0x3, 0xfff3}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x5c45557c}, {0x8, 0xb, 0x736}, {0x8, 0xb, 0x42}, {0x8, 0xb, 0x8e}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x90) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) (async) 22:17:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff1000000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@gettfilter={0x5c, 0x2e, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xe}, {0x7, 0xb}, {0x3, 0xfff3}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x5c45557c}, {0x8, 0xb, 0x736}, {0x8, 0xb, 0x42}, {0x8, 0xb, 0x8e}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x90) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@gettfilter={0x5c, 0x2e, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xe}, {0x7, 0xb}, {0x3, 0xfff3}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x5c45557c}, {0x8, 0xb, 0x736}, {0x8, 0xb, 0x42}, {0x8, 0xb, 0x8e}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x90) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) (async) 22:17:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff1100000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1169.269023][ T1645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1645 comm=syz-executor.0 [ 1169.366871][ T1688] FAULT_INJECTION: forcing a failure. [ 1169.366871][ T1688] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.379660][ T1688] CPU: 0 PID: 1688 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1169.391270][ T1688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1169.401300][ T1688] Call Trace: [ 1169.404569][ T1688] dump_stack_lvl+0x1e2/0x24b [ 1169.409219][ T1688] ? panic+0x7d7/0x7d7 [ 1169.413270][ T1688] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1169.418706][ T1688] ? __schedule+0x86e/0xc00 [ 1169.423184][ T1688] dump_stack+0x15/0x17 [ 1169.427315][ T1688] should_fail+0x3c0/0x510 [ 1169.431731][ T1688] __should_failslab+0x9f/0xe0 [ 1169.436468][ T1688] should_failslab+0x9/0x20 [ 1169.440943][ T1688] kmem_cache_alloc+0x3f/0x300 [ 1169.445686][ T1688] ? __kernfs_new_node+0xdb/0x6e0 [ 1169.450702][ T1688] ? preempt_schedule_notrace+0x140/0x140 [ 1169.456393][ T1688] __kernfs_new_node+0xdb/0x6e0 [ 1169.461220][ T1688] ? mutex_trylock+0xb0/0xb0 [ 1169.465785][ T1688] ? kernfs_new_node+0x170/0x170 [ 1169.470698][ T1688] ? __kasan_check_write+0x14/0x20 [ 1169.475783][ T1688] ? mutex_unlock+0x1d/0x40 [ 1169.480257][ T1688] ? kernfs_activate+0x409/0x420 [ 1169.485168][ T1688] kernfs_new_node+0x97/0x170 [ 1169.489821][ T1688] __kernfs_create_file+0x4a/0x270 [ 1169.494905][ T1688] sysfs_add_file_mode_ns+0x273/0x320 [ 1169.500261][ T1688] internal_create_group+0x55e/0xf50 [ 1169.505522][ T1688] ? sysvec_reschedule_ipi+0x84/0x160 [ 1169.510867][ T1688] ? sysfs_create_group+0x30/0x30 [ 1169.515869][ T1688] sysfs_create_groups+0x5d/0x130 [ 1169.520876][ T1688] device_add_attrs+0x8b/0x3e0 [ 1169.525614][ T1688] ? device_add_class_symlinks+0x27c/0x2a0 [ 1169.531391][ T1688] device_add+0x4e6/0xbd0 [ 1169.535702][ T1688] device_create+0x258/0x2e0 [ 1169.540278][ T1688] ? sysvec_reschedule_ipi+0x84/0x160 [ 1169.545658][ T1688] ? root_device_unregister+0x80/0x80 [ 1169.551013][ T1688] bdi_register_va+0x94/0x600 [ 1169.555680][ T1688] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1169.561288][ T1688] bdi_register+0xd1/0x120 [ 1169.565682][ T1688] ? __device_add_disk+0x536/0x11d0 [ 1169.570858][ T1688] ? bdi_register_va+0x600/0x600 [ 1169.575770][ T1688] ? vsnprintf+0x1bfd/0x1cd0 [ 1169.580334][ T1688] ? __kasan_check_read+0x11/0x20 [ 1169.585345][ T1688] ? blk_alloc_devt+0xd4/0x320 [ 1169.590091][ T1688] __device_add_disk+0x5cb/0x11d0 [ 1169.595092][ T1688] ? device_add_disk+0x40/0x40 [ 1169.599830][ T1688] ? loop_add+0x440/0x760 [ 1169.604136][ T1688] ? vsprintf+0x40/0x40 [ 1169.608267][ T1688] device_add_disk+0x2a/0x40 [ 1169.612852][ T1688] loop_add+0x58f/0x760 [ 1169.616982][ T1688] loop_control_ioctl+0x564/0x740 [ 1169.621979][ T1688] ? loop_remove+0xb0/0xb0 [ 1169.626372][ T1688] ? __fget_files+0x310/0x370 [ 1169.631024][ T1688] ? security_file_ioctl+0xb1/0xd0 [ 1169.636209][ T1688] ? loop_remove+0xb0/0xb0 [ 1169.640600][ T1688] __se_sys_ioctl+0x115/0x190 [ 1169.645250][ T1688] __x64_sys_ioctl+0x7b/0x90 [ 1169.649822][ T1688] do_syscall_64+0x34/0x70 [ 1169.654231][ T1688] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1169.660096][ T1688] RIP: 0033:0x7f7994738279 [ 1169.664487][ T1688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1169.684062][ T1688] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1169.692450][ T1688] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1169.700395][ T1688] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1169.708341][ T1688] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.716289][ T1688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1169.724236][ T1688] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1169.733699][ T1688] ------------[ cut here ]------------ [ 1169.739325][ T1688] WARNING: CPU: 0 PID: 1688 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1169.748478][ T1688] Modules linked in: [ 1169.752527][ T1688] CPU: 0 PID: 1688 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1169.764283][ T1688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1169.774488][ T1688] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1169.780433][ T1688] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1169.800256][ T1688] RSP: 0018:ffffc90001807bc0 EFLAGS: 00010287 [ 1169.806493][ T1688] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1169.814594][ T1688] RDX: ffffc90009966000 RSI: 0000000000036e39 RDI: 0000000000036e3a [ 1169.822717][ T1688] RBP: ffffc90001807d08 R08: ffffffff824062e6 R09: ffffc90001807610 [ 1169.830863][ T1688] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1169.838998][ T1688] R13: ffff88810f88b000 R14: ffff8881198da338 R15: ffff8881198da000 [ 1169.847119][ T1688] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1169.856193][ T1688] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1169.862906][ T1688] CR2: 00007f799386bff8 CR3: 00000001143d7000 CR4: 00000000003506b0 [ 1169.871035][ T1688] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1169.879178][ T1688] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1169.887284][ T1688] Call Trace: [ 1169.890719][ T1688] ? device_add_disk+0x40/0x40 [ 1169.895628][ T1688] ? loop_add+0x440/0x760 [ 1169.900109][ T1688] ? vsprintf+0x40/0x40 [ 1169.904401][ T1688] device_add_disk+0x2a/0x40 [ 1169.909137][ T1688] loop_add+0x58f/0x760 [ 1169.913422][ T1688] loop_control_ioctl+0x564/0x740 [ 1169.918607][ T1688] ? loop_remove+0xb0/0xb0 [ 1169.923171][ T1688] ? __fget_files+0x310/0x370 [ 1169.927985][ T1688] ? security_file_ioctl+0xb1/0xd0 [ 1169.933223][ T1688] ? loop_remove+0xb0/0xb0 [ 1169.937780][ T1688] __se_sys_ioctl+0x115/0x190 [ 1169.942586][ T1688] __x64_sys_ioctl+0x7b/0x90 [ 1169.947318][ T1688] do_syscall_64+0x34/0x70 [ 1169.951866][ T1688] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1169.957912][ T1688] RIP: 0033:0x7f7994738279 [ 1169.962451][ T1688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1169.982237][ T1688] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1169.990949][ T1688] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1169.999077][ T1688] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1170.007203][ T1688] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.015323][ T1688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1170.023432][ T1688] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1170.031585][ T1688] ---[ end trace b78cd69f8ad74e5a ]--- [ 1170.085308][ T1690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1690 comm=syz-executor.0 [ 1170.115181][ T1688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1688 comm=syz-executor.4 22:17:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="e75e6465933d6f6e2c64656661756c745f7065726d697373696f6e732c7569643d57897c08a3649e91ac3719b8e68340bd818c6cf29e1493c39b13d959af5cfacb1aadb931bdee56a10f3b7ad23c568300ffb1c21eb69cf3df40f556144690e84d5d93adebcb45b5e5728263c7c9550a4d9b81dad410d99e4533f354206950cf7e7692369a154fade0ebf26e84140a1c05d65dfea787839c5310a2d1", @ANYRESDEC=0xee00, @ANYBLOB=',smackfsfloor=/proc/timer_list\x00,smackfsdef=-%/,fsmagic=0x0000000000000200,\x00']) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.syz\x00', &(0x7f0000000480)='@\x00', 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x4001, 0x209) 22:17:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff1200000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100040000000000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="e8ef0200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:29 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000004000000000000000085000098fa011504ad135b200c26b13d6ed2000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)) (async) ioctl$TCXONC(r2, 0x540a, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r3, 0x0, 0x20000023896) (async) 22:17:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 49) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6b05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd113825e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f29083e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d7b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13603b73157602100fb20b99306a7927d0c710d6ce4c8", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff1900000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0003000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0bff000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0000040000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff060000180f010117000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0102000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1170.405983][ T1709] overlayfs: unrecognized mount option "ç^de“=on" or missing value [ 1170.511068][ T1733] FAULT_INJECTION: forcing a failure. [ 1170.511068][ T1733] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.523851][ T1733] CPU: 0 PID: 1733 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1170.535454][ T1733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1170.545482][ T1733] Call Trace: [ 1170.548750][ T1733] dump_stack_lvl+0x1e2/0x24b [ 1170.553405][ T1733] ? panic+0x7d7/0x7d7 [ 1170.557448][ T1733] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1170.562879][ T1733] ? ___ratelimit+0x99/0x580 [ 1170.567440][ T1733] dump_stack+0x15/0x17 [ 1170.571572][ T1733] should_fail+0x3c0/0x510 [ 1170.575965][ T1733] __should_failslab+0x9f/0xe0 [ 1170.580703][ T1733] should_failslab+0x9/0x20 [ 1170.585179][ T1733] kmem_cache_alloc+0x3f/0x300 [ 1170.589928][ T1733] ? __kernfs_new_node+0xdb/0x6e0 [ 1170.594927][ T1733] __kernfs_new_node+0xdb/0x6e0 [ 1170.599753][ T1733] ? mutex_trylock+0xb0/0xb0 [ 1170.604316][ T1733] ? kernfs_new_node+0x170/0x170 [ 1170.609229][ T1733] ? __kasan_check_write+0x14/0x20 [ 1170.614315][ T1733] ? mutex_unlock+0x1d/0x40 [ 1170.618791][ T1733] ? kernfs_activate+0x409/0x420 [ 1170.623703][ T1733] kernfs_new_node+0x97/0x170 [ 1170.628353][ T1733] __kernfs_create_file+0x4a/0x270 [ 1170.633438][ T1733] sysfs_add_file_mode_ns+0x273/0x320 [ 1170.638782][ T1733] internal_create_group+0x55e/0xf50 [ 1170.644044][ T1733] ? sysfs_create_group+0x30/0x30 [ 1170.649042][ T1733] ? kernfs_put+0x48/0x540 [ 1170.653439][ T1733] ? kernfs_create_link+0x1a0/0x210 [ 1170.658609][ T1733] sysfs_create_groups+0x5d/0x130 [ 1170.663604][ T1733] device_add_attrs+0x8b/0x3e0 [ 1170.668341][ T1733] ? device_add_class_symlinks+0x27c/0x2a0 [ 1170.674117][ T1733] device_add+0x4e6/0xbd0 [ 1170.678423][ T1733] device_create+0x258/0x2e0 [ 1170.682990][ T1733] ? irqentry_exit+0x50/0x60 [ 1170.687553][ T1733] ? sysvec_reschedule_ipi+0x84/0x160 [ 1170.692898][ T1733] ? root_device_unregister+0x80/0x80 [ 1170.698261][ T1733] bdi_register_va+0x94/0x600 [ 1170.702914][ T1733] bdi_register+0xd1/0x120 [ 1170.707305][ T1733] ? irqentry_exit+0x50/0x60 [ 1170.711866][ T1733] ? __device_add_disk+0x536/0x11d0 [ 1170.717038][ T1733] ? bdi_register_va+0x600/0x600 [ 1170.721948][ T1733] ? __kasan_check_read+0x11/0x20 [ 1170.726944][ T1733] ? blk_alloc_devt+0xd4/0x320 [ 1170.731683][ T1733] __device_add_disk+0x5cb/0x11d0 [ 1170.736702][ T1733] ? device_add_disk+0x40/0x40 [ 1170.741440][ T1733] ? loop_add+0x440/0x760 [ 1170.745746][ T1733] ? vsprintf+0x40/0x40 [ 1170.749877][ T1733] device_add_disk+0x2a/0x40 [ 1170.754439][ T1733] loop_add+0x58f/0x760 [ 1170.758570][ T1733] loop_control_ioctl+0x564/0x740 [ 1170.763574][ T1733] ? loop_remove+0xb0/0xb0 [ 1170.767964][ T1733] ? __fget_files+0x310/0x370 [ 1170.772619][ T1733] ? security_file_ioctl+0xb1/0xd0 [ 1170.777706][ T1733] ? loop_remove+0xb0/0xb0 [ 1170.782097][ T1733] __se_sys_ioctl+0x115/0x190 [ 1170.786748][ T1733] __x64_sys_ioctl+0x7b/0x90 [ 1170.791313][ T1733] do_syscall_64+0x34/0x70 [ 1170.795703][ T1733] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1170.801567][ T1733] RIP: 0033:0x7f7994738279 [ 1170.805963][ T1733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1170.825559][ T1733] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1170.833955][ T1733] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1170.841907][ T1733] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1170.849858][ T1733] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.857809][ T1733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1170.865758][ T1733] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1170.874971][ T1733] ------------[ cut here ]------------ [ 1170.880610][ T1733] WARNING: CPU: 0 PID: 1733 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1170.889781][ T1733] Modules linked in: [ 1170.893834][ T1733] CPU: 0 PID: 1733 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1170.905591][ T1733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1170.915805][ T1733] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1170.921746][ T1733] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1170.941528][ T1733] RSP: 0018:ffffc900017a7bc0 EFLAGS: 00010287 [ 1170.947764][ T1733] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1170.955909][ T1733] RDX: ffffc90009966000 RSI: 00000000000361d3 RDI: 00000000000361d4 [ 1170.964019][ T1733] RBP: ffffc900017a7d08 R08: ffffffff824062e6 R09: ffffc900017a7610 [ 1170.972242][ T1733] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1170.980370][ T1733] R13: ffff88810a668000 R14: ffff888117569338 R15: ffff888117569000 [ 1170.988495][ T1733] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1170.997589][ T1733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1171.004295][ T1733] CR2: 00007f799386bff8 CR3: 00000001121ae000 CR4: 00000000003506b0 [ 1171.012410][ T1733] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1171.020523][ T1733] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1171.028648][ T1733] Call Trace: [ 1171.032077][ T1733] ? device_add_disk+0x40/0x40 [ 1171.036975][ T1733] ? loop_add+0x440/0x760 [ 1171.041439][ T1733] ? vsprintf+0x40/0x40 [ 1171.045735][ T1733] device_add_disk+0x2a/0x40 [ 1171.050448][ T1733] loop_add+0x58f/0x760 [ 1171.054732][ T1733] loop_control_ioctl+0x564/0x740 [ 1171.059908][ T1733] ? loop_remove+0xb0/0xb0 [ 1171.064469][ T1733] ? __fget_files+0x310/0x370 [ 1171.069301][ T1733] ? security_file_ioctl+0xb1/0xd0 [ 1171.074541][ T1733] ? loop_remove+0xb0/0xb0 [ 1171.079178][ T1733] __se_sys_ioctl+0x115/0x190 [ 1171.083979][ T1733] __x64_sys_ioctl+0x7b/0x90 [ 1171.088705][ T1733] do_syscall_64+0x34/0x70 [ 1171.093262][ T1733] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1171.099304][ T1733] RIP: 0033:0x7f7994738279 [ 1171.103861][ T1733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1171.123652][ T1733] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1171.132228][ T1733] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1171.140340][ T1733] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1171.148445][ T1733] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1171.156578][ T1733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1171.164672][ T1733] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1171.172807][ T1733] ---[ end trace b78cd69f8ad74e5b ]--- [ 1171.248074][ T1733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1733 comm=syz-executor.4 [ 1171.283970][T26548] udevd[26548]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)) (async) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023896) 22:17:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0103000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100040000000000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="e8ef0200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100040000000000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="e8ef0200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:30 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="e75e6465933d6f6e2c64656661756c745f7065726d697373696f6e732c7569643d57897c08a3649e91ac3719b8e68340bd818c6cf29e1493c39b13d959af5cfacb1aadb931bdee56a10f3b7ad23c568300ffb1c21eb69cf3df40f556144690e84d5d93adebcb45b5e5728263c7c9550a4d9b81dad410d99e4533f354206950cf7e7692369a154fade0ebf26e84140a1c05d65dfea787839c5310a2d1", @ANYRESDEC=0xee00, @ANYBLOB=',smackfsfloor=/proc/timer_list\x00,smackfsdef=-%/,fsmagic=0x0000000000000200,\x00']) (async, rerun: 64) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) (async, rerun: 32) sendfile(r1, r2, 0x0, 0x20000023896) (async, rerun: 32) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.syz\x00', &(0x7f0000000480)='@\x00', 0x2, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x4001, 0x209) 22:17:30 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@RTM_NEWNSID={0x2c, 0x58, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r0}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40040) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r2, r1, 0x0, 0x20000023892) 22:17:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 50) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:30 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@RTM_NEWNSID={0x2c, 0x58, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r0}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40040) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r2, r1, 0x0, 0x20000023892) 22:17:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0104000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0105000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:30 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@RTM_NEWNSID={0x2c, 0x58, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r0}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40040) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r2, r1, 0x0, 0x20000023892) [ 1171.442254][ T1748] overlayfs: unrecognized mount option "ç^de“=on" or missing value [ 1171.451837][ T1748] overlayfs: unrecognized mount option "ç^de“=on" or missing value [ 1171.506407][ T1777] FAULT_INJECTION: forcing a failure. [ 1171.506407][ T1777] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.519194][ T1777] CPU: 0 PID: 1777 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1171.530797][ T1777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1171.540824][ T1777] Call Trace: [ 1171.544092][ T1777] dump_stack_lvl+0x1e2/0x24b [ 1171.548746][ T1777] ? panic+0x7d7/0x7d7 [ 1171.552795][ T1777] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1171.558234][ T1777] dump_stack+0x15/0x17 [ 1171.562365][ T1777] should_fail+0x3c0/0x510 [ 1171.566776][ T1777] __should_failslab+0x9f/0xe0 [ 1171.571515][ T1777] should_failslab+0x9/0x20 [ 1171.575994][ T1777] kmem_cache_alloc+0x3f/0x300 [ 1171.580732][ T1777] ? __kernfs_new_node+0xdb/0x6e0 [ 1171.585743][ T1777] __kernfs_new_node+0xdb/0x6e0 [ 1171.590583][ T1777] ? __switch_to_asm+0x36/0x70 [ 1171.595324][ T1777] ? __schedule+0x86e/0xc00 [ 1171.599797][ T1777] ? kernfs_new_node+0x170/0x170 [ 1171.604709][ T1777] ? release_firmware_map_entry+0x195/0x195 [ 1171.610578][ T1777] kernfs_create_dir_ns+0x9b/0x230 [ 1171.615666][ T1777] internal_create_group+0x29d/0xf50 [ 1171.620945][ T1777] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1171.626563][ T1777] ? sysfs_create_group+0x30/0x30 [ 1171.631583][ T1777] ? device_add_attrs+0x104/0x3e0 [ 1171.636602][ T1777] sysfs_create_group+0x1f/0x30 [ 1171.641436][ T1777] dpm_sysfs_add+0x5d/0x290 [ 1171.645923][ T1777] device_add+0x52c/0xbd0 [ 1171.650237][ T1777] device_create+0x258/0x2e0 [ 1171.654819][ T1777] ? root_device_unregister+0x80/0x80 [ 1171.660175][ T1777] ? number+0xd9b/0x1040 [ 1171.664398][ T1777] bdi_register_va+0x94/0x600 [ 1171.669055][ T1777] bdi_register+0xd1/0x120 [ 1171.673453][ T1777] ? irqentry_exit+0x50/0x60 [ 1171.678017][ T1777] ? sysvec_reschedule_ipi+0x84/0x160 [ 1171.683365][ T1777] ? __device_add_disk+0x536/0x11d0 [ 1171.688539][ T1777] ? bdi_register_va+0x600/0x600 [ 1171.693460][ T1777] ? __kasan_check_read+0x11/0x20 [ 1171.698459][ T1777] ? blk_alloc_devt+0xd4/0x320 [ 1171.703197][ T1777] __device_add_disk+0x5cb/0x11d0 [ 1171.708198][ T1777] ? device_add_disk+0x40/0x40 [ 1171.712936][ T1777] ? loop_add+0x440/0x760 [ 1171.717243][ T1777] ? vsprintf+0x40/0x40 [ 1171.721388][ T1777] device_add_disk+0x2a/0x40 [ 1171.725969][ T1777] loop_add+0x58f/0x760 [ 1171.730119][ T1777] loop_control_ioctl+0x564/0x740 [ 1171.735136][ T1777] ? loop_remove+0xb0/0xb0 [ 1171.739542][ T1777] ? __fget_files+0x310/0x370 [ 1171.744201][ T1777] ? security_file_ioctl+0xb1/0xd0 [ 1171.749294][ T1777] ? loop_remove+0xb0/0xb0 [ 1171.753727][ T1777] __se_sys_ioctl+0x115/0x190 [ 1171.758392][ T1777] __x64_sys_ioctl+0x7b/0x90 [ 1171.762971][ T1777] do_syscall_64+0x34/0x70 [ 1171.767377][ T1777] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1171.773250][ T1777] RIP: 0033:0x7f7994738279 [ 1171.777644][ T1777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1171.797221][ T1777] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1171.805609][ T1777] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1171.813555][ T1777] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1171.821517][ T1777] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1171.829463][ T1777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1171.837411][ T1777] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1171.847124][ T1777] ------------[ cut here ]------------ [ 1171.852729][ T1777] WARNING: CPU: 0 PID: 1777 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1171.861921][ T1777] Modules linked in: [ 1171.865984][ T1777] CPU: 0 PID: 1777 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1171.877752][ T1777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1171.887956][ T1777] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1171.893884][ T1777] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1171.913743][ T1777] RSP: 0018:ffffc90001807bc0 EFLAGS: 00010287 [ 1171.919978][ T1777] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1171.928094][ T1777] RDX: ffffc90009966000 RSI: 0000000000033a59 RDI: 0000000000033a5a [ 1171.936203][ T1777] RBP: ffffc90001807d08 R08: ffffffff824062e6 R09: ffffc90001807610 [ 1171.944300][ T1777] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1171.952422][ T1777] R13: ffff88810f888000 R14: ffff888116421338 R15: ffff888116421000 [ 1171.960535][ T1777] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1171.969700][ T1777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1171.976417][ T1777] CR2: 00007f799386bff8 CR3: 00000001193a3000 CR4: 00000000003506b0 [ 1171.984525][ T1777] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1171.992638][ T1777] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1172.000794][ T1777] Call Trace: [ 1172.004280][ T1777] ? device_add_disk+0x40/0x40 [ 1172.009203][ T1777] ? loop_add+0x440/0x760 [ 1172.013676][ T1777] ? vsprintf+0x40/0x40 [ 1172.018012][ T1777] device_add_disk+0x2a/0x40 [ 1172.022767][ T1777] loop_add+0x58f/0x760 [ 1172.027110][ T1777] loop_control_ioctl+0x564/0x740 [ 1172.032285][ T1777] ? loop_remove+0xb0/0xb0 [ 1172.036865][ T1777] ? __fget_files+0x310/0x370 [ 1172.041696][ T1777] ? security_file_ioctl+0xb1/0xd0 [ 1172.046945][ T1777] ? loop_remove+0xb0/0xb0 [ 1172.051648][ T1777] __se_sys_ioctl+0x115/0x190 [ 1172.056542][ T1777] __x64_sys_ioctl+0x7b/0x90 [ 1172.061287][ T1777] do_syscall_64+0x34/0x70 [ 1172.065880][ T1777] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1172.071929][ T1777] RIP: 0033:0x7f7994738279 [ 1172.076493][ T1777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1172.096297][ T1777] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 22:17:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100040000000000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="e8ef0200", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) [ 1172.104862][ T1777] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1172.112984][ T1777] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1172.121096][ T1777] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.129201][ T1777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1172.137305][ T1777] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1172.145450][ T1777] ---[ end trace b78cd69f8ad74e5c ]--- [ 1172.220442][ T1777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1777 comm=syz-executor.4 [ 1172.277988][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0106000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000140)={0x0, 0xaa4, 0x1000, 0x7, 0x1f, "aa65b33c692aea0c23bfcb993cc9fccb402df3", 0x9, 0x7}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x4, 0x1, 0x0, 0x30, 0xfffffffffffffffd}, @exit]}, &(0x7f0000000400)='syzkaller\x00', 0xb8, 0x96, &(0x7f0000000440)=""/150, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xe, 0x6, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r2, r3, 0x1, r2]}, 0x80) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:31 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mount$overlay(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0xe0, &(0x7f0000000240)={[{@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_off}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/timer_list\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_gt={'uid>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x11}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) chdir(&(0x7f0000000000)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 51) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="e75e6465933d6f6e2c64656661756c745f7065726d697373696f6e732c7569643d57897c08a3649e91ac3719b8e68340bd818c6cf29e1493c39b13d959af5cfacb1aadb931bdee56a10f3b7ad23c568300ffb1c21eb69cf3df40f556144690e84d5d93adebcb45b5e5728263c7c9550a4d9b81dad410d99e4533f354206950cf7e7692369a154fade0ebf26e84140a1c05d65dfea787839c5310a2d1", @ANYRESDEC=0xee00, @ANYBLOB=',smackfsfloor=/proc/timer_list\x00,smackfsdef=-%/,fsmagic=0x0000000000000200,\x00']) (async, rerun: 64) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) (async) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.syz\x00', &(0x7f0000000480)='@\x00', 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x4001, 0x209) 22:17:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='binder\x00', 0x800002, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100040000002373d7ba14f00000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) open(&(0x7f0000000300)='./file0/file0\x00', 0x3c5041, 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0107000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1172.324673][ T1748] overlayfs: unrecognized mount option "ç^de“=on" or missing value 22:17:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0108000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0109000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1172.390748][ T1796] overlayfs: unrecognized mount option "ç^de“=on" or missing value [ 1172.399020][ T1796] overlayfs: unrecognized mount option "ç^de“=on" or missing value [ 1172.407511][ T1796] overlayfs: unrecognized mount option "ç^de“=on" or missing value [ 1172.417356][ T1796] overlayfs: unrecognized mount option "ç^de“=on" or missing value [ 1172.427617][ T1796] overlayfs: unrecognized mount option "ç^de“=on" or missing value 22:17:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff010a000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1172.437472][ T1796] overlayfs: unrecognized mount option "ç^de“=on" or missing value [ 1172.468684][ T1808] FAULT_INJECTION: forcing a failure. [ 1172.468684][ T1808] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.481468][ T1808] CPU: 0 PID: 1808 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1172.493071][ T1808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1172.503102][ T1808] Call Trace: [ 1172.506377][ T1808] dump_stack_lvl+0x1e2/0x24b [ 1172.511037][ T1808] ? panic+0x7d7/0x7d7 [ 1172.515079][ T1808] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1172.520513][ T1808] ? bpf_trace_run3+0x126/0x2c0 [ 1172.525342][ T1808] ? compat_start_thread+0x80/0x80 [ 1172.530485][ T1808] dump_stack+0x15/0x17 [ 1172.534633][ T1808] should_fail+0x3c0/0x510 [ 1172.539028][ T1808] __should_failslab+0x9f/0xe0 [ 1172.543767][ T1808] should_failslab+0x9/0x20 [ 1172.548246][ T1808] kmem_cache_alloc+0x3f/0x300 [ 1172.552988][ T1808] ? __switch_to_asm+0x36/0x70 [ 1172.557724][ T1808] ? __kernfs_new_node+0xdb/0x6e0 [ 1172.562723][ T1808] __kernfs_new_node+0xdb/0x6e0 [ 1172.567551][ T1808] ? release_firmware_map_entry+0x195/0x195 [ 1172.573421][ T1808] ? kernfs_new_node+0x170/0x170 [ 1172.578334][ T1808] ? __schedule+0x86e/0xc00 [ 1172.582826][ T1808] ? __kasan_check_read+0x11/0x20 [ 1172.587841][ T1808] ? preempt_schedule_irq+0xef/0x140 [ 1172.593100][ T1808] ? preempt_schedule_notrace+0x140/0x140 [ 1172.598792][ T1808] kernfs_new_node+0x97/0x170 [ 1172.603476][ T1808] __kernfs_create_file+0x4a/0x270 [ 1172.608577][ T1808] sysfs_add_file_mode_ns+0x273/0x320 [ 1172.613923][ T1808] sysfs_merge_group+0x207/0x460 [ 1172.618836][ T1808] ? sysfs_remove_groups+0xb0/0xb0 [ 1172.623918][ T1808] ? internal_create_group+0xd94/0xf50 [ 1172.629353][ T1808] dpm_sysfs_add+0xcf/0x290 [ 1172.633835][ T1808] device_add+0x52c/0xbd0 [ 1172.638138][ T1808] device_create+0x258/0x2e0 [ 1172.642703][ T1808] ? _raw_spin_unlock_irq+0x4e/0x70 [ 1172.647874][ T1808] ? root_device_unregister+0x80/0x80 [ 1172.653222][ T1808] ? number+0xd9b/0x1040 [ 1172.657445][ T1808] bdi_register_va+0x94/0x600 [ 1172.662095][ T1808] bdi_register+0xd1/0x120 [ 1172.666493][ T1808] ? __device_add_disk+0x536/0x11d0 [ 1172.671665][ T1808] ? bdi_register_va+0x600/0x600 [ 1172.676597][ T1808] ? vsnprintf+0x1bfd/0x1cd0 [ 1172.681161][ T1808] ? __kasan_check_read+0x11/0x20 [ 1172.686180][ T1808] ? blk_alloc_devt+0xd4/0x320 [ 1172.690933][ T1808] __device_add_disk+0x5cb/0x11d0 [ 1172.695946][ T1808] ? device_add_disk+0x40/0x40 [ 1172.700684][ T1808] ? loop_add+0x440/0x760 [ 1172.704986][ T1808] ? vsprintf+0x40/0x40 [ 1172.709118][ T1808] device_add_disk+0x2a/0x40 [ 1172.713684][ T1808] loop_add+0x58f/0x760 [ 1172.717831][ T1808] loop_control_ioctl+0x564/0x740 [ 1172.722832][ T1808] ? loop_remove+0xb0/0xb0 [ 1172.727226][ T1808] ? sysvec_reschedule_ipi+0x84/0x160 [ 1172.732574][ T1808] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1172.738181][ T1808] ? loop_remove+0xb0/0xb0 [ 1172.742577][ T1808] ? do_vfs_ioctl+0xf6/0x1a90 [ 1172.747243][ T1808] ? __se_sys_ioctl+0xa6/0x190 [ 1172.751992][ T1808] ? __se_sys_ioctl+0x109/0x190 [ 1172.756832][ T1808] ? loop_control_ioctl+0x1/0x740 [ 1172.761844][ T1808] ? loop_remove+0xb0/0xb0 [ 1172.766247][ T1808] __se_sys_ioctl+0x115/0x190 [ 1172.770926][ T1808] __x64_sys_ioctl+0x7b/0x90 [ 1172.775497][ T1808] do_syscall_64+0x34/0x70 [ 1172.779894][ T1808] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1172.785759][ T1808] RIP: 0033:0x7f7994738279 [ 1172.790151][ T1808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1172.809728][ T1808] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1172.818115][ T1808] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1172.826062][ T1808] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1172.834011][ T1808] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.841955][ T1808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1172.849901][ T1808] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1172.859411][ T1808] ------------[ cut here ]------------ [ 1172.865036][ T1808] WARNING: CPU: 0 PID: 1808 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1172.874183][ T1808] Modules linked in: [ 1172.878241][ T1808] CPU: 0 PID: 1808 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1172.889997][ T1808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1172.900205][ T1808] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1172.906152][ T1808] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1172.925964][ T1808] RSP: 0018:ffffc900017e7bc0 EFLAGS: 00010287 [ 1172.932210][ T1808] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1172.940364][ T1808] RDX: ffffc90009966000 RSI: 0000000000039eab RDI: 0000000000039eac [ 1172.948515][ T1808] RBP: ffffc900017e7d08 R08: ffffffff824062e6 R09: ffffc900017e7610 [ 1172.956683][ T1808] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1172.964804][ T1808] R13: ffff888152190000 R14: ffff888152194338 R15: ffff888152194000 [ 1172.972920][ T1808] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1172.981983][ T1808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1172.988706][ T1808] CR2: 00007f799386bff8 CR3: 00000001538ed000 CR4: 00000000003506b0 [ 1172.996874][ T1808] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1173.005028][ T1808] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1173.013139][ T1808] Call Trace: [ 1173.016653][ T1808] ? device_add_disk+0x40/0x40 [ 1173.021584][ T1808] ? loop_add+0x440/0x760 [ 1173.026117][ T1808] ? vsprintf+0x40/0x40 [ 1173.030451][ T1808] device_add_disk+0x2a/0x40 [ 1173.035220][ T1808] loop_add+0x58f/0x760 [ 1173.039528][ T1808] loop_control_ioctl+0x564/0x740 [ 1173.044717][ T1808] ? loop_remove+0xb0/0xb0 [ 1173.049318][ T1808] ? sysvec_reschedule_ipi+0x84/0x160 [ 1173.054845][ T1808] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1173.060627][ T1808] ? loop_remove+0xb0/0xb0 [ 1173.065210][ T1808] ? do_vfs_ioctl+0xf6/0x1a90 [ 1173.070086][ T1808] ? __se_sys_ioctl+0xa6/0x190 [ 1173.075049][ T1808] ? __se_sys_ioctl+0x109/0x190 [ 1173.080037][ T1808] ? loop_control_ioctl+0x1/0x740 [ 1173.085206][ T1808] ? loop_remove+0xb0/0xb0 [ 1173.089760][ T1808] __se_sys_ioctl+0x115/0x190 [ 1173.094849][ T1808] __x64_sys_ioctl+0x7b/0x90 [ 1173.099594][ T1808] do_syscall_64+0x34/0x70 [ 1173.104176][ T1808] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1173.110210][ T1808] RIP: 0033:0x7f7994738279 [ 1173.114773][ T1808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1173.134559][ T1808] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.143166][ T1808] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1173.151304][ T1808] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1173.159415][ T1808] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.167523][ T1808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1173.175634][ T1808] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1173.183752][ T1808] ---[ end trace b78cd69f8ad74e5d ]--- [ 1173.259147][ T1808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1808 comm=syz-executor.4 22:17:32 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'pimreg1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000500000058000000115ea90d4bff57eb146a62344a031def2c2dda34c48a1ea42942a2a16bac96236f02e12540b478557bdad4e0c9b3f26d6c4a78dac3e2ae7b60235a51fc75748b5929e690b72669d225cb8c75b7086aa1b181517f19d5efd666c10cd46991b9dcf5d7a859226db8726ad2f6a51b3aa7dfd71f6c30f1afc63fffc98227a5fb1af6d84204b82a93566342c5a41d2c6bd2ecc388d463c9e39d8d4dc05717ef9c713b1d50ce53fcf90293911d961d381815b34794fb3e3b8700"/205]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff32, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x7, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)="4dbefafa1d6ee73faa2d3cf95ace8059f208bbbd5dcbb1c766367f585f409593b2eb1a2144529be61f1941b0bffcdd8339edc6ac24a8c39a6b9bf2220972fbc061a20396dfd553be8b41c0", 0x4b, 0x5d2}, {&(0x7f0000000440)="720199386955ca49c691f5f5964cab9acc66389ad8d4b038a63c80443239a95f69012fe0195b530bf478b8b4f9fde7650a9ea1e80ab3d7a7978247d8f9e1f22b2064dfedbf87f8ac02ebdde126db35fa2f76f6acfa522bdd9175b9415de29d3695c390251c326bf60661b7f7851b2fe68ea3811dfaa08be3efcf9291c1d8c8be1d507f151bb09f86715d8b734d5e692627866e1084057acdf18736", 0x9b, 0xf8}], 0x20c4000, &(0x7f0000000540)={[{@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x5}}]}) statx(r1, 0x0, 0x6000, 0x7ff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) fsetxattr(r1, &(0x7f0000006340)=@random={'trusted.', '\\:!\x1b*{.\'.$\'&\x00'}, &(0x7f0000006380)='uni_xlate=0', 0xb, 0x2) recvmmsg(r3, &(0x7f00000061c0)=[{{&(0x7f0000000600)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000680)=""/21, 0x15}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/68, 0x44}, {&(0x7f0000002740)=""/122, 0x7a}], 0x5, &(0x7f0000002840)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1, &(0x7f0000003940)=""/9, 0x9}, 0x818}, {{&(0x7f0000003980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/237, 0xed}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/77, 0x4d}, {&(0x7f0000005b80)=""/84, 0x54}, {&(0x7f0000005c00)=""/250, 0xfa}], 0x6, &(0x7f0000005d80)=""/109, 0x6d}, 0x800}, {{&(0x7f0000005e00)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005e80)=""/165, 0xa5}], 0x1, &(0x7f0000005f80)=""/90, 0x5a}, 0x80}, {{&(0x7f0000006000)=@hci, 0x80, &(0x7f0000006100)=[{&(0x7f0000006080)=""/75, 0x4b}], 0x1, &(0x7f0000006140)=""/80, 0x50}, 0x9}], 0x5, 0x40, &(0x7f0000006300)={0x0, 0x989680}) 22:17:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='binder\x00', 0x800002, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100040000002373d7ba14f00000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) open(&(0x7f0000000300)='./file0/file0\x00', 0x3c5041, 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e0000008528d3170f23a5a7498c010b94ddef5532e339c6938710441c7f2f3772c15dc5b48d5b69b80605e9f27babbc9e95f2fd9078556cc0b1d8b02fa34ecfa5eb293f406b8bd757a89a226af6f6d53cdf4d2e0dd84a0811d8cca4a9b3e35206398a8cb56fa22d72b9c2385e7b0cf24f36166d2ec921b36b68b71ac6472c3769fc69470250b5a64a7cab71c5af5fb97b5e5dce33c06535d5161466479acbbe0f8052b3ef78108a1929d78fbf94dc5007db57ef083289adae2d8b45fe03b646e7d1710bd646a27090fa6fdb1ec3bb68c62333825be30d5952a6e764688c27ec250326a4a87fda85439a10ded43809b08ccb9a836c56658f51e934c0a01655ae78dfa6c8f50d662b1d4096b4b70e01b8b71aec03185461751e04ab567ee6ade53d97241c66e16bc108b8de1e22123bc9df27e186df63e5b1ab71fb7d2e1ca371d924d3b2a7f5c2f394246b7a869bd95dadefbffbeecf95f0318fbf4f911233c1369dc05306cf5935b1d0e3c81c338deefa20dfededcc17a114c81d6f8d6014ff5201f4fb3fcbd5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000140)={0x0, 0xaa4, 0x1000, 0x7, 0x1f, "aa65b33c692aea0c23bfcb993cc9fccb402df3", 0x9, 0x7}) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x4, 0x1, 0x0, 0x30, 0xfffffffffffffffd}, @exit]}, &(0x7f0000000400)='syzkaller\x00', 0xb8, 0x96, &(0x7f0000000440)=""/150, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xe, 0x6, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r2, r3, 0x1, r2]}, 0x80) (async, rerun: 32) sendfile(r1, r2, 0x0, 0x20000023896) (rerun: 32) 22:17:32 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mount$overlay(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0xe0, &(0x7f0000000240)={[{@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_off}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/timer_list\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_gt={'uid>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x11}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) chdir(&(0x7f0000000000)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0xe0, &(0x7f0000000240)={[{@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_off}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/timer_list\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_gt={'uid>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x11}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff010b000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 52) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 1173.334245][ T1796] overlayfs: unrecognized mount option "ç^de“=on" or missing value [ 1173.336657][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff010d000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0110000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0111000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0121000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff012f000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff013a000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1173.502980][ T1852] FAULT_INJECTION: forcing a failure. [ 1173.502980][ T1852] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.515783][ T1852] CPU: 0 PID: 1852 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1173.527389][ T1852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1173.537424][ T1852] Call Trace: [ 1173.540698][ T1852] dump_stack_lvl+0x1e2/0x24b [ 1173.545353][ T1852] ? panic+0x7d7/0x7d7 [ 1173.549394][ T1852] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1173.554827][ T1852] ? compat_start_thread+0x80/0x80 [ 1173.559912][ T1852] dump_stack+0x15/0x17 [ 1173.564068][ T1852] should_fail+0x3c0/0x510 [ 1173.568465][ T1852] __should_failslab+0x9f/0xe0 [ 1173.573204][ T1852] should_failslab+0x9/0x20 [ 1173.577731][ T1852] kmem_cache_alloc+0x3f/0x300 [ 1173.582475][ T1852] ? __switch_to_asm+0x36/0x70 [ 1173.587211][ T1852] ? __kernfs_new_node+0xdb/0x6e0 [ 1173.592211][ T1852] __kernfs_new_node+0xdb/0x6e0 [ 1173.597054][ T1852] ? release_firmware_map_entry+0x195/0x195 [ 1173.602920][ T1852] ? kernfs_new_node+0x170/0x170 [ 1173.607831][ T1852] ? __kasan_check_read+0x11/0x20 [ 1173.612828][ T1852] ? preempt_schedule_irq+0xef/0x140 [ 1173.618085][ T1852] ? preempt_schedule_notrace+0x140/0x140 [ 1173.623779][ T1852] kernfs_new_node+0x97/0x170 [ 1173.628428][ T1852] __kernfs_create_file+0x4a/0x270 [ 1173.633512][ T1852] sysfs_add_file_mode_ns+0x273/0x320 [ 1173.638856][ T1852] sysfs_merge_group+0x207/0x460 [ 1173.643769][ T1852] ? sysfs_remove_groups+0xb0/0xb0 [ 1173.648851][ T1852] ? bus_add_device+0x23/0x400 [ 1173.653589][ T1852] ? bus_add_device+0x2a/0x400 [ 1173.658329][ T1852] dpm_sysfs_add+0xcf/0x290 [ 1173.662841][ T1852] device_add+0x52c/0xbd0 [ 1173.667143][ T1852] device_create+0x258/0x2e0 [ 1173.671708][ T1852] ? root_device_unregister+0x80/0x80 [ 1173.677060][ T1852] ? bdi_register+0x41/0x120 [ 1173.681624][ T1852] ? bdi_register+0xa1/0x120 [ 1173.686200][ T1852] bdi_register_va+0x94/0x600 [ 1173.690851][ T1852] bdi_register+0xd1/0x120 [ 1173.695245][ T1852] ? __device_add_disk+0x536/0x11d0 [ 1173.700415][ T1852] ? bdi_register_va+0x600/0x600 [ 1173.705327][ T1852] ? vsnprintf+0x1bfd/0x1cd0 [ 1173.709891][ T1852] ? __kasan_check_read+0x11/0x20 [ 1173.714886][ T1852] ? blk_alloc_devt+0xd4/0x320 [ 1173.719624][ T1852] __device_add_disk+0x5cb/0x11d0 [ 1173.724620][ T1852] ? device_add_disk+0x40/0x40 [ 1173.729358][ T1852] ? loop_add+0x440/0x760 [ 1173.733662][ T1852] ? vsprintf+0x40/0x40 [ 1173.737810][ T1852] device_add_disk+0x2a/0x40 [ 1173.742373][ T1852] loop_add+0x58f/0x760 [ 1173.746505][ T1852] loop_control_ioctl+0x564/0x740 [ 1173.751505][ T1852] ? loop_remove+0xb0/0xb0 [ 1173.755897][ T1852] ? __fget_files+0x310/0x370 [ 1173.760550][ T1852] ? security_file_ioctl+0xb1/0xd0 [ 1173.765631][ T1852] ? loop_remove+0xb0/0xb0 [ 1173.770023][ T1852] __se_sys_ioctl+0x115/0x190 [ 1173.774672][ T1852] __x64_sys_ioctl+0x7b/0x90 [ 1173.779241][ T1852] do_syscall_64+0x34/0x70 [ 1173.783631][ T1852] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1173.789495][ T1852] RIP: 0033:0x7f7994738279 [ 1173.793885][ T1852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1173.813462][ T1852] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.821849][ T1852] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1173.829794][ T1852] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1173.837739][ T1852] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.845694][ T1852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1173.853656][ T1852] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1173.863099][ T1852] ------------[ cut here ]------------ [ 1173.868776][ T1852] WARNING: CPU: 0 PID: 1852 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1173.877962][ T1852] Modules linked in: [ 1173.882025][ T1852] CPU: 0 PID: 1852 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1173.893782][ T1852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1173.903994][ T1852] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1173.909962][ T1852] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1173.929730][ T1852] RSP: 0018:ffffc900018e7bc0 EFLAGS: 00010283 [ 1173.935992][ T1852] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1173.944089][ T1852] RDX: ffffc90009966000 RSI: 0000000000035dbe RDI: 0000000000035dbf [ 1173.952301][ T1852] RBP: ffffc900018e7d08 R08: ffffffff824062e6 R09: ffffc900018e7610 [ 1173.960455][ T1852] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1173.968591][ T1852] R13: ffff888114570000 R14: ffff8881527b7338 R15: ffff8881527b7000 [ 1173.976718][ T1852] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1173.985856][ T1852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1173.992573][ T1852] CR2: 00007f799386bff8 CR3: 000000011617a000 CR4: 00000000003506b0 [ 1174.000707][ T1852] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1174.008844][ T1852] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1174.017013][ T1852] Call Trace: [ 1174.020444][ T1852] ? device_add_disk+0x40/0x40 [ 1174.025346][ T1852] ? loop_add+0x440/0x760 [ 1174.029799][ T1852] ? vsprintf+0x40/0x40 [ 1174.034081][ T1852] device_add_disk+0x2a/0x40 [ 1174.038807][ T1852] loop_add+0x58f/0x760 [ 1174.043086][ T1852] loop_control_ioctl+0x564/0x740 [ 1174.048267][ T1852] ? loop_remove+0xb0/0xb0 [ 1174.052808][ T1852] ? __fget_files+0x310/0x370 [ 1174.057636][ T1852] ? security_file_ioctl+0xb1/0xd0 [ 1174.062870][ T1852] ? loop_remove+0xb0/0xb0 [ 1174.067453][ T1852] __se_sys_ioctl+0x115/0x190 [ 1174.072263][ T1852] __x64_sys_ioctl+0x7b/0x90 [ 1174.076987][ T1852] do_syscall_64+0x34/0x70 [ 1174.081532][ T1852] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1174.087574][ T1852] RIP: 0033:0x7f7994738279 [ 1174.092143][ T1852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1174.111921][ T1852] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.120496][ T1852] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1174.128651][ T1852] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1174.136773][ T1852] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.144866][ T1852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.152972][ T1852] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1174.161103][ T1852] ---[ end trace b78cd69f8ad74e5e ]--- [ 1174.193508][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1174.236994][ T1852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1852 comm=syz-executor.4 22:17:33 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'pimreg1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000500000058000000115ea90d4bff57eb146a62344a031def2c2dda34c48a1ea42942a2a16bac96236f02e12540b478557bdad4e0c9b3f26d6c4a78dac3e2ae7b60235a51fc75748b5929e690b72669d225cb8c75b7086aa1b181517f19d5efd666c10cd46991b9dcf5d7a859226db8726ad2f6a51b3aa7dfd71f6c30f1afc63fffc98227a5fb1af6d84204b82a93566342c5a41d2c6bd2ecc388d463c9e39d8d4dc05717ef9c713b1d50ce53fcf90293911d961d381815b34794fb3e3b8700"/205]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff32, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x7, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)="4dbefafa1d6ee73faa2d3cf95ace8059f208bbbd5dcbb1c766367f585f409593b2eb1a2144529be61f1941b0bffcdd8339edc6ac24a8c39a6b9bf2220972fbc061a20396dfd553be8b41c0", 0x4b, 0x5d2}, {&(0x7f0000000440)="720199386955ca49c691f5f5964cab9acc66389ad8d4b038a63c80443239a95f69012fe0195b530bf478b8b4f9fde7650a9ea1e80ab3d7a7978247d8f9e1f22b2064dfedbf87f8ac02ebdde126db35fa2f76f6acfa522bdd9175b9415de29d3695c390251c326bf60661b7f7851b2fe68ea3811dfaa08be3efcf9291c1d8c8be1d507f151bb09f86715d8b734d5e692627866e1084057acdf18736", 0x9b, 0xf8}], 0x20c4000, &(0x7f0000000540)={[{@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x5}}]}) statx(r1, 0x0, 0x6000, 0x7ff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) fsetxattr(r1, &(0x7f0000006340)=@random={'trusted.', '\\:!\x1b*{.\'.$\'&\x00'}, &(0x7f0000006380)='uni_xlate=0', 0xb, 0x2) recvmmsg(r3, &(0x7f00000061c0)=[{{&(0x7f0000000600)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000680)=""/21, 0x15}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/68, 0x44}, {&(0x7f0000002740)=""/122, 0x7a}], 0x5, &(0x7f0000002840)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1, &(0x7f0000003940)=""/9, 0x9}, 0x818}, {{&(0x7f0000003980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/237, 0xed}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/77, 0x4d}, {&(0x7f0000005b80)=""/84, 0x54}, {&(0x7f0000005c00)=""/250, 0xfa}], 0x6, &(0x7f0000005d80)=""/109, 0x6d}, 0x800}, {{&(0x7f0000005e00)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005e80)=""/165, 0xa5}], 0x1, &(0x7f0000005f80)=""/90, 0x5a}, 0x80}, {{&(0x7f0000006000)=@hci, 0x80, &(0x7f0000006100)=[{&(0x7f0000006080)=""/75, 0x4b}], 0x1, &(0x7f0000006140)=""/80, 0x50}, 0x9}], 0x5, 0x40, &(0x7f0000006300)={0x0, 0x989680}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'pimreg1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000500000058000000115ea90d4bff57eb146a62344a031def2c2dda34c48a1ea42942a2a16bac96236f02e12540b478557bdad4e0c9b3f26d6c4a78dac3e2ae7b60235a51fc75748b5929e690b72669d225cb8c75b7086aa1b181517f19d5efd666c10cd46991b9dcf5d7a859226db8726ad2f6a51b3aa7dfd71f6c30f1afc63fffc98227a5fb1af6d84204b82a93566342c5a41d2c6bd2ecc388d463c9e39d8d4dc05717ef9c713b1d50ce53fcf90293911d961d381815b34794fb3e3b8700"/205]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff32, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x7, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)="4dbefafa1d6ee73faa2d3cf95ace8059f208bbbd5dcbb1c766367f585f409593b2eb1a2144529be61f1941b0bffcdd8339edc6ac24a8c39a6b9bf2220972fbc061a20396dfd553be8b41c0", 0x4b, 0x5d2}, {&(0x7f0000000440)="720199386955ca49c691f5f5964cab9acc66389ad8d4b038a63c80443239a95f69012fe0195b530bf478b8b4f9fde7650a9ea1e80ab3d7a7978247d8f9e1f22b2064dfedbf87f8ac02ebdde126db35fa2f76f6acfa522bdd9175b9415de29d3695c390251c326bf60661b7f7851b2fe68ea3811dfaa08be3efcf9291c1d8c8be1d507f151bb09f86715d8b734d5e692627866e1084057acdf18736", 0x9b, 0xf8}], 0x20c4000, &(0x7f0000000540)={[{@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x5}}]}) (async) statx(r1, 0x0, 0x6000, 0x7ff, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0x20000023896) (async) fsetxattr(r1, &(0x7f0000006340)=@random={'trusted.', '\\:!\x1b*{.\'.$\'&\x00'}, &(0x7f0000006380)='uni_xlate=0', 0xb, 0x2) (async) recvmmsg(r3, &(0x7f00000061c0)=[{{&(0x7f0000000600)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000680)=""/21, 0x15}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/68, 0x44}, {&(0x7f0000002740)=""/122, 0x7a}], 0x5, &(0x7f0000002840)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1, &(0x7f0000003940)=""/9, 0x9}, 0x818}, {{&(0x7f0000003980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/237, 0xed}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/77, 0x4d}, {&(0x7f0000005b80)=""/84, 0x54}, {&(0x7f0000005c00)=""/250, 0xfa}], 0x6, &(0x7f0000005d80)=""/109, 0x6d}, 0x800}, {{&(0x7f0000005e00)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005e80)=""/165, 0xa5}], 0x1, &(0x7f0000005f80)=""/90, 0x5a}, 0x80}, {{&(0x7f0000006000)=@hci, 0x80, &(0x7f0000006100)=[{&(0x7f0000006080)=""/75, 0x4b}], 0x1, &(0x7f0000006140)=""/80, 0x50}, 0x9}], 0x5, 0x40, &(0x7f0000006300)={0x0, 0x989680}) (async) 22:17:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='binder\x00', 0x800002, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100040000002373d7ba14f00000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) open(&(0x7f0000000300)='./file0/file0\x00', 0x3c5041, 0x5) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01f4000000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:33 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mount$overlay(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0xe0, &(0x7f0000000240)={[{@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_off}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/timer_list\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_gt={'uid>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x11}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000140)={0x0, 0xaa4, 0x1000, 0x7, 0x1f, "aa65b33c692aea0c23bfcb993cc9fccb402df3", 0x9, 0x7}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x4, 0x1, 0x0, 0x30, 0xfffffffffffffffd}, @exit]}, &(0x7f0000000400)='syzkaller\x00', 0xb8, 0x96, &(0x7f0000000440)=""/150, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xe, 0x6, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r2, r3, 0x1, r2]}, 0x80) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000140)={0x0, 0xaa4, 0x1000, 0x7, 0x1f, "aa65b33c692aea0c23bfcb993cc9fccb402df3", 0x9, 0x7}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x3, 0x8}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x4, 0x1, 0x0, 0x30, 0xfffffffffffffffd}, @exit]}, &(0x7f0000000400)='syzkaller\x00', 0xb8, 0x96, &(0x7f0000000440)=""/150, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xe, 0x6, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r2, r3, 0x1, r2]}, 0x80) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 53) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:33 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e8fb705000000424700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0xf, 0x68, &(0x7f0000000240)}) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100030000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100050000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100060000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100070000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100090000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1174.490630][ T1901] FAULT_INJECTION: forcing a failure. [ 1174.490630][ T1901] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.503374][ T1901] CPU: 0 PID: 1901 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1174.514977][ T1901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1174.525005][ T1901] Call Trace: [ 1174.528284][ T1901] dump_stack_lvl+0x1e2/0x24b [ 1174.532937][ T1901] ? panic+0x7d7/0x7d7 [ 1174.536978][ T1901] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1174.542421][ T1901] ? ___ratelimit+0x99/0x580 [ 1174.546985][ T1901] dump_stack+0x15/0x17 [ 1174.551129][ T1901] should_fail+0x3c0/0x510 [ 1174.555527][ T1901] __should_failslab+0x9f/0xe0 [ 1174.560263][ T1901] should_failslab+0x9/0x20 [ 1174.564739][ T1901] kmem_cache_alloc+0x3f/0x300 [ 1174.569475][ T1901] ? __kernfs_new_node+0xdb/0x6e0 [ 1174.574475][ T1901] __kernfs_new_node+0xdb/0x6e0 [ 1174.579340][ T1901] ? mutex_trylock+0xb0/0xb0 [ 1174.583903][ T1901] ? kernfs_new_node+0x170/0x170 [ 1174.588814][ T1901] ? __kasan_check_write+0x14/0x20 [ 1174.593896][ T1901] ? mutex_unlock+0x1d/0x40 [ 1174.598371][ T1901] ? kernfs_activate+0x409/0x420 [ 1174.603284][ T1901] kernfs_new_node+0x97/0x170 [ 1174.607933][ T1901] __kernfs_create_file+0x4a/0x270 [ 1174.613016][ T1901] sysfs_add_file_mode_ns+0x273/0x320 [ 1174.618360][ T1901] sysfs_merge_group+0x207/0x460 [ 1174.623270][ T1901] ? sysfs_remove_groups+0xb0/0xb0 [ 1174.628356][ T1901] dpm_sysfs_add+0xcf/0x290 [ 1174.632839][ T1901] device_add+0x52c/0xbd0 [ 1174.637152][ T1901] device_create+0x258/0x2e0 [ 1174.641725][ T1901] ? root_device_unregister+0x80/0x80 [ 1174.647084][ T1901] ? __kasan_check_read+0x11/0x20 [ 1174.652080][ T1901] ? preempt_schedule_irq+0xef/0x140 [ 1174.657338][ T1901] ? preempt_schedule_notrace+0x140/0x140 [ 1174.663034][ T1901] bdi_register_va+0x94/0x600 [ 1174.667685][ T1901] bdi_register+0xd1/0x120 [ 1174.672077][ T1901] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1174.677716][ T1901] ? __device_add_disk+0x536/0x11d0 [ 1174.682888][ T1901] ? bdi_register_va+0x600/0x600 [ 1174.687799][ T1901] ? blk_alloc_devt+0x109/0x320 [ 1174.692630][ T1901] __device_add_disk+0x5cb/0x11d0 [ 1174.697636][ T1901] ? device_add_disk+0x40/0x40 [ 1174.702379][ T1901] ? sysvec_reschedule_ipi+0x84/0x160 [ 1174.707725][ T1901] ? loop_add+0x440/0x760 [ 1174.712028][ T1901] ? vsprintf+0x40/0x40 [ 1174.716161][ T1901] device_add_disk+0x2a/0x40 [ 1174.720724][ T1901] loop_add+0x58f/0x760 [ 1174.724856][ T1901] loop_control_ioctl+0x564/0x740 [ 1174.729852][ T1901] ? loop_remove+0xb0/0xb0 [ 1174.734245][ T1901] ? __fget_files+0x310/0x370 [ 1174.738898][ T1901] ? security_file_ioctl+0xb1/0xd0 [ 1174.743983][ T1901] ? loop_remove+0xb0/0xb0 [ 1174.748376][ T1901] __se_sys_ioctl+0x115/0x190 [ 1174.753029][ T1901] __x64_sys_ioctl+0x7b/0x90 [ 1174.757594][ T1901] do_syscall_64+0x34/0x70 [ 1174.761993][ T1901] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1174.767857][ T1901] RIP: 0033:0x7f7994738279 [ 1174.772251][ T1901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1174.791826][ T1901] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.800214][ T1901] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1174.808165][ T1901] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1174.816112][ T1901] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.824058][ T1901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.832004][ T1901] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1174.841435][ T1901] ------------[ cut here ]------------ [ 1174.847054][ T1901] WARNING: CPU: 0 PID: 1901 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1174.856209][ T1901] Modules linked in: [ 1174.860272][ T1901] CPU: 0 PID: 1901 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1174.872042][ T1901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1174.882260][ T1901] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1174.888208][ T1901] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1174.908033][ T1901] RSP: 0018:ffffc90000b57bc0 EFLAGS: 00010283 [ 1174.914252][ T1901] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1174.922364][ T1901] RDX: ffffc90009966000 RSI: 00000000000346d4 RDI: 00000000000346d5 [ 1174.930472][ T1901] RBP: ffffc90000b57d08 R08: ffffffff824062e6 R09: ffffc90000b57610 [ 1174.938592][ T1901] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1174.946705][ T1901] R13: ffff888116421000 R14: ffff88810f88a338 R15: ffff88810f88a000 [ 1174.954820][ T1901] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1174.963881][ T1901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1174.970598][ T1901] CR2: 00007f799386bff8 CR3: 0000000112136000 CR4: 00000000003506b0 [ 1174.978853][ T1901] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1174.986983][ T1901] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1174.995111][ T1901] Call Trace: [ 1174.998560][ T1901] ? device_add_disk+0x40/0x40 [ 1175.003465][ T1901] ? sysvec_reschedule_ipi+0x84/0x160 [ 1175.008982][ T1901] ? loop_add+0x440/0x760 [ 1175.013441][ T1901] ? vsprintf+0x40/0x40 [ 1175.017738][ T1901] device_add_disk+0x2a/0x40 [ 1175.022468][ T1901] loop_add+0x58f/0x760 [ 1175.026784][ T1901] loop_control_ioctl+0x564/0x740 [ 1175.031932][ T1901] ? loop_remove+0xb0/0xb0 [ 1175.036485][ T1901] ? __fget_files+0x310/0x370 [ 1175.041285][ T1901] ? security_file_ioctl+0xb1/0xd0 [ 1175.046535][ T1901] ? loop_remove+0xb0/0xb0 [ 1175.051084][ T1901] __se_sys_ioctl+0x115/0x190 [ 1175.055939][ T1901] __x64_sys_ioctl+0x7b/0x90 [ 1175.060658][ T1901] do_syscall_64+0x34/0x70 [ 1175.065212][ T1901] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1175.071237][ T1901] RIP: 0033:0x7f7994738279 [ 1175.075787][ T1901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1175.095552][ T1901] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1175.104144][ T1901] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1175.112278][ T1901] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1175.120443][ T1901] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1175.128579][ T1901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1175.136688][ T1901] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1175.144817][ T1901] ---[ end trace b78cd69f8ad74e5f ]--- [ 1175.219578][ T1901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1901 comm=syz-executor.4 [ 1175.243548][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'pimreg1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000500000058000000115ea90d4bff57eb146a62344a031def2c2dda34c48a1ea42942a2a16bac96236f02e12540b478557bdad4e0c9b3f26d6c4a78dac3e2ae7b60235a51fc75748b5929e690b72669d225cb8c75b7086aa1b181517f19d5efd666c10cd46991b9dcf5d7a859226db8726ad2f6a51b3aa7dfd71f6c30f1afc63fffc98227a5fb1af6d84204b82a93566342c5a41d2c6bd2ecc388d463c9e39d8d4dc05717ef9c713b1d50ce53fcf90293911d961d381815b34794fb3e3b8700"/205]}) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff32, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x7, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)="4dbefafa1d6ee73faa2d3cf95ace8059f208bbbd5dcbb1c766367f585f409593b2eb1a2144529be61f1941b0bffcdd8339edc6ac24a8c39a6b9bf2220972fbc061a20396dfd553be8b41c0", 0x4b, 0x5d2}, {&(0x7f0000000440)="720199386955ca49c691f5f5964cab9acc66389ad8d4b038a63c80443239a95f69012fe0195b530bf478b8b4f9fde7650a9ea1e80ab3d7a7978247d8f9e1f22b2064dfedbf87f8ac02ebdde126db35fa2f76f6acfa522bdd9175b9415de29d3695c390251c326bf60661b7f7851b2fe68ea3811dfaa08be3efcf9291c1d8c8be1d507f151bb09f86715d8b734d5e692627866e1084057acdf18736", 0x9b, 0xf8}], 0x20c4000, &(0x7f0000000540)={[{@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x5}}]}) statx(r1, 0x0, 0x6000, 0x7ff, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) (async) fsetxattr(r1, &(0x7f0000006340)=@random={'trusted.', '\\:!