rl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x205c0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x205c0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x205c0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:47 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:47 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) [ 2764.572241][T10665] tipc: 32-bit node address hash set to 0 [ 2764.582332][ T376] tipc: 32-bit node address hash set to 0 [ 2764.588067][ T376] tipc: 32-bit node address hash set to 0 05:10:47 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) 05:10:47 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e0, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa423}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @remote, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b28379f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffa}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff91a}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8001}, 0x4004000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:47 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e0, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa423}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @remote, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b28379f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffa}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff91a}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8001}, 0x4004000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e0, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa423}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @remote, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b28379f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffa}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff91a}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8001}, 0x4004000) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) 05:10:47 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async, rerun: 64) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e0, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa423}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @remote, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b28379f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffa}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff91a}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8001}, 0x4004000) (async, rerun: 64) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:47 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) recvmmsg$unix(r1, &(0x7f0000002440)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000840)=""/178, 0xb2}], 0x8, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000b40)=""/55, 0x37}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/219, 0xdb}, {&(0x7f0000000d40)=""/174, 0xae}, {&(0x7f0000000e00)=""/243, 0xf3}], 0x6}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000001000)=""/71, 0x47}], 0x1, &(0x7f0000001080)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000010c0)=""/227, 0xe3}, {&(0x7f00000011c0)=""/235, 0xeb}, {&(0x7f00000012c0)=""/86, 0x56}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}], 0x4, 0x40000100, 0x0) sendto$unix(r2, &(0x7f0000000040)="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", 0xfe, 0x0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) [ 2764.712294][T10665] tipc: 32-bit node address hash set to 0 [ 2764.722370][ T376] tipc: 32-bit node address hash set to 0 [ 2764.728126][ T376] tipc: 32-bit node address hash set to 0 [ 2764.852251][T10665] tipc: 32-bit node address hash set to 0 [ 2764.872253][ T376] tipc: 32-bit node address hash set to 0 [ 2764.878000][ T376] tipc: 32-bit node address hash set to 0 05:10:48 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) 05:10:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) 05:10:48 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:48 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) 05:10:48 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) 05:10:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) [ 2764.992249][T10665] tipc: 32-bit node address hash set to 0 [ 2765.013723][ T376] tipc: 32-bit node address hash set to 0 [ 2765.019671][ T376] tipc: 32-bit node address hash set to 0 05:10:48 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4b49, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) 05:10:48 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) [ 2765.063566][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2765.123745][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2765.133750][T32365] tipc: 32-bit node address hash set to 0 [ 2765.152244][ T376] tipc: 32-bit node address hash set to 0 [ 2765.158006][ T376] tipc: 32-bit node address hash set to 0 [ 2765.272268][T32365] tipc: 32-bit node address hash set to 0 [ 2765.292235][ T376] tipc: 32-bit node address hash set to 0 [ 2765.297991][ T376] tipc: 32-bit node address hash set to 0 [ 2765.412249][T32365] tipc: 32-bit node address hash set to 0 [ 2765.432227][ T376] tipc: 32-bit node address hash set to 0 [ 2765.437982][ T376] tipc: 32-bit node address hash set to 0 05:10:48 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) (async) recvmmsg$unix(r1, &(0x7f0000002440)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000840)=""/178, 0xb2}], 0x8, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000b40)=""/55, 0x37}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/219, 0xdb}, {&(0x7f0000000d40)=""/174, 0xae}, {&(0x7f0000000e00)=""/243, 0xf3}], 0x6}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000001000)=""/71, 0x47}], 0x1, &(0x7f0000001080)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000010c0)=""/227, 0xe3}, {&(0x7f00000011c0)=""/235, 0xeb}, {&(0x7f00000012c0)=""/86, 0x56}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}], 0x4, 0x40000100, 0x0) (async) sendto$unix(r2, &(0x7f0000000040)="6e6b2cefd35f2d778baf02b09a4bd9382bfb86468e0012b17c49df2dc880e76bf61b01a75303334e9061300aa8a3c9ddd97967edd1c6a54b597d4c227cbe71c74caff24e169ec31c0eeac66249d76016f9c32277af7a89371030108899bd167cf27bd108a2aff2e48c224eb8dd85416459430ff3fbf1763b3aedbe9fe768df44cf077e27b8157e987287e9b820af0c1e0949c15a8c7033d2aa88be27a929e0b45e27186029cff98ffcd6e757417a5b72d9bd0bc4d3fcd3725fe34b8921e3cf928432027f4aef4ce2846ce47ae289e47a3a6d67948dc2a0b0d5c473c36f96909fbefb185ffb881664f57b531bd8d130f04f9ef43890afe61e0f2573e17b3b", 0xfe, 0x0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:48 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) 05:10:48 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:48 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) 05:10:48 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4b47, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:48 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) 05:10:48 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:10:48 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) 05:10:48 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) 05:10:48 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:48 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) [ 2765.552262][T32365] tipc: 32-bit node address hash set to 0 [ 2765.559033][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2765.572231][T13339] tipc: 32-bit node address hash set to 0 [ 2765.578014][T13339] tipc: 32-bit node address hash set to 0 [ 2765.607841][ T5169] udevd[5169]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2765.692227][T32365] tipc: 32-bit node address hash set to 0 [ 2765.712242][T13339] tipc: 32-bit node address hash set to 0 [ 2765.717983][T13339] tipc: 32-bit node address hash set to 0 [ 2765.832306][T32365] tipc: 32-bit node address hash set to 0 [ 2765.852229][T13339] tipc: 32-bit node address hash set to 0 [ 2765.858242][T13339] tipc: 32-bit node address hash set to 0 [ 2765.972233][T32365] tipc: 32-bit node address hash set to 0 [ 2765.992228][T13339] tipc: 32-bit node address hash set to 0 [ 2765.997993][T13339] tipc: 32-bit node address hash set to 0 [ 2766.112275][T32365] tipc: 32-bit node address hash set to 0 [ 2766.132230][T13339] tipc: 32-bit node address hash set to 0 [ 2766.137973][T13339] tipc: 32-bit node address hash set to 0 [ 2766.252273][T32365] tipc: 32-bit node address hash set to 0 [ 2766.272228][T13339] tipc: 32-bit node address hash set to 0 [ 2766.277972][T13339] tipc: 32-bit node address hash set to 0 05:10:49 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) recvmmsg$unix(r1, &(0x7f0000002440)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000840)=""/178, 0xb2}], 0x8, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000b40)=""/55, 0x37}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/219, 0xdb}, {&(0x7f0000000d40)=""/174, 0xae}, {&(0x7f0000000e00)=""/243, 0xf3}], 0x6}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000001000)=""/71, 0x47}], 0x1, &(0x7f0000001080)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000010c0)=""/227, 0xe3}, {&(0x7f00000011c0)=""/235, 0xeb}, {&(0x7f00000012c0)=""/86, 0x56}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}], 0x4, 0x40000100, 0x0) sendto$unix(r2, &(0x7f0000000040)="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", 0xfe, 0x0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)) (async) recvmsg$unix(r2, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) (async) recvmmsg$unix(r1, &(0x7f0000002440)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000840)=""/178, 0xb2}], 0x8, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000b40)=""/55, 0x37}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/219, 0xdb}, {&(0x7f0000000d40)=""/174, 0xae}, {&(0x7f0000000e00)=""/243, 0xf3}], 0x6}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000001000)=""/71, 0x47}], 0x1, &(0x7f0000001080)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000010c0)=""/227, 0xe3}, {&(0x7f00000011c0)=""/235, 0xeb}, {&(0x7f00000012c0)=""/86, 0x56}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}], 0x4, 0x40000100, 