\x1b*{.\'.$\'&\x00'}, &(0x7f0000006380)='uni_xlate=0', 0xb, 0x2) recvmmsg(r3, &(0x7f00000061c0)=[{{&(0x7f0000000600)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000680)=""/21, 0x15}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/68, 0x44}, {&(0x7f0000002740)=""/122, 0x7a}], 0x5, &(0x7f0000002840)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1, &(0x7f0000003940)=""/9, 0x9}, 0x818}, {{&(0x7f0000003980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/237, 0xed}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/77, 0x4d}, {&(0x7f0000005b80)=""/84, 0x54}, {&(0x7f0000005c00)=""/250, 0xfa}], 0x6, &(0x7f0000005d80)=""/109, 0x6d}, 0x800}, {{&(0x7f0000005e00)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005e80)=""/165, 0xa5}], 0x1, &(0x7f0000005f80)=""/90, 0x5a}, 0x80}, {{&(0x7f0000006000)=@hci, 0x80, &(0x7f0000006100)=[{&(0x7f0000006080)=""/75, 0x4b}], 0x1, &(0x7f0000006140)=""/80, 0x50}, 0x9}], 0x5, 0x40, &(0x7f0000006300)={0x0, 0x989680}) 22:17:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000a0000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x4) 22:17:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="01000080000000040000000000000000850100e90d000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:35 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e8fb705000000424700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0xf, 0x68, &(0x7f0000000240)}) (async) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 54) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000b0000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01940c0000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000040008e00000000000850000000e000000850000000e000000959abb7425650e6d959464e6f06bb0d526064f5f3146e1d865201fb1e6069598bb4d8c857e6a2c09077cbac9ba39a6bdfd846e074ec6e2b9d1f12aab013cd2f776ed4a12f98e2f1f7aa65360c0bd6bc9052788207b56dfb43d376fcf001c3f81a733e2b58f7c1afa61e20ccc831491bd9399321221a148cc494033a21581bc40f80600fb0350a3561792eea91c59a76ef3b8ff8f82a3e4b4718b41696031319086613c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000d0000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100110000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100200000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100210000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1175.894638][ T1944] FAULT_INJECTION: forcing a failure. [ 1175.894638][ T1944] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.907501][ T1944] CPU: 0 PID: 1944 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1175.919108][ T1944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1175.929140][ T1944] Call Trace: [ 1175.932411][ T1944] dump_stack_lvl+0x1e2/0x24b [ 1175.937081][ T1944] ? panic+0x7d7/0x7d7 [ 1175.941145][ T1944] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1175.946578][ T1944] ? selinux_kernfs_init_security+0x1a8/0x760 [ 1175.952643][ T1944] dump_stack+0x15/0x17 [ 1175.956798][ T1944] should_fail+0x3c0/0x510 [ 1175.961193][ T1944] __should_failslab+0x9f/0xe0 [ 1175.965938][ T1944] should_failslab+0x9/0x20 [ 1175.970454][ T1944] kmem_cache_alloc+0x3f/0x300 [ 1175.975198][ T1944] ? __kernfs_new_node+0xdb/0x6e0 [ 1175.980198][ T1944] __kernfs_new_node+0xdb/0x6e0 [ 1175.985033][ T1944] ? mutex_trylock+0xb0/0xb0 [ 1175.989599][ T1944] ? kernfs_new_node+0x170/0x170 [ 1175.994516][ T1944] ? __kasan_check_write+0x14/0x20 [ 1175.999601][ T1944] ? mutex_unlock+0x1d/0x40 [ 1176.004085][ T1944] ? kernfs_activate+0x409/0x420 [ 1176.008996][ T1944] kernfs_new_node+0x97/0x170 [ 1176.013654][ T1944] __kernfs_create_file+0x4a/0x270 [ 1176.018740][ T1944] sysfs_add_file_mode_ns+0x273/0x320 [ 1176.024089][ T1944] sysfs_merge_group+0x207/0x460 [ 1176.029009][ T1944] ? sysfs_remove_groups+0xb0/0xb0 [ 1176.034096][ T1944] dpm_sysfs_add+0xcf/0x290 [ 1176.038597][ T1944] device_add+0x52c/0xbd0 [ 1176.042910][ T1944] device_create+0x258/0x2e0 [ 1176.047475][ T1944] ? root_device_unregister+0x80/0x80 [ 1176.052821][ T1944] ? __kasan_check_read+0x11/0x20 [ 1176.057821][ T1944] ? preempt_schedule_irq+0xef/0x140 [ 1176.063080][ T1944] ? preempt_schedule_notrace+0x140/0x140 [ 1176.068771][ T1944] bdi_register_va+0x94/0x600 [ 1176.073432][ T1944] bdi_register+0xd1/0x120 [ 1176.077824][ T1944] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1176.083428][ T1944] ? __device_add_disk+0x536/0x11d0 [ 1176.088598][ T1944] ? bdi_register_va+0x600/0x600 [ 1176.093509][ T1944] ? blk_alloc_devt+0xc0/0x320 [ 1176.098245][ T1944] ? blk_alloc_devt+0xd4/0x320 [ 1176.102993][ T1944] __device_add_disk+0x5cb/0x11d0 [ 1176.107995][ T1944] ? device_add_disk+0x40/0x40 [ 1176.112731][ T1944] ? loop_add+0x440/0x760 [ 1176.117038][ T1944] ? vsprintf+0x40/0x40 [ 1176.121169][ T1944] device_add_disk+0x2a/0x40 [ 1176.125731][ T1944] loop_add+0x58f/0x760 [ 1176.129879][ T1944] loop_control_ioctl+0x564/0x740 [ 1176.134883][ T1944] ? loop_remove+0xb0/0xb0 [ 1176.139277][ T1944] ? irqentry_exit+0x50/0x60 [ 1176.143847][ T1944] ? sysvec_reschedule_ipi+0x84/0x160 [ 1176.149200][ T1944] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1176.154815][ T1944] ? do_vfs_ioctl+0xf6/0x1a90 [ 1176.159468][ T1944] ? __se_sys_ioctl+0x109/0x190 [ 1176.164299][ T1944] ? loop_remove+0xb0/0xb0 [ 1176.168693][ T1944] __se_sys_ioctl+0x115/0x190 [ 1176.173368][ T1944] __x64_sys_ioctl+0x7b/0x90 [ 1176.177949][ T1944] do_syscall_64+0x34/0x70 [ 1176.182345][ T1944] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1176.188209][ T1944] RIP: 0033:0x7f7994738279 [ 1176.192617][ T1944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1176.212193][ T1944] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1176.220581][ T1944] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1176.228525][ T1944] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1176.236473][ T1944] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1176.244424][ T1944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1176.252370][ T1944] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1176.261986][ T1944] ------------[ cut here ]------------ [ 1176.267608][ T1944] WARNING: CPU: 0 PID: 1944 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1176.276794][ T1944] Modules linked in: [ 1176.280852][ T1944] CPU: 0 PID: 1944 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1176.292619][ T1944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1176.302824][ T1944] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1176.308765][ T1944] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1176.328528][ T1944] RSP: 0018:ffffc900017c7bc0 EFLAGS: 00010283 [ 1176.334755][ T1944] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1176.342858][ T1944] RDX: ffffc90009966000 RSI: 00000000000374f0 RDI: 00000000000374f1 [ 1176.350960][ T1944] RBP: ffffc900017c7d08 R08: ffffffff824062e6 R09: ffffc900017c7610 [ 1176.359104][ T1944] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1176.367208][ T1944] R13: ffff88811408c000 R14: ffff88811c812338 R15: ffff88811c812000 [ 1176.375317][ T1944] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1176.384369][ T1944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1176.391107][ T1944] CR2: 00007f799386bff8 CR3: 0000000111617000 CR4: 00000000003506b0 [ 1176.399223][ T1944] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1176.407330][ T1944] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1176.415470][ T1944] Call Trace: [ 1176.418929][ T1944] ? device_add_disk+0x40/0x40 [ 1176.423822][ T1944] ? loop_add+0x440/0x760 [ 1176.428283][ T1944] ? vsprintf+0x40/0x40 [ 1176.432574][ T1944] device_add_disk+0x2a/0x40 [ 1176.437296][ T1944] loop_add+0x58f/0x760 [ 1176.441578][ T1944] loop_control_ioctl+0x564/0x740 [ 1176.446747][ T1944] ? loop_remove+0xb0/0xb0 [ 1176.451288][ T1944] ? irqentry_exit+0x50/0x60 [ 1176.456028][ T1944] ? sysvec_reschedule_ipi+0x84/0x160 [ 1176.461521][ T1944] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1176.467286][ T1944] ? do_vfs_ioctl+0xf6/0x1a90 [ 1176.472087][ T1944] ? __se_sys_ioctl+0x109/0x190 [ 1176.477070][ T1944] ? loop_remove+0xb0/0xb0 [ 1176.481619][ T1944] __se_sys_ioctl+0x115/0x190 [ 1176.486427][ T1944] __x64_sys_ioctl+0x7b/0x90 [ 1176.491145][ T1944] do_syscall_64+0x34/0x70 [ 1176.495729][ T1944] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1176.501759][ T1944] RIP: 0033:0x7f7994738279 [ 1176.506336][ T1944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1176.526119][ T1944] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1176.534700][ T1944] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1176.542804][ T1944] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1176.550923][ T1944] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1176.559028][ T1944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1176.567160][ T1944] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1176.575288][ T1944] ---[ end trace b78cd69f8ad74e60 ]--- 22:17:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01002f0000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1176.651223][ T1944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1944 comm=syz-executor.4 [ 1176.719061][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x4) 22:17:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000040008e00000000000850000000e000000850000000e000000959abb7425650e6d959464e6f06bb0d526064f5f3146e1d865201fb1e6069598bb4d8c857e6a2c09077cbac9ba39a6bdfd846e074ec6e2b9d1f12aab013cd2f776ed4a12f98e2f1f7aa65360c0bd6bc9052788207b56dfb43d376fcf001c3f81a733e2b58f7c1afa61e20ccc831491bd9399321221a148cc494033a21581bc40f80600fb0350a3561792eea91c59a76ef3b8ff8f82a3e4b4718b41696031319086613c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000040008e00000000000850000000e000000850000000e000000959abb7425650e6d959464e6f06bb0d526064f5f3146e1d865201fb1e6069598bb4d8c857e6a2c09077cbac9ba39a6bdfd846e074ec6e2b9d1f12aab013cd2f776ed4a12f98e2f1f7aa65360c0bd6bc9052788207b56dfb43d376fcf001c3f81a733e2b58f7c1afa61e20ccc831491bd9399321221a148cc494033a21581bc40f80600fb0350a3561792eea91c59a76ef3b8ff8f82a3e4b4718b41696031319086613c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01003a0000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:36 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e8fb705000000424700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0xf, 0x68, &(0x7f0000000240)}) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e8fb705000000424700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0xf, 0x68, &(0x7f0000000240)}) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 55) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6b05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd113825e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f29083e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d7b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13603b73157602100fb20b99306a7927d0c710d6ce4c8", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="01000080000000040000000000000000850100e90d000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="01000080000000040000000000000000850100e90d000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff010c940000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01a002a000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000001000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000002000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000003000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff016f83d703000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1176.926774][ T1987] FAULT_INJECTION: forcing a failure. [ 1176.926774][ T1987] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.939547][ T1987] CPU: 0 PID: 1987 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1176.951153][ T1987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1176.961211][ T1987] Call Trace: [ 1176.964502][ T1987] dump_stack_lvl+0x1e2/0x24b [ 1176.969164][ T1987] ? panic+0x7d7/0x7d7 [ 1176.973214][ T1987] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1176.978650][ T1987] ? __schedule+0x86e/0xc00 [ 1176.983130][ T1987] dump_stack+0x15/0x17 [ 1176.987264][ T1987] should_fail+0x3c0/0x510 [ 1176.991668][ T1987] __should_failslab+0x9f/0xe0 [ 1176.996420][ T1987] should_failslab+0x9/0x20 [ 1177.000903][ T1987] kmem_cache_alloc+0x3f/0x300 [ 1177.005642][ T1987] ? __kernfs_new_node+0xdb/0x6e0 [ 1177.010642][ T1987] ? preempt_schedule_notrace+0x140/0x140 [ 1177.016334][ T1987] __kernfs_new_node+0xdb/0x6e0 [ 1177.021197][ T1987] ? mutex_trylock+0xb0/0xb0 [ 1177.025761][ T1987] ? kernfs_new_node+0x170/0x170 [ 1177.030673][ T1987] ? __kasan_check_write+0x14/0x20 [ 1177.035755][ T1987] ? mutex_unlock+0x1d/0x40 [ 1177.040230][ T1987] ? kernfs_activate+0x409/0x420 [ 1177.045140][ T1987] kernfs_new_node+0x97/0x170 [ 1177.049824][ T1987] __kernfs_create_file+0x4a/0x270 [ 1177.054928][ T1987] sysfs_add_file_mode_ns+0x273/0x320 [ 1177.060275][ T1987] sysfs_merge_group+0x207/0x460 [ 1177.065187][ T1987] ? sysfs_remove_groups+0xb0/0xb0 [ 1177.070276][ T1987] dpm_sysfs_add+0xcf/0x290 [ 1177.074752][ T1987] device_add+0x52c/0xbd0 [ 1177.079058][ T1987] device_create+0x258/0x2e0 [ 1177.083622][ T1987] ? __this_cpu_preempt_check+0x13/0x20 [ 1177.089140][ T1987] ? root_device_unregister+0x80/0x80 [ 1177.094486][ T1987] ? number+0xd9b/0x1040 [ 1177.098705][ T1987] bdi_register_va+0x94/0x600 [ 1177.103355][ T1987] bdi_register+0xd1/0x120 [ 1177.107747][ T1987] ? __device_add_disk+0x536/0x11d0 [ 1177.112922][ T1987] ? bdi_register_va+0x600/0x600 [ 1177.117831][ T1987] ? vsnprintf+0x1bfd/0x1cd0 [ 1177.122395][ T1987] ? __kasan_check_read+0x11/0x20 [ 1177.127394][ T1987] ? blk_alloc_devt+0xd4/0x320 [ 1177.132132][ T1987] __device_add_disk+0x5cb/0x11d0 [ 1177.137131][ T1987] ? device_add_disk+0x40/0x40 [ 1177.141868][ T1987] ? loop_add+0x440/0x760 [ 1177.146170][ T1987] ? vsprintf+0x40/0x40 [ 1177.150320][ T1987] device_add_disk+0x2a/0x40 [ 1177.154895][ T1987] loop_add+0x58f/0x760 [ 1177.159044][ T1987] loop_control_ioctl+0x564/0x740 [ 1177.164052][ T1987] ? loop_remove+0xb0/0xb0 [ 1177.168453][ T1987] ? __fget_files+0x310/0x370 [ 1177.173138][ T1987] ? security_file_ioctl+0xb1/0xd0 [ 1177.178222][ T1987] ? loop_remove+0xb0/0xb0 [ 1177.182621][ T1987] __se_sys_ioctl+0x115/0x190 [ 1177.187272][ T1987] __x64_sys_ioctl+0x7b/0x90 [ 1177.191840][ T1987] do_syscall_64+0x34/0x70 [ 1177.196230][ T1987] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1177.202097][ T1987] RIP: 0033:0x7f7994738279 [ 1177.206489][ T1987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1177.226076][ T1987] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1177.234464][ T1987] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1177.242419][ T1987] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1177.250371][ T1987] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1177.258315][ T1987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1177.266261][ T1987] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1177.275844][ T1987] ------------[ cut here ]------------ [ 1177.281459][ T1987] WARNING: CPU: 0 PID: 1987 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 1177.290612][ T1987] Modules linked in: [ 1177.294691][ T1987] CPU: 0 PID: 1987 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1177.306472][ T1987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1177.316698][ T1987] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 1177.322631][ T1987] Code: ff ff e8 67 54 2c ff 0f 0b e9 28 f3 ff ff e8 5b 54 2c ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 44 54 2c ff <0f> 0b e9 60 f7 ff ff e8 38 54 2c ff e9 13 ff ff ff 44 89 f1 80 e1 [ 1177.342512][ T1987] RSP: 0018:ffffc90000b57bc0 EFLAGS: 00010287 [ 1177.348749][ T1987] RAX: ffffffff82406b8c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1177.356864][ T1987] RDX: ffffc90009966000 RSI: 0000000000033eb0 RDI: 0000000000033eb1 [ 1177.364973][ T1987] RBP: ffffc90000b57d08 R08: ffffffff824062e6 R09: ffffc90000b57610 [ 1177.373174][ T1987] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 1177.381304][ T1987] R13: ffff888114005000 R14: ffff8881541a8338 R15: ffff8881541a8000 [ 1177.389421][ T1987] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1177.398557][ T1987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1177.405287][ T1987] CR2: 00007f799386bff8 CR3: 0000000110454000 CR4: 00000000003506b0 [ 1177.413407][ T1987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1177.421521][ T1987] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1177.429641][ T1987] Call Trace: [ 1177.433083][ T1987] ? device_add_disk+0x40/0x40 [ 1177.437987][ T1987] ? loop_add+0x440/0x760 [ 1177.442444][ T1987] ? vsprintf+0x40/0x40 [ 1177.446736][ T1987] device_add_disk+0x2a/0x40 [ 1177.451455][ T1987] loop_add+0x58f/0x760 [ 1177.455747][ T1987] loop_control_ioctl+0x564/0x740 [ 1177.460905][ T1987] ? loop_remove+0xb0/0xb0 [ 1177.465460][ T1987] ? __fget_files+0x310/0x370 [ 1177.470269][ T1987] ? security_file_ioctl+0xb1/0xd0 [ 1177.475545][ T1987] ? loop_remove+0xb0/0xb0 [ 1177.480127][ T1987] __se_sys_ioctl+0x115/0x190 [ 1177.484955][ T1987] __x64_sys_ioctl+0x7b/0x90 [ 1177.489706][ T1987] do_syscall_64+0x34/0x70 [ 1177.494242][ T1987] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1177.500265][ T1987] RIP: 0033:0x7f7994738279 [ 1177.504805][ T1987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1177.524549][ T1987] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1177.533119][ T1987] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1177.541229][ T1987] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1177.549352][ T1987] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1177.557539][ T1987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1177.565641][ T1987] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1177.573747][ T1987] ---[ end trace b78cd69f8ad74e61 ]--- [ 1177.619563][T26548] udevd[26548]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1177.649549][ T1987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=1987 comm=syz-executor.4 22:17:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) pidfd_getfd(r2, r2, 0x0) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) (async) 22:17:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000004000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:37 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="01000080000000040000000000000000850100e90d000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="01000080000000040000000000000000850100e90d000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000040008e00000000000850000000e000000850000000e000000959abb7425650e6d959464e6f06bb0d526064f5f3146e1d865201fb1e6069598bb4d8c857e6a2c09077cbac9ba39a6bdfd846e074ec6e2b9d1f12aab013cd2f776ed4a12f98e2f1f7aa65360c0bd6bc9052788207b56dfb43d376fcf001c3f81a733e2b58f7c1afa61e20ccc831491bd9399321221a148cc494033a21581bc40f80600fb0350a3561792eea91c59a76ef3b8ff8f82a3e4b4718b41696031319086613c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000040008e00000000000850000000e000000850000000e000000959abb7425650e6d959464e6f06bb0d526064f5f3146e1d865201fb1e6069598bb4d8c857e6a2c09077cbac9ba39a6bdfd846e074ec6e2b9d1f12aab013cd2f776ed4a12f98e2f1f7aa65360c0bd6bc9052788207b56dfb43d376fcf001c3f81a733e2b58f7c1afa61e20ccc831491bd9399321221a148cc494033a21581bc40f80600fb0350a3561792eea91c59a76ef3b8ff8f82a3e4b4718b41696031319086613c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 56) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6b05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd113825e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f29083e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d7b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13603b73157602100fb20b99306a7927d0c710d6ce4c8", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000005000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000006000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01ffffb806000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000007000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000008000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000009000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1177.896304][ T2048] FAULT_INJECTION: forcing a failure. [ 1177.896304][ T2048] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.909263][ T2048] CPU: 1 PID: 2048 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1177.920869][ T2048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1177.930919][ T2048] Call Trace: [ 1177.934190][ T2048] dump_stack_lvl+0x1e2/0x24b [ 1177.938844][ T2048] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1177.944304][ T2048] ? kernfs_add_one+0x4c5/0x5e0 [ 1177.949140][ T2048] dump_stack+0x15/0x17 [ 1177.953271][ T2048] should_fail+0x3c0/0x510 [ 1177.957665][ T2048] ? kobject_uevent_env+0x26c/0x730 [ 1177.962841][ T2048] __should_failslab+0x9f/0xe0 [ 1177.967583][ T2048] should_failslab+0x9/0x20 [ 1177.972061][ T2048] kmem_cache_alloc_trace+0x3a/0x330 [ 1177.977320][ T2048] ? __kasan_check_write+0x14/0x20 [ 1177.982407][ T2048] ? dev_uevent_filter+0xb0/0xb0 [ 1177.987335][ T2048] kobject_uevent_env+0x26c/0x730 [ 1177.992357][ T2048] ? mutex_unlock+0x1d/0x40 [ 1177.996843][ T2048] kobject_uevent+0x1f/0x30 [ 1178.001339][ T2048] device_add+0x79c/0xbd0 [ 1178.005646][ T2048] device_create+0x258/0x2e0 [ 1178.010210][ T2048] ? root_device_unregister+0x80/0x80 [ 1178.015556][ T2048] ? number+0xd9b/0x1040 [ 1178.019777][ T2048] bdi_register_va+0x94/0x600 [ 1178.024453][ T2048] bdi_register+0xd1/0x120 [ 1178.028866][ T2048] ? __device_add_disk+0x536/0x11d0 [ 1178.034037][ T2048] ? bdi_register_va+0x600/0x600 [ 1178.038948][ T2048] ? vsnprintf+0x1bfd/0x1cd0 [ 1178.043515][ T2048] ? __kasan_check_read+0x11/0x20 [ 1178.048532][ T2048] ? blk_alloc_devt+0xd4/0x320 [ 1178.053306][ T2048] __device_add_disk+0x5cb/0x11d0 [ 1178.058314][ T2048] ? device_add_disk+0x40/0x40 [ 1178.063062][ T2048] ? loop_add+0x440/0x760 [ 1178.067384][ T2048] ? vsprintf+0x40/0x40 [ 1178.071518][ T2048] device_add_disk+0x2a/0x40 [ 1178.076087][ T2048] loop_add+0x58f/0x760 [ 1178.080216][ T2048] loop_control_ioctl+0x564/0x740 [ 1178.085215][ T2048] ? loop_remove+0xb0/0xb0 [ 1178.089606][ T2048] ? __fget_files+0x310/0x370 [ 1178.094262][ T2048] ? security_file_ioctl+0xb1/0xd0 [ 1178.099345][ T2048] ? loop_remove+0xb0/0xb0 [ 1178.103735][ T2048] __se_sys_ioctl+0x115/0x190 [ 1178.108387][ T2048] __x64_sys_ioctl+0x7b/0x90 [ 1178.112972][ T2048] do_syscall_64+0x34/0x70 [ 1178.117373][ T2048] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1178.123238][ T2048] RIP: 0033:0x7f7994738279 [ 1178.127632][ T2048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1178.147211][ T2048] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1178.155604][ T2048] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1178.163556][ T2048] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1178.171504][ T2048] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.179480][ T2048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.187436][ T2048] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1178.229727][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1178.262150][ T2048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2048 comm=syz-executor.4 22:17:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff010000000a000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = dup2(r0, r1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000140)={0x5, 0x13c5dac5, 0x7, 0x1ff, 0x8, "74bd9ff3fe25076887929d44931e1d07ac637c", 0x80000000, 0x5}) 22:17:37 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000004000000008500006717b7e0cf1491f61f61c526000e000000854c5a421847c99d6a64680b756701342bfbdef0e995c1c616fc1d4a442289ec53224517"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r6}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7fff}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x3, '\x00', r6, 0x0, r2, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x4315, 0x63c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2]}, 0x80) 22:17:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xcf}, @ldst={0x1, 0x0, 0x1, 0x4, 0x1, 0x4, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000}]}, &(0x7f0000000140)='GPL\x00', 0x1ff, 0x3c, &(0x7f00000002c0)=""/60, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xa, 0x3ff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 57) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff010000000b000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1178.576502][ T2065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff010000000d000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000010000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000011000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000020000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000021000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff010000002f000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1178.750356][ T2083] FAULT_INJECTION: forcing a failure. [ 1178.750356][ T2083] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.763235][ T2083] CPU: 0 PID: 2083 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1178.774838][ T2083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1178.784883][ T2083] Call Trace: [ 1178.788166][ T2083] dump_stack_lvl+0x1e2/0x24b [ 1178.792822][ T2083] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1178.798261][ T2083] ? __alloc_skb+0x69/0x580 [ 1178.802740][ T2083] dump_stack+0x15/0x17 [ 1178.806875][ T2083] should_fail+0x3c0/0x510 [ 1178.811266][ T2083] __should_failslab+0x9f/0xe0 [ 1178.816005][ T2083] should_failslab+0x9/0x20 [ 1178.820482][ T2083] kmem_cache_alloc+0x3f/0x300 [ 1178.825223][ T2083] ? sysvec_reschedule_ipi+0x84/0x160 [ 1178.830565][ T2083] ? __alloc_skb+0x7e/0x580 [ 1178.835052][ T2083] __alloc_skb+0x7e/0x580 [ 1178.839364][ T2083] ? kobject_uevent_env+0x513/0x730 [ 1178.844535][ T2083] ? kobj_ns_ops+0x86/0xb0 [ 1178.848925][ T2083] alloc_uevent_skb+0x7f/0x230 [ 1178.853662][ T2083] kobject_uevent_net_broadcast+0x321/0x5a0 [ 1178.859526][ T2083] kobject_uevent_env+0x540/0x730 [ 1178.864524][ T2083] kobject_uevent+0x1f/0x30 [ 1178.869002][ T2083] device_add+0x79c/0xbd0 [ 1178.873306][ T2083] device_create+0x258/0x2e0 [ 1178.877884][ T2083] ? sysvec_reschedule_ipi+0x84/0x160 [ 1178.883242][ T2083] ? root_device_unregister+0x80/0x80 [ 1178.888591][ T2083] ? number+0xd9b/0x1040 [ 1178.892809][ T2083] bdi_register_va+0x94/0x600 [ 1178.897475][ T2083] bdi_register+0xd1/0x120 [ 1178.901866][ T2083] ? irqentry_exit+0x50/0x60 [ 1178.906431][ T2083] ? sysvec_reschedule_ipi+0x84/0x160 [ 1178.911778][ T2083] ? __device_add_disk+0x536/0x11d0 [ 1178.916976][ T2083] ? bdi_register_va+0x600/0x600 [ 1178.921886][ T2083] ? __device_add_disk+0x536/0x11d0 [ 1178.927061][ T2083] __device_add_disk+0x5cb/0x11d0 [ 1178.932074][ T2083] ? device_add_disk+0x40/0x40 [ 1178.936812][ T2083] ? loop_add+0x440/0x760 [ 1178.941116][ T2083] ? vsprintf+0x40/0x40 [ 1178.945367][ T2083] device_add_disk+0x2a/0x40 [ 1178.949944][ T2083] loop_add+0x58f/0x760 [ 1178.954077][ T2083] loop_control_ioctl+0x564/0x740 [ 1178.959098][ T2083] ? loop_remove+0xb0/0xb0 [ 1178.963494][ T2083] ? irqentry_exit+0x50/0x60 [ 1178.968090][ T2083] ? sysvec_reschedule_ipi+0x84/0x160 [ 1178.973449][ T2083] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1178.979070][ T2083] ? do_vfs_ioctl+0xf6/0x1a90 [ 1178.983747][ T2083] ? __se_sys_ioctl+0x109/0x190 [ 1178.988573][ T2083] ? loop_remove+0xb0/0xb0 [ 1178.992966][ T2083] __se_sys_ioctl+0x115/0x190 [ 1178.997616][ T2083] __x64_sys_ioctl+0x7b/0x90 [ 1179.002182][ T2083] do_syscall_64+0x34/0x70 [ 1179.006571][ T2083] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1179.012464][ T2083] RIP: 0033:0x7f7994738279 [ 1179.016856][ T2083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1179.036459][ T2083] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.044854][ T2083] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1179.052802][ T2083] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1179.060754][ T2083] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.068705][ T2083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.076655][ T2083] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1179.151398][ T2083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2083 comm=syz-executor.4 [ 1179.170478][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = dup2(r0, r1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000140)={0x5, 0x13c5dac5, 0x7, 0x1ff, 0x8, "74bd9ff3fe25076887929d44931e1d07ac637c", 0x80000000, 0x5}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) dup2(r0, r1) (async) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000140)={0x5, 0x13c5dac5, 0x7, 0x1ff, 0x8, "74bd9ff3fe25076887929d44931e1d07ac637c", 0x80000000, 0x5}) (async) 22:17:38 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000004000000008500006717b7e0cf1491f61f61c526000e000000854c5a421847c99d6a64680b756701342bfbdef0e995c1c616fc1d4a442289ec53224517"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 64) sendfile(r1, r2, 0x0, 0x20000023896) (async) ioctl$RTC_WIE_OFF(r2, 0x7010) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r6}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7fff}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x3, '\x00', r6, 0x0, r2, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x4315, 0x63c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2]}, 0x80) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff010000003a000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 58) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xcf}, @ldst={0x1, 0x0, 0x1, 0x4, 0x1, 0x4, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000}]}, &(0x7f0000000140)='GPL\x00', 0x1ff, 0x3c, &(0x7f00000002c0)=""/60, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xa, 0x3ff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff017b55546c000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0103d7836f000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff016c54557b000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01ffffff84000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01ffffff88000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000c94000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1179.602111][ T2125] FAULT_INJECTION: forcing a failure. [ 1179.602111][ T2125] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.614974][ T2125] CPU: 0 PID: 2125 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1179.626572][ T2125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1179.636600][ T2125] Call Trace: [ 1179.639866][ T2125] dump_stack_lvl+0x1e2/0x24b [ 1179.644524][ T2125] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1179.649955][ T2125] ? vsnprintf+0x1bfd/0x1cd0 [ 1179.654521][ T2125] dump_stack+0x15/0x17 [ 1179.658668][ T2125] should_fail+0x3c0/0x510 [ 1179.663061][ T2125] __should_failslab+0x9f/0xe0 [ 1179.667799][ T2125] should_failslab+0x9/0x20 [ 1179.672275][ T2125] kmem_cache_alloc+0x3f/0x300 [ 1179.677012][ T2125] ? sysvec_reschedule_ipi+0x84/0x160 [ 1179.682356][ T2125] ? __alloc_skb+0x7e/0x580 [ 1179.686833][ T2125] __alloc_skb+0x7e/0x580 [ 1179.691134][ T2125] ? kobject_uevent_env+0x513/0x730 [ 1179.696303][ T2125] alloc_uevent_skb+0x7f/0x230 [ 1179.701043][ T2125] kobject_uevent_net_broadcast+0x321/0x5a0 [ 1179.706906][ T2125] kobject_uevent_env+0x540/0x730 [ 1179.711907][ T2125] kobject_uevent+0x1f/0x30 [ 1179.716385][ T2125] device_add+0x79c/0xbd0 [ 1179.720689][ T2125] device_create+0x258/0x2e0 [ 1179.725253][ T2125] ? __kasan_check_read+0x11/0x20 [ 1179.730251][ T2125] ? root_device_unregister+0x80/0x80 [ 1179.735598][ T2125] ? number+0xd9b/0x1040 [ 1179.739833][ T2125] bdi_register_va+0x94/0x600 [ 1179.744485][ T2125] bdi_register+0xd1/0x120 [ 1179.748886][ T2125] ? irqentry_exit+0x50/0x60 [ 1179.753449][ T2125] ? __device_add_disk+0x536/0x11d0 [ 1179.758620][ T2125] ? bdi_register_va+0x600/0x600 [ 1179.763534][ T2125] __device_add_disk+0x5cb/0x11d0 [ 1179.768530][ T2125] ? device_add_disk+0x40/0x40 [ 1179.773267][ T2125] ? loop_add+0x440/0x760 [ 1179.777569][ T2125] ? vsprintf+0x40/0x40 [ 1179.781698][ T2125] ? device_initialize+0x1fd/0x3a0 [ 1179.786782][ T2125] device_add_disk+0x2a/0x40 [ 1179.791345][ T2125] loop_add+0x58f/0x760 [ 1179.795474][ T2125] loop_control_ioctl+0x564/0x740 [ 1179.800473][ T2125] ? loop_remove+0xb0/0xb0 [ 1179.804861][ T2125] ? __fget_files+0x310/0x370 [ 1179.809513][ T2125] ? security_file_ioctl+0xb1/0xd0 [ 1179.814601][ T2125] ? loop_remove+0xb0/0xb0 [ 1179.818993][ T2125] __se_sys_ioctl+0x115/0x190 [ 1179.823647][ T2125] __x64_sys_ioctl+0x7b/0x90 [ 1179.828213][ T2125] do_syscall_64+0x34/0x70 [ 1179.832604][ T2125] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1179.838471][ T2125] RIP: 0033:0x7f7994738279 [ 1179.842867][ T2125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1179.862444][ T2125] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.870831][ T2125] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1179.878776][ T2125] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1179.886731][ T2125] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.894706][ T2125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.902651][ T2125] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1179.967738][ T2127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2127 comm=syz-executor.4 22:17:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) (async) r3 = dup2(r0, r1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000140)={0x5, 0x13c5dac5, 0x7, 0x1ff, 0x8, "74bd9ff3fe25076887929d44931e1d07ac637c", 0x80000000, 0x5}) [ 1180.032463][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 22:17:39 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000004000000008500006717b7e0cf1491f61f61c526000e000000854c5a421847c99d6a64680b756701342bfbdef0e995c1c616fc1d4a442289ec53224517"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) (async) ioctl$RTC_WIE_OFF(r2, 0x7010) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r6}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7fff}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x3, '\x00', r6, 0x0, r2, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x4315, 0x63c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2]}, 0x80) 22:17:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01ffffff9e000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 59) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100a002a0000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xcf}, @ldst={0x1, 0x0, 0x1, 0x4, 0x1, 0x4, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000}]}, &(0x7f0000000140)='GPL\x00', 0x1ff, 0x3c, &(0x7f00000002c0)=""/60, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xa, 0x3ff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01ffffffef000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01fffffff0000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000000f4000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01fffffff5000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1180.457556][ T2159] FAULT_INJECTION: forcing a failure. [ 1180.457556][ T2159] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.470288][ T2159] CPU: 0 PID: 2159 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1180.481891][ T2159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1180.491919][ T2159] Call Trace: [ 1180.495192][ T2159] dump_stack_lvl+0x1e2/0x24b [ 1180.499850][ T2159] ? panic+0x7d7/0x7d7 [ 1180.503892][ T2159] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1180.509323][ T2159] ? __do_softirq+0x596/0x596 [ 1180.513973][ T2159] dump_stack+0x15/0x17 [ 1180.518102][ T2159] should_fail+0x3c0/0x510 [ 1180.522493][ T2159] ? alloc_uevent_skb+0x7f/0x230 [ 1180.527409][ T2159] __should_failslab+0x9f/0xe0 [ 1180.532149][ T2159] should_failslab+0x9/0x20 [ 1180.536637][ T2159] __kmalloc_track_caller+0x5f/0x350 [ 1180.541894][ T2159] ? kmem_cache_alloc+0x1a4/0x300 [ 1180.546891][ T2159] ? __alloc_skb+0x7e/0x580 [ 1180.551368][ T2159] ? alloc_uevent_skb+0x7f/0x230 [ 1180.556279][ T2159] __alloc_skb+0xbe/0x580 [ 1180.560584][ T2159] ? mutex_lock+0xa6/0x110 [ 1180.564973][ T2159] alloc_uevent_skb+0x7f/0x230 [ 1180.569712][ T2159] kobject_uevent_net_broadcast+0x321/0x5a0 [ 1180.575579][ T2159] kobject_uevent_env+0x540/0x730 [ 1180.580577][ T2159] kobject_uevent+0x1f/0x30 [ 1180.585052][ T2159] device_add+0x79c/0xbd0 [ 1180.589360][ T2159] device_create+0x258/0x2e0 [ 1180.593923][ T2159] ? __kasan_check_read+0x11/0x20 [ 1180.598921][ T2159] ? root_device_unregister+0x80/0x80 [ 1180.604266][ T2159] ? number+0xd9b/0x1040 [ 1180.608489][ T2159] bdi_register_va+0x94/0x600 [ 1180.613140][ T2159] bdi_register+0xd1/0x120 [ 1180.617534][ T2159] ? irqentry_exit+0x50/0x60 [ 1180.622100][ T2159] ? __device_add_disk+0x536/0x11d0 [ 1180.627269][ T2159] ? bdi_register_va+0x600/0x600 [ 1180.632184][ T2159] __device_add_disk+0x5cb/0x11d0 [ 1180.637181][ T2159] ? device_add_disk+0x40/0x40 [ 1180.641935][ T2159] ? loop_add+0x440/0x760 [ 1180.646238][ T2159] ? vsprintf+0x40/0x40 [ 1180.650367][ T2159] device_add_disk+0x2a/0x40 [ 1180.654952][ T2159] loop_add+0x58f/0x760 [ 1180.659090][ T2159] loop_control_ioctl+0x564/0x740 [ 1180.664090][ T2159] ? loop_remove+0xb0/0xb0 [ 1180.668482][ T2159] ? __fget_files+0x310/0x370 [ 1180.673149][ T2159] ? security_file_ioctl+0xb1/0xd0 [ 1180.678234][ T2159] ? loop_remove+0xb0/0xb0 [ 1180.682623][ T2159] __se_sys_ioctl+0x115/0x190 [ 1180.687271][ T2159] __x64_sys_ioctl+0x7b/0x90 [ 1180.691834][ T2159] do_syscall_64+0x34/0x70 [ 1180.696227][ T2159] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1180.702093][ T2159] RIP: 0033:0x7f7994738279 [ 1180.706483][ T2159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1180.726061][ T2159] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1180.734446][ T2159] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1180.742391][ T2159] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1180.750336][ T2159] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1180.758279][ T2159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1180.766223][ T2159] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1180.800875][T26812] udevd[26812]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1180.844959][ T2159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2159 comm=syz-executor.4 22:17:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='cgroup2\x00', 0x400, &(0x7f00000002c0)='sched_switch\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x52800, 0x118) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) [ 1180.939714][ T2162] cgroup2: Unknown parameter 'sched_switch' 22:17:40 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01fffffffc000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0106b8ffff000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 60) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff017fffffff000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e00106be40000850000000e000000958540456a7974810f970af1a7026c74247109e9062deb52c6668a3adfd93501f7af8f5614fc0af35d56dd7610dbe6988b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40002, 0x88) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) lseek(r0, 0x3, 0x4) 22:17:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0184ffffff000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0188ffffff000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff019effffff000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01efffffff000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1181.315067][ T2191] FAULT_INJECTION: forcing a failure. [ 1181.315067][ T2191] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.327829][ T2191] CPU: 0 PID: 2191 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1181.339439][ T2191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1181.349473][ T2191] Call Trace: [ 1181.352741][ T2191] dump_stack_lvl+0x1e2/0x24b [ 1181.357406][ T2191] ? panic+0x7d7/0x7d7 [ 1181.361452][ T2191] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1181.366892][ T2191] dump_stack+0x15/0x17 [ 1181.371023][ T2191] should_fail+0x3c0/0x510 [ 1181.375415][ T2191] ? alloc_uevent_skb+0x7f/0x230 [ 1181.380330][ T2191] __should_failslab+0x9f/0xe0 [ 1181.385082][ T2191] should_failslab+0x9/0x20 [ 1181.389560][ T2191] __kmalloc_track_caller+0x5f/0x350 [ 1181.394845][ T2191] ? kmem_cache_alloc+0x1a4/0x300 [ 1181.399843][ T2191] ? __alloc_skb+0x7e/0x580 [ 1181.404319][ T2191] ? alloc_uevent_skb+0x7f/0x230 [ 1181.409232][ T2191] __alloc_skb+0xbe/0x580 [ 1181.413536][ T2191] ? mutex_lock+0xa6/0x110 [ 1181.417924][ T2191] alloc_uevent_skb+0x7f/0x230 [ 1181.422659][ T2191] kobject_uevent_net_broadcast+0x321/0x5a0 [ 1181.428525][ T2191] kobject_uevent_env+0x540/0x730 [ 1181.433526][ T2191] kobject_uevent+0x1f/0x30 [ 1181.438007][ T2191] device_add+0x79c/0xbd0 [ 1181.442311][ T2191] device_create+0x258/0x2e0 [ 1181.446876][ T2191] ? sysvec_reschedule_ipi+0x84/0x160 [ 1181.452222][ T2191] ? root_device_unregister+0x80/0x80 [ 1181.457583][ T2191] ? number+0xd9b/0x1040 [ 1181.461805][ T2191] bdi_register_va+0x94/0x600 [ 1181.466461][ T2191] bdi_register+0xd1/0x120 [ 1181.470851][ T2191] ? irqentry_exit+0x50/0x60 [ 1181.475439][ T2191] ? sysvec_reschedule_ipi+0x84/0x160 [ 1181.480798][ T2191] ? __device_add_disk+0x536/0x11d0 [ 1181.485967][ T2191] ? bdi_register_va+0x600/0x600 [ 1181.490894][ T2191] ? __device_add_disk+0x147/0x11d0 [ 1181.496074][ T2191] ? blk_alloc_devt+0xd4/0x320 [ 1181.500826][ T2191] __device_add_disk+0x5cb/0x11d0 [ 1181.505827][ T2191] ? device_add_disk+0x40/0x40 [ 1181.510566][ T2191] ? irqentry_exit+0x50/0x60 [ 1181.515145][ T2191] ? loop_add+0x440/0x760 [ 1181.519455][ T2191] ? vsprintf+0x40/0x40 [ 1181.523586][ T2191] device_add_disk+0x2a/0x40 [ 1181.528151][ T2191] loop_add+0x58f/0x760 [ 1181.532293][ T2191] loop_control_ioctl+0x564/0x740 [ 1181.538188][ T2191] ? loop_remove+0xb0/0xb0 [ 1181.542578][ T2191] ? __fget_files+0x310/0x370 [ 1181.547232][ T2191] ? security_file_ioctl+0xb1/0xd0 [ 1181.552314][ T2191] ? loop_remove+0xb0/0xb0 [ 1181.556717][ T2191] __se_sys_ioctl+0x115/0x190 [ 1181.561366][ T2191] __x64_sys_ioctl+0x7b/0x90 [ 1181.565932][ T2191] do_syscall_64+0x34/0x70 [ 1181.570337][ T2191] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1181.576233][ T2191] RIP: 0033:0x7f7994738279 [ 1181.580624][ T2191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1181.600199][ T2191] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1181.608588][ T2191] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1181.616533][ T2191] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1181.624482][ T2191] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1181.632432][ T2191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1181.640388][ T2191] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1181.720423][ T2191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2191 comm=syz-executor.4 22:17:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='cgroup2\x00', 0x400, &(0x7f00000002c0)='sched_switch\x00') (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x52800, 0x118) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) [ 1181.823059][ T2194] cgroup2: Unknown parameter 'sched_switch' 22:17:41 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01f0ffffff000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01f5ffffff000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 61) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01fcffffff000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e00106be40000850000000e000000958540456a7974810f970af1a7026c74247109e9062deb52c6668a3adfd93501f7af8f5614fc0af35d56dd7610dbe6988b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40002, 0x88) (rerun: 32) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) lseek(r0, 0x3, 0x4) 22:17:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01fffffffff40000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01ffffffffa002a0000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1182.163620][ T2230] FAULT_INJECTION: forcing a failure. [ 1182.163620][ T2230] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.176417][ T2230] CPU: 0 PID: 2230 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1182.188037][ T2230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1182.198065][ T2230] Call Trace: [ 1182.201334][ T2230] dump_stack_lvl+0x1e2/0x24b [ 1182.205986][ T2230] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1182.211428][ T2230] dump_stack+0x15/0x17 [ 1182.215555][ T2230] should_fail+0x3c0/0x510 [ 1182.219951][ T2230] __should_failslab+0x9f/0xe0 [ 1182.224689][ T2230] should_failslab+0x9/0x20 [ 1182.229201][ T2230] kmem_cache_alloc+0x3f/0x300 [ 1182.233953][ T2230] ? skb_clone+0x1d6/0x3b0 [ 1182.238354][ T2230] skb_clone+0x1d6/0x3b0 [ 1182.242583][ T2230] netlink_broadcast_filtered+0x654/0x1200 [ 1182.248393][ T2230] netlink_broadcast+0x3a/0x50 [ 1182.253132][ T2230] kobject_uevent_net_broadcast+0x3b1/0x5a0 [ 1182.258996][ T2230] kobject_uevent_env+0x540/0x730 [ 1182.263992][ T2230] kobject_uevent+0x1f/0x30 [ 1182.268471][ T2230] device_add+0x79c/0xbd0 [ 1182.272782][ T2230] device_create+0x258/0x2e0 [ 1182.277354][ T2230] ? root_device_unregister+0x80/0x80 [ 1182.282700][ T2230] ? __kasan_check_read+0x11/0x20 [ 1182.287716][ T2230] ? preempt_schedule_irq+0xef/0x140 [ 1182.292975][ T2230] ? preempt_schedule_notrace+0x140/0x140 [ 1182.298669][ T2230] bdi_register_va+0x94/0x600 [ 1182.303320][ T2230] bdi_register+0xd1/0x120 [ 1182.307712][ T2230] ? asm_sysvec_call_function_single+0x12/0x20 [ 1182.313857][ T2230] ? __device_add_disk+0x536/0x11d0 [ 1182.319042][ T2230] ? bdi_register_va+0x600/0x600 [ 1182.323961][ T2230] ? elevator_init_mq+0x375/0x500 [ 1182.328981][ T2230] ? blk_alloc_devt+0xd4/0x320 [ 1182.333721][ T2230] __device_add_disk+0x5cb/0x11d0 [ 1182.338721][ T2230] ? device_add_disk+0x40/0x40 [ 1182.343461][ T2230] ? loop_add+0x440/0x760 [ 1182.347764][ T2230] ? vsprintf+0x40/0x40 [ 1182.351899][ T2230] device_add_disk+0x2a/0x40 [ 1182.356466][ T2230] loop_add+0x58f/0x760 [ 1182.360606][ T2230] loop_control_ioctl+0x564/0x740 [ 1182.365604][ T2230] ? loop_remove+0xb0/0xb0 [ 1182.370008][ T2230] ? irqentry_exit+0x50/0x60 [ 1182.374572][ T2230] ? sysvec_reschedule_ipi+0x84/0x160 [ 1182.379917][ T2230] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1182.385524][ T2230] ? do_vfs_ioctl+0xf6/0x1a90 [ 1182.390186][ T2230] ? __se_sys_ioctl+0x109/0x190 [ 1182.395011][ T2230] ? loop_remove+0xb0/0xb0 [ 1182.399419][ T2230] __se_sys_ioctl+0x115/0x190 [ 1182.404068][ T2230] __x64_sys_ioctl+0x7b/0x90 [ 1182.408649][ T2230] do_syscall_64+0x34/0x70 [ 1182.413042][ T2230] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1182.418906][ T2230] RIP: 0033:0x7f7994738279 [ 1182.423298][ T2230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1182.442877][ T2230] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.451280][ T2230] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 22:17:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000010000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1182.459234][ T2230] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1182.467181][ T2230] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1182.475144][ T2230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1182.483092][ T2230] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1182.571454][ T2230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2230 comm=syz-executor.4 22:17:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='cgroup2\x00', 0x400, &(0x7f00000002c0)='sched_switch\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x52800, 0x118) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='cgroup2\x00', 0x400, &(0x7f00000002c0)='sched_switch\x00') (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x52800, 0x118) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000020000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e00106be40000850000000e000000958540456a7974810f970af1a7026c74247109e9062deb52c6668a3adfd93501f7af8f5614fc0af35d56dd7610dbe6988b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40002, 0x88) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) (async, rerun: 64) lseek(r0, 0x3, 0x4) (rerun: 64) 22:17:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000030000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1182.706709][ T2235] cgroup2: Unknown parameter 'sched_switch' 22:17:42 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = dup2(r1, r0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000013c0)=[{{&(0x7f0000000680)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000940)=""/50, 0x32}], 0x4}, 0x1}, {{&(0x7f00000009c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/132, 0x84}], 0x1, &(0x7f0000000b40)=""/31, 0x1f}, 0x377}, {{&(0x7f0000000b80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/221, 0xdd}, {&(0x7f0000000d00)=""/163, 0xa3}, {&(0x7f0000000dc0)=""/157, 0x9d}], 0x3, &(0x7f0000000ec0)=""/182, 0xb6}, 0xffff}, {{&(0x7f0000000f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001000)=""/95, 0x5f}, {&(0x7f0000001080)=""/62, 0x3e}, {&(0x7f00000010c0)=""/174, 0xae}, {&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000011c0)=""/44, 0x2c}, {&(0x7f0000001200)=""/74, 0x4a}, {&(0x7f0000001280)=""/112, 0x70}, {&(0x7f0000001300)}], 0x8}, 0xb56b000}], 0x4, 0x2, &(0x7f00000014c0)) r5 = socket(0x11, 0x1, 0xffffffe1) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x1, 0x6, 0x20, @private1, @private0, 0x7800, 0x1, 0x7ff, 0x4}}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{r3, r4+10000000}, {0x77359400}}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x1, &(0x7f0000001580)=ANY=[@ANYBLOB="f36a04002414337e863d5166331020a45a9421b6fcefe1b3862da592eb23c9f845669f264bf0ecb6e9d018044489f34259e6a475e67804db51981b35894970312e65d9cddbf3e3010ee914ae52283a5e6566bf73998d6fa3ce3c3aa3d168e2b5d79fdca450b6c6372e1039a36a9a30079bb3b6579a924841567c07e3459fd08c45efde5edcabfc459d15ea4de1657fc2789c40794b95b3470cfe0dcfd41e839928e7914654ce4e0a3463c910e5aa2d857e6be916a2fb7507cc71cb4a2fdac4f72307ccd3ca8c25bb7ce96c"], &(0x7f0000000440)='syzkaller\x00', 0x5e9, 0xf3, &(0x7f0000000480)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x8, 0x6, 0x8001}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='siox_set_data\x00', r2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@gettaction={0x90, 0x32, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff7}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x8010) 22:17:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 62) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00'}, 0x10) write$binfmt_elf32(r3, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x9, 0x8, 0x9, 0xff, 0x3, 0x3e, 0x68, 0x304, 0x38, 0x2f0, 0x8e9, 0x400, 0x20, 0x1, 0x3f, 0x40, 0x6}, [{0x6474e551, 0x4, 0x2a9f, 0x4, 0xffff, 0x1, 0x1ff, 0xffff}], "ca3ca97c4faf0cd1f4321c59ae57783f9ed0a08600babd87b3a6f49bb3853ddd1c6b26b51f3b330436a731ab3cb8fee569c20643b99db0c9a5dc16babf24905a875eebfd25386c2033d15114708c8cf1d920234b2cd5bec1b4ac504453950755af8098e216944e6a50afb86d11267d0ea2546ac2ec720389adfc498137941966d028531e2d1cef491647b8ba869fd0cce19a197bd4bb3c4e8b0cb0439fab07c3b6a7c956ac0a63869c21e8738903a444752f6494dceca5b853a0a721233f4ea4c789b6733405ace821dcda23b92e3739673f71968326c20c5b180ec301de47b0", ['\x00']}, 0x238) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000000006f83d7030000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000040000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000050000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000060000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1183.028719][ T2267] FAULT_INJECTION: forcing a failure. [ 1183.028719][ T2267] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.041327][ T2267] CPU: 1 PID: 2267 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1183.052930][ T2267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1183.062959][ T2267] Call Trace: [ 1183.066228][ T2267] dump_stack_lvl+0x1e2/0x24b [ 1183.070885][ T2267] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1183.076328][ T2267] ? kmem_cache_free+0xa9/0x1f0 [ 1183.081153][ T2267] dump_stack+0x15/0x17 [ 1183.085288][ T2267] should_fail+0x3c0/0x510 [ 1183.089679][ T2267] __should_failslab+0x9f/0xe0 [ 1183.094420][ T2267] should_failslab+0x9/0x20 [ 1183.098913][ T2267] kmem_cache_alloc+0x3f/0x300 [ 1183.103669][ T2267] ? __d_alloc+0x2d/0x6b0 [ 1183.107978][ T2267] __d_alloc+0x2d/0x6b0 [ 1183.112114][ T2267] ? avc_has_perm_noaudit+0x358/0x4c0 [ 1183.117466][ T2267] d_alloc_parallel+0xe6/0x1330 [ 1183.122318][ T2267] ? avc_has_perm_noaudit+0x2ed/0x4c0 [ 1183.127671][ T2267] ? avc_denied+0x1b0/0x1b0 [ 1183.132159][ T2267] ? kfree+0xc3/0x290 [ 1183.136122][ T2267] ? d_hash_and_lookup+0x200/0x200 [ 1183.141214][ T2267] ? selinux_inode_permission+0x439/0x670 [ 1183.146911][ T2267] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 1183.152713][ T2267] ? kobject_uevent_env+0x348/0x730 [ 1183.157888][ T2267] __lookup_slow+0x14e/0x400 [ 1183.162456][ T2267] ? __d_lookup+0x4da/0x530 [ 1183.166985][ T2267] ? lookup_one_len+0x6a0/0x6a0 [ 1183.171816][ T2267] lookup_one_len+0x43d/0x6a0 [ 1183.176469][ T2267] ? try_lookup_one_len+0x660/0x660 [ 1183.181640][ T2267] ? device_create+0x2bc/0x2e0 [ 1183.186379][ T2267] ? mntput+0x63/0xc0 [ 1183.190339][ T2267] start_creating+0x166/0x320 [ 1183.194992][ T2267] debugfs_create_dir+0x27/0x450 [ 1183.199905][ T2267] bdi_register_va+0x260/0x600 [ 1183.204646][ T2267] bdi_register+0xd1/0x120 [ 1183.209038][ T2267] ? __device_add_disk+0x536/0x11d0 [ 1183.214212][ T2267] ? bdi_register_va+0x600/0x600 [ 1183.219121][ T2267] ? vsnprintf+0x1bfd/0x1cd0 [ 1183.223688][ T2267] ? __kasan_check_read+0x11/0x20 [ 1183.228694][ T2267] ? blk_alloc_devt+0xd4/0x320 [ 1183.233439][ T2267] __device_add_disk+0x5cb/0x11d0 [ 1183.238447][ T2267] ? device_add_disk+0x40/0x40 [ 1183.243184][ T2267] ? loop_add+0x440/0x760 [ 1183.247506][ T2267] ? vsprintf+0x40/0x40 [ 1183.251638][ T2267] device_add_disk+0x2a/0x40 [ 1183.256200][ T2267] loop_add+0x58f/0x760 [ 1183.260357][ T2267] loop_control_ioctl+0x564/0x740 [ 1183.265367][ T2267] ? loop_remove+0xb0/0xb0 [ 1183.269762][ T2267] ? __fget_files+0x310/0x370 [ 1183.274422][ T2267] ? security_file_ioctl+0xb1/0xd0 [ 1183.279505][ T2267] ? loop_remove+0xb0/0xb0 [ 1183.283895][ T2267] __se_sys_ioctl+0x115/0x190 [ 1183.288547][ T2267] __x64_sys_ioctl+0x7b/0x90 [ 1183.293112][ T2267] do_syscall_64+0x34/0x70 [ 1183.297505][ T2267] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1183.303373][ T2267] RIP: 0033:0x7f7994738279 [ 1183.307776][ T2267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1183.327527][ T2267] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1183.335917][ T2267] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1183.343862][ T2267] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1183.351809][ T2267] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.359762][ T2267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1183.367711][ T2267] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1183.375697][ C1] sched: RT throttling activated [ 1183.449127][ T2267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2267 comm=syz-executor.4 22:17:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000ffffb8060000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="edc3ec6f132b1918000000000000040000000000000000850000000e00000085009f233e5b96a06fd7107cbc41ad6674cdc08f0df21bf1740e4240ce4df4f32db002201e9a3b9639bea95e47e41ddde6df8aebe09a1b3f4ec7ad31fa4cd63ad1f2abedfbcbc5556f48"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010000000000000000000c009ecc", @ANYRES32=r2, @ANYBLOB="0000000008000100ac1414aa0a000200bbbbbbbbbbbb0000"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000341104aa105a4fd265d7a89acb19", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r6}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x230, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) 22:17:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000070000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="f7ffffff000000040000000000000000850000000e000000850000000e0000009556a66ee5d2a51f0732152af125356b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02004f00000000008800", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) 22:17:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000080000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000090000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 63) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6b05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd113825e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f29083e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d7b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13603b73157602100fb20b99306a7927d0c710d6ce4c8", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="f7ffffff000000040000000000000000850000000e000000850000000e0000009556a66ee5d2a51f0732152af125356b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02004f00000000008800", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) 22:17:43 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = dup2(r1, r0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000013c0)=[{{&(0x7f0000000680)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000940)=""/50, 0x32}], 0x4}, 0x1}, {{&(0x7f00000009c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/132, 0x84}], 0x1, &(0x7f0000000b40)=""/31, 0x1f}, 0x377}, {{&(0x7f0000000b80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/221, 0xdd}, {&(0x7f0000000d00)=""/163, 0xa3}, {&(0x7f0000000dc0)=""/157, 0x9d}], 0x3, &(0x7f0000000ec0)=""/182, 0xb6}, 0xffff}, {{&(0x7f0000000f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001000)=""/95, 0x5f}, {&(0x7f0000001080)=""/62, 0x3e}, {&(0x7f00000010c0)=""/174, 0xae}, {&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000011c0)=""/44, 0x2c}, {&(0x7f0000001200)=""/74, 0x4a}, {&(0x7f0000001280)=""/112, 0x70}, {&(0x7f0000001300)}], 0x8}, 0xb56b000}], 0x4, 0x2, &(0x7f00000014c0)) r5 = socket(0x11, 0x1, 0xffffffe1) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x1, 0x6, 0x20, @private1, @private0, 0x7800, 0x1, 0x7ff, 0x4}}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{r3, r4+10000000}, {0x77359400}}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x1, &(0x7f0000001580)=ANY=[@ANYBLOB="f36a04002414337e863d5166331020a45a9421b6fcefe1b3862da592eb23c9f845669f264bf0ecb6e9d018044489f34259e6a475e67804db51981b35894970312e65d9cddbf3e3010ee914ae52283a5e6566bf73998d6fa3ce3c3aa3d168e2b5d79fdca450b6c6372e1039a36a9a30079bb3b6579a924841567c07e3459fd08c45efde5edcabfc459d15ea4de1657fc2789c40794b95b3470cfe0dcfd41e839928e7914654ce4e0a3463c910e5aa2d857e6be916a2fb7507cc71cb4a2fdac4f72307ccd3ca8c25bb7ce96c"], &(0x7f0000000440)='syzkaller\x00', 0x5e9, 0xf3, &(0x7f0000000480)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x8, 0x6, 0x8001}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='siox_set_data\x00', r2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@gettaction={0x90, 0x32, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff7}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x8010) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) dup2(r1, r0) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) recvmmsg(r2, &(0x7f00000013c0)=[{{&(0x7f0000000680)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000940)=""/50, 0x32}], 0x4}, 0x1}, {{&(0x7f00000009c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/132, 0x84}], 0x1, &(0x7f0000000b40)=""/31, 0x1f}, 0x377}, {{&(0x7f0000000b80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/221, 0xdd}, {&(0x7f0000000d00)=""/163, 0xa3}, {&(0x7f0000000dc0)=""/157, 0x9d}], 0x3, &(0x7f0000000ec0)=""/182, 0xb6}, 0xffff}, {{&(0x7f0000000f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001000)=""/95, 0x5f}, {&(0x7f0000001080)=""/62, 0x3e}, {&(0x7f00000010c0)=""/174, 0xae}, {&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000011c0)=""/44, 0x2c}, {&(0x7f0000001200)=""/74, 0x4a}, {&(0x7f0000001280)=""/112, 0x70}, {&(0x7f0000001300)}], 0x8}, 0xb56b000}], 0x4, 0x2, &(0x7f00000014c0)) (async) socket(0x11, 0x1, 0xffffffe1) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x1, 0x6, 0x20, @private1, @private0, 0x7800, 0x1, 0x7ff, 0x4}}) (async) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{r3, r4+10000000}, {0x77359400}}, &(0x7f0000000140)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x1, &(0x7f0000001580)=ANY=[@ANYBLOB="f36a04002414337e863d5166331020a45a9421b6fcefe1b3862da592eb23c9f845669f264bf0ecb6e9d018044489f34259e6a475e67804db51981b35894970312e65d9cddbf3e3010ee914ae52283a5e6566bf73998d6fa3ce3c3aa3d168e2b5d79fdca450b6c6372e1039a36a9a30079bb3b6579a924841567c07e3459fd08c45efde5edcabfc459d15ea4de1657fc2789c40794b95b3470cfe0dcfd41e839928e7914654ce4e0a3463c910e5aa2d857e6be916a2fb7507cc71cb4a2fdac4f72307ccd3ca8c25bb7ce96c"], &(0x7f0000000440)='syzkaller\x00', 0x5e9, 0xf3, &(0x7f0000000480)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x8, 0x6, 0x8001}, 0x10, 0xffffffffffffffff, r1}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='siox_set_data\x00', r2}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@gettaction={0x90, 0x32, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff7}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x8010) (async) 22:17:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000000000000000a0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:43 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00'}, 0x10) write$binfmt_elf32(r3, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x9, 0x8, 0x9, 0xff, 0x3, 0x3e, 0x68, 0x304, 0x38, 0x2f0, 0x8e9, 0x400, 0x20, 0x1, 0x3f, 0x40, 0x6}, [{0x6474e551, 0x4, 0x2a9f, 0x4, 0xffff, 0x1, 0x1ff, 0xffff}], "ca3ca97c4faf0cd1f4321c59ae57783f9ed0a08600babd87b3a6f49bb3853ddd1c6b26b51f3b330436a731ab3cb8fee569c20643b99db0c9a5dc16babf24905a875eebfd25386c2033d15114708c8cf1d920234b2cd5bec1b4ac504453950755af8098e216944e6a50afb86d11267d0ea2546ac2ec720389adfc498137941966d028531e2d1cef491647b8ba869fd0cce19a197bd4bb3c4e8b0cb0439fab07c3b6a7c956ac0a63869c21e8738903a444752f6494dceca5b853a0a721233f4ea4c789b6733405ace821dcda23b92e3739673f71968326c20c5b180ec301de47b0", ['\x00']}, 0x238) (async) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000000000000000b0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1183.904570][ T2300] FAULT_INJECTION: forcing a failure. [ 1183.904570][ T2300] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.917379][ T2300] CPU: 0 PID: 2300 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1183.928981][ T2300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1183.939011][ T2300] Call Trace: [ 1183.942280][ T2300] dump_stack_lvl+0x1e2/0x24b [ 1183.946947][ T2300] ? panic+0x7d7/0x7d7 [ 1183.950998][ T2300] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1183.956438][ T2300] ? __lookup_slow+0x2f7/0x400 [ 1183.961180][ T2300] ? lookup_one_len+0x6a0/0x6a0 [ 1183.966187][ T2300] dump_stack+0x15/0x17 [ 1183.970328][ T2300] should_fail+0x3c0/0x510 [ 1183.974727][ T2300] __should_failslab+0x9f/0xe0 [ 1183.979474][ T2300] should_failslab+0x9/0x20 [ 1183.983956][ T2300] kmem_cache_alloc+0x3f/0x300 [ 1183.988709][ T2300] ? new_inode_pseudo+0x7c/0x220 [ 1183.993655][ T2300] ? try_lookup_one_len+0x660/0x660 [ 1183.998829][ T2300] new_inode_pseudo+0x7c/0x220 [ 1184.003585][ T2300] new_inode+0x28/0x1c0 [ 1184.007724][ T2300] ? start_creating+0x206/0x320 [ 1184.012564][ T2300] debugfs_create_dir+0xf3/0x450 [ 1184.017502][ T2300] bdi_register_va+0x260/0x600 [ 1184.022258][ T2300] bdi_register+0xd1/0x120 [ 1184.026804][ T2300] ? __device_add_disk+0x536/0x11d0 [ 1184.031985][ T2300] ? bdi_register_va+0x600/0x600 [ 1184.036987][ T2300] ? vsnprintf+0x1bfd/0x1cd0 [ 1184.041570][ T2300] ? __kasan_check_read+0x11/0x20 [ 1184.046574][ T2300] ? blk_alloc_devt+0xd4/0x320 [ 1184.051344][ T2300] __device_add_disk+0x5cb/0x11d0 [ 1184.056364][ T2300] ? device_add_disk+0x40/0x40 [ 1184.061114][ T2300] ? loop_add+0x440/0x760 [ 1184.065444][ T2300] ? vsprintf+0x40/0x40 [ 1184.069583][ T2300] device_add_disk+0x2a/0x40 [ 1184.074158][ T2300] loop_add+0x58f/0x760 [ 1184.078294][ T2300] loop_control_ioctl+0x564/0x740 [ 1184.083299][ T2300] ? loop_remove+0xb0/0xb0 [ 1184.087692][ T2300] ? __fget_files+0x310/0x370 [ 1184.092363][ T2300] ? security_file_ioctl+0xb1/0xd0 [ 1184.097457][ T2300] ? loop_remove+0xb0/0xb0 [ 1184.101851][ T2300] __se_sys_ioctl+0x115/0x190 [ 1184.106506][ T2300] __x64_sys_ioctl+0x7b/0x90 [ 1184.111073][ T2300] do_syscall_64+0x34/0x70 [ 1184.115467][ T2300] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1184.121337][ T2300] RIP: 0033:0x7f7994738279 [ 1184.125752][ T2300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1184.145347][ T2300] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.153739][ T2300] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1184.161721][ T2300] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1184.169678][ T2300] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1184.177623][ T2300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1184.185594][ T2300] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1184.193852][ T2300] debugfs: out of free dentries, can not create directory '7:0' [ 1184.271494][ T2300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2300 comm=syz-executor.4 22:17:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="f7ffffff000000040000000000000000850000000e000000850000000e0000009556a66ee5d2a51f0732152af125356b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02004f00000000008800", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000100000000002000040000000000"], 0x54, 0x2) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) 22:17:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000000000000000d0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:43 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = dup2(r1, r0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000013c0)=[{{&(0x7f0000000680)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000940)=""/50, 0x32}], 0x4}, 0x1}, {{&(0x7f00000009c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/132, 0x84}], 0x1, &(0x7f0000000b40)=""/31, 0x1f}, 0x377}, {{&(0x7f0000000b80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/221, 0xdd}, {&(0x7f0000000d00)=""/163, 0xa3}, {&(0x7f0000000dc0)=""/157, 0x9d}], 0x3, &(0x7f0000000ec0)=""/182, 0xb6}, 0xffff}, {{&(0x7f0000000f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001000)=""/95, 0x5f}, {&(0x7f0000001080)=""/62, 0x3e}, {&(0x7f00000010c0)=""/174, 0xae}, {&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000011c0)=""/44, 0x2c}, {&(0x7f0000001200)=""/74, 0x4a}, {&(0x7f0000001280)=""/112, 0x70}, {&(0x7f0000001300)}], 0x8}, 0xb56b000}], 0x4, 0x2, &(0x7f00000014c0)) r5 = socket(0x11, 0x1, 0xffffffe1) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x1, 0x6, 0x20, @private1, @private0, 0x7800, 0x1, 0x7ff, 0x4}}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{r3, r4+10000000}, {0x77359400}}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x1, &(0x7f0000001580)=ANY=[@ANYBLOB="f36a04002414337e863d5166331020a45a9421b6fcefe1b3862da592eb23c9f845669f264bf0ecb6e9d018044489f34259e6a475e67804db51981b35894970312e65d9cddbf3e3010ee914ae52283a5e6566bf73998d6fa3ce3c3aa3d168e2b5d79fdca450b6c6372e1039a36a9a30079bb3b6579a924841567c07e3459fd08c45efde5edcabfc459d15ea4de1657fc2789c40794b95b3470cfe0dcfd41e839928e7914654ce4e0a3463c910e5aa2d857e6be916a2fb7507cc71cb4a2fdac4f72307ccd3ca8c25bb7ce96c"], &(0x7f0000000440)='syzkaller\x00', 0x5e9, 0xf3, &(0x7f0000000480)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x8, 0x6, 0x8001}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='siox_set_data\x00', r2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@gettaction={0x90, 0x32, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff7}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x8010) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) dup2(r1, r0) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) recvmmsg(r2, &(0x7f00000013c0)=[{{&(0x7f0000000680)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000940)=""/50, 0x32}], 0x4}, 0x1}, {{&(0x7f00000009c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/132, 0x84}], 0x1, &(0x7f0000000b40)=""/31, 0x1f}, 0x377}, {{&(0x7f0000000b80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/221, 0xdd}, {&(0x7f0000000d00)=""/163, 0xa3}, {&(0x7f0000000dc0)=""/157, 0x9d}], 0x3, &(0x7f0000000ec0)=""/182, 0xb6}, 0xffff}, {{&(0x7f0000000f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001000)=""/95, 0x5f}, {&(0x7f0000001080)=""/62, 0x3e}, {&(0x7f00000010c0)=""/174, 0xae}, {&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000011c0)=""/44, 0x2c}, {&(0x7f0000001200)=""/74, 0x4a}, {&(0x7f0000001280)=""/112, 0x70}, {&(0x7f0000001300)}], 0x8}, 0xb56b000}], 0x4, 0x2, &(0x7f00000014c0)) (async) socket(0x11, 0x1, 0xffffffe1) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001500)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x1, 0x6, 0x20, @private1, @private0, 0x7800, 0x1, 0x7ff, 0x4}}) (async) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{r3, r4+10000000}, {0x77359400}}, &(0x7f0000000140)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x1, &(0x7f0000001580)=ANY=[@ANYBLOB="f36a04002414337e863d5166331020a45a9421b6fcefe1b3862da592eb23c9f845669f264bf0ecb6e9d018044489f34259e6a475e67804db51981b35894970312e65d9cddbf3e3010ee914ae52283a5e6566bf73998d6fa3ce3c3aa3d168e2b5d79fdca450b6c6372e1039a36a9a30079bb3b6579a924841567c07e3459fd08c45efde5edcabfc459d15ea4de1657fc2789c40794b95b3470cfe0dcfd41e839928e7914654ce4e0a3463c910e5aa2d857e6be916a2fb7507cc71cb4a2fdac4f72307ccd3ca8c25bb7ce96c"], &(0x7f0000000440)='syzkaller\x00', 0x5e9, 0xf3, &(0x7f0000000480)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x8, 0x6, 0x8001}, 0x10, 0xffffffffffffffff, r1}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='siox_set_data\x00', r2}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@gettaction={0x90, 0x32, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff7}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x8010) (async) 22:17:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="edc3ec6f132b1918000000000000040000000000000000850000000e00000085009f233e5b96a06fd7107cbc41ad6674cdc08f0df21bf1740e4240ce4df4f32db002201e9a3b9639bea95e47e41ddde6df8aebe09a1b3f4ec7ad31fa4cd63ad1f2abedfbcbc5556f48"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010000000000000000000c009ecc", @ANYRES32=r2, @ANYBLOB="0000000008000100ac1414aa0a000200bbbbbbbbbbbb0000"], 0x30}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000341104aa105a4fd265d7a89acb19", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r6}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x230, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) 22:17:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000100000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000110000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 64) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000200000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e00000010000e000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000180)={0x18}, 0xfffffe0c) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0xfffffe0c) r2 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000180)={0x18}, 0xfffffe0c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000300000000000000708700089d090600010000004d21fffff0ffdcff95000000000000001821000022d9d6db146d852fcfe2d691c32bcd20d1f1cb7c8d09f7a9cb599f48a5eabc073ee1166ba0557fbb14d96a1e7abae6c7c57195cbcc5852dd70a7c9648aba6771b539cbbd4518ac558df3f2ddd5586e152a92a831e83b2702142add82cbbe75437c18b185cae723ad53bbf50122afe900d67d40d96f344566006f2d5b6a876f3bec53ceefff472de89fe137c63f790fe2118fab05d31e7dddf23a3388ad51998597eeb5d607311101e4f10df1ce29ff44646ff208eab016376b7003b4466a2f02dc358d892e68a512a9334279c6df9c8db34dfd1d65ec3beb4e6d6e9bd4581dca5272fbde4ae5e94b316c9d1c5a18a6a9413527bea83bdc8bcd5014d536a5dda271242ecbc9b91ede2cb8623e9e644f3b202a6513ebee117173637dffdabe75df8365467539828c01d83296cb4ca38f506f799a30b1540eac2a8362c7d9aa07d822fce6d397daed4605413f048b8b09edfa46fd08e760cdc54c3a643add1a2bc84a73746354d151976c0094160a0517ef61607cc275", @ANYRES32=0x1, @ANYBLOB="00000000050000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x7, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0xffffffffffffffff, r2]}, 0x80) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000100040000000000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000100fa0000002000040000040000"], 0x54, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) mknodat$loop(r4, &(0x7f0000000080)='./file0/file0\x00', 0x8, 0x1) r5 = getpid() syz_clone3(&(0x7f0000000440)={0x18000, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/80, 0x50, &(0x7f00000003c0)=""/43, &(0x7f0000000400)=[r5], 0x1, {r4}}, 0x58) 22:17:44 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000180)={0x18}, 0xfffffe0c) r3 = dup2(r1, r0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000040)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/ppp', 0x105d00, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000000)=@raw=[@generic={0x3, 0x9, 0x5, 0x5, 0x868}, @ldst={0x2, 0x1, 0x2, 0x9, 0x0, 0x6, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @ldst={0x0, 0x3, 0x6, 0xb, 0x4, 0x20, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000240)=""/202, 0x41100, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xe, 0x6, 0x4a6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 22:17:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async, rerun: 32) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00'}, 0x10) write$binfmt_elf32(r3, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x9, 0x8, 0x9, 0xff, 0x3, 0x3e, 0x68, 0x304, 0x38, 0x2f0, 0x8e9, 0x400, 0x20, 0x1, 0x3f, 0x40, 0x6}, [{0x6474e551, 0x4, 0x2a9f, 0x4, 0xffff, 0x1, 0x1ff, 0xffff}], "ca3ca97c4faf0cd1f4321c59ae57783f9ed0a08600babd87b3a6f49bb3853ddd1c6b26b51f3b330436a731ab3cb8fee569c20643b99db0c9a5dc16babf24905a875eebfd25386c2033d15114708c8cf1d920234b2cd5bec1b4ac504453950755af8098e216944e6a50afb86d11267d0ea2546ac2ec720389adfc498137941966d028531e2d1cef491647b8ba869fd0cce19a197bd4bb3c4e8b0cb0439fab07c3b6a7c956ac0a63869c21e8738903a444752f6494dceca5b853a0a721233f4ea4c789b6733405ace821dcda23b92e3739673f71968326c20c5b180ec301de47b0", ['\x00']}, 0x238) (async) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000000000210000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000473f1c9469d810000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x400, &(0x7f00000003c0)={[{@xino_auto}, {@xino_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_off}, {@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '!/%+^'}}, {@measure}, {@uid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@uid_eq={'uid', 0x3d, r2}}]}) r3 = dup2(r0, r1) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='memory.numa_stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 22:17:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000000000000002f0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000000000000003a0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1184.693269][ T2373] overlayfs: unrecognized mount option "smackfsfloor=!/%+^" or missing value [ 1184.779970][ T2380] FAULT_INJECTION: forcing a failure. [ 1184.779970][ T2380] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.792731][ T2380] CPU: 0 PID: 2380 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1184.804352][ T2380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1184.814386][ T2380] Call Trace: [ 1184.817676][ T2380] dump_stack_lvl+0x1e2/0x24b [ 1184.822330][ T2380] ? panic+0x7d7/0x7d7 [ 1184.826376][ T2380] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1184.831813][ T2380] ? preempt_schedule_irq+0xef/0x140 [ 1184.837080][ T2380] ? preempt_schedule_notrace+0x140/0x140 [ 1184.842777][ T2380] ? lookup_one_len+0x6a0/0x6a0 [ 1184.847601][ T2380] dump_stack+0x15/0x17 [ 1184.851735][ T2380] should_fail+0x3c0/0x510 [ 1184.856153][ T2380] __should_failslab+0x9f/0xe0 [ 1184.860907][ T2380] should_failslab+0x9/0x20 [ 1184.865384][ T2380] kmem_cache_alloc+0x3f/0x300 [ 1184.870130][ T2380] ? new_inode_pseudo+0x7c/0x220 [ 1184.875041][ T2380] new_inode_pseudo+0x7c/0x220 [ 1184.879780][ T2380] new_inode+0x28/0x1c0 [ 1184.883907][ T2380] ? start_creating+0x206/0x320 [ 1184.888733][ T2380] debugfs_create_dir+0xf3/0x450 [ 1184.893644][ T2380] bdi_register_va+0x260/0x600 [ 1184.898414][ T2380] bdi_register+0xd1/0x120 [ 1184.902855][ T2380] ? irqentry_exit+0x50/0x60 [ 1184.907438][ T2380] ? sysvec_reschedule_ipi+0x84/0x160 [ 1184.912783][ T2380] ? __device_add_disk+0x536/0x11d0 [ 1184.917957][ T2380] ? bdi_register_va+0x600/0x600 [ 1184.922872][ T2380] ? __kasan_check_read+0x11/0x20 [ 1184.927868][ T2380] ? blk_alloc_devt+0xd4/0x320 [ 1184.932608][ T2380] __device_add_disk+0x5cb/0x11d0 [ 1184.937605][ T2380] ? device_add_disk+0x40/0x40 [ 1184.942342][ T2380] ? loop_add+0x440/0x760 [ 1184.946666][ T2380] ? vsprintf+0x40/0x40 [ 1184.950792][ T2380] ? device_initialize+0x2c5/0x3a0 [ 1184.955874][ T2380] device_add_disk+0x2a/0x40 [ 1184.960553][ T2380] loop_add+0x58f/0x760 [ 1184.964689][ T2380] loop_control_ioctl+0x564/0x740 [ 1184.969689][ T2380] ? __kasan_check_read+0x11/0x20 [ 1184.974690][ T2380] ? loop_remove+0xb0/0xb0 [ 1184.979090][ T2380] ? __fget_files+0x310/0x370 [ 1184.983750][ T2380] ? security_file_ioctl+0xb1/0xd0 [ 1184.988841][ T2380] ? loop_remove+0xb0/0xb0 [ 1184.993249][ T2380] __se_sys_ioctl+0x115/0x190 [ 1184.997909][ T2380] __x64_sys_ioctl+0x7b/0x90 [ 1185.002476][ T2380] do_syscall_64+0x34/0x70 [ 1185.006867][ T2380] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1185.012735][ T2380] RIP: 0033:0x7f7994738279 [ 1185.017127][ T2380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1185.036727][ T2380] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1185.045115][ T2380] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1185.053062][ T2380] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1185.061011][ T2380] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1185.068958][ T2380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1185.076902][ T2380] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1185.085119][ T2380] debugfs: out of free dentries, can not create directory '7:0' [ 1185.162230][ T2380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2380 comm=syz-executor.4 22:17:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="edc3ec6f132b1918000000000000040000000000000000850000000e00000085009f233e5b96a06fd7107cbc41ad6674cdc08f0df21bf1740e4240ce4df4f32db002201e9a3b9639bea95e47e41ddde6df8aebe09a1b3f4ec7ad31fa4cd63ad1f2abedfbcbc5556f48"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010000000000000000000c009ecc", @ANYRES32=r2, @ANYBLOB="0000000008000100ac1414aa0a000200bbbbbbbbbbbb0000"], 0x30}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x2, 0x0) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000341104aa105a4fd265d7a89acb19", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r6}, [@NDA_DST_IPV4={0x8, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x230, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) 22:17:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000000007b55546c0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000ffffff840000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 65) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000ffffff880000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:44 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000180)={0x18}, 0xfffffe0c) r3 = dup2(r1, r0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000040)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/ppp', 0x105d00, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000000)=@raw=[@generic={0x3, 0x9, 0x5, 0x5, 0x868}, @ldst={0x2, 0x1, 0x2, 0x9, 0x0, 0x6, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @ldst={0x0, 0x3, 0x6, 0xb, 0x4, 0x20, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000240)=""/202, 0x41100, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xe, 0x6, 0x4a6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) (async) write$P9_RLOPEN(r2, &(0x7f0000000180)={0x18}, 0xfffffe0c) (async) dup2(r1, r0) (async) open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000040)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/ppp', 0x105d00, 0x120) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000000)=@raw=[@generic={0x3, 0x9, 0x5, 0x5, 0x868}, @ldst={0x2, 0x1, 0x2, 0x9, 0x0, 0x6, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @ldst={0x0, 0x3, 0x6, 0xb, 0x4, 0x20, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000240)=""/202, 0x41100, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xe, 0x6, 0x4a6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r6, r7, 0x0, 0x20000023896) (async) 22:17:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e00000010000e000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000180)={0x18}, 0xfffffe0c) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0xfffffe0c) r2 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000180)={0x18}, 0xfffffe0c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000300000000000000708700089d090600010000004d21fffff0ffdcff95000000000000001821000022d9d6db146d852fcfe2d691c32bcd20d1f1cb7c8d09f7a9cb599f48a5eabc073ee1166ba0557fbb14d96a1e7abae6c7c57195cbcc5852dd70a7c9648aba6771b539cbbd4518ac558df3f2ddd5586e152a92a831e83b2702142add82cbbe75437c18b185cae723ad53bbf50122afe900d67d40d96f344566006f2d5b6a876f3bec53ceefff472de89fe137c63f790fe2118fab05d31e7dddf23a3388ad51998597eeb5d607311101e4f10df1ce29ff44646ff208eab016376b7003b4466a2f02dc358d892e68a512a9334279c6df9c8db34dfd1d65ec3beb4e6d6e9bd4581dca5272fbde4ae5e94b316c9d1c5a18a6a9413527bea83bdc8bcd5014d536a5dda271242ecbc9b91ede2cb8623e9e644f3b202a6513ebee117173637dffdabe75df8365467539828c01d83296cb4ca38f506f799a30b1540eac2a8362c7d9aa07d822fce6d397daed4605413f048b8b09edfa46fd08e760cdc54c3a643add1a2bc84a73746354d151976c0094160a0517ef61607cc275", @ANYRES32=0x1, @ANYBLOB="00000000050000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x7, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0xffffffffffffffff, r2]}, 0x80) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000100040000000000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000100fa0000002000040000040000"], 0x54, 0x2) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) (async) mknodat$loop(r4, &(0x7f0000000080)='./file0/file0\x00', 0x8, 0x1) (async) r5 = getpid() syz_clone3(&(0x7f0000000440)={0x18000, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/80, 0x50, &(0x7f00000003c0)=""/43, &(0x7f0000000400)=[r5], 0x1, {r4}}, 0x58) 22:17:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000473f1c9469d810000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x400, &(0x7f00000003c0)={[{@xino_auto}, {@xino_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_off}, {@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '!/%+^'}}, {@measure}, {@uid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@uid_eq={'uid', 0x3d, r2}}]}) r3 = dup2(r0, r1) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='memory.numa_stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000473f1c9469d810000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, &(0x7f0000000680)) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x400, &(0x7f00000003c0)={[{@xino_auto}, {@xino_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_off}, {@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '!/%+^'}}, {@measure}, {@uid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@uid_eq={'uid', 0x3d, r2}}]}) (async) dup2(r0, r1) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000280)='memory.numa_stat\x00', 0x0, 0x0) (async) sendfile(r4, r5, 0x0, 0x20000023896) (async) 22:17:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff010000000000000c940000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000ffffff9e0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1185.547050][ T2401] overlayfs: unrecognized mount option "smackfsfloor=!/%+^" or missing value [ 1185.638936][ T2425] FAULT_INJECTION: forcing a failure. [ 1185.638936][ T2425] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.651539][ T2425] CPU: 1 PID: 2425 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1185.663143][ T2425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1185.673211][ T2425] Call Trace: [ 1185.676482][ T2425] dump_stack_lvl+0x1e2/0x24b [ 1185.681136][ T2425] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1185.686575][ T2425] dump_stack+0x15/0x17 [ 1185.690711][ T2425] should_fail+0x3c0/0x510 [ 1185.695107][ T2425] __should_failslab+0x9f/0xe0 [ 1185.699858][ T2425] should_failslab+0x9/0x20 [ 1185.704339][ T2425] kmem_cache_alloc+0x3f/0x300 [ 1185.709080][ T2425] ? security_inode_alloc+0x29/0x140 [ 1185.714337][ T2425] security_inode_alloc+0x29/0x140 [ 1185.719420][ T2425] inode_init_always+0x3c5/0x950 [ 1185.724330][ T2425] new_inode_pseudo+0x93/0x220 [ 1185.729075][ T2425] new_inode+0x28/0x1c0 [ 1185.733211][ T2425] ? start_creating+0x206/0x320 [ 1185.738043][ T2425] debugfs_create_dir+0xf3/0x450 [ 1185.742965][ T2425] bdi_register_va+0x260/0x600 [ 1185.747712][ T2425] bdi_register+0xd1/0x120 [ 1185.752106][ T2425] ? __device_add_disk+0x536/0x11d0 [ 1185.757295][ T2425] ? bdi_register_va+0x600/0x600 [ 1185.762210][ T2425] ? vsnprintf+0x1bfd/0x1cd0 [ 1185.766802][ T2425] ? __kasan_check_read+0x11/0x20 [ 1185.771810][ T2425] ? blk_alloc_devt+0xd4/0x320 [ 1185.776551][ T2425] __device_add_disk+0x5cb/0x11d0 [ 1185.781549][ T2425] ? device_add_disk+0x40/0x40 [ 1185.786286][ T2425] ? loop_add+0x440/0x760 [ 1185.790589][ T2425] ? vsprintf+0x40/0x40 [ 1185.794719][ T2425] device_add_disk+0x2a/0x40 [ 1185.799283][ T2425] loop_add+0x58f/0x760 [ 1185.803421][ T2425] loop_control_ioctl+0x564/0x740 [ 1185.808419][ T2425] ? loop_remove+0xb0/0xb0 [ 1185.812809][ T2425] ? __fget_files+0x310/0x370 [ 1185.817461][ T2425] ? security_file_ioctl+0xb1/0xd0 [ 1185.822555][ T2425] ? loop_remove+0xb0/0xb0 [ 1185.826945][ T2425] __se_sys_ioctl+0x115/0x190 [ 1185.831595][ T2425] __x64_sys_ioctl+0x7b/0x90 [ 1185.836176][ T2425] do_syscall_64+0x34/0x70 [ 1185.840566][ T2425] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1185.846433][ T2425] RIP: 0033:0x7f7994738279 [ 1185.850827][ T2425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1185.870403][ T2425] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1185.878791][ T2425] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1185.886739][ T2425] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1185.894688][ T2425] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1185.902636][ T2425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1185.910583][ T2425] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1185.918663][ T2425] debugfs: out of free dentries, can not create directory '7:0' [ 1185.992132][ T2425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2425 comm=syz-executor.4 22:17:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000473f1c9469d810000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x400, &(0x7f00000003c0)={[{@xino_auto}, {@xino_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_off}, {@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '!/%+^'}}, {@measure}, {@uid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@uid_eq={'uid', 0x3d, r2}}]}) r3 = dup2(r0, r1) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='memory.numa_stat\x00', 0x0, 0x0) (async) sendfile(r4, r5, 0x0, 0x20000023896) 22:17:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000ffffffef0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1186.060967][ T2431] overlayfs: unrecognized mount option "smackfsfloor=!/%+^" or missing value 22:17:45 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000180)={0x18}, 0xfffffe0c) r3 = dup2(r1, r0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000040)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/ppp', 0x105d00, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000000)=@raw=[@generic={0x3, 0x9, 0x5, 0x5, 0x868}, @ldst={0x2, 0x1, 0x2, 0x9, 0x0, 0x6, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @ldst={0x0, 0x3, 0x6, 0xb, 0x4, 0x20, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000240)=""/202, 0x41100, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xe, 0x6, 0x4a6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) (async) write$P9_RLOPEN(r2, &(0x7f0000000180)={0x18}, 0xfffffe0c) (async) dup2(r1, r0) (async) open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000040)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/ppp', 0x105d00, 0x120) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000000)=@raw=[@generic={0x3, 0x9, 0x5, 0x5, 0x868}, @ldst={0x2, 0x1, 0x2, 0x9, 0x0, 0x6, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @ldst={0x0, 0x3, 0x6, 0xb, 0x4, 0x20, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000240)=""/202, 0x41100, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xe, 0x6, 0x4a6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r6, r7, 0x0, 0x20000023896) (async) 22:17:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) statx(r2, 0x0, 0x1000, 0x20, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 22:17:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000fffffff00000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1186.109091][ T2437] overlayfs: unrecognized mount option "smackfsfloor=!/%+^" or missing value 22:17:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 66) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000fffffff50000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:45 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e00000010000e000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000180)={0x18}, 0xfffffe0c) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0xfffffe0c) r2 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000180)={0x18}, 0xfffffe0c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="00000000050000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x7, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0xffffffffffffffff, r2]}, 0x80) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000100040000000000040000000000000008000000", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000100fa0000002000040000040000"], 0x54, 0x2) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) (async) mknodat$loop(r4, &(0x7f0000000080)='./file0/file0\x00', 0x8, 0x1) (async) r5 = getpid() syz_clone3(&(0x7f0000000440)={0x18000, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/80, 0x50, &(0x7f00000003c0)=""/43, &(0x7f0000000400)=[r5], 0x1, {r4}}, 0x58) 22:17:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000fffffffc0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000000007fffffff0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000000ffffffff0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100a002a0ffffffff0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1186.500031][ T2472] FAULT_INJECTION: forcing a failure. [ 1186.500031][ T2472] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.512667][ T2472] CPU: 0 PID: 2472 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1186.524269][ T2472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1186.534295][ T2472] Call Trace: [ 1186.537569][ T2472] dump_stack_lvl+0x1e2/0x24b [ 1186.542222][ T2472] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1186.547654][ T2472] dump_stack+0x15/0x17 [ 1186.551786][ T2472] should_fail+0x3c0/0x510 [ 1186.556192][ T2472] __should_failslab+0x9f/0xe0 [ 1186.560928][ T2472] should_failslab+0x9/0x20 [ 1186.565403][ T2472] kmem_cache_alloc+0x3f/0x300 [ 1186.570140][ T2472] ? sysvec_reschedule_ipi+0x84/0x160 [ 1186.575743][ T2472] ? __d_alloc+0x2d/0x6b0 [ 1186.580053][ T2472] __d_alloc+0x2d/0x6b0 [ 1186.584193][ T2472] ? avc_has_perm_noaudit+0x358/0x4c0 [ 1186.589544][ T2472] d_alloc_parallel+0xe6/0x1330 [ 1186.594370][ T2472] ? avc_has_perm_noaudit+0x2ed/0x4c0 [ 1186.599714][ T2472] ? avc_denied+0x1b0/0x1b0 [ 1186.604195][ T2472] ? preempt_schedule_irq+0xef/0x140 [ 1186.609461][ T2472] ? preempt_schedule_notrace+0x140/0x140 [ 1186.615163][ T2472] ? d_hash_and_lookup+0x200/0x200 [ 1186.620248][ T2472] ? selinux_inode_permission+0x439/0x670 [ 1186.625950][ T2472] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 1186.631729][ T2472] __lookup_slow+0x14e/0x400 [ 1186.636293][ T2472] ? __d_lookup+0x4da/0x530 [ 1186.640776][ T2472] ? lookup_one_len+0x6a0/0x6a0 [ 1186.645630][ T2472] lookup_one_len+0x43d/0x6a0 [ 1186.650367][ T2472] ? try_lookup_one_len+0x660/0x660 [ 1186.655547][ T2472] start_creating+0x166/0x320 [ 1186.660198][ T2472] __debugfs_create_file+0x75/0x4a0 [ 1186.665371][ T2472] ? up_write+0x19/0xd0 [ 1186.669500][ T2472] debugfs_create_file+0x4a/0x60 [ 1186.674411][ T2472] bdi_register_va+0x2ab/0x600 [ 1186.679154][ T2472] bdi_register+0xd1/0x120 [ 1186.683563][ T2472] ? sysvec_reschedule_ipi+0x84/0x160 [ 1186.688908][ T2472] ? __device_add_disk+0x536/0x11d0 [ 1186.694079][ T2472] ? bdi_register_va+0x600/0x600 [ 1186.698988][ T2472] ? __device_add_disk+0x1a9/0x11d0 [ 1186.704161][ T2472] ? blk_alloc_devt+0xd4/0x320 [ 1186.708916][ T2472] __device_add_disk+0x5cb/0x11d0 [ 1186.713913][ T2472] ? device_add_disk+0x40/0x40 [ 1186.718665][ T2472] ? irqentry_exit+0x50/0x60 [ 1186.723256][ T2472] ? loop_add+0x440/0x760 [ 1186.727562][ T2472] ? vsprintf+0x40/0x40 [ 1186.731700][ T2472] device_add_disk+0x2a/0x40 [ 1186.736263][ T2472] loop_add+0x58f/0x760 [ 1186.740394][ T2472] loop_control_ioctl+0x564/0x740 [ 1186.745390][ T2472] ? loop_remove+0xb0/0xb0 [ 1186.749779][ T2472] ? sysvec_reschedule_ipi+0x84/0x160 [ 1186.755151][ T2472] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1186.760756][ T2472] ? loop_remove+0xb0/0xb0 [ 1186.765153][ T2472] ? do_vfs_ioctl+0xf6/0x1a90 [ 1186.769803][ T2472] ? __se_sys_ioctl+0xa6/0x190 [ 1186.774544][ T2472] ? __se_sys_ioctl+0x109/0x190 [ 1186.779379][ T2472] ? loop_control_ioctl+0x1/0x740 [ 1186.784399][ T2472] ? loop_remove+0xb0/0xb0 [ 1186.788787][ T2472] __se_sys_ioctl+0x115/0x190 [ 1186.793439][ T2472] __x64_sys_ioctl+0x7b/0x90 [ 1186.798007][ T2472] do_syscall_64+0x34/0x70 [ 1186.802421][ T2472] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1186.808320][ T2472] RIP: 0033:0x7f7994738279 [ 1186.812713][ T2472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1186.832292][ T2472] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.840705][ T2472] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1186.848650][ T2472] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1186.856597][ T2472] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1186.864543][ T2472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1186.872493][ T2472] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1186.937008][ T2474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2474 comm=syz-executor.4 22:17:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x80, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000000f4ffffffff0000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) statx(r2, 0x0, 0x1000, 0x20, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 22:17:46 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000fbff850008000e0000009500001100220000094f0000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmmsg$unix(r1, 0x0, 0x0, 0x20000890) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100020000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000040000000000000000f88d20d2d02bbf850000000e00000e000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 67) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100030000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100040000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100050000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100060000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1187.371608][ T2500] FAULT_INJECTION: forcing a failure. [ 1187.371608][ T2500] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.384218][ T2500] CPU: 1 PID: 2500 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1187.395821][ T2500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1187.405854][ T2500] Call Trace: [ 1187.409129][ T2500] dump_stack_lvl+0x1e2/0x24b [ 1187.413784][ T2500] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1187.419219][ T2500] ? __lookup_slow+0x2f7/0x400 [ 1187.423963][ T2500] ? lookup_one_len+0x6a0/0x6a0 [ 1187.428792][ T2500] dump_stack+0x15/0x17 [ 1187.432923][ T2500] should_fail+0x3c0/0x510 [ 1187.437319][ T2500] __should_failslab+0x9f/0xe0 [ 1187.442066][ T2500] should_failslab+0x9/0x20 [ 1187.446550][ T2500] kmem_cache_alloc+0x3f/0x300 [ 1187.451303][ T2500] ? new_inode_pseudo+0x7c/0x220 [ 1187.456216][ T2500] new_inode_pseudo+0x7c/0x220 [ 1187.460958][ T2500] new_inode+0x28/0x1c0 [ 1187.465091][ T2500] ? start_creating+0x206/0x320 [ 1187.469917][ T2500] __debugfs_create_file+0x143/0x4a0 [ 1187.475180][ T2500] ? up_write+0x19/0xd0 [ 1187.479317][ T2500] debugfs_create_file+0x4a/0x60 [ 1187.484232][ T2500] bdi_register_va+0x2ab/0x600 [ 1187.488974][ T2500] bdi_register+0xd1/0x120 [ 1187.493365][ T2500] ? __device_add_disk+0x536/0x11d0 [ 1187.498570][ T2500] ? bdi_register_va+0x600/0x600 [ 1187.503483][ T2500] ? vsnprintf+0x1bfd/0x1cd0 [ 1187.508052][ T2500] ? __kasan_check_read+0x11/0x20 [ 1187.513061][ T2500] ? blk_alloc_devt+0xd4/0x320 [ 1187.517800][ T2500] __device_add_disk+0x5cb/0x11d0 [ 1187.522825][ T2500] ? device_add_disk+0x40/0x40 [ 1187.527564][ T2500] ? loop_add+0x440/0x760 [ 1187.531869][ T2500] ? vsprintf+0x40/0x40 [ 1187.536000][ T2500] device_add_disk+0x2a/0x40 [ 1187.540563][ T2500] loop_add+0x58f/0x760 [ 1187.544731][ T2500] loop_control_ioctl+0x564/0x740 [ 1187.549732][ T2500] ? loop_remove+0xb0/0xb0 [ 1187.554125][ T2500] ? __fget_files+0x310/0x370 [ 1187.558780][ T2500] ? security_file_ioctl+0xb1/0xd0 [ 1187.563866][ T2500] ? loop_remove+0xb0/0xb0 [ 1187.568256][ T2500] __se_sys_ioctl+0x115/0x190 [ 1187.572910][ T2500] __x64_sys_ioctl+0x7b/0x90 [ 1187.577483][ T2500] do_syscall_64+0x34/0x70 [ 1187.581875][ T2500] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1187.587740][ T2500] RIP: 0033:0x7f7994738279 [ 1187.592136][ T2500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1187.611734][ T2500] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.620124][ T2500] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1187.628069][ T2500] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1187.636012][ T2500] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.643957][ T2500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1187.651902][ T2500] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1187.659988][ T2500] debugfs: out of free dentries, can not create file 'stats' [ 1187.734746][ T2500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2500 comm=syz-executor.4 22:17:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100070000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x80, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x80, &(0x7f0000000580)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100080000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) statx(r2, 0x0, 0x1000, 0x20, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) openat$cgroup_ro(r1, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) (async) statx(r2, 0x0, 0x1000, 0x20, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r3, r4, 0x0, 0x20000023896) (async) 22:17:47 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000fbff850008000e0000009500001100220000094f0000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmmsg$unix(r1, 0x0, 0x0, 0x20000890) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100090000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 68) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x80, &(0x7f0000000580)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x80, &(0x7f0000000580)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) 22:17:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000a0000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:47 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000fbff850008000e0000009500001100220000094f0000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmmsg$unix(r1, 0x0, 0x0, 0x20000890) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 22:17:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000040000000000000000f88d20d2d02bbf850000000e00000e000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000040000000000000000f88d20d2d02bbf850000000e00000e000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:17:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000b0000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000d0000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1188.228236][ T2560] FAULT_INJECTION: forcing a failure. [ 1188.228236][ T2560] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.240996][ T2560] CPU: 0 PID: 2560 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1188.252603][ T2560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1188.262630][ T2560] Call Trace: [ 1188.265899][ T2560] dump_stack_lvl+0x1e2/0x24b [ 1188.270552][ T2560] ? panic+0x7d7/0x7d7 [ 1188.274595][ T2560] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1188.280643][ T2560] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1188.286074][ T2560] dump_stack+0x15/0x17 [ 1188.290203][ T2560] should_fail+0x3c0/0x510 [ 1188.294595][ T2560] __should_failslab+0x9f/0xe0 [ 1188.299340][ T2560] should_failslab+0x9/0x20 [ 1188.303827][ T2560] kmem_cache_alloc+0x3f/0x300 [ 1188.308564][ T2560] ? security_inode_alloc+0x29/0x140 [ 1188.313826][ T2560] security_inode_alloc+0x29/0x140 [ 1188.318921][ T2560] inode_init_always+0x3c5/0x950 [ 1188.323840][ T2560] new_inode_pseudo+0x93/0x220 [ 1188.328575][ T2560] new_inode+0x28/0x1c0 [ 1188.332713][ T2560] ? start_creating+0x206/0x320 [ 1188.337536][ T2560] __debugfs_create_file+0x143/0x4a0 [ 1188.342794][ T2560] ? up_write+0x19/0xd0 [ 1188.346925][ T2560] debugfs_create_file+0x4a/0x60 [ 1188.351838][ T2560] bdi_register_va+0x2ab/0x600 [ 1188.356575][ T2560] bdi_register+0xd1/0x120 [ 1188.360968][ T2560] ? irq_exit_rcu+0x9/0x10 [ 1188.365360][ T2560] ? __device_add_disk+0x536/0x11d0 [ 1188.370534][ T2560] ? bdi_register_va+0x600/0x600 [ 1188.375449][ T2560] __device_add_disk+0x5cb/0x11d0 [ 1188.380447][ T2560] ? device_add_disk+0x40/0x40 [ 1188.385183][ T2560] ? loop_add+0x440/0x760 [ 1188.389486][ T2560] ? vsprintf+0x40/0x40 [ 1188.393616][ T2560] device_add_disk+0x2a/0x40 [ 1188.398180][ T2560] loop_add+0x58f/0x760 [ 1188.402328][ T2560] loop_control_ioctl+0x564/0x740 [ 1188.407329][ T2560] ? loop_remove+0xb0/0xb0 [ 1188.411728][ T2560] ? __fget_files+0x310/0x370 [ 1188.416380][ T2560] ? security_file_ioctl+0xb1/0xd0 [ 1188.421462][ T2560] ? loop_remove+0xb0/0xb0 [ 1188.425855][ T2560] __se_sys_ioctl+0x115/0x190 [ 1188.430505][ T2560] __x64_sys_ioctl+0x7b/0x90 [ 1188.435073][ T2560] do_syscall_64+0x34/0x70 [ 1188.439464][ T2560] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1188.445329][ T2560] RIP: 0033:0x7f7994738279 [ 1188.449720][ T2560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1188.469298][ T2560] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1188.477685][ T2560] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1188.485631][ T2560] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1188.493577][ T2560] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.501523][ T2560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.509466][ T2560] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1188.517726][ T2560] debugfs: out of free dentries, can not create file 'stats' [ 1188.602059][ T2560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2560 comm=syz-executor.4 22:17:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100100000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0xfffffe0c) statx(r1, 0x0, 0x2000, 0x20, &(0x7f0000000240)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) 22:17:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100110000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000040000000000000000f88d20d2d02bbf850000000e00000e000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100210000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 69) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6b05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd113825e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f29083e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d7b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13603b73157602100fb20b99306a7927d0c710d6ce4c8", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01002f0000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0x1, &(0x7f0000000240)="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", &(0x7f0000001240)=""/98}, 0x20) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002c00)={0x0, 0x0}, &(0x7f0000002c40)=0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000001300)={0x24, 0x16, 0x8, 0x70bd27, 0x25dfdbfd, "", [@typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@remote}]}, 0x24}, {&(0x7f0000004300)={0x18b8, 0x3e, 0x20, 0x70bd28, 0x25dfdbff, "", [@generic="7935bb0e3e63f63a3ad525faac95d1042228e8b08fa5f390a17dc07d0a68cea73fee084aafd25896fe2ffa0ec184efd16cee29c21dbb94aaf6a3ea181066d2584f05f01c120b414fa1a9ca545e02e55903e8b84a6d7bbd249270ca6d1892c8f8bcb66eb31e59a163a9e36a2dd139a77ea70011a8dbbff160dc3051e3c2ff59c8c9cd851487ca658618535006080c44cf9da523481aff8238397da59dc272f07f", @nested={0x118b, 0x72, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @pid}, @typed={0x14, 0x76, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="dea407f54c524bffb0dbb6271b0a8532410f26aaf1d076cae2b4eb2f6d9591e605c4a28f8f4cc862054f09f5fff7f23c98a016740291de7acdfb073d43900478c250d8f90831bc4bcc191226530df190a6b69047ba1f22415d667bddbdc09968b2837a5bb5e9906c53242bb93f7b6264c0ca12a5acda66ea0f7c41ae902b8304ba2945ee5eba01a1ce536a0721d86d3fc209e1135e789a51d1cfdb4ba4a0860ec76d5aab0e997904a26435", @generic="5ba4750a0597190e79c820a1df01f561f6b67a16f01c62b88756fbcfe125c2e9fb0578bd5d3ffb0b08648fa60d228d09045f22983d35e3a92d2292726dbebc9a17de43e18f0a9549e7fcf24314e5517cf8323ef54fe6e584b1596b", @typed={0x8, 0x20, 0x0, 0x0, @uid=0xee01}, @typed={0x1004, 0x4c, 0x0, 0x0, @binary="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"}, @generic, @generic="b9f359ea6129d8b2e4370981dae4b968d4006faa87f73bfd4dc70064e9d53f04f30589c32580395b8c31b2efccd942a31803c4a75f3a7969485ab98e81126f59764ee4237f08e91073b741319ececfee99bb9a8acc51e8041d"]}, @nested={0x1f0, 0x3, 0x0, 0x1, [@generic="d40f076be3b69098addd43cf7cf62ce15127d48d5effbc33d3db5e07f54083445934cbf6b7a7e7c60e843d34e618264c2adb2cd8e2a28eb30593d01cd668e26425be359fdcd6e2eccb534d4ef3a3c29461aea2c421692b25a2a0ecadc4c94f957839faafdae055fbcc90ef", @generic="8b351c4da663a4213925a73cf7a2058f8f21f8f77cd75c92284a2025625cec4026a22ad1eb81cd670939e42e23531a00514ea3e4f17cff0000005c12203dfd965533cb874d49c89cde51d1bdaea9ad27d36a419dc53de4e900e468e9274fb5c1f00c6b58134fdaa3a5f91ada3e719a6849c4ba404e8cbc3861b1d8f60567b9f75d49abdb08cf08586c37b91113fd21112686636e2faf1aacab92433347c8bf6cf2a39394590fc9da608a294c2ee7", @typed={0x8, 0x47, 0x0, 0x0, @u32=0x5}, @generic="071a96e987e5cb89b2be1b", @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x9b, 0x2, 0x0, 0x0, @binary="22246bfbfca520e9888fd47ba33435dfe53f0dc2af7c74dcf838560164c797058ad72d668d461135471ee299f8acb3dd2de468d6dea4d1cde7697dd36d8e9994ee5909621484025f1ad44dbc1e12c5da56f37361e8bd603a7a5e49d10fa68ecc41f7c7798441cdb6c0a4aa1fe209728c35a287f45f137a1813d6fdadd5e76130b359d96187cb690c371e23b2609f708816a73d6f7f1b43"}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x37, 0x0, 0x0, @pid}]}, @typed={0x4, 0x13}, @generic="101b72d0c074f3f6148066ff4a7399796de60628be95b209b3fbfd453c2ea01764b51d5c33a5aa4e5f9dc5150008d8c87486c350cf922ea5fa38e83c33b3f4ecb1cb41c725263c08a40fa4bc868152400d603df0ab061da0ba4cceae73d96f186a08f5593b0339909e90d8cbef62e31a4dea7cca898a6f6bd2fd647d62824b0aabd0614615fa01d2788c5e1709b427d69f21fe59b522bb83fd3c94338c69395a1c5b16", @nested={0xf8, 0x7c, 0x0, 0x1, [@generic="94069ba581543d1882e5c7056b60572cefcf7a41ac14ccf55a9f61194f4e9b9ed300ba9f9a5f45203c02b170daa8b663677d66f5d0fd9c2b08a8cdceb1d4ac13e0aa47bf3f6d99d09125b9ec61bc90948cce54d796d6d7b5eeaa1d57c90c8ecc62fba1a770a69b48c15f29cd291574408fe23eb5d4a2db23993614ba16932fc4136ba1167339b7e38ebd271744d7c006f6fc41f96adcf66a8ee1ea716232f23aac91ff28d2c26231d99496f175e04c7e13548dcd4ad23309322162023b354e27544ff7c249967ac53d561b5804aff1c80b919cf9a00b3487256ddaa4e8bdb9bfb203db197e399efa1f088d249f28271823b944a1"]}, @nested={0x2eb, 0x8d, 0x0, 0x1, [@generic="6a060a3817c112394d22130714fd8bedeab852c9f32cf45267f340181d02d803fdec7b480ea92e63ba1eee387fba960d3804d07fe6e204524bbb2116092edd34e0c9cf295ea6ef5af044d570c9d6d7a440cfa80ba18af4d4fcb794ece73da6a355c603a082b24db864f3b96e30b4a6ab9b345ca1046fbca603b536e6194d844b8d951508087dd80859948f4efa8a1729c46c8572df5bce", @typed={0xcc, 0x68, 0x0, 0x0, @binary="2c3bd8255d1c88e0a31d73b1debcad71f892375628ee14fcf0bf54e6f8813a94f50967e512e61d5f487863ef3fb804151e7c3c24139cf4e06e04b7c99180175f49709e622c20a5c2e01b71aeac63cf1de1a360db03c31831e025a97a58301a8292dd50f86cca02385506f01c8623a05f60453c5151b0c925ee036af817d9d76683db546298c650cb71a29a680c83d35e3391430f7ca7ef1936f8eca690362e375d86a2a266018edfeead7f4289f98ff6323d53db871b8d9ce09b645ddd734ac124e523236fbcda67"}, @typed={0x6, 0x94, 0x0, 0x0, @str='\\\x00'}, @typed={0xe1, 0x56, 0x0, 0x0, @binary="5eec4a81cbea405d93b2341126a5d70a683b62db355ee904da1e42708188ff7767533fcc0994e8d89f04f0c7cf7a7351ed31e9d6ad7f641e1894daf8b551bb3e1165ffe4c836360e37d02c011b27a033f2773c775be0cf784ed660cae23bb338b72e0badc5d379823b40db2d43169208f4d3561d40ab8ca1df43d43a6f99b58d122ca4bdcee6fd6554c5e7831acecc3e6ea32d456c7de5e9f5db0a79a76c09cdd5dfcc768ab4d37872b7637acf736b38882a624d6ce89c5197d18c621809cb8f415d100f60d5d861803952b259d0a821f69b1b38daf300992f49fe6514"}, @generic="f04ac82b9d8b17121876d7af1a8035eef1da090d6049e97ac4400bcdbfebc00fa311ee651cb57b85c692bd2938f4671b27b5abb41087f158246b16e9ac7b31123a7f752e920f7ca937457e4094634f91e56f5e5bec7821b63e7f336e2dc01de6908248b3c0bf1c04969fb907f2242bb3842f55cc4c173f4e050a75bb2f82ed0254a11f4c54eb2e312edef8e676e3f8694bbf069ba6bd1466"]}]}, 0x18b8}, {&(0x7f0000002c80)={0x38, 0x8, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x17, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x82}, @nested={0x14, 0x11, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x19, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @typed={0x8, 0x80, 0x0, 0x0, @u32=0x5}]}, 0x38}, {&(0x7f0000002cc0)={0x1580, 0x23, 0x300, 0x70bd28, 0x25dfdbfb, "", [@nested={0x212, 0x7b, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@loopback}, @generic="19f31fe557807c279e06545f36bc0eff07ed50e7b082cd219cf1cd7e4862815d7604b69766de6eac7e6f70b35fff4c5075aae180246be4c837b28a2327722d9eb3b7de704dca23c472e0a7de3aabaedc35b3bd1ee4670f3e31b43e0b35180e0f504ee4c2a70b4c4bdad27518b1c49bbdc7200a6b218cf449ee4dcceae1dac6fce259c9d405a5de3a6e3070244f5dc43d5da52c7d2a1eaa1718ba3ddde4c1ca", @generic="dcbe4dd859a7a64f3ee0ac3026554c8e499a77a1552c23204063493ce9e542bc1facd00c708478649c", @generic="dc5a491e49ff2b4b20680ae311ffff127ff0110037bf6561c9e7c775b2a1a6fcf50976bc704394b302ab849721dfd1304c40e2b57e9958bee0cfd9b8d967c2698a4b16f0a23a668d6f6d02a813b5a92036d33f13bb10d2719170328b56e933c3e748ef342dee", @typed={0xc, 0x67, 0x0, 0x0, @u64=0x596d}, @generic="e01c33a31c64e431f772d49d5c0934d13b93575c61ec5c6922eade024ea0c07a68ffcb521da5ae0956d6e7d3bed07a309ec22ff113a0c73cdb3aee0e8f48ea0d9a20d5100cf5dadb3f40b8fd0f29f975cc17e164c4fd86299d62a392a3dff205d7c211fb5cc75aa1bf810bb4eaf5e5afca314e68dc20be84bc5e524934c22a95b345c97b3c07fade0a977f5cb5ce7b1a78b984b1806bf4be53955325232f1946e88ff4f7bf0f16423be37450", @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="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", @typed={0x8, 0x15, 0x0, 0x0, @uid}, @nested={0x185, 0x20, 0x0, 0x1, [@generic="ef3b2eea86161d1f199c4ab80ab5a391ad80bdb97ffee7f95c8131d959d0b3e66d4be5b603d15f5b0a4cafde86f3b0aa15a993a229c12fa319e987529a87da310012f66ace2e74937f75691f55464711e4e7848fefeb2a215cea23902a9ab4e1f65ebb8bcb456a1304347bb15e8a96512f693f6bc85fead80144e97c13d6c42e8eb79e10e546483298363ccd07cb5b", @generic="be29cde58901fdf6cef357109a2f8514a36f5361b555e7fa5fe1b00ca1242cb6beb2284c684950c9d07af628933e102d3c", @generic="0555e67d64388ff7b87b243cd565b7488237e6407c49846ff1914e572fe1091df4a0265f861c76a71746083037739e0ea1a13fb9cc66500c86e237aaa7bdab832c7e16b4e49fc76b7dfe4326bc9a10fc4f602edbb3e64a7bc0165c7516e2444935777907f9f5406803f53b896c06be6cc29b9c07f806ed2acd0b0a7c4415c0cec6160af351ed9361a704afab29566636dceba1573930f32ff73d01244e4bb38b2dfbf72c97ab4c8cb75fb5724cae76858ea157911e8081462dfa6d88475a6b13e3"]}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r5}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x4, 0x6c}, @nested={0x1aa, 0x5f, 0x0, 0x1, [@typed={0x8, 0x86, 0x0, 0x0, @uid=0xee01}, @generic="e2e77d764c593c744396887643be524551d21199fb492f726658c16a71718afd06d9fee6c5c2fcd8a89734c4f90ffb105cbce808925c5b1f735fa4264d0e254bade22e3437ddd5b00cc0df67bc702ea0bcfbfef7ce9d7edecf8836757e884d6aba832546d342cce7a03653985a9ff58c01fb0356d98b98a7cc760d82493ea9edd99bff82408a90ae4e6bb8", @typed={0x5, 0x61, 0x0, 0x0, @str='\x00'}, @generic="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", @generic="fea0acbeee33990a775d3ccac923"]}]}, 0x1580}], 0x4, &(0x7f0000004280)=[@rights={{0x20, 0x1, 0x1, [r6, r7, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, 0xffffffffffffffff}}}], 0x40, 0x800}, 0x4080) 22:17:48 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, &(0x7f0000000240)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) creat(&(0x7f00000000c0)='./file0\x00', 0xd5) 22:17:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01003a0000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100f40000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000300000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1189.086319][ T2590] FAULT_INJECTION: forcing a failure. [ 1189.086319][ T2590] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1189.099700][ T2590] CPU: 0 PID: 2590 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1189.111306][ T2590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1189.121344][ T2590] Call Trace: [ 1189.124646][ T2590] dump_stack_lvl+0x1e2/0x24b [ 1189.129312][ T2590] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1189.134762][ T2590] ? __schedule+0x86e/0xc00 [ 1189.139247][ T2590] dump_stack+0x15/0x17 [ 1189.143381][ T2590] should_fail+0x3c0/0x510 [ 1189.147778][ T2590] should_fail_alloc_page+0x50/0x60 [ 1189.152951][ T2590] __alloc_pages_nodemask+0x1c0/0x890 [ 1189.158297][ T2590] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1189.163902][ T2590] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1189.169426][ T2590] ? __kasan_check_write+0x14/0x20 [ 1189.174509][ T2590] ? lockref_get+0x1b3/0x2a0 [ 1189.179071][ T2590] ? __kasan_check_write+0x14/0x20 [ 1189.184160][ T2590] __get_free_pages+0xe/0x30 [ 1189.188727][ T2590] selinux_genfs_get_sid+0x56/0x250 [ 1189.193897][ T2590] inode_doinit_with_dentry+0x858/0x1030 [ 1189.199504][ T2590] ? sb_finish_set_opts+0x7f0/0x7f0 [ 1189.204691][ T2590] ? current_time+0x1c4/0x310 [ 1189.209345][ T2590] selinux_d_instantiate+0x27/0x40 [ 1189.214429][ T2590] security_d_instantiate+0xa5/0x100 [ 1189.219689][ T2590] d_instantiate+0x55/0x90 [ 1189.224086][ T2590] __debugfs_create_file+0x2d7/0x4a0 [ 1189.229344][ T2590] ? up_write+0x19/0xd0 [ 1189.233477][ T2590] debugfs_create_file+0x4a/0x60 [ 1189.238389][ T2590] bdi_register_va+0x2ab/0x600 [ 1189.243130][ T2590] bdi_register+0xd1/0x120 [ 1189.247524][ T2590] ? irqentry_exit+0x50/0x60 [ 1189.252087][ T2590] ? sysvec_reschedule_ipi+0x84/0x160 [ 1189.257452][ T2590] ? __device_add_disk+0x536/0x11d0 [ 1189.262624][ T2590] ? bdi_register_va+0x600/0x600 [ 1189.267534][ T2590] ? __device_add_disk+0x536/0x11d0 [ 1189.272710][ T2590] __device_add_disk+0x5cb/0x11d0 [ 1189.277719][ T2590] ? device_add_disk+0x40/0x40 [ 1189.282457][ T2590] ? loop_add+0x440/0x760 [ 1189.286763][ T2590] ? vsprintf+0x40/0x40 [ 1189.290896][ T2590] device_add_disk+0x2a/0x40 [ 1189.295460][ T2590] loop_add+0x58f/0x760 [ 1189.299590][ T2590] loop_control_ioctl+0x564/0x740 [ 1189.304588][ T2590] ? loop_remove+0xb0/0xb0 [ 1189.308991][ T2590] ? __fget_files+0x310/0x370 [ 1189.313645][ T2590] ? security_file_ioctl+0xb1/0xd0 [ 1189.318733][ T2590] ? loop_remove+0xb0/0xb0 [ 1189.323145][ T2590] __se_sys_ioctl+0x115/0x190 [ 1189.327800][ T2590] __x64_sys_ioctl+0x7b/0x90 [ 1189.332377][ T2590] do_syscall_64+0x34/0x70 [ 1189.336790][ T2590] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1189.342658][ T2590] RIP: 0033:0x7f7994738279 [ 1189.347052][ T2590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1189.366629][ T2590] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.375018][ T2590] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1189.382981][ T2590] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1189.390929][ T2590] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.398874][ T2590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1189.406822][ T2590] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1189.482484][ T2590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2590 comm=syz-executor.4 22:17:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0xfffffe0c) statx(r1, 0x0, 0x2000, 0x20, &(0x7f0000000240)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) (async) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) 22:17:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000500000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18180000000000984efcab498b054b5711bf1400850000000e40000085000000d5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000600000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000700000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 70) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000900000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:49 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, &(0x7f0000000240)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) creat(&(0x7f00000000c0)='./file0\x00', 0xd5) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) statx(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, &(0x7f0000000240)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r2, 0x0, 0x20000023896) (async) creat(&(0x7f00000000c0)='./file0\x00', 0xd5) (async) 22:17:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0x1, &(0x7f0000000240)="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", &(0x7f0000001240)=""/98}, 0x20) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) (async, rerun: 32) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002c00)={0x0, 0x0}, &(0x7f0000002c40)=0xc) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000001300)={0x24, 0x16, 0x8, 0x70bd27, 0x25dfdbfd, "", [@typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@remote}]}, 0x24}, {&(0x7f0000004300)={0x18b8, 0x3e, 0x20, 0x70bd28, 0x25dfdbff, "", [@generic="7935bb0e3e63f63a3ad525faac95d1042228e8b08fa5f390a17dc07d0a68cea73fee084aafd25896fe2ffa0ec184efd16cee29c21dbb94aaf6a3ea181066d2584f05f01c120b414fa1a9ca545e02e55903e8b84a6d7bbd249270ca6d1892c8f8bcb66eb31e59a163a9e36a2dd139a77ea70011a8dbbff160dc3051e3c2ff59c8c9cd851487ca658618535006080c44cf9da523481aff8238397da59dc272f07f", @nested={0x118b, 0x72, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @pid}, @typed={0x14, 0x76, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="dea407f54c524bffb0dbb6271b0a8532410f26aaf1d076cae2b4eb2f6d9591e605c4a28f8f4cc862054f09f5fff7f23c98a016740291de7acdfb073d43900478c250d8f90831bc4bcc191226530df190a6b69047ba1f22415d667bddbdc09968b2837a5bb5e9906c53242bb93f7b6264c0ca12a5acda66ea0f7c41ae902b8304ba2945ee5eba01a1ce536a0721d86d3fc209e1135e789a51d1cfdb4ba4a0860ec76d5aab0e997904a26435", @generic="5ba4750a0597190e79c820a1df01f561f6b67a16f01c62b88756fbcfe125c2e9fb0578bd5d3ffb0b08648fa60d228d09045f22983d35e3a92d2292726dbebc9a17de43e18f0a9549e7fcf24314e5517cf8323ef54fe6e584b1596b", @typed={0x8, 0x20, 0x0, 0x0, @uid=0xee01}, @typed={0x1004, 0x4c, 0x0, 0x0, @binary="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"}, @generic, @generic="b9f359ea6129d8b2e4370981dae4b968d4006faa87f73bfd4dc70064e9d53f04f30589c32580395b8c31b2efccd942a31803c4a75f3a7969485ab98e81126f59764ee4237f08e91073b741319ececfee99bb9a8acc51e8041d"]}, @nested={0x1f0, 0x3, 0x0, 0x1, [@generic="d40f076be3b69098addd43cf7cf62ce15127d48d5effbc33d3db5e07f54083445934cbf6b7a7e7c60e843d34e618264c2adb2cd8e2a28eb30593d01cd668e26425be359fdcd6e2eccb534d4ef3a3c29461aea2c421692b25a2a0ecadc4c94f957839faafdae055fbcc90ef", @generic="8b351c4da663a4213925a73cf7a2058f8f21f8f77cd75c92284a2025625cec4026a22ad1eb81cd670939e42e23531a00514ea3e4f17cff0000005c12203dfd965533cb874d49c89cde51d1bdaea9ad27d36a419dc53de4e900e468e9274fb5c1f00c6b58134fdaa3a5f91ada3e719a6849c4ba404e8cbc3861b1d8f60567b9f75d49abdb08cf08586c37b91113fd21112686636e2faf1aacab92433347c8bf6cf2a39394590fc9da608a294c2ee7", @typed={0x8, 0x47, 0x0, 0x0, @u32=0x5}, @generic="071a96e987e5cb89b2be1b", @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x9b, 0x2, 0x0, 0x0, @binary="22246bfbfca520e9888fd47ba33435dfe53f0dc2af7c74dcf838560164c797058ad72d668d461135471ee299f8acb3dd2de468d6dea4d1cde7697dd36d8e9994ee5909621484025f1ad44dbc1e12c5da56f37361e8bd603a7a5e49d10fa68ecc41f7c7798441cdb6c0a4aa1fe209728c35a287f45f137a1813d6fdadd5e76130b359d96187cb690c371e23b2609f708816a73d6f7f1b43"}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x37, 0x0, 0x0, @pid}]}, @typed={0x4, 0x13}, @generic="101b72d0c074f3f6148066ff4a7399796de60628be95b209b3fbfd453c2ea01764b51d5c33a5aa4e5f9dc5150008d8c87486c350cf922ea5fa38e83c33b3f4ecb1cb41c725263c08a40fa4bc868152400d603df0ab061da0ba4cceae73d96f186a08f5593b0339909e90d8cbef62e31a4dea7cca898a6f6bd2fd647d62824b0aabd0614615fa01d2788c5e1709b427d69f21fe59b522bb83fd3c94338c69395a1c5b16", @nested={0xf8, 0x7c, 0x0, 0x1, [@generic="94069ba581543d1882e5c7056b60572cefcf7a41ac14ccf55a9f61194f4e9b9ed300ba9f9a5f45203c02b170daa8b663677d66f5d0fd9c2b08a8cdceb1d4ac13e0aa47bf3f6d99d09125b9ec61bc90948cce54d796d6d7b5eeaa1d57c90c8ecc62fba1a770a69b48c15f29cd291574408fe23eb5d4a2db23993614ba16932fc4136ba1167339b7e38ebd271744d7c006f6fc41f96adcf66a8ee1ea716232f23aac91ff28d2c26231d99496f175e04c7e13548dcd4ad23309322162023b354e27544ff7c249967ac53d561b5804aff1c80b919cf9a00b3487256ddaa4e8bdb9bfb203db197e399efa1f088d249f28271823b944a1"]}, @nested={0x2eb, 0x8d, 0x0, 0x1, [@generic="6a060a3817c112394d22130714fd8bedeab852c9f32cf45267f340181d02d803fdec7b480ea92e63ba1eee387fba960d3804d07fe6e204524bbb2116092edd34e0c9cf295ea6ef5af044d570c9d6d7a440cfa80ba18af4d4fcb794ece73da6a355c603a082b24db864f3b96e30b4a6ab9b345ca1046fbca603b536e6194d844b8d951508087dd80859948f4efa8a1729c46c8572df5bce", @typed={0xcc, 0x68, 0x0, 0x0, @binary="2c3bd8255d1c88e0a31d73b1debcad71f892375628ee14fcf0bf54e6f8813a94f50967e512e61d5f487863ef3fb804151e7c3c24139cf4e06e04b7c99180175f49709e622c20a5c2e01b71aeac63cf1de1a360db03c31831e025a97a58301a8292dd50f86cca02385506f01c8623a05f60453c5151b0c925ee036af817d9d76683db546298c650cb71a29a680c83d35e3391430f7ca7ef1936f8eca690362e375d86a2a266018edfeead7f4289f98ff6323d53db871b8d9ce09b645ddd734ac124e523236fbcda67"}, @typed={0x6, 0x94, 0x0, 0x0, @str='\\\x00'}, @typed={0xe1, 0x56, 0x0, 0x0, @binary="5eec4a81cbea405d93b2341126a5d70a683b62db355ee904da1e42708188ff7767533fcc0994e8d89f04f0c7cf7a7351ed31e9d6ad7f641e1894daf8b551bb3e1165ffe4c836360e37d02c011b27a033f2773c775be0cf784ed660cae23bb338b72e0badc5d379823b40db2d43169208f4d3561d40ab8ca1df43d43a6f99b58d122ca4bdcee6fd6554c5e7831acecc3e6ea32d456c7de5e9f5db0a79a76c09cdd5dfcc768ab4d37872b7637acf736b38882a624d6ce89c5197d18c621809cb8f415d100f60d5d861803952b259d0a821f69b1b38daf300992f49fe6514"}, @generic="f04ac82b9d8b17121876d7af1a8035eef1da090d6049e97ac4400bcdbfebc00fa311ee651cb57b85c692bd2938f4671b27b5abb41087f158246b16e9ac7b31123a7f752e920f7ca937457e4094634f91e56f5e5bec7821b63e7f336e2dc01de6908248b3c0bf1c04969fb907f2242bb3842f55cc4c173f4e050a75bb2f82ed0254a11f4c54eb2e312edef8e676e3f8694bbf069ba6bd1466"]}]}, 0x18b8}, {&(0x7f0000002c80)={0x38, 0x8, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x17, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x82}, @nested={0x14, 0x11, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x19, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @typed={0x8, 0x80, 0x0, 0x0, @u32=0x5}]}, 0x38}, {&(0x7f0000002cc0)={0x1580, 0x23, 0x300, 0x70bd28, 0x25dfdbfb, "", [@nested={0x212, 0x7b, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@loopback}, @generic="19f31fe557807c279e06545f36bc0eff07ed50e7b082cd219cf1cd7e4862815d7604b69766de6eac7e6f70b35fff4c5075aae180246be4c837b28a2327722d9eb3b7de704dca23c472e0a7de3aabaedc35b3bd1ee4670f3e31b43e0b35180e0f504ee4c2a70b4c4bdad27518b1c49bbdc7200a6b218cf449ee4dcceae1dac6fce259c9d405a5de3a6e3070244f5dc43d5da52c7d2a1eaa1718ba3ddde4c1ca", @generic="dcbe4dd859a7a64f3ee0ac3026554c8e499a77a1552c23204063493ce9e542bc1facd00c708478649c", @generic="dc5a491e49ff2b4b20680ae311ffff127ff0110037bf6561c9e7c775b2a1a6fcf50976bc704394b302ab849721dfd1304c40e2b57e9958bee0cfd9b8d967c2698a4b16f0a23a668d6f6d02a813b5a92036d33f13bb10d2719170328b56e933c3e748ef342dee", @typed={0xc, 0x67, 0x0, 0x0, @u64=0x596d}, @generic="e01c33a31c64e431f772d49d5c0934d13b93575c61ec5c6922eade024ea0c07a68ffcb521da5ae0956d6e7d3bed07a309ec22ff113a0c73cdb3aee0e8f48ea0d9a20d5100cf5dadb3f40b8fd0f29f975cc17e164c4fd86299d62a392a3dff205d7c211fb5cc75aa1bf810bb4eaf5e5afca314e68dc20be84bc5e524934c22a95b345c97b3c07fade0a977f5cb5ce7b1a78b984b1806bf4be53955325232f1946e88ff4f7bf0f16423be37450", @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="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", @typed={0x8, 0x15, 0x0, 0x0, @uid}, @nested={0x185, 0x20, 0x0, 0x1, [@generic="ef3b2eea86161d1f199c4ab80ab5a391ad80bdb97ffee7f95c8131d959d0b3e66d4be5b603d15f5b0a4cafde86f3b0aa15a993a229c12fa319e987529a87da310012f66ace2e74937f75691f55464711e4e7848fefeb2a215cea23902a9ab4e1f65ebb8bcb456a1304347bb15e8a96512f693f6bc85fead80144e97c13d6c42e8eb79e10e546483298363ccd07cb5b", @generic="be29cde58901fdf6cef357109a2f8514a36f5361b555e7fa5fe1b00ca1242cb6beb2284c684950c9d07af628933e102d3c", @generic="0555e67d64388ff7b87b243cd565b7488237e6407c49846ff1914e572fe1091df4a0265f861c76a71746083037739e0ea1a13fb9cc66500c86e237aaa7bdab832c7e16b4e49fc76b7dfe4326bc9a10fc4f602edbb3e64a7bc0165c7516e2444935777907f9f5406803f53b896c06be6cc29b9c07f806ed2acd0b0a7c4415c0cec6160af351ed9361a704afab29566636dceba1573930f32ff73d01244e4bb38b2dfbf72c97ab4c8cb75fb5724cae76858ea157911e8081462dfa6d88475a6b13e3"]}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r5}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x4, 0x6c}, @nested={0x1aa, 0x5f, 0x0, 0x1, [@typed={0x8, 0x86, 0x0, 0x0, @uid=0xee01}, @generic="e2e77d764c593c744396887643be524551d21199fb492f726658c16a71718afd06d9fee6c5c2fcd8a89734c4f90ffb105cbce808925c5b1f735fa4264d0e254bade22e3437ddd5b00cc0df67bc702ea0bcfbfef7ce9d7edecf8836757e884d6aba832546d342cce7a03653985a9ff58c01fb0356d98b98a7cc760d82493ea9edd99bff82408a90ae4e6bb8", @typed={0x5, 0x61, 0x0, 0x0, @str='\x00'}, @generic="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", @generic="fea0acbeee33990a775d3ccac923"]}]}, 0x1580}], 0x4, &(0x7f0000004280)=[@rights={{0x20, 0x1, 0x1, [r6, r7, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, 0xffffffffffffffff}}}], 0x40, 0x800}, 0x4080) (rerun: 64) 22:17:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000a00000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000b00000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100940c00000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1189.959477][ T2626] FAULT_INJECTION: forcing a failure. [ 1189.959477][ T2626] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1189.972690][ T2626] CPU: 1 PID: 2626 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1189.984296][ T2626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1189.994326][ T2626] Call Trace: [ 1189.997617][ T2626] dump_stack_lvl+0x1e2/0x24b [ 1190.002270][ T2626] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1190.007705][ T2626] dump_stack+0x15/0x17 [ 1190.011843][ T2626] should_fail+0x3c0/0x510 [ 1190.016237][ T2626] should_fail_alloc_page+0x50/0x60 [ 1190.021409][ T2626] __alloc_pages_nodemask+0x1c0/0x890 [ 1190.026755][ T2626] ? loop_add+0x58f/0x760 [ 1190.031059][ T2626] ? loop_control_ioctl+0x564/0x740 [ 1190.036236][ T2626] ? __se_sys_ioctl+0x115/0x190 [ 1190.041067][ T2626] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1190.046594][ T2626] ? __kasan_check_write+0x14/0x20 [ 1190.051691][ T2626] ? lockref_get+0x1b3/0x2a0 [ 1190.056261][ T2626] ? __kasan_check_write+0x14/0x20 [ 1190.061348][ T2626] __get_free_pages+0xe/0x30 [ 1190.065913][ T2626] selinux_genfs_get_sid+0x56/0x250 [ 1190.071128][ T2626] inode_doinit_with_dentry+0x858/0x1030 [ 1190.076740][ T2626] ? sb_finish_set_opts+0x7f0/0x7f0 [ 1190.081913][ T2626] ? current_time+0x1c4/0x310 [ 1190.086565][ T2626] selinux_d_instantiate+0x27/0x40 [ 1190.091652][ T2626] security_d_instantiate+0xa5/0x100 [ 1190.096911][ T2626] d_instantiate+0x55/0x90 [ 1190.101307][ T2626] __debugfs_create_file+0x2d7/0x4a0 [ 1190.106603][ T2626] ? up_write+0x19/0xd0 [ 1190.110738][ T2626] debugfs_create_file+0x4a/0x60 [ 1190.115651][ T2626] bdi_register_va+0x2ab/0x600 [ 1190.120389][ T2626] bdi_register+0xd1/0x120 [ 1190.124801][ T2626] ? __device_add_disk+0x536/0x11d0 [ 1190.129973][ T2626] ? bdi_register_va+0x600/0x600 [ 1190.134888][ T2626] ? vsnprintf+0x1bfd/0x1cd0 [ 1190.139454][ T2626] ? __kasan_check_read+0x11/0x20 [ 1190.144592][ T2626] ? blk_alloc_devt+0xd4/0x320 [ 1190.149337][ T2626] __device_add_disk+0x5cb/0x11d0 [ 1190.154339][ T2626] ? device_add_disk+0x40/0x40 [ 1190.159111][ T2626] ? loop_add+0x440/0x760 [ 1190.163426][ T2626] ? vsprintf+0x40/0x40 [ 1190.167573][ T2626] device_add_disk+0x2a/0x40 [ 1190.172142][ T2626] loop_add+0x58f/0x760 [ 1190.176280][ T2626] loop_control_ioctl+0x564/0x740 [ 1190.181286][ T2626] ? loop_remove+0xb0/0xb0 [ 1190.185679][ T2626] ? __fget_files+0x310/0x370 [ 1190.190338][ T2626] ? security_file_ioctl+0xb1/0xd0 [ 1190.195424][ T2626] ? loop_remove+0xb0/0xb0 [ 1190.199830][ T2626] __se_sys_ioctl+0x115/0x190 [ 1190.204480][ T2626] __x64_sys_ioctl+0x7b/0x90 [ 1190.209068][ T2626] do_syscall_64+0x34/0x70 [ 1190.213457][ T2626] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1190.219324][ T2626] RIP: 0033:0x7f7994738279 [ 1190.223717][ T2626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1190.243309][ T2626] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1190.251699][ T2626] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1190.259645][ T2626] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1190.267766][ T2626] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.275712][ T2626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1190.283674][ T2626] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1190.360641][ T2626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2626 comm=syz-executor.4 22:17:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0xfffffe0c) statx(r1, 0x0, 0x2000, 0x20, &(0x7f0000000240)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) open(&(0x7f0000000780)='./bus\x00', 0x4c03e, 0x0) (async) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0xfffffe0c) (async) statx(r1, 0x0, 0x2000, 0x20, &(0x7f0000000240)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0x20000023896) (async) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) (async) 22:17:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100000d00000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:49 executing program 5: mkdir(0x0, 0x0) (async) mkdir(0x0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, &(0x7f0000000240)) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 64) sendfile(r0, r2, 0x0, 0x20000023896) (async) creat(&(0x7f00000000c0)='./file0\x00', 0xd5) 22:17:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18180000000000984efcab498b054b5711bf1400850000000e40000085000000d5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100001100000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 71) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad071e86ec40c486e7452c5ec96c35df", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6b05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd113825e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f29083e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d7b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13603b73157602100fb20b99306a7927d0c710d6ce4c8", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af14b2b8d010000003987fa1c04849a360e4d00815000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:17:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100002000000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000e000000040000009e74ad279fd65694000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) write(r0, &(0x7f0000000240)="d7ea392508feb510300fe3870a8b3cd62f2df4049157834d8c5c8873510986179fd182da5ec9dfcc4a1112d81c9235b7ae9f9659362ab7cba009f0cf848f3829b1594e00bfacaa947b91505bd367a39eb7c8ca3ccf7af043c2983530", 0x5c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0x1, &(0x7f0000000240)="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", &(0x7f0000001240)=""/98}, 0x20) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002c00)={0x0, 0x0}, &(0x7f0000002c40)=0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) (async, rerun: 32) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) (rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0xcc}}, 0x0) (async) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000001300)={0x24, 0x16, 0x8, 0x70bd27, 0x25dfdbfd, "", [@typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@remote}]}, 0x24}, {&(0x7f0000004300)={0x18b8, 0x3e, 0x20, 0x70bd28, 0x25dfdbff, "", [@generic="7935bb0e3e63f63a3ad525faac95d1042228e8b08fa5f390a17dc07d0a68cea73fee084aafd25896fe2ffa0ec184efd16cee29c21dbb94aaf6a3ea181066d2584f05f01c120b414fa1a9ca545e02e55903e8b84a6d7bbd249270ca6d1892c8f8bcb66eb31e59a163a9e36a2dd139a77ea70011a8dbbff160dc3051e3c2ff59c8c9cd851487ca658618535006080c44cf9da523481aff8238397da59dc272f07f", @nested={0x118b, 0x72, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @pid}, @typed={0x14, 0x76, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="dea407f54c524bffb0dbb6271b0a8532410f26aaf1d076cae2b4eb2f6d9591e605c4a28f8f4cc862054f09f5fff7f23c98a016740291de7acdfb073d43900478c250d8f90831bc4bcc191226530df190a6b69047ba1f22415d667bddbdc09968b2837a5bb5e9906c53242bb93f7b6264c0ca12a5acda66ea0f7c41ae902b8304ba2945ee5eba01a1ce536a0721d86d3fc209e1135e789a51d1cfdb4ba4a0860ec76d5aab0e997904a26435", @generic="5ba4750a0597190e79c820a1df01f561f6b67a16f01c62b88756fbcfe125c2e9fb0578bd5d3ffb0b08648fa60d228d09045f22983d35e3a92d2292726dbebc9a17de43e18f0a9549e7fcf24314e5517cf8323ef54fe6e584b1596b", @typed={0x8, 0x20, 0x0, 0x0, @uid=0xee01}, @typed={0x1004, 0x4c, 0x0, 0x0, @binary="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"}, @generic, @generic="b9f359ea6129d8b2e4370981dae4b968d4006faa87f73bfd4dc70064e9d53f04f30589c32580395b8c31b2efccd942a31803c4a75f3a7969485ab98e81126f59764ee4237f08e91073b741319ececfee99bb9a8acc51e8041d"]}, @nested={0x1f0, 0x3, 0x0, 0x1, [@generic="d40f076be3b69098addd43cf7cf62ce15127d48d5effbc33d3db5e07f54083445934cbf6b7a7e7c60e843d34e618264c2adb2cd8e2a28eb30593d01cd668e26425be359fdcd6e2eccb534d4ef3a3c29461aea2c421692b25a2a0ecadc4c94f957839faafdae055fbcc90ef", @generic="8b351c4da663a4213925a73cf7a2058f8f21f8f77cd75c92284a2025625cec4026a22ad1eb81cd670939e42e23531a00514ea3e4f17cff0000005c12203dfd965533cb874d49c89cde51d1bdaea9ad27d36a419dc53de4e900e468e9274fb5c1f00c6b58134fdaa3a5f91ada3e719a6849c4ba404e8cbc3861b1d8f60567b9f75d49abdb08cf08586c37b91113fd21112686636e2faf1aacab92433347c8bf6cf2a39394590fc9da608a294c2ee7", @typed={0x8, 0x47, 0x0, 0x0, @u32=0x5}, @generic="071a96e987e5cb89b2be1b", @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x9b, 0x2, 0x0, 0x0, @binary="22246bfbfca520e9888fd47ba33435dfe53f0dc2af7c74dcf838560164c797058ad72d668d461135471ee299f8acb3dd2de468d6dea4d1cde7697dd36d8e9994ee5909621484025f1ad44dbc1e12c5da56f37361e8bd603a7a5e49d10fa68ecc41f7c7798441cdb6c0a4aa1fe209728c35a287f45f137a1813d6fdadd5e76130b359d96187cb690c371e23b2609f708816a73d6f7f1b43"}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x37, 0x0, 0x0, @pid}]}, @typed={0x4, 0x13}, @generic="101b72d0c074f3f6148066ff4a7399796de60628be95b209b3fbfd453c2ea01764b51d5c33a5aa4e5f9dc5150008d8c87486c350cf922ea5fa38e83c33b3f4ecb1cb41c725263c08a40fa4bc868152400d603df0ab061da0ba4cceae73d96f186a08f5593b0339909e90d8cbef62e31a4dea7cca898a6f6bd2fd647d62824b0aabd0614615fa01d2788c5e1709b427d69f21fe59b522bb83fd3c94338c69395a1c5b16", @nested={0xf8, 0x7c, 0x0, 0x1, [@generic="94069ba581543d1882e5c7056b60572cefcf7a41ac14ccf55a9f61194f4e9b9ed300ba9f9a5f45203c02b170daa8b663677d66f5d0fd9c2b08a8cdceb1d4ac13e0aa47bf3f6d99d09125b9ec61bc90948cce54d796d6d7b5eeaa1d57c90c8ecc62fba1a770a69b48c15f29cd291574408fe23eb5d4a2db23993614ba16932fc4136ba1167339b7e38ebd271744d7c006f6fc41f96adcf66a8ee1ea716232f23aac91ff28d2c26231d99496f175e04c7e13548dcd4ad23309322162023b354e27544ff7c249967ac53d561b5804aff1c80b919cf9a00b3487256ddaa4e8bdb9bfb203db197e399efa1f088d249f28271823b944a1"]}, @nested={0x2eb, 0x8d, 0x0, 0x1, [@generic="6a060a3817c112394d22130714fd8bedeab852c9f32cf45267f340181d02d803fdec7b480ea92e63ba1eee387fba960d3804d07fe6e204524bbb2116092edd34e0c9cf295ea6ef5af044d570c9d6d7a440cfa80ba18af4d4fcb794ece73da6a355c603a082b24db864f3b96e30b4a6ab9b345ca1046fbca603b536e6194d844b8d951508087dd80859948f4efa8a1729c46c8572df5bce", @typed={0xcc, 0x68, 0x0, 0x0, @binary="2c3bd8255d1c88e0a31d73b1debcad71f892375628ee14fcf0bf54e6f8813a94f50967e512e61d5f487863ef3fb804151e7c3c24139cf4e06e04b7c99180175f49709e622c20a5c2e01b71aeac63cf1de1a360db03c31831e025a97a58301a8292dd50f86cca02385506f01c8623a05f60453c5151b0c925ee036af817d9d76683db546298c650cb71a29a680c83d35e3391430f7ca7ef1936f8eca690362e375d86a2a266018edfeead7f4289f98ff6323d53db871b8d9ce09b645ddd734ac124e523236fbcda67"}, @typed={0x6, 0x94, 0x0, 0x0, @str='\\\x00'}, @typed={0xe1, 0x56, 0x0, 0x0, @binary="5eec4a81cbea405d93b2341126a5d70a683b62db355ee904da1e42708188ff7767533fcc0994e8d89f04f0c7cf7a7351ed31e9d6ad7f641e1894daf8b551bb3e1165ffe4c836360e37d02c011b27a033f2773c775be0cf784ed660cae23bb338b72e0badc5d379823b40db2d43169208f4d3561d40ab8ca1df43d43a6f99b58d122ca4bdcee6fd6554c5e7831acecc3e6ea32d456c7de5e9f5db0a79a76c09cdd5dfcc768ab4d37872b7637acf736b38882a624d6ce89c5197d18c621809cb8f415d100f60d5d861803952b259d0a821f69b1b38daf300992f49fe6514"}, @generic="f04ac82b9d8b17121876d7af1a8035eef1da090d6049e97ac4400bcdbfebc00fa311ee651cb57b85c692bd2938f4671b27b5abb41087f158246b16e9ac7b31123a7f752e920f7ca937457e4094634f91e56f5e5bec7821b63e7f336e2dc01de6908248b3c0bf1c04969fb907f2242bb3842f55cc4c173f4e050a75bb2f82ed0254a11f4c54eb2e312edef8e676e3f8694bbf069ba6bd1466"]}]}, 0x18b8}, {&(0x7f0000002c80)={0x38, 0x8, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x17, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x82}, @nested={0x14, 0x11, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x19, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @typed={0x8, 0x80, 0x0, 0x0, @u32=0x5}]}, 0x38}, {&(0x7f0000002cc0)={0x1580, 0x23, 0x300, 0x70bd28, 0x25dfdbfb, "", [@nested={0x212, 0x7b, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@loopback}, @generic="19f31fe557807c279e06545f36bc0eff07ed50e7b082cd219cf1cd7e4862815d7604b69766de6eac7e6f70b35fff4c5075aae180246be4c837b28a2327722d9eb3b7de704dca23c472e0a7de3aabaedc35b3bd1ee4670f3e31b43e0b35180e0f504ee4c2a70b4c4bdad27518b1c49bbdc7200a6b218cf449ee4dcceae1dac6fce259c9d405a5de3a6e3070244f5dc43d5da52c7d2a1eaa1718ba3ddde4c1ca", @generic="dcbe4dd859a7a64f3ee0ac3026554c8e499a77a1552c23204063493ce9e542bc1facd00c708478649c", @generic="dc5a491e49ff2b4b20680ae311ffff127ff0110037bf6561c9e7c775b2a1a6fcf50976bc704394b302ab849721dfd1304c40e2b57e9958bee0cfd9b8d967c2698a4b16f0a23a668d6f6d02a813b5a92036d33f13bb10d2719170328b56e933c3e748ef342dee", @typed={0xc, 0x67, 0x0, 0x0, @u64=0x596d}, @generic="e01c33a31c64e431f772d49d5c0934d13b93575c61ec5c6922eade024ea0c07a68ffcb521da5ae0956d6e7d3bed07a309ec22ff113a0c73cdb3aee0e8f48ea0d9a20d5100cf5dadb3f40b8fd0f29f975cc17e164c4fd86299d62a392a3dff205d7c211fb5cc75aa1bf810bb4eaf5e5afca314e68dc20be84bc5e524934c22a95b345c97b3c07fade0a977f5cb5ce7b1a78b984b1806bf4be53955325232f1946e88ff4f7bf0f16423be37450", @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="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", @typed={0x8, 0x15, 0x0, 0x0, @uid}, @nested={0x185, 0x20, 0x0, 0x1, [@generic="ef3b2eea86161d1f199c4ab80ab5a391ad80bdb97ffee7f95c8131d959d0b3e66d4be5b603d15f5b0a4cafde86f3b0aa15a993a229c12fa319e987529a87da310012f66ace2e74937f75691f55464711e4e7848fefeb2a215cea23902a9ab4e1f65ebb8bcb456a1304347bb15e8a96512f693f6bc85fead80144e97c13d6c42e8eb79e10e546483298363ccd07cb5b", @generic="be29cde58901fdf6cef357109a2f8514a36f5361b555e7fa5fe1b00ca1242cb6beb2284c684950c9d07af628933e102d3c", @generic="0555e67d64388ff7b87b243cd565b7488237e6407c49846ff1914e572fe1091df4a0265f861c76a71746083037739e0ea1a13fb9cc66500c86e237aaa7bdab832c7e16b4e49fc76b7dfe4326bc9a10fc4f602edbb3e64a7bc0165c7516e2444935777907f9f5406803f53b896c06be6cc29b9c07f806ed2acd0b0a7c4415c0cec6160af351ed9361a704afab29566636dceba1573930f32ff73d01244e4bb38b2dfbf72c97ab4c8cb75fb5724cae76858ea157911e8081462dfa6d88475a6b13e3"]}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r5}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x4, 0x6c}, @nested={0x1aa, 0x5f, 0x0, 0x1, [@typed={0x8, 0x86, 0x0, 