0x0) (async) sendto$unix(r2, &(0x7f0000000040)="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", 0xfe, 0x0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) 05:10:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x1328, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd03b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff7dcd}]}, @TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xc3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x401, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x208}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NODE={0x1064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "80b66f7207e14b34c04dc19072a257a808c59470976a1cf85d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}]}, 0x1328}, 0x1, 0x0, 0x0, 0x8006}, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) 05:10:49 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:10:49 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:10:49 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xb) 05:10:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (fail_nth: 1) 05:10:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x1328, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd03b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff7dcd}]}, @TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xc3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x401, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x208}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NODE={0x1064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "80b66f7207e14b34c04dc19072a257a808c59470976a1cf85d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}]}, 0x1328}, 0x1, 0x0, 0x0, 0x8006}, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) 05:10:49 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xb) 05:10:49 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x40086602, 0xb) [ 2766.366473][ T5640] FAULT_INJECTION: forcing a failure. [ 2766.366473][ T5640] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.380582][ T5640] CPU: 1 PID: 5640 Comm: syz-executor.0 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2766.390726][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.392232][T32365] tipc: 32-bit node address hash set to 0 [ 2766.400750][ T5640] Call Trace: [ 2766.400766][ T5640] dump_stack+0x18e/0x1de [ 2766.400782][ T5640] should_fail+0x5d8/0x740 [ 2766.418418][ T5640] ? __alloc_skb+0x75/0x4d0 [ 2766.422897][ T5640] should_failslab+0x5/0x20 [ 2766.427372][ T5640] kmem_cache_alloc+0x36/0x290 [ 2766.432106][ T5640] __alloc_skb+0x75/0x4d0 [ 2766.436576][ T5640] ? netlink_autobind+0x163/0x190 [ 2766.441567][ T5640] netlink_sendmsg+0x6d3/0xbd0 [ 2766.446300][ T5640] ? netlink_getsockopt+0x8e0/0x8e0 [ 2766.451465][ T5640] ____sys_sendmsg+0x4ee/0x7c0 [ 2766.456205][ T5640] __sys_sendmsg+0x235/0x2f0 [ 2766.460767][ T5640] do_syscall_64+0xcb/0x1e0 [ 2766.465327][ T5640] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2766.471186][ T5640] RIP: 0033:0x7f283c469059 [ 2766.475568][ T5640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2766.495140][ T5640] RSP: 002b:00007f283b5df168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2766.503519][ T5640] RAX: ffffffffffffffda RBX: 00007f283c57bf60 RCX: 00007f283c469059 05:10:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (fail_nth: 2) 05:10:49 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) [ 2766.511460][ T5640] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 2766.519402][ T5640] RBP: 00007f283b5df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2766.527345][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2766.532230][T32365] tipc: 32-bit node address hash set to 0 [ 2766.535288][ T5640] R13: 00007fff9744b80f R14: 00007f283b5df300 R15: 0000000000022000 [ 2766.535572][T13339] tipc: 32-bit node address hash set to 0 [ 2766.542032][T32365] tipc: 32-bit node address hash set to 0 05:10:49 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x40086602, 0xb) [ 2766.570046][ T5647] FAULT_INJECTION: forcing a failure. [ 2766.570046][ T5647] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.591857][ T5647] CPU: 1 PID: 5647 Comm: syz-executor.0 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2766.601996][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.612023][ T5647] Call Trace: [ 2766.615285][ T5647] dump_stack+0x18e/0x1de [ 2766.619587][ T5647] should_fail+0x5d8/0x740 [ 2766.623974][ T5647] ? netlink_sendmsg+0x6d3/0xbd0 [ 2766.628877][ T5647] should_failslab+0x5/0x20 [ 2766.633347][ T5647] __kmalloc_track_caller+0x5d/0x2e0 [ 2766.638597][ T5647] ? kmem_cache_alloc+0x115/0x290 [ 2766.643589][ T5647] ? netlink_sendmsg+0x6d3/0xbd0 [ 2766.648493][ T5647] __alloc_skb+0xaf/0x4d0 [ 2766.652788][ T5647] ? netlink_autobind+0x163/0x190 [ 2766.657777][ T5647] netlink_sendmsg+0x6d3/0xbd0 [ 2766.662510][ T5647] ? netlink_getsockopt+0x8e0/0x8e0 [ 2766.667672][ T5647] ____sys_sendmsg+0x4ee/0x7c0 [ 2766.672278][T32365] tipc: 32-bit node address hash set to 0 [ 2766.672406][ T5647] __sys_sendmsg+0x235/0x2f0 [ 2766.682670][ T5647] do_syscall_64+0xcb/0x1e0 [ 2766.687152][ T5647] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2766.693010][ T5647] RIP: 0033:0x7f283c469059 [ 2766.697398][ T5647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2766.716967][ T5647] RSP: 002b:00007f283b5df168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2766.725341][ T5647] RAX: ffffffffffffffda RBX: 00007f283c57bf60 RCX: 00007f283c469059 [ 2766.733279][ T5647] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 2766.741220][ T5647] RBP: 00007f283b5df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2766.749158][ T5647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2766.757098][ T5647] R13: 00007fff9744b80f R14: 00007f283b5df300 R15: 0000000000022000 05:10:50 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000040)={0xb}, 0xb) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x2}, 0x7) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7}, 0x7) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) write$9p(r1, &(0x7f0000000040)="6b320ae49b043b0d446b54b29b1cd7e2be4b210a63682db1faa84c1983fa02576d2d131e5ccd17045006e35ed91af10563f6a405bb61e4bab65918393d2c72864e0dbed7469001f1851ed789c7b99a6c32bce7f0a4f053b385ab2ac919eacbf91064c28998bdd13824675ef2fa4c82dfed8d", 0x72) r3 = syz_io_uring_complete(0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x46, 0x8000) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x1328, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd03b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff7dcd}]}, @TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xc3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x401, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x208}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NODE={0x1064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "80b66f7207e14b34c04dc19072a257a808c59470976a1cf85d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}]}, 0x1328}, 0x1, 0x0, 0x0, 0x8006}, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) 05:10:50 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xb) 05:10:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 1) 05:10:50 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x40086602, 0xb) 05:10:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (fail_nth: 3) 05:10:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x1328, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd03b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff7dcd}]}, @TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xc3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x401, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x208}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NODE={0x1064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "80b66f7207e14b34c04dc19072a257a808c59470976a1cf85d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}]}, 0x1328}, 0x1, 0x0, 0x0, 0x8006}, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2766.767917][T13339] tipc: 32-bit node address hash set to 0 [ 2766.776174][T13339] tipc: 32-bit node address hash set to 0 [ 2766.794599][ T5668] FAULT_INJECTION: forcing a failure. [ 2766.794599][ T5668] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.799999][ T5677] FAULT_INJECTION: forcing a failure. [ 2766.799999][ T5677] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.813839][ T5668] CPU: 0 PID: 5668 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2766.830010][ T5668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.840042][ T5668] Call Trace: [ 2766.843313][ T5668] dump_stack+0x18e/0x1de [ 2766.847624][ T5668] should_fail+0x5d8/0x740 [ 2766.852016][ T5668] ? loop_add+0x56/0x710 [ 2766.856264][ T5668] should_failslab+0x5/0x20 [ 2766.860750][ T5668] kmem_cache_alloc_trace+0x39/0x2b0 [ 2766.866014][ T5668] loop_add+0x56/0x710 [ 2766.870063][ T5668] ? radix_tree_lookup+0x17a/0x1d0 [ 2766.875149][ T5668] loop_control_ioctl+0x468/0x680 [ 2766.880150][ T5668] ? xor_init+0x60/0x60 [ 2766.884455][ T5668] do_vfs_ioctl+0x6fb/0x15b0 [ 2766.889033][ T5668] __x64_sys_ioctl+0xd4/0x110 [ 2766.893695][ T5668] do_syscall_64+0xcb/0x1e0 [ 2766.898186][ T5668] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2766.902231][T13339] tipc: 32-bit node address hash set to 0 [ 2766.904056][ T5668] RIP: 0033:0x7f02d6ed5059 05:10:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x2, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2766.904066][ T5668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2766.904076][ T5668] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2766.909786][T13339] tipc: 32-bit node address hash set to 0 [ 2766.914156][ T5668] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2766.914161][ T5668] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2766.914165][ T5668] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 05:10:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) [ 2766.914170][ T5668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2766.914174][ T5668] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2766.914381][T32365] tipc: 