0x0, @uid=0xee01}, @generic="e2e77d764c593c744396887643be524551d21199fb492f726658c16a71718afd06d9fee6c5c2fcd8a89734c4f90ffb105cbce808925c5b1f735fa4264d0e254bade22e3437ddd5b00cc0df67bc702ea0bcfbfef7ce9d7edecf8836757e884d6aba832546d342cce7a03653985a9ff58c01fb0356d98b98a7cc760d82493ea9edd99bff82408a90ae4e6bb8", @typed={0x5, 0x61, 0x0, 0x0, @str='\x00'}, @generic="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", @generic="fea0acbeee33990a775d3ccac923"]}]}, 0x1580}], 0x4, &(0x7f0000004280)=[@rights={{0x20, 0x1, 0x1, [r6, r7, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, 0xffffffffffffffff}}}], 0x40, 0x800}, 0x4080) 22:17:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100002100000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100002f00000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff0100003a00000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) 22:17:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000001010400000000000000000a0000003c0001802c00018014000300fc00000000000000000000000000000014000400ff01000c9400000000000000000000010c000280050001000000000038000d8014000400000000f4fffffffffffffeffffffffff1400050000000000000000000000ffffac1e00010c00038006000200000000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xcc}}, 0x0) [ 1190.827801][ T2682] FAULT_INJECTION: forcing a failure. [ 1190.827801][ T2682] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.840566][ T2682] CPU: 0 PID: 2682 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1190.852188][ T2682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1190.862219][ T2682] Call Trace: [ 1190.865491][ T2682] dump_stack_lvl+0x1e2/0x24b [ 1190.870143][ T2682] ? panic+0x7d7/0x7d7 [ 1190.874185][ T2682] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1190.879621][ T2682] ? finish_task_switch+0x130/0x580 [ 1190.884792][ T2682] dump_stack+0x15/0x17 [ 1190.888922][ T2682] should_fail+0x3c0/0x510 [ 1190.893315][ T2682] ? kvasprintf_const+0x139/0x180 [ 1190.898322][ T2682] __should_failslab+0x9f/0xe0 [ 1190.903062][ T2682] should_failslab+0x9/0x20 [ 1190.907550][ T2682] __kmalloc_track_caller+0x5f/0x350 [ 1190.912808][ T2682] kstrdup_const+0x55/0x90 [ 1190.917200][ T2682] kvasprintf_const+0x139/0x180 [ 1190.922026][ T2682] kobject_set_name_vargs+0x61/0x120 [ 1190.927283][ T2682] dev_set_name+0xd1/0x120 [ 1190.931674][ T2682] ? irqentry_exit+0x50/0x60 [ 1190.936241][ T2682] ? sysvec_reschedule_ipi+0x84/0x160 [ 1190.941585][ T2682] ? get_device+0x30/0x30 [ 1190.945890][ T2682] __device_add_disk+0x6e5/0x11d0 [ 1190.950888][ T2682] ? device_add_disk+0x40/0x40 [ 1190.955629][ T2682] ? vsprintf+0x40/0x40 [ 1190.959759][ T2682] device_add_disk+0x2a/0x40 [ 1190.964323][ T2682] loop_add+0x58f/0x760 [ 1190.968455][ T2682] loop_control_ioctl+0x564/0x740 [ 1190.973456][ T2682] ? loop_remove+0xb0/0xb0 [ 1190.977911][ T2682] ? __fget_files+0x310/0x370 [ 1190.982592][ T2682] ? security_file_ioctl+0xb1/0xd0 [ 1190.987680][ T2682] ? loop_remove+0xb0/0xb0 [ 1190.992078][ T2682] __se_sys_ioctl+0x115/0x190 [ 1190.996742][ T2682] __x64_sys_ioctl+0x7b/0x90 [ 1191.001312][ T2682] do_syscall_64+0x34/0x70 [ 1191.005707][ T2682] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1191.011578][ T2682] RIP: 0033:0x7f7994738279 [ 1191.015978][ T2682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1191.035559][ T2682] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1191.043945][ T2682] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1191.051895][ T2682] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1191.059842][ T2682] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.067786][ T2682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.075734][ T2682] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1191.084273][ T2682] kobject_add_internal failed for queue (error: -2 parent: (null)) [ 1191.092567][ T2682] ------------[ cut here ]------------ [ 1191.098196][ T2682] WARNING: CPU: 0 PID: 2682 at fs/sysfs/file.c:328 sysfs_create_files+0x215/0x4a0 [ 1191.107549][ T2682] Modules linked in: [ 1191.111642][ T2682] CPU: 0 PID: 2682 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1191.123422][ T2682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1191.133648][ T2682] RIP: 0010:sysfs_create_files+0x215/0x4a0 [ 1191.139664][ T2682] Code: 24 04 48 b9 00 00 00 00 00 fc ff df 48 8b 54 24 08 4c 8b 74 24 20 eb 2b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b fe 9a ff <0f> 0b c7 44 24 04 ea ff ff ff 48 b9 00 00 00 00 00 fc ff df 48 8b [ 1191.159425][ T2682] RSP: 0018:ffffc90000c17ae0 EFLAGS: 00010287 [ 1191.165660][ T2682] RAX: ffffffff81d1c221 RBX: ffff88810a668098 RCX: 0000000000040000 [ 1191.173761][ T2682] RDX: ffffc90009966000 RSI: 0000000000028611 RDI: 0000000000028612 [ 1191.181873][ T2682] RBP: ffffc90000c17bb0 R08: ffffffff826b9618 R09: ffffed102126b470 [ 1191.189986][ T2682] R10: ffffed102126b470 R11: 1ffff1102126b46f R12: 0000000000000000 [ 1191.198115][ T2682] R13: ffffffff85431b20 R14: ffff88810a668068 R15: ffffffff8653a4c0 [ 1191.206260][ T2682] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1191.215340][ T2682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1191.222091][ T2682] CR2: 00007f799386bff8 CR3: 000000010f22d000 CR4: 00000000003506b0 [ 1191.230260][ T2682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1191.238514][ T2682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1191.246640][ T2682] Call Trace: [ 1191.250072][ T2682] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 1191.255648][ T2682] ? __kasan_check_write+0x14/0x20 [ 1191.260925][ T2682] ? kobject_get+0xd2/0x120 [ 1191.265581][ T2682] __device_add_disk+0x9cb/0x11d0 [ 1191.270751][ T2682] ? device_add_disk+0x40/0x40 [ 1191.275688][ T2682] ? vsprintf+0x40/0x40 [ 1191.280036][ T2682] device_add_disk+0x2a/0x40 [ 1191.284773][ T2682] loop_add+0x58f/0x760 [ 1191.289080][ T2682] loop_control_ioctl+0x564/0x740 [ 1191.294245][ T2682] ? loop_remove+0xb0/0xb0 [ 1191.298819][ T2682] ? __fget_files+0x310/0x370 [ 1191.303646][ T2682] ? security_file_ioctl+0xb1/0xd0 [ 1191.308930][ T2682] ? loop_remove+0xb0/0xb0 [ 1191.313474][ T2682] __se_sys_ioctl+0x115/0x190 [ 1191.318307][ T2682] __x64_sys_ioctl+0x7b/0x90 [ 1191.323026][ T2682] do_syscall_64+0x34/0x70 [ 1191.327612][ T2682] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1191.333626][ T2682] RIP: 0033:0x7f7994738279 [ 1191.338176][ T2682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1191.357926][ T2682] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1191.366520][ T2682] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1191.374616][ T2682] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1191.382790][ T2682] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.390940][ T2682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.399155][ T2682] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1191.407300][ T2682] ---[ end trace b78cd69f8ad74e62 ]--- [ 1191.412928][ T2682] ------------[ cut here ]------------ [ 1191.418522][ T2682] kernfs: can not remove 'events', no directory [ 1191.425181][ T2682] WARNING: CPU: 0 PID: 2682 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0x65/0x90 [ 1191.434967][ T2682] Modules linked in: [ 1191.439017][ T2682] CPU: 0 PID: 2682 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1191.450771][ T2682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1191.461162][ T2682] RIP: 0010:kernfs_remove_by_name_ns+0x65/0x90 [ 1191.467518][ T2682] Code: 48 89 c3 e8 7d 5c 9b ff 48 89 df e8 c5 ee ff ff 31 db eb 29 e8 6c 5c 9b ff 48 c7 c7 80 1a 2d 85 4c 89 fe 31 c0 e8 1b 94 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 4d 5c 9b ff bb fe ff ff ff 48 c7 c7 [ 1191.487287][ T2682] RSP: 0018:ffffc90000c17ab8 EFLAGS: 00010246 [ 1191.493525][ T2682] RAX: e7bc78e22d3d0a00 RBX: 0000000000000000 RCX: 0000000000040000 [ 1191.501679][ T2682] RDX: ffffc90009966000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1191.509830][ T2682] RBP: ffffc90000c17ad0 R08: ffffffff8153b368 R09: fffff52000182e7d [ 1191.517977][ T2682] R10: fffff52000182e7d R11: 1ffff92000182e7c R12: ffffffff8653a4c0 [ 1191.526134][ T2682] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff85431b00 [ 1191.534243][ T2682] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1191.543321][ T2682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1191.550053][ T2682] CR2: 00007f799386bff8 CR3: 000000010f22d000 CR4: 00000000003506b0 [ 1191.558203][ T2682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1191.566339][ T2682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1191.574442][ T2682] Call Trace: [ 1191.577861][ T2682] sysfs_create_files+0x40a/0x4a0 [ 1191.583010][ T2682] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 1191.588525][ T2682] ? __kasan_check_write+0x14/0x20 [ 1191.593769][ T2682] ? kobject_get+0xd2/0x120 [ 1191.598414][ T2682] __device_add_disk+0x9cb/0x11d0 [ 1191.603599][ T2682] ? device_add_disk+0x40/0x40 [ 1191.608498][ T2682] ? vsprintf+0x40/0x40 [ 1191.612808][ T2682] device_add_disk+0x2a/0x40 [ 1191.617580][ T2682] loop_add+0x58f/0x760 [ 1191.621861][ T2682] loop_control_ioctl+0x564/0x740 [ 1191.627047][ T2682] ? loop_remove+0xb0/0xb0 [ 1191.631584][ T2682] ? __fget_files+0x310/0x370 [ 1191.636642][ T2682] ? security_file_ioctl+0xb1/0xd0 [ 1191.641996][ T2682] ? loop_remove+0xb0/0xb0 [ 1191.646576][ T2682] __se_sys_ioctl+0x115/0x190 [ 1191.651388][ T2682] __x64_sys_ioctl+0x7b/0x90 [ 1191.656150][ T2682] do_syscall_64+0x34/0x70 [ 1191.660689][ T2682] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1191.666712][ T2682] RIP: 0033:0x7f7994738279 [ 1191.671259][ T2682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1191.691020][ T2682] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1191.699603][ T2682] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1191.707709][ T2682] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1191.715818][ T2682] RBP: 00007f799386c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.723911][ T2682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.732017][ T2682] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1191.740132][ T2682] ---[ end trace b78cd69f8ad74e63 ]--- [ 1191.745729][ T2682] loop0: failed to create sysfs files for events [ 1191.766457][ T2682] ------------[ cut here ]------------ [ 1191.772064][ T2682] kernfs: can not remove 'events', no directory [ 1191.778679][ T2682] WARNING: CPU: 0 PID: 2682 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0x65/0x90 [ 1191.788433][ T2682] Modules linked in: [ 1191.792485][ T2682] CPU: 0 PID: 2682 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1191.804276][ T2682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1191.814500][ T2682] RIP: 0010:kernfs_remove_by_name_ns+0x65/0x90 [ 1191.820804][ T2682] Code: 48 89 c3 e8 7d 5c 9b ff 48 89 df e8 c5 ee ff ff 31 db eb 29 e8 6c 5c 9b ff 48 c7 c7 80 1a 2d 85 4c 89 fe 31 c0 e8 1b 94 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 4d 5c 9b ff bb fe ff ff ff 48 c7 c7 [ 1191.840551][ T2682] RSP: 0018:ffffc90000c17bf8 EFLAGS: 00010246 [ 1191.846777][ T2682] RAX: e7bc78e22d3d0a00 RBX: 0000000000000000 RCX: 0000000000040000 [ 1191.854878][ T2682] RDX: ffffc90009966000 RSI: 00000000000018a5 RDI: 00000000000018a6 [ 1191.862991][ T2682] RBP: ffffc90000c17c10 R08: ffffffff8153b368 R09: fffff52000182ea5 [ 1191.871125][ T2682] R10: fffff52000182ea5 R11: 1ffff92000182ea4 R12: 0000000000000000 [ 1191.879269][ T2682] R13: ffffffff8653a4c0 R14: 0000000000000000 R15: ffffffff85431b00 [ 1191.887391][ T2682] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1191.896571][ T2682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1191.903280][ T2682] CR2: 0000001b2d122000 CR3: 000000010f22d000 CR4: 00000000003506b0 [ 1191.911433][ T2682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1191.919541][ T2682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1191.927675][ T2682] Call Trace: [ 1191.931093][ T2682] sysfs_remove_files+0xab/0x110 [ 1191.936170][ T2682] del_gendisk+0x278/0xe20 [ 1191.940596][ T2682] ? device_add_disk_no_queue_reg+0x30/0x30 [ 1191.946507][ T2682] ? __radix_tree_delete+0x2ba/0x380 [ 1191.951806][ T2682] ? radix_tree_delete_item+0x261/0x360 [ 1191.957375][ T2682] loop_remove+0x46/0xb0 [ 1191.961628][ T2682] loop_control_ioctl+0x67f/0x740 [ 1191.966713][ T2682] ? loop_remove+0xb0/0xb0 [ 1191.971140][ T2682] ? irqentry_exit+0x50/0x60 [ 1191.975777][ T2682] ? sysvec_reschedule_ipi+0x84/0x160 [ 1191.981156][ T2682] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1191.986835][ T2682] ? security_file_ioctl+0xb1/0xd0 [ 1191.991954][ T2682] ? loop_remove+0xb0/0xb0 [ 1191.996395][ T2682] __se_sys_ioctl+0x115/0x190 [ 1192.001113][ T2682] __x64_sys_ioctl+0x7b/0x90 [ 1192.005767][ T2682] do_syscall_64+0x34/0x70 [ 1192.010205][ T2682] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1192.016129][ T2682] RIP: 0033:0x7f7994738279 [ 1192.020578][ T2682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1192.040223][ T2682] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1192.048735][ T2682] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1192.070918][ T2682] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 1192.079030][ T2682] RBP: 00007f7994792189 R08: 0000000000000000 R09: 0000000000000000 [ 1192.087117][ T2682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.095228][ T2682] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1192.103299][ T2682] ---[ end trace b78cd69f8ad74e64 ]--- [ 1192.108831][ T2682] ------------[ cut here ]------------ [ 1192.114341][ T2682] kernfs: can not remove 'events_async', no directory [ 1192.121658][ T2682] WARNING: CPU: 0 PID: 2682 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0x65/0x90 [ 1192.131602][ T2682] Modules linked in: [ 1192.135696][ T2682] CPU: 0 PID: 2682 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1192.147402][ T2682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1192.157615][ T2682] RIP: 0010:kernfs_remove_by_name_ns+0x65/0x90 [ 1192.163782][ T2682] Code: 48 89 c3 e8 7d 5c 9b ff 48 89 df e8 c5 ee ff ff 31 db eb 29 e8 6c 5c 9b ff 48 c7 c7 80 1a 2d 85 4c 89 fe 31 c0 e8 1b 94 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 4d 5c 9b ff bb fe ff ff ff 48 c7 c7 [ 1192.183419][ T2682] RSP: 0018:ffffc90000c17bf8 EFLAGS: 00010246 [ 1192.189535][ T2682] RAX: e7bc78e22d3d0a00 RBX: 0000000000000000 RCX: 0000000000040000 [ 1192.197581][ T2682] RDX: ffffc90009966000 RSI: 000000000002d6ab RDI: 000000000002d6ac [ 1192.205581][ T2682] RBP: ffffc90000c17c10 R08: ffffffff8153b368 R09: fffff52000182ea5 [ 1192.213583][ T2682] R10: fffff52000182ea5 R11: 1ffff92000182ea4 R12: 0000000000000000 [ 1192.221599][ T2682] R13: ffffffff8653a4c0 R14: 0000000000000000 R15: ffffffff85431be0 [ 1192.229595][ T2682] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1192.238562][ T2682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1192.245206][ T2682] CR2: 0000000020000080 CR3: 000000010f22d000 CR4: 00000000003506b0 [ 1192.253208][ T2682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1192.261275][ T2682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1192.269251][ T2682] Call Trace: [ 1192.272545][ T2682] sysfs_remove_files+0xab/0x110 [ 1192.277549][ T2682] del_gendisk+0x278/0xe20 [ 1192.281978][ T2682] ? device_add_disk_no_queue_reg+0x30/0x30 [ 1192.287906][ T2682] ? __radix_tree_delete+0x2ba/0x380 [ 1192.293200][ T2682] ? radix_tree_delete_item+0x261/0x360 [ 1192.298762][ T2682] loop_remove+0x46/0xb0 [ 1192.303011][ T2682] loop_control_ioctl+0x67f/0x740 [ 1192.308052][ T2682] ? loop_remove+0xb0/0xb0 [ 1192.312476][ T2682] ? irqentry_exit+0x50/0x60 [ 1192.317084][ T2682] ? sysvec_reschedule_ipi+0x84/0x160 [ 1192.322480][ T2682] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1192.328133][ T2682] ? security_file_ioctl+0xb1/0xd0 [ 1192.333250][ T2682] ? loop_remove+0xb0/0xb0 [ 1192.337686][ T2682] __se_sys_ioctl+0x115/0x190 [ 1192.342380][ T2682] __x64_sys_ioctl+0x7b/0x90 [ 1192.347027][ T2682] do_syscall_64+0x34/0x70 [ 1192.351451][ T2682] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1192.357364][ T2682] RIP: 0033:0x7f7994738279 [ 1192.361790][ T2682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1192.381454][ T2682] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1192.389907][ T2682] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1192.397908][ T2682] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 1192.405932][ T2682] RBP: 00007f7994792189 R08: 0000000000000000 R09: 0000000000000000 [ 1192.413909][ T2682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.421904][ T2682] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1192.429909][ T2682] ---[ end trace b78cd69f8ad74e65 ]--- [ 1192.435438][ T2682] ------------[ cut here ]------------ [ 1192.440924][ T2682] kernfs: can not remove 'events_poll_msecs', no directory [ 1192.448352][ T2682] WARNING: CPU: 0 PID: 2682 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0x65/0x90 [ 1192.457993][ T2682] Modules linked in: [ 1192.461929][ T2682] CPU: 0 PID: 2682 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1192.473581][ T2682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1192.483671][ T2682] RIP: 0010:kernfs_remove_by_name_ns+0x65/0x90 [ 1192.489843][ T2682] Code: 48 89 c3 e8 7d 5c 9b ff 48 89 df e8 c5 ee ff ff 31 db eb 29 e8 6c 5c 9b ff 48 c7 c7 80 1a 2d 85 4c 89 fe 31 c0 e8 1b 94 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 4d 5c 9b ff bb fe ff ff ff 48 c7 c7 [ 1192.509467][ T2682] RSP: 0018:ffffc90000c17bf8 EFLAGS: 00010246 [ 1192.515572][ T2682] RAX: e7bc78e22d3d0a00 RBX: 0000000000000000 RCX: 0000000000040000 [ 1192.523551][ T2682] RDX: ffffc90009966000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1192.531569][ T2682] RBP: ffffc90000c17c10 R08: ffffffff8153b368 R09: fffff52000182ea5 [ 1192.539557][ T2682] R10: fffff52000182ea5 R11: 1ffff92000182ea4 R12: 0000000000000000 [ 1192.547548][ T2682] R13: ffffffff8653a4c0 R14: 0000000000000000 R15: ffffffff85431c40 [ 1192.555540][ T2682] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1192.564489][ T2682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1192.571088][ T2682] CR2: 0000000020000080 CR3: 000000010f22d000 CR4: 00000000003506b0 [ 1192.579089][ T2682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1192.587088][ T2682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1192.595080][ T2682] Call Trace: [ 1192.598383][ T2682] sysfs_remove_files+0xab/0x110 [ 1192.603335][ T2682] del_gendisk+0x278/0xe20 [ 1192.607770][ T2682] ? device_add_disk_no_queue_reg+0x30/0x30 [ 1192.613668][ T2682] ? __radix_tree_delete+0x2ba/0x380 [ 1192.619006][ T2682] ? radix_tree_delete_item+0x261/0x360 [ 1192.624572][ T2682] loop_remove+0x46/0xb0 [ 1192.628888][ T2682] loop_control_ioctl+0x67f/0x740 [ 1192.633938][ T2682] ? loop_remove+0xb0/0xb0 [ 1192.638397][ T2682] ? irqentry_exit+0x50/0x60 [ 1192.643010][ T2682] ? sysvec_reschedule_ipi+0x84/0x160 [ 1192.648449][ T2682] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1192.654114][ T2682] ? security_file_ioctl+0xb1/0xd0 [ 1192.659275][ T2682] ? loop_remove+0xb0/0xb0 [ 1192.663703][ T2682] __se_sys_ioctl+0x115/0x190 [ 1192.668402][ T2682] __x64_sys_ioctl+0x7b/0x90 [ 1192.673003][ T2682] do_syscall_64+0x34/0x70 [ 1192.677451][ T2682] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1192.683349][ T2682] RIP: 0033:0x7f7994738279 [ 1192.687790][ T2682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1192.707431][ T2682] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1192.715888][ T2682] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1192.723865][ T2682] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 1192.731856][ T2682] RBP: 00007f7994792189 R08: 0000000000000000 R09: 0000000000000000 [ 1192.739848][ T2682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.747839][ T2682] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1192.755869][ T2682] ---[ end trace b78cd69f8ad74e66 ]--- [ 1192.761545][ T2682] ------------[ cut here ]------------ [ 1192.767027][ T2682] kernfs: can not remove 'bdi', no directory [ 1192.773267][ T2682] WARNING: CPU: 0 PID: 2682 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0x65/0x90 [ 1192.782910][ T2682] Modules linked in: [ 1192.786861][ T2682] CPU: 0 PID: 2682 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1192.798522][ T2682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1192.808618][ T2682] RIP: 0010:kernfs_remove_by_name_ns+0x65/0x90 [ 1192.814800][ T2682] Code: 48 89 c3 e8 7d 5c 9b ff 48 89 df e8 c5 ee ff ff 31 db eb 29 e8 6c 5c 9b ff 48 c7 c7 80 1a 2d 85 4c 89 fe 31 c0 e8 1b 94 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 4d 5c 9b ff bb fe ff ff ff 48 c7 c7 [ 1192.834443][ T2682] RSP: 0018:ffffc90000c17c18 EFLAGS: 00010246 [ 1192.840572][ T2682] RAX: e7bc78e22d3d0a00 RBX: 0000000000000000 RCX: 0000000000040000 [ 1192.848567][ T2682] RDX: ffffc90009966000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1192.856558][ T2682] RBP: ffffc90000c17c30 R08: ffffffff8153b368 R09: fffff52000182ea9 [ 1192.864537][ T2682] R10: fffff52000182ea9 R11: 1ffff92000182ea8 R12: 0000000000000240 [ 1192.872551][ T2682] R13: ffff88810a668030 R14: 0000000000000000 R15: ffffffff854314e0 [ 1192.880553][ T2682] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1192.889519][ T2682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1192.896255][ T2682] CR2: 0000000020000080 CR3: 000000010f22d000 CR4: 00000000003506b0 [ 1192.904284][ T2682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1192.912293][ T2682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1192.920301][ T2682] Call Trace: [ 1192.923613][ T2682] sysfs_remove_link+0x50/0x60 [ 1192.928409][ T2682] del_gendisk+0x7cd/0xe20 [ 1192.932839][ T2682] ? device_add_disk_no_queue_reg+0x30/0x30 [ 1192.938752][ T2682] ? __radix_tree_delete+0x2ba/0x380 [ 1192.944047][ T2682] ? radix_tree_delete_item+0x261/0x360 [ 1192.949646][ T2682] loop_remove+0x46/0xb0 [ 1192.953899][ T2682] loop_control_ioctl+0x67f/0x740 [ 1192.958973][ T2682] ? loop_remove+0xb0/0xb0 [ 1192.963405][ T2682] ? irqentry_exit+0x50/0x60 [ 1192.968030][ T2682] ? sysvec_reschedule_ipi+0x84/0x160 [ 1192.973422][ T2682] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1192.979112][ T2682] ? security_file_ioctl+0xb1/0xd0 22:17:52 executing program 5: mkdir(0x0, 0x0) mkdir(0x0, 0x5a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup2(r0, r1) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000)=0x7, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 22:17:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x64) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000e000000040000009e74ad279fd65694000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, &(0x7f0000000580)) (async) write(r0, &(0x7f0000000240)="d7ea392508feb510300fe3870a8b3cd62f2df4049157834d8c5c8873510986179fd182da5ec9dfcc4a1112d81c9235b7ae9f9659362ab7cba009f0cf848f3829b1594e00bfacaa947b91505bd367a39eb7c8ca3ccf7af043c2983530", 0x5c) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 22:17:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x5a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18180000000000984efcab498b054b5711bf1400850000000e40000085000000d5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48091) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [], {}, [{0x8, 0x0, 0xee00}, {}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:17:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)=@md0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='binfmt_misc\x00', 0x10b088a, &(0x7f0000000340)='\'\xad%()\xf1\\\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2100, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000200)={0x68, 0x29, 0x2, {0x40, [{{0x10, 0x4, 0x3}, 0x7fffffffffffffff, 0x1, 0x7, './file0'}, {{0x8, 0x3, 0x1}, 0x4, 0x3, 0x7, './file0'}, {{0x1, 0x4, 0x2}, 0x8, 0xed, 0x7, './file0'}]}}, 0x68) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) [ 1192.984261][ T2682] ? loop_remove+0xb0/0xb0 [ 1192.988711][ T2682] __se_sys_ioctl+0x115/0x190 [ 1192.993402][ T2682] __x64_sys_ioctl+0x7b/0x90 [ 1192.998020][ T2682] do_syscall_64+0x34/0x70 [ 1193.002540][ T2682] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1193.008476][ T2682] RIP: 0033:0x7f7994738279 [ 1193.012900][ T2682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1193.070933][ T2682] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1193.079626][ T2682] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1193.087788][ T2682] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 1193.095918][ T2682] RBP: 00007f7994792189 R08: 0000000000000000 R09: 0000000000000000 [ 1193.104206][ T2682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.112366][ T2682] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1193.120490][ T2682] ---[ end trace b78cd69f8ad74e67 ]--- [ 1193.128608][ T2696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=2696 comm=syz-executor.4 [ 1193.160031][ T2682] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1193.171728][ T2682] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1193.180122][ T2682] CPU: 0 PID: 2682 Comm: syz-executor.4 Tainted: G W 5.10.135-syzkaller-01839-g30abcdabf21e #0 [ 1193.191720][ T2682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1193.201762][ T2682] RIP: 0010:strlen+0x3a/0x80 [ 1193.206330][ T2682] Code: c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 1193.225904][ T2682] RSP: 0018:ffffc90000c17b68 EFLAGS: 00010246 [ 1193.231943][ T2682] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 1193.239889][ T2682] RDX: ffffc90009966000 RSI: 000000000003ffff RDI: 0000000000000000 [ 1193.247836][ T2682] RBP: ffffc90000c17b88 R08: ffffffff81d1390c R09: fffff52000182f75 [ 1193.255791][ T2682] R10: fffff52000182f75 R11: 1ffff92000182f74 R12: ffffffffffffffff [ 1193.263748][ T2682] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1193.271707][ T2682] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1193.280619][ T2682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1193.287182][ T2682] CR2: 0000001b2d123000 CR3: 000000010f22d000 CR4: 00000000003506b0 [ 1193.295130][ T2682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1193.303075][ T2682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1193.311016][ T2682] Call Trace: [ 1193.314286][ T2682] kernfs_name_hash+0x21/0x240 [ 1193.319021][ T2682] kernfs_find_ns+0x72/0x280 [ 1193.323587][ T2682] kernfs_remove_by_name_ns+0x36/0x90 [ 1193.328934][ T2682] sysfs_remove_link+0x50/0x60 [ 1193.333670][ T2682] del_gendisk+0xbe0/0xe20 [ 1193.338062][ T2682] ? device_add_disk_no_queue_reg+0x30/0x30 [ 1193.343929][ T2682] ? __radix_tree_delete+0x2ba/0x380 [ 1193.349203][ T2682] ? radix_tree_delete_item+0x261/0x360 [ 1193.354737][ T2682] loop_remove+0x46/0xb0 [ 1193.358962][ T2682] loop_control_ioctl+0x67f/0x740 [ 1193.363973][ T2682] ? loop_remove+0xb0/0xb0 [ 1193.368373][ T2682] ? irqentry_exit+0x50/0x60 [ 1193.372941][ T2682] ? sysvec_reschedule_ipi+0x84/0x160 [ 1193.378288][ T2682] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1193.383897][ T2682] ? security_file_ioctl+0xb1/0xd0 [ 1193.388979][ T2682] ? loop_remove+0xb0/0xb0 [ 1193.393372][ T2682] __se_sys_ioctl+0x115/0x190 [ 1193.398024][ T2682] __x64_sys_ioctl+0x7b/0x90 [ 1193.402585][ T2682] do_syscall_64+0x34/0x70 [ 1193.406976][ T2682] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1193.412841][ T2682] RIP: 0033:0x7f7994738279 [ 1193.417235][ T2682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1193.436812][ T2682] RSP: 002b:00007f799386c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1193.445200][ T2682] RAX: ffffffffffffffda RBX: 00007f799484b120 RCX: 00007f7994738279 [ 1193.453147][ T2682] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 1193.461091][ T2682] RBP: 00007f7994792189 R08: 0000000000000000 R09: 0000000000000000 [ 1193.469037][ T2682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.476982][ T2682] R13: 00007ffccf3671af R14: 00007f799386c300 R15: 0000000000022000 [ 1193.484928][ T2682] Modules linked in: [ 1193.489156][ T2682] ---[ end trace b78cd69f8ad74e68 ]--- [ 1193.495037][ T2682] RIP: 0010:strlen+0x3a/0x80 [ 1193.499815][ T2682] Code: c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 1193.519653][ T2682] RSP: 0018:ffffc90000c17b68 EFLAGS: 00010246 [ 1193.525898][ T2682] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 1193.533995][ T2682] RDX: ffffc90009966000 RSI: 000000000003ffff RDI: 0000000000000000 [ 1193.542106][ T2682] RBP: ffffc90000c17b88 R08: ffffffff81d1390c R09: fffff52000182f75 [ 1193.550271][ T2682] R10: fffff52000182f75 R11: 1ffff92000182f74 R12: ffffffffffffffff [ 1193.558516][ T2682] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1193.566640][ T2682] FS: 00007f799386c700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1193.575718][ T2682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1193.582427][ T2682] CR2: 0000001b2d123000 CR3: 000000010f22d000 CR4: 00000000003506b0 [ 1193.590550][ T2682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1193.598667][ T2682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1193.606774][ T2682] Kernel panic - not syncing: Fatal exception [ 1193.612951][ T2682] Kernel Offset: disabled [ 1193.617256][ T2682] Rebooting in 86400 seconds..