32-bit node address hash set to 0 [ 2766.937071][ T5677] CPU: 1 PID: 5677 Comm: syz-executor.0 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2767.003709][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2767.013809][ T5677] Call Trace: [ 2767.017083][ T5677] dump_stack+0x18e/0x1de [ 2767.021381][ T5677] should_fail+0x5d8/0x740 [ 2767.025768][ T5677] ? __alloc_skb+0x75/0x4d0 [ 2767.030237][ T5677] should_failslab+0x5/0x20 [ 2767.034707][ T5677] kmem_cache_alloc+0x36/0x290 [ 2767.039442][ T5677] ? stack_trace_save+0x160/0x160 [ 2767.044441][ T5677] __alloc_skb+0x75/0x4d0 [ 2767.048742][ T5677] ? mutex_lock+0x6c/0xc0 [ 2767.052285][T32365] tipc: 32-bit node address hash set to 0 [ 2767.053050][ T5677] netlink_dump+0x1ed/0x10c0 [ 2767.063299][ T5677] ? __netlink_lookup+0x460/0x4b0 [ 2767.068290][ T5677] __netlink_dump_start+0x4df/0x620 [ 2767.073459][ T5677] genl_rcv_msg+0xb6c/0x1370 [ 2767.078019][ T5677] ? genl_rcv_msg+0x1370/0x1370 [ 2767.082832][ T5677] ? genl_lock_start+0xa0/0xa0 [ 2767.087562][ T5677] ? genl_lock_dumpit+0x80/0x80 [ 2767.092382][ T5677] netlink_rcv_skb+0x1a0/0x3b0 [ 2767.097124][ T5677] ? genl_rcv+0x40/0x40 [ 2767.101246][ T5677] genl_rcv+0x24/0x40 [ 2767.106239][ T5677] netlink_unicast+0x7ae/0x910 [ 2767.110981][ T5677] netlink_sendmsg+0x917/0xbd0 [ 2767.115711][ T5677] ? netlink_getsockopt+0x8e0/0x8e0 [ 2767.120892][ T5677] ____sys_sendmsg+0x4ee/0x7c0 [ 2767.125624][ T5677] __sys_sendmsg+0x235/0x2f0 [ 2767.130188][ T5677] do_syscall_64+0xcb/0x1e0 [ 2767.134662][ T5677] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2767.140520][ T5677] RIP: 0033:0x7f283c469059 [ 2767.144913][ T5677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2767.164488][ T5677] RSP: 002b:00007f283b5df168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:10:50 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000040)={0xb}, 0xb) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x2}, 0x7) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7}, 0x7) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) write$9p(r1, &(0x7f0000000040)="6b320ae49b043b0d446b54b29b1cd7e2be4b210a63682db1faa84c1983fa02576d2d131e5ccd17045006e35ed91af10563f6a405bb61e4bab65918393d2c72864e0dbed7469001f1851ed789c7b99a6c32bce7f0a4f053b385ab2ac919eacbf91064c28998bdd13824675ef2fa4c82dfed8d", 0x72) r3 = syz_io_uring_complete(0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x46, 0x8000) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) pipe2$9p(&(0x7f0000000000), 0x0) (async) write$P9_RREADDIR(r1, &(0x7f0000000040)={0xb}, 0xb) (async) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x2}, 0x7) (async) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7}, 0x7) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) (async) write$9p(r1, &(0x7f0000000040)="6b320ae49b043b0d446b54b29b1cd7e2be4b210a63682db1faa84c1983fa02576d2d131e5ccd17045006e35ed91af10563f6a405bb61e4bab65918393d2c72864e0dbed7469001f1851ed789c7b99a6c32bce7f0a4f053b385ab2ac919eacbf91064c28998bdd13824675ef2fa4c82dfed8d", 0x72) (async) syz_io_uring_complete(0x0) (async) syz_open_dev$loop(&(0x7f0000000140), 0x46, 0x8000) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) 05:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:50 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:10:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 2) 05:10:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) [ 2767.172863][ T5677] RAX: ffffffffffffffda RBX: 00007f283c57bf60 RCX: 00007f283c469059 [ 2767.180810][ T5677] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 2767.188755][ T5677] RBP: 00007f283b5df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.196694][ T5677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2767.204631][ T5677] R13: 00007fff9744b80f R14: 00007f283b5df300 R15: 0000000000022000 05:10:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (fail_nth: 4) 05:10:50 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000040)={0xb}, 0xb) (async, rerun: 64) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x2}, 0x7) (rerun: 64) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7}, 0x7) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) write$9p(r1, &(0x7f0000000040)="6b320ae49b043b0d446b54b29b1cd7e2be4b210a63682db1faa84c1983fa02576d2d131e5ccd17045006e35ed91af10563f6a405bb61e4bab65918393d2c72864e0dbed7469001f1851ed789c7b99a6c32bce7f0a4f053b385ab2ac919eacbf91064c28998bdd13824675ef2fa4c82dfed8d", 0x72) (async) r3 = syz_io_uring_complete(0x0) (async) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x46, 0x8000) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:50 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) [ 2767.225344][ T376] tipc: 32-bit node address hash set to 0 [ 2767.231146][ T376] tipc: 32-bit node address hash set to 0 [ 2767.249340][ T5713] FAULT_INJECTION: forcing a failure. [ 2767.249340][ T5713] name failslab, interval 1, probability 0, space 0, times 0 05:10:50 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) [ 2767.268100][ T5713] CPU: 1 PID: 5713 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2767.278249][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2767.282883][ T5719] FAULT_INJECTION: forcing a failure. [ 2767.282883][ T5719] name failslab, interval 1, probability 0, space 0, times 0 [ 2767.288283][ T5713] Call Trace: [ 2767.288298][ T5713] dump_stack+0x18e/0x1de [ 2767.288315][ T5713] should_fail+0x5d8/0x740 [ 2767.312816][ T5713] ? blk_mq_alloc_tag_set+0x312/0xe60 [ 2767.318165][ T5713] should_failslab+0x5/0x20 [ 2767.322660][ T5713] __kmalloc+0x5f/0x2f0 [ 2767.326797][ T5713] blk_mq_alloc_tag_set+0x312/0xe60 [ 2767.331971][ T5713] ? idr_alloc+0x1c3/0x280 [ 2767.336362][ T5713] loop_add+0x22b/0x710 [ 2767.340490][ T5713] ? radix_tree_lookup+0x17a/0x1d0 [ 2767.345583][ T5713] loop_control_ioctl+0x468/0x680 [ 2767.350584][ T5713] ? xor_init+0x60/0x60 [ 2767.354714][ T5713] do_vfs_ioctl+0x6fb/0x15b0 [ 2767.359279][ T5713] __x64_sys_ioctl+0xd4/0x110 [ 2767.363953][ T5713] do_syscall_64+0xcb/0x1e0 [ 2767.368435][ T5713] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2767.374308][ T5713] RIP: 0033:0x7f02d6ed5059 [ 2767.378698][ T5713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2767.398271][ T5713] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2767.406661][ T5713] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2767.414604][ T5713] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2767.422549][ T5713] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.430492][ T5713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2767.438438][ T5713] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2767.446396][ T5719] CPU: 0 PID: 5719 Comm: syz-executor.0 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2767.447886][ T376] tipc: 32-bit node address hash set to 0 [ 2767.456530][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2767.456533][ T5719] Call Trace: 05:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x2, 0x3) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 3) 05:10:50 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x40086602, 0xb) 05:10:50 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x40086602, 0xb) 05:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2767.456546][ T5719] dump_stack+0x18e/0x1de [ 2767.456558][ T5719] should_fail+0x5d8/0x740 [ 2767.456567][ T5719] ? netlink_dump+0x1ed/0x10c0 [ 2767.456582][ T5719] should_failslab+0x5/0x20 [ 2767.462493][ T376] tipc: 32-bit node address hash set to 0 [ 2767.472298][ T5719] __kmalloc_track_caller+0x5d/0x2e0 [ 2767.472306][ T5719] ? kmem_cache_alloc+0x115/0x290 [ 2767.472315][ T5719] ? stack_trace_save+0x160/0x160 [ 2767.472327][ T5719] ? netlink_dump+0x1ed/0x10c0 [ 2767.519261][ T5719] __alloc_skb+0xaf/0x4d0 05:10:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2767.523583][ T5719] ? mutex_lock+0x6c/0xc0 [ 2767.527908][ T5719] netlink_dump+0x1ed/0x10c0 [ 2767.528735][ T5736] FAULT_INJECTION: forcing a failure. [ 2767.528735][ T5736] name failslab, interval 1, probability 0, space 0, times 0 [ 2767.532492][ T5719] ? __netlink_lookup+0x460/0x4b0 [ 2767.532502][ T5719] __netlink_dump_start+0x4df/0x620 [ 2767.532511][ T5719] genl_rcv_msg+0xb6c/0x1370 [ 2767.532520][ T5719] ? genl_rcv_msg+0x1370/0x1370 [ 2767.532534][ T5719] ? genl_lock_start+0xa0/0xa0 [ 2767.569352][ T5719] ? genl_lock_dumpit+0x80/0x80 [ 2767.574182][ T5719] netlink_rcv_skb+0x1a0/0x3b0 [ 2767.578936][ T5719] ? genl_rcv+0x40/0x40 [ 2767.582347][ T376] tipc: 32-bit node address hash set to 0 [ 2767.583099][ T5719] genl_rcv+0x24/0x40 [ 2767.591009][ T376] tipc: 32-bit node address hash set to 0 [ 2767.592742][ T5719] netlink_unicast+0x7ae/0x910 [ 2767.592753][ T5719] netlink_sendmsg+0x917/0xbd0 [ 2767.592763][ T5719] ? netlink_getsockopt+0x8e0/0x8e0 [ 2767.592776][ T5719] ____sys_sendmsg+0x4ee/0x7c0 [ 2767.617845][ T5719] __sys_sendmsg+0x235/0x2f0 [ 2767.622423][ T5719] do_syscall_64+0xcb/0x1e0 [ 2767.626904][ T5719] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2767.632776][ T5719] RIP: 0033:0x7f283c469059 [ 2767.637167][ T5719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2767.656764][ T5719] RSP: 002b:00007f283b5df168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2767.665147][ T5719] RAX: ffffffffffffffda RBX: 00007f283c57bf60 RCX: 00007f283c469059 [ 2767.673094][ T5719] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 2767.681040][ T5719] RBP: 00007f283b5df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.688986][ T5719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2767.697190][ T5719] R13: 00007fff9744b80f R14: 00007f283b5df300 R15: 0000000000022000 [ 2767.705143][ T5736] CPU: 1 PID: 5736 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2767.705785][T32365] tipc: 32-bit node address hash set to 0 [ 2767.715276][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2767.715279][ T5736] Call Trace: [ 2767.715293][ T5736] dump_stack+0x18e/0x1de [ 2767.715310][ T5736] should_fail+0x5d8/0x740 [ 2767.742999][ T5736] ? blk_mq_alloc_tag_set+0x3ca/0xe60 [ 2767.748339][ T5736] should_failslab+0x5/0x20 [ 2767.752816][ T5736] __kmalloc+0x5f/0x2f0 [ 2767.756940][ T5736] ? blk_mq_alloc_tag_set+0x312/0xe60 [ 2767.762299][ T5736] blk_mq_alloc_tag_set+0x3ca/0xe60 [ 2767.767811][ T5736] loop_add+0x22b/0x710 [ 2767.771946][ T5736] ? radix_tree_lookup+0x17a/0x1d0 [ 2767.777023][ T5736] loop_control_ioctl+0x468/0x680 [ 2767.782024][ T5736] ? xor_init+0x60/0x60 [ 2767.786155][ T5736] do_vfs_ioctl+0x6fb/0x15b0 [ 2767.790716][ T5736] __x64_sys_ioctl+0xd4/0x110 [ 2767.795360][ T5736] do_syscall_64+0xcb/0x1e0 [ 2767.799832][ T5736] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2767.805701][ T5736] RIP: 0033:0x7f02d6ed5059 [ 2767.810083][ T5736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2767.829651][ T5736] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2767.838027][ T5736] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2767.845968][ T5736] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2767.853916][ T5736] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.861864][ T5736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2767.869819][ T5736] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (fail_nth: 5) 05:10:51 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x40086602, 0xb) 05:10:51 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x305801, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 4) 05:10:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (fail_nth: 1) 05:10:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xb) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2767.878053][ T376] tipc: 32-bit node address hash set to 0 [ 2767.891308][ T376] tipc: 32-bit node address hash set to 0 [ 2767.903321][T13339] tipc: 32-bit node address hash set to 0 05:10:51 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x305801, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:51 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xb) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x300, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2767.955144][ T5754] FAULT_INJECTION: forcing a failure. [ 2767.955144][ T5754] name failslab, interval 1, probability 0, space 0, times 0 [ 2767.970668][ T5754] CPU: 1 PID: 5754 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2767.980824][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2767.990863][ T5754] Call Trace: [ 2767.994137][ T5754] dump_stack+0x18e/0x1de [ 2767.998477][ T5754] should_fail+0x5d8/0x740 [ 2768.002862][ T5754] ? blk_mq_init_tags+0x74/0x290 [ 2768.007768][ T5754] should_failslab+0x5/0x20 [ 2768.012241][T32365] tipc: 32-bit node address hash set to 0 [ 2768.012251][ T5754] kmem_cache_alloc_trace+0x39/0x2b0 [ 2768.012264][ T5754] blk_mq_init_tags+0x74/0x290 [ 2768.027958][ T5754] ? blk_mq_hw_queue_to_node+0xeb/0x100 [ 2768.033477][ T5754] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2768.038480][ T5754] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 2768.043671][ T5754] loop_add+0x22b/0x710 [ 2768.047802][ T5754] ? radix_tree_lookup+0x17a/0x1d0 [ 2768.052881][ T5754] loop_control_ioctl+0x468/0x680 [ 2768.057876][ T5754] ? xor_init+0x60/0x60 [ 2768.062011][ T5754] do_vfs_ioctl+0x6fb/0x15b0 [ 2768.066573][ T5754] __x64_sys_ioctl+0xd4/0x110 [ 2768.071217][ T5754] do_syscall_64+0xcb/0x1e0 [ 2768.075702][ T5754] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2768.081573][ T5754] RIP: 0033:0x7f02d6ed5059 [ 2768.085975][ T5754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2768.105548][ T5754] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2768.113986][ T5754] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2768.121934][ T5754] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2768.129908][ T5754] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2768.137852][ T5754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2768.145793][ T5754] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 05:10:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 5) 05:10:51 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c82, 0xb) 05:10:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0xe80, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:10:51 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x305801, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:51 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x4000, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2768.152247][T32365] tipc: 32-bit node address hash set to 0 [ 2768.153829][T13339] tipc: 32-bit node address hash set to 0 [ 2768.160480][T32365] tipc: 32-bit node address hash set to 0 [ 2768.167674][ T5754] blk-mq: reduced tag depth (128 -> 64) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x6fdb, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x305801, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x305801, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x800e, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x2, 0xb) [ 2768.233961][ T5788] FAULT_INJECTION: forcing a failure. [ 2768.233961][ T5788] name failslab, interval 1, probability 0, space 0, times 0 [ 2768.248735][ T5788] CPU: 0 PID: 5788 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2768.258889][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.268915][ T5788] Call Trace: [ 2768.272181][ T5788] dump_stack+0x18e/0x1de [ 2768.276483][ T5788] should_fail+0x5d8/0x740 [ 2768.280868][ T5788] ? sbitmap_init_node+0x145/0x3d0 [ 2768.285947][ T5788] should_failslab+0x5/0x20 [ 2768.290429][ T5788] __kmalloc+0x5f/0x2f0 [ 2768.292244][T13339] tipc: 32-bit node address hash set to 0 [ 2768.294600][ T5788] sbitmap_init_node+0x145/0x3d0 [ 2768.300313][T13339] tipc: 32-bit node address hash set to 0 [ 2768.305206][ T5788] sbitmap_queue_init_node+0x2f/0xbe0 [ 2768.305216][ T5788] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 2768.305223][ T5788] ? blk_mq_init_tags+0x74/0x290 [ 2768.305232][ T5788] blk_mq_init_tags+0xef/0x290 [ 2768.305244][ T5788] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2768.336409][ T5788] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 2768.341583][ T5788] loop_add+0x22b/0x710 [ 2768.345707][ T5788] ? radix_tree_lookup+0x17a/0x1d0 [ 2768.350787][ T5788] loop_control_ioctl+0x468/0x680 [ 2768.355782][ T5788] ? xor_init+0x60/0x60 [ 2768.359905][ T5788] do_vfs_ioctl+0x6fb/0x15b0 [ 2768.364467][ T5788] __x64_sys_ioctl+0xd4/0x110 [ 2768.369133][ T5788] do_syscall_64+0xcb/0x1e0 [ 2768.373608][ T5788] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2768.379467][ T5788] RIP: 0033:0x7f02d6ed5059 [ 2768.383849][ T5788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2768.403506][ T5788] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2768.411883][ T5788] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2768.419823][ T5788] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:10:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 6) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0xdb6f, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x38000, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x800300, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2768.427763][ T5788] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2768.432236][T13339] tipc: 32-bit node address hash set to 0 [ 2768.435706][ T5788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2768.435711][ T5788] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2768.436266][ T5788] blk-mq: reduced tag depth (128 -> 64) [ 2768.442592][T13339] tipc: 32-bit node address hash set to 0 05:10:51 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x305801, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x1000000, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2768.509630][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2768.529544][ T5817] FAULT_INJECTION: forcing a failure. [ 2768.529544][ T5817] name failslab, interval 1, probability 0, space 0, times 0 [ 2768.543897][ T5817] CPU: 0 PID: 5817 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2768.554037][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.564059][ T5817] Call Trace: [ 2768.567340][ T5817] dump_stack+0x18e/0x1de [ 2768.571640][ T5817] should_fail+0x5d8/0x740 [ 2768.576023][ T5817] ? sbitmap_queue_init_node+0x3db/0xbe0 [ 2768.581621][ T5817] should_failslab+0x5/0x20 [ 2768.586091][ T5817] kmem_cache_alloc_trace+0x39/0x2b0 [ 2768.591353][ T5817] sbitmap_queue_init_node+0x3db/0xbe0 [ 2768.596799][ T5817] blk_mq_init_tags+0xef/0x290 [ 2768.601535][ T5817] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2768.606534][ T5817] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 2768.611712][ T5817] loop_add+0x22b/0x710 [ 2768.615832][ T5817] ? radix_tree_lookup+0x17a/0x1d0 [ 2768.620907][ T5817] loop_control_ioctl+0x468/0x680 [ 2768.625899][ T5817] ? xor_init+0x60/0x60 [ 2768.630025][ T5817] do_vfs_ioctl+0x6fb/0x15b0 [ 2768.634582][ T5817] __x64_sys_ioctl+0xd4/0x110 [ 2768.639242][ T5817] do_syscall_64+0xcb/0x1e0 [ 2768.643723][ T5817] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2768.649581][ T5817] RIP: 0033:0x7f02d6ed5059 [ 2768.653961][ T5817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2768.673531][ T5817] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2768.681907][ T5817] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2768.689844][ T5817] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2768.697786][ T5817] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 05:10:51 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x76d303, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) recvfrom$unix(r2, &(0x7f00000000c0)=""/160, 0xa0, 0x62, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 05:10:51 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4b47, 0xb) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x2000000, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 7) 05:10:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x3000000, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x40000000, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x800e0000, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2768.705724][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2768.713662][ T5817] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2768.721696][T32365] tipc: 32-bit node address hash set to 0 [ 2768.722362][T13339] tipc: 32-bit node address hash set to 0 [ 2768.727450][T32365] tipc: 32-bit node address hash set to 0 [ 2768.734104][ T5817] blk-mq: reduced tag depth (128 -> 64) 05:10:52 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x305801, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x9effffff, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (fail_nth: 1) 05:10:52 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async, rerun: 32) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x76d303, 0x0) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) (async) recvfrom$unix(r2, &(0x7f00000000c0)=""/160, 0xa0, 0x62, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) [ 2768.785393][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2768.806157][ T5848] FAULT_INJECTION: forcing a failure. [ 2768.806157][ T5848] name failslab, interval 1, probability 0, space 0, times 0 [ 2768.823188][ T5848] CPU: 0 PID: 5848 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2768.833393][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.843422][ T5848] Call Trace: [ 2768.846713][ T5848] dump_stack+0x18e/0x1de [ 2768.851012][ T5848] should_fail+0x5d8/0x740 [ 2768.855394][ T5848] ? sbitmap_queue_init_node+0x3db/0xbe0 [ 2768.861013][ T5848] should_failslab+0x5/0x20 [ 2768.865499][ T5848] kmem_cache_alloc_trace+0x39/0x2b0 [ 2768.870752][ T5848] sbitmap_queue_init_node+0x3db/0xbe0 [ 2768.876182][ T5848] blk_mq_init_tags+0x153/0x290 [ 2768.881001][ T5848] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2768.885992][ T5848] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 2768.891184][ T5848] loop_add+0x22b/0x710 [ 2768.895325][ T5848] ? radix_tree_lookup+0x17a/0x1d0 [ 2768.900410][ T5848] loop_control_ioctl+0x468/0x680 [ 2768.905402][ T5848] ? xor_init+0x60/0x60 [ 2768.909540][ T5848] do_vfs_ioctl+0x6fb/0x15b0 [ 2768.914120][ T5848] __x64_sys_ioctl+0xd4/0x110 [ 2768.918780][ T5848] do_syscall_64+0xcb/0x1e0 [ 2768.923256][ T5848] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2768.929119][ T5848] RIP: 0033:0x7f02d6ed5059 [ 2768.933505][ T5848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2768.953085][ T5848] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2768.961478][ T5848] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2768.969420][ T5848] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2768.977368][ T5848] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 05:10:52 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4b49, 0xb) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0xdb6f0000, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 8) 05:10:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0xefffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0xf0ffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2768.985306][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2768.993250][ T5848] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2769.001435][T32365] tipc: 32-bit node address hash set to 0 [ 2769.002419][T13339] tipc: 32-bit node address hash set to 0 [ 2769.007237][T32365] tipc: 32-bit node address hash set to 0 [ 2769.013760][ T5848] blk-mq: reduced tag depth (128 -> 64) 05:10:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x2, 0xb) 05:10:52 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x76d303, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) (async) recvfrom$unix(r2, &(0x7f00000000c0)=""/160, 0xa0, 0x62, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 05:10:52 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0xb) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0xffffff7f, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4b47, 0xb) [ 2769.070980][ T5873] FAULT_INJECTION: forcing a failure. [ 2769.070980][ T5873] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.089855][ T5873] CPU: 0 PID: 5873 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2769.100008][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.110046][ T5873] Call Trace: [ 2769.113309][ T5873] dump_stack+0x18e/0x1de [ 2769.117611][ T5873] should_fail+0x5d8/0x740 [ 2769.122106][ T5873] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2769.127273][ T5873] should_failslab+0x5/0x20 [ 2769.131741][ T5873] __kmalloc+0x5f/0x2f0 [ 2769.132233][T26969] tipc: 32-bit node address hash set to 0 [ 2769.135868][ T5873] ? blk_mq_init_tags+0x209/0x290 [ 2769.135881][ T5873] blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2769.141607][T26969] tipc: 32-bit node address hash set to 0 [ 2769.146568][ T5873] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 2769.146579][ T5873] loop_add+0x22b/0x710 [ 2769.146589][ T5873] ? radix_tree_lookup+0x17a/0x1d0 [ 2769.146602][ T5873] loop_control_ioctl+0x468/0x680 [ 2769.176641][ T5873] ? xor_init+0x60/0x60 [ 2769.180776][ T5873] do_vfs_ioctl+0x6fb/0x15b0 [ 2769.185340][ T5873] __x64_sys_ioctl+0xd4/0x110 [ 2769.189985][ T5873] do_syscall_64+0xcb/0x1e0 [ 2769.194456][ T5873] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2769.200488][ T5873] RIP: 0033:0x7f02d6ed5059 [ 2769.204887][ T5873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2769.224463][ T5873] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2769.232843][ T5873] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2769.240782][ T5873] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2769.248725][ T5873] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2769.256665][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0xffffff9e, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 9) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0xffffffef, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4b49, 0xb) 05:10:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0xf, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2769.264606][ T5873] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2769.272236][T26969] tipc: 32-bit node address hash set to 0 [ 2769.275511][ T5873] blk-mq: reduced tag depth (128 -> 64) [ 2769.279905][T26969] tipc: 32-bit node address hash set to 0 05:10:52 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x282400, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:52 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 05:10:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0xb) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, 0x0, 0x0) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0xe68, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0xe80, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2769.364156][ T5901] FAULT_INJECTION: forcing a failure. [ 2769.364156][ T5901] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.377089][ T5901] CPU: 0 PID: 5901 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2769.387318][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.397340][ T5901] Call Trace: [ 2769.400600][ T5901] dump_stack+0x18e/0x1de [ 2769.404910][ T5901] should_fail+0x5d8/0x740 [ 2769.409299][ T5901] ? blk_mq_alloc_rq_map+0xe9/0x1a0 [ 2769.414461][ T5901] should_failslab+0x5/0x20 [ 2769.418931][ T5901] __kmalloc+0x5f/0x2f0 [ 2769.423056][ T5901] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2769.428222][ T5901] ? blk_mq_init_tags+0x209/0x290 [ 2769.433230][ T5901] blk_mq_alloc_rq_map+0xe9/0x1a0 [ 2769.438221][ T5901] blk_mq_alloc_tag_set+0x6bc/0xe60 [ 2769.443384][ T5901] loop_add+0x22b/0x710 [ 2769.447506][ T5901] ? radix_tree_lookup+0x17a/0x1d0 [ 2769.452581][ T5901] loop_control_ioctl+0x468/0x680 [ 2769.457568][ T5901] ? xor_init+0x60/0x60 [ 2769.461690][ T5901] do_vfs_ioctl+0x6fb/0x15b0 [ 2769.466250][ T5901] __x64_sys_ioctl+0xd4/0x110 [ 2769.470901][ T5901] do_syscall_64+0xcb/0x1e0 [ 2769.475370][ T5901] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2769.481232][ T5901] RIP: 0033:0x7f02d6ed5059 [ 2769.485612][ T5901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2769.505177][ T5901] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2769.513551][ T5901] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2769.521489][ T5901] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2769.529436][ T5901] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2769.537381][ T5901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2769.545320][ T5901] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2769.553563][T32365] tipc: 32-bit node address hash set to 0 [ 2769.555418][ T5901] blk-mq: reduced tag depth (128 -> 64) 05:10:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 10) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x37fe0, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r0 = syz_io_uring_complete(0x0) (rerun: 32) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x282400, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x20000054, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, 0x0, 0x0) [ 2769.564910][T26969] tipc: 32-bit node address hash set to 0 [ 2769.570980][T26969] tipc: 32-bit node address hash set to 0 05:10:52 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:52 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x282400, 0x0) (async) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x7ffff000, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0xfffffdef, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x2, 0x0, {0x4}}, 0x14}}, 0x0) [ 2769.613306][ T5928] FAULT_INJECTION: forcing a failure. [ 2769.613306][ T5928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2769.627376][ T5928] CPU: 0 PID: 5928 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2769.637512][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.647547][ T5928] Call Trace: [ 2769.650818][ T5928] dump_stack+0x18e/0x1de [ 2769.655116][ T5928] should_fail+0x5d8/0x740 [ 2769.659504][ T5928] __alloc_pages_nodemask+0x12e/0x740 [ 2769.664839][ T5928] blk_mq_alloc_rqs+0x252/0x660 [ 2769.669656][ T5928] ? blk_mq_alloc_rq_map+0x11a/0x1a0 [ 2769.674903][ T5928] blk_mq_alloc_tag_set+0x74b/0xe60 [ 2769.680069][ T5928] loop_add+0x22b/0x710 [ 2769.684198][ T5928] ? radix_tree_lookup+0x17a/0x1d0 [ 2769.689295][ T5928] loop_control_ioctl+0x468/0x680 [ 2769.694289][ T5928] ? xor_init+0x60/0x60 [ 2769.698408][ T5928] do_vfs_ioctl+0x6fb/0x15b0 [ 2769.702962][ T5928] __x64_sys_ioctl+0xd4/0x110 [ 2769.707609][ T5928] do_syscall_64+0xcb/0x1e0 [ 2769.712082][ T5928] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2769.717937][ T5928] RIP: 0033:0x7f02d6ed5059 [ 2769.722334][ T5928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2769.741904][ T5928] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2769.750278][ T5928] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:10:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 11) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x3, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x300, 0x0, {0x4}}, 0x14}}, 0x0) [ 2769.758218][ T5928] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2769.766163][ T5928] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2769.774101][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2769.782045][ T5928] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2769.790072][T10665] tipc: 32-bit node address hash set to 0 [ 2769.792410][T13339] tipc: 32-bit node address hash set to 0 [ 2769.796029][T10665] tipc: 32-bit node address hash set to 0 05:10:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xb) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0xe80, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, 0x0, 0x0) [ 2769.861062][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2769.869259][ T5953] FAULT_INJECTION: forcing a failure. [ 2769.869259][ T5953] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.884517][ T5953] CPU: 0 PID: 5953 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2769.894667][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.904706][ T5953] Call Trace: [ 2769.907967][ T5953] dump_stack+0x18e/0x1de [ 2769.912266][ T5953] should_fail+0x5d8/0x740 [ 2769.916653][ T5953] ? blk_alloc_queue_node+0x2c/0x570 [ 2769.921909][ T5953] should_failslab+0x5/0x20 [ 2769.926388][ T5953] kmem_cache_alloc+0x36/0x290 [ 2769.931120][ T5953] ? __mutex_init+0x9d/0xf0 [ 2769.935594][ T5953] blk_alloc_queue_node+0x2c/0x570 [ 2769.940673][ T5953] blk_mq_init_queue+0x33/0xa0 [ 2769.945405][ T5953] loop_add+0x256/0x710 [ 2769.949531][ T5953] ? radix_tree_lookup+0x17a/0x1d0 [ 2769.954618][ T5953] loop_control_ioctl+0x468/0x680 [ 2769.959611][ T5953] ? xor_init+0x60/0x60 [ 2769.963734][ T5953] do_vfs_ioctl+0x6fb/0x15b0 [ 2769.968297][ T5953] __x64_sys_ioctl+0xd4/0x110 [ 2769.972983][ T5953] do_syscall_64+0xcb/0x1e0 [ 2769.977459][ T5953] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2769.983326][ T5953] RIP: 0033:0x7f02d6ed5059 [ 2769.987713][ T5953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2770.007328][ T5953] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2770.015708][ T5953] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2770.023648][ T5953] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2770.031595][ T5953] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2770.039541][ T5953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2770.047520][ T5953] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2770.055649][T10665] tipc: 32-bit node address hash set to 0 05:10:53 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x541b, 0xb) 05:10:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5421, 0xb) 05:10:53 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x4000, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 12) 05:10:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 05:10:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5450, 0xb) [ 2770.063917][T26969] tipc: 32-bit node address hash set to 0 [ 2770.069855][T26969] tipc: 32-bit node address hash set to 0 [ 2770.086294][ T5964] FAULT_INJECTION: forcing a failure. [ 2770.086294][ T5964] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.099943][ T5964] CPU: 0 PID: 5964 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 05:10:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 05:10:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5451, 0xb) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x6fdb, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5452, 0xb) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x800e, 0x0, {0x4}}, 0x14}}, 0x0) [ 2770.110081][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.120115][ T5964] Call Trace: [ 2770.123394][ T5964] dump_stack+0x18e/0x1de [ 2770.127713][ T5964] should_fail+0x5d8/0x740 [ 2770.132124][ T5964] ? blk_alloc_queue_node+0x2c/0x570 [ 2770.137398][ T5964] should_failslab+0x5/0x20 [ 2770.141894][ T5964] kmem_cache_alloc+0x36/0x290 [ 2770.146653][ T5964] ? __mutex_init+0x9d/0xf0 [ 2770.151141][ T5964] blk_alloc_queue_node+0x2c/0x570 [ 2770.156224][ T5964] blk_mq_init_queue+0x33/0xa0 [ 2770.160955][ T5964] loop_add+0x256/0x710 [ 2770.165082][ T5964] ? radix_tree_lookup+0x17a/0x1d0 [ 2770.170222][ T5964] loop_control_ioctl+0x468/0x680 [ 2770.175223][ T5964] ? xor_init+0x60/0x60 [ 2770.179355][ T5964] do_vfs_ioctl+0x6fb/0x15b0 [ 2770.183915][ T5964] __x64_sys_ioctl+0xd4/0x110 [ 2770.188559][ T5964] do_syscall_64+0xcb/0x1e0 [ 2770.193033][ T5964] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2770.198896][ T5964] RIP: 0033:0x7f02d6ed5059 [ 2770.203277][ T5964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2770.222849][ T5964] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2770.231226][ T5964] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2770.239166][ T5964] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2770.247264][ T5964] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2770.255308][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:10:53 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5421, 0xb) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0xdb6f, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:53 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5460, 0xb) 05:10:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 13) 05:10:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x38000, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:53 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:53 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5450, 0xb) [ 2770.263249][ T5964] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2770.271316][T10665] tipc: 32-bit node address hash set to 0 [ 2770.273185][T26969] tipc: 32-bit node address hash set to 0 [ 2770.277746][T10665] tipc: 32-bit node address hash set to 0 05:10:53 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5451, 0xb) 05:10:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x800300, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40049409, 0xb) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x1000000, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x2000000, 0x0, {0x4}}, 0x14}}, 0x0) [ 2770.323303][ T5999] FAULT_INJECTION: forcing a failure. [ 2770.323303][ T5999] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.337561][ T5999] CPU: 0 PID: 5999 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2770.347714][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.357786][ T5999] Call Trace: [ 2770.361067][ T5999] dump_stack+0x18e/0x1de [ 2770.365391][ T5999] should_fail+0x5d8/0x740 [ 2770.369797][ T5999] ? mempool_alloc_slab+0x16/0x20 [ 2770.374825][ T5999] should_failslab+0x5/0x20 [ 2770.379319][ T5999] kmem_cache_alloc+0x36/0x290 [ 2770.384062][ T5999] ? __kmalloc+0x174/0x2f0 [ 2770.388453][ T5999] ? mempool_init_node+0x131/0x500 [ 2770.393549][ T5999] mempool_alloc_slab+0x16/0x20 [ 2770.398369][ T5999] ? mempool_free+0x380/0x380 [ 2770.403018][ T5999] mempool_init_node+0x1f6/0x500 [ 2770.407934][ T5999] ? mempool_free+0x380/0x380 [ 2770.412592][ T5999] ? mempool_alloc_slab+0x20/0x20 [ 2770.417592][ T5999] mempool_init+0x35/0x50 [ 2770.421908][ T5999] bioset_init+0x465/0x610 [ 2770.426300][ T5999] blk_alloc_queue_node+0xc4/0x570 [ 2770.431381][ T5999] blk_mq_init_queue+0x33/0xa0 [ 2770.436117][ T5999] loop_add+0x256/0x710 [ 2770.440295][ T5999] ? radix_tree_lookup+0x17a/0x1d0 [ 2770.445375][ T5999] loop_control_ioctl+0x468/0x680 [ 2770.450374][ T5999] ? xor_init+0x60/0x60 [ 2770.454502][ T5999] do_vfs_ioctl+0x6fb/0x15b0 [ 2770.459069][ T5999] __x64_sys_ioctl+0xd4/0x110 [ 2770.463741][ T5999] do_syscall_64+0xcb/0x1e0 [ 2770.468214][ T5999] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2770.474088][ T5999] RIP: 0033:0x7f02d6ed5059 [ 2770.478480][ T5999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2770.498053][ T5999] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2770.506432][ T5999] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2770.514371][ T5999] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:10:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 14) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x3000000, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:53 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5452, 0xb) 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x40000000, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40087602, 0xb) 05:10:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 2770.522310][ T5999] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2770.530253][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2770.538197][ T5999] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2770.546346][T10665] tipc: 32-bit node address hash set to 0 [ 2770.553058][T10665] tipc: 32-bit node address hash set to 0 [ 2770.554040][T26969] tipc: 32-bit node address hash set to 0 05:10:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x800e0000, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:53 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 05:10:53 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5460, 0xb) [ 2770.605173][ T6027] FAULT_INJECTION: forcing a failure. [ 2770.605173][ T6027] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.625133][ T6027] CPU: 0 PID: 6027 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2770.635283][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.645319][ T6027] Call Trace: [ 2770.648599][ T6027] dump_stack+0x18e/0x1de [ 2770.652910][ T6027] should_fail+0x5d8/0x740 [ 2770.657306][ T6027] ? mempool_alloc_slab+0x16/0x20 [ 2770.662311][ T6027] should_failslab+0x5/0x20 [ 2770.666791][ T6027] kmem_cache_alloc+0x36/0x290 [ 2770.671531][ T6027] ? __kmalloc+0x174/0x2f0 [ 2770.675914][ T6027] ? mempool_init_node+0x131/0x500 [ 2770.680997][ T6027] mempool_alloc_slab+0x16/0x20 [ 2770.685827][ T6027] ? mempool_free+0x380/0x380 [ 2770.690486][ T6027] mempool_init_node+0x1f6/0x500 [ 2770.695408][ T6027] ? mempool_free+0x380/0x380 [ 2770.700065][ T6027] ? mempool_alloc_slab+0x20/0x20 [ 2770.705067][ T6027] mempool_init+0x35/0x50 [ 2770.709372][ T6027] bioset_init+0x465/0x610 [ 2770.713765][ T6027] blk_alloc_queue_node+0xc4/0x570 [ 2770.718939][ T6027] blk_mq_init_queue+0x33/0xa0 [ 2770.723683][ T6027] loop_add+0x256/0x710 [ 2770.727828][ T6027] ? radix_tree_lookup+0x17a/0x1d0 [ 2770.732913][ T6027] loop_control_ioctl+0x468/0x680 [ 2770.737922][ T6027] ? xor_init+0x60/0x60 [ 2770.742075][ T6027] do_vfs_ioctl+0x6fb/0x15b0 [ 2770.746716][ T6027] __x64_sys_ioctl+0xd4/0x110 [ 2770.751381][ T6027] do_syscall_64+0xcb/0x1e0 [ 2770.755870][ T6027] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2770.761737][ T6027] RIP: 0033:0x7f02d6ed5059 [ 2770.766243][ T6027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2770.785829][ T6027] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2770.794218][ T6027] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x9effffff, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 05:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 15) [ 2770.802166][ T6027] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2770.810121][ T6027] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2770.818072][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2770.826020][ T6027] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2770.834158][T32365] tipc: 32-bit node address hash set to 0 [ 2770.842243][T13339] tipc: 32-bit node address hash set to 0 05:10:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4020940d, 0xb) 05:10:54 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0xdb6f0000, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x80086601, 0xb) 05:10:54 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0xefffffff, 0x0, {0x4}}, 0x14}}, 0x0) [ 2770.855288][T13339] tipc: 32-bit node address hash set to 0 05:10:54 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40049409, 0xb) 05:10:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x80087601, 0xb) 05:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x0, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086608, 0xb) [ 2770.895341][ T6048] FAULT_INJECTION: forcing a failure. [ 2770.895341][ T6048] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.914995][ T6048] CPU: 0 PID: 6048 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2770.925150][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.935178][ T6048] Call Trace: [ 2770.938443][ T6048] dump_stack+0x18e/0x1de [ 2770.942751][ T6048] should_fail+0x5d8/0x740 [ 2770.947138][ T6048] ? mempool_init_node+0x131/0x500 [ 2770.952224][ T6048] should_failslab+0x5/0x20 [ 2770.956707][ T6048] __kmalloc+0x5f/0x2f0 [ 2770.960841][ T6048] ? mempool_init_node+0x131/0x500 [ 2770.965924][ T6048] mempool_init_node+0x131/0x500 [ 2770.970846][ T6048] ? mempool_free+0x380/0x380 [ 2770.975488][ T6048] ? mempool_alloc_slab+0x20/0x20 [ 2770.980481][ T6048] mempool_init+0x35/0x50 [ 2770.984777][ T6048] bioset_init+0x4da/0x610 [ 2770.989163][ T6048] blk_alloc_queue_node+0xc4/0x570 [ 2770.994242][ T6048] blk_mq_init_queue+0x33/0xa0 [ 2770.998976][ T6048] loop_add+0x256/0x710 [ 2771.003370][ T6048] ? radix_tree_lookup+0x17a/0x1d0 [ 2771.008536][ T6048] loop_control_ioctl+0x468/0x680 [ 2771.013528][ T6048] ? xor_init+0x60/0x60 [ 2771.017664][ T6048] do_vfs_ioctl+0x6fb/0x15b0 [ 2771.022229][ T6048] __x64_sys_ioctl+0xd4/0x110 [ 2771.026874][ T6048] do_syscall_64+0xcb/0x1e0 [ 2771.031347][ T6048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2771.037205][ T6048] RIP: 0033:0x7f02d6ed5059 [ 2771.041591][ T6048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2771.061162][ T6048] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2771.069539][ T6048] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2771.077488][ T6048] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2771.085424][ T6048] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 05:10:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 16) 05:10:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0xb) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0xf0ffffff, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0x6}, 0xa) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="0e615f95a4407f62f813bd333a86eb78e056efffefdd9da7180ba378df873e374069161f3722f3a0f0e985eeb41b8d1b665354edcaa993880c708d3a6b56494ba584db39d7bc7fb5ad55449d53fdffca8dcccd0102e2e8319a1b4ec0cae9aa689d8d04473fee91367466098386f6e48417fb3c206753218349c1ef0d6126", 0x7e) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0x0, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2771.093362][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2771.101300][ T6048] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2771.109444][T32365] tipc: 32-bit node address hash set to 0 [ 2771.112278][T13339] tipc: 32-bit node address hash set to 0 [ 2771.115419][T32365] tipc: 32-bit node address hash set to 0 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0xffffff7f, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0xb) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0xffffff9e, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0x0, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0xffffffef, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0xfffffff0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2771.147855][ T6075] FAULT_INJECTION: forcing a failure. [ 2771.147855][ T6075] name failslab, interval 1, probability 0, space 0, times 0 [ 2771.165242][ T6075] CPU: 1 PID: 6075 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2771.175395][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.185440][ T6075] Call Trace: [ 2771.188723][ T6075] dump_stack+0x18e/0x1de [ 2771.193054][ T6075] should_fail+0x5d8/0x740 [ 2771.197463][ T6075] ? mempool_alloc_slab+0x16/0x20 [ 2771.202471][ T6075] should_failslab+0x5/0x20 [ 2771.206951][ T6075] kmem_cache_alloc+0x36/0x290 [ 2771.211687][ T6075] ? __kmalloc+0x174/0x2f0 [ 2771.216258][ T6075] ? mempool_init_node+0x131/0x500 [ 2771.221339][ T6075] mempool_alloc_slab+0x16/0x20 [ 2771.226158][ T6075] ? mempool_free+0x380/0x380 [ 2771.230809][ T6075] mempool_init_node+0x1f6/0x500 [ 2771.235723][ T6075] ? mempool_free+0x380/0x380 [ 2771.240373][ T6075] ? mempool_alloc_slab+0x20/0x20 [ 2771.242277][T32365] tipc: 32-bit node address hash set to 0 [ 2771.245367][ T6075] mempool_init+0x35/0x50 [ 2771.245377][ T6075] bioset_init+0x4da/0x610 [ 2771.245391][ T6075] blk_alloc_queue_node+0xc4/0x570 [ 2771.264881][ T6075] blk_mq_init_queue+0x33/0xa0 [ 2771.269613][ T6075] loop_add+0x256/0x710 [ 2771.273735][ T6075] ? radix_tree_lookup+0x17a/0x1d0 [ 2771.278814][ T6075] loop_control_ioctl+0x468/0x680 [ 2771.283811][ T6075] ? xor_init+0x60/0x60 [ 2771.287948][ T6075] do_vfs_ioctl+0x6fb/0x15b0 [ 2771.292508][ T6075] __x64_sys_ioctl+0xd4/0x110 [ 2771.297152][ T6075] do_syscall_64+0xcb/0x1e0 [ 2771.301625][ T6075] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2771.307487][ T6075] RIP: 0033:0x7f02d6ed5059 [ 2771.311870][ T6075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2771.331441][ T6075] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2771.339816][ T6075] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:10:54 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40087602, 0xb) [ 2771.347757][ T6075] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2771.355697][ T6075] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.363637][ T6075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2771.371577][ T6075] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2771.379734][T26969] tipc: 32-bit node address hash set to 0 [ 2771.388825][T26969] tipc: 32-bit node address hash set to 0 05:10:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 17) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0189436, 0xb) 05:10:54 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0x6}, 0xa) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="0e615f95a4407f62f813bd333a86eb78e056efffefdd9da7180ba378df873e374069161f3722f3a0f0e985eeb41b8d1b665354edcaa993880c708d3a6b56494ba584db39d7bc7fb5ad55449d53fdffca8dcccd0102e2e8319a1b4ec0cae9aa689d8d04473fee91367466098386f6e48417fb3c206753218349c1ef0d6126", 0x7e) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0x6}, 0xa) (async) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="0e615f95a4407f62f813bd333a86eb78e056efffefdd9da7180ba378df873e374069161f3722f3a0f0e985eeb41b8d1b665354edcaa993880c708d3a6b56494ba584db39d7bc7fb5ad55449d53fdffca8dcccd0102e2e8319a1b4ec0cae9aa689d8d04473fee91367466098386f6e48417fb3c206753218349c1ef0d6126", 0x7e) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) 05:10:54 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4020940d, 0xb) 05:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0x0, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x2, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc020660b, 0xb) 05:10:54 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x80086601, 0xb) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x3, {0x4}}, 0x14}}, 0x0) [ 2771.399746][T13339] tipc: 32-bit node address hash set to 0 [ 2771.415175][ T6100] FAULT_INJECTION: forcing a failure. [ 2771.415175][ T6100] name failslab, interval 1, probability 0, space 0, times 0 [ 2771.436225][ T6100] CPU: 1 PID: 6100 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x300, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) [ 2771.446375][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.456413][ T6100] Call Trace: [ 2771.459698][ T6100] dump_stack+0x18e/0x1de [ 2771.464022][ T6100] should_fail+0x5d8/0x740 [ 2771.468423][ T6100] ? mempool_init_node+0x131/0x500 [ 2771.473518][ T6100] should_failslab+0x5/0x20 [ 2771.478002][ T6100] __kmalloc+0x5f/0x2f0 [ 2771.482138][ T6100] mempool_init_node+0x131/0x500 [ 2771.487068][ T6100] ? mempool_free+0x380/0x380 [ 2771.491714][ T6100] ? mempool_alloc_slab+0x20/0x20 [ 2771.496704][ T6100] mempool_init+0x35/0x50 [ 2771.501003][ T6100] bioset_init+0x4da/0x610 [ 2771.505387][ T6100] blk_alloc_queue_node+0xc4/0x570 [ 2771.510463][ T6100] blk_mq_init_queue+0x33/0xa0 [ 2771.515191][ T6100] loop_add+0x256/0x710 [ 2771.519311][ T6100] ? radix_tree_lookup+0x17a/0x1d0 [ 2771.524385][ T6100] loop_control_ioctl+0x468/0x680 [ 2771.529374][ T6100] ? xor_init+0x60/0x60 [ 2771.533511][ T6100] do_vfs_ioctl+0x6fb/0x15b0 [ 2771.538071][ T6100] __x64_sys_ioctl+0xd4/0x110 [ 2771.542712][ T6100] do_syscall_64+0xcb/0x1e0 [ 2771.547180][ T6100] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2771.553061][ T6100] RIP: 0033:0x7f02d6ed5059 [ 2771.557446][ T6100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2771.577028][ T6100] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2771.585404][ T6100] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:10:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 18) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0xe80, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0x6}, 0xa) (async) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="0e615f95a4407f62f813bd333a86eb78e056efffefdd9da7180ba378df873e374069161f3722f3a0f0e985eeb41b8d1b665354edcaa993880c708d3a6b56494ba584db39d7bc7fb5ad55449d53fdffca8dcccd0102e2e8319a1b4ec0cae9aa689d8d04473fee91367466098386f6e48417fb3c206753218349c1ef0d6126", 0x7e) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4460c0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:54 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x80087601, 0xb) 05:10:54 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0xb) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x4000, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4460c0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) [ 2771.593341][ T6100] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2771.601278][ T6100] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.609217][ T6100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2771.617171][ T6100] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2771.625225][T26969] tipc: 32-bit node address hash set to 0 [ 2771.630983][T26969] tipc: 32-bit node address hash set to 0 [ 2771.635090][T32365] tipc: 32-bit node address hash set to 0 05:10:54 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0xb) 05:10:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4460c0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x6fdb, {0x4}}, 0x14}}, 0x0) 05:10:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x800e, {0x4}}, 0x14}}, 0x0) [ 2771.665031][ T6143] FAULT_INJECTION: forcing a failure. [ 2771.665031][ T6143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2771.683895][ T6143] CPU: 1 PID: 6143 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2771.694039][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.704076][ T6143] Call Trace: [ 2771.707351][ T6143] dump_stack+0x18e/0x1de [ 2771.711669][ T6143] should_fail+0x5d8/0x740 [ 2771.716054][ T6143] __alloc_pages_nodemask+0x12e/0x740 [ 2771.721395][ T6143] alloc_slab_page+0x39/0x3e0 [ 2771.726058][ T6143] new_slab+0x97/0x460 [ 2771.730101][ T6143] ___slab_alloc+0x330/0x4c0 [ 2771.734682][ T6143] ? should_fail+0x13b/0x740 [ 2771.739243][ T6143] ? check_preemption_disabled+0xde/0x2c0 [ 2771.744945][ T6143] ? mempool_alloc_slab+0x16/0x20 [ 2771.749939][ T6143] ? mempool_alloc_slab+0x16/0x20 [ 2771.755026][ T6143] kmem_cache_alloc+0x18b/0x290 [ 2771.759846][ T6143] mempool_alloc_slab+0x16/0x20 [ 2771.764665][ T6143] ? mempool_free+0x380/0x380 [ 2771.769306][ T6143] mempool_init_node+0x1f6/0x500 [ 2771.774216][ T6143] ? mempool_free+0x380/0x380 [ 2771.778864][ T6143] ? mempool_alloc_slab+0x20/0x20 [ 2771.783857][ T6143] mempool_init+0x35/0x50 [ 2771.788186][ T6143] bioset_init+0x4da/0x610 [ 2771.792576][ T6143] blk_alloc_queue_node+0xc4/0x570 [ 2771.797652][ T6143] blk_mq_init_queue+0x33/0xa0 [ 2771.802387][ T6143] loop_add+0x256/0x710 [ 2771.806510][ T6143] ? radix_tree_lookup+0x17a/0x1d0 [ 2771.811587][ T6143] loop_control_ioctl+0x468/0x680 [ 2771.816583][ T6143] ? xor_init+0x60/0x60 [ 2771.820705][ T6143] do_vfs_ioctl+0x6fb/0x15b0 [ 2771.825263][ T6143] __x64_sys_ioctl+0xd4/0x110 [ 2771.829912][ T6143] do_syscall_64+0xcb/0x1e0 [ 2771.834388][ T6143] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2771.840246][ T6143] RIP: 0033:0x7f02d6ed5059 [ 2771.844634][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2771.864217][ T6143] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2771.872593][ T6143] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2771.880533][ T6143] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2771.888483][ T6143] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.896424][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2771.904366][ T6143] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 05:10:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 19) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0xdb6f, {0x4}}, 0x14}}, 0x0) 05:10:55 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0xb) [ 2771.912551][T13339] tipc: 32-bit node address hash set to 0 [ 2771.918398][T13339] tipc: 32-bit node address hash set to 0 [ 2771.924201][T13339] tipc: 32-bit node address hash set to 0 05:10:55 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 05:10:55 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0xb) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x38000, {0x4}}, 0x14}}, 0x0) 05:10:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:55 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0189436, 0xb) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x800300, {0x4}}, 0x14}}, 0x0) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x1000000, {0x4}}, 0x14}}, 0x0) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x2000000, {0x4}}, 0x14}}, 0x0) 05:10:55 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0xb) [ 2772.012136][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2772.052257][T13339] tipc: 32-bit node address hash set to 0 [ 2772.056253][ T6166] FAULT_INJECTION: forcing a failure. [ 2772.056253][ T6166] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.058046][T13339] tipc: 32-bit node address hash set to 0 [ 2772.070777][ T6166] CPU: 0 PID: 6166 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2772.086467][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2772.096498][ T6166] Call Trace: [ 2772.099761][ T6166] dump_stack+0x18e/0x1de [ 2772.104061][ T6166] should_fail+0x5d8/0x740 [ 2772.108448][ T6166] ? bdi_alloc_node+0x76/0xc0 [ 2772.113090][ T6166] should_failslab+0x5/0x20 [ 2772.117562][ T6166] kmem_cache_alloc_trace+0x39/0x2b0 [ 2772.122819][ T6166] ? bioset_init+0x51b/0x610 [ 2772.127377][ T6166] bdi_alloc_node+0x76/0xc0 [ 2772.131850][ T6166] blk_alloc_queue_node+0x10b/0x570 [ 2772.137016][ T6166] blk_mq_init_queue+0x33/0xa0 [ 2772.141791][ T6166] loop_add+0x256/0x710 [ 2772.145929][ T6166] ? radix_tree_lookup+0x17a/0x1d0 [ 2772.151010][ T6166] loop_control_ioctl+0x468/0x680 [ 2772.156001][ T6166] ? xor_init+0x60/0x60 [ 2772.160127][ T6166] do_vfs_ioctl+0x6fb/0x15b0 [ 2772.164706][ T6166] __x64_sys_ioctl+0xd4/0x110 [ 2772.169353][ T6166] do_syscall_64+0xcb/0x1e0 [ 2772.173826][ T6166] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2772.179685][ T6166] RIP: 0033:0x7f02d6ed5059 [ 2772.184078][ T6166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2772.203653][ T6166] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2772.212028][ T6166] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2772.219964][ T6166] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2772.227906][ T6166] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.235848][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2772.243787][ T6166] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2772.253382][T32365] tipc: 32-bit node address hash set to 0 05:10:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 20) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x3000000, {0x4}}, 0x14}}, 0x0) 05:10:55 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc020660b, 0xb) 05:10:55 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) (async) 05:10:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:55 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0xb) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x40000000, {0x4}}, 0x14}}, 0x0) 05:10:55 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0xb) [ 2772.253611][T13339] tipc: 32-bit node address hash set to 0 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x800e0000, {0x4}}, 0x14}}, 0x0) 05:10:55 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000140)={0x2c, r2, 0x2, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9817a961bdb1"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7a8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x9effffff, {0x4}}, 0x14}}, 0x0) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0xdb6f0000, {0x4}}, 0x14}}, 0x0) [ 2772.330190][ T6199] FAULT_INJECTION: forcing a failure. [ 2772.330190][ T6199] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.345443][ T6199] CPU: 0 PID: 6199 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2772.355593][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2772.365650][ T6199] Call Trace: [ 2772.368925][ T6199] dump_stack+0x18e/0x1de [ 2772.373226][ T6199] should_fail+0x5d8/0x740 [ 2772.377617][ T6199] ? __percpu_counter_init+0x1aa/0x1e0 [ 2772.383055][ T6199] ? blk_alloc_queue_stats+0x48/0x100 [ 2772.388414][ T6199] should_failslab+0x5/0x20 [ 2772.392237][T13339] tipc: 32-bit node address hash set to 0 [ 2772.392905][ T6199] kmem_cache_alloc_trace+0x39/0x2b0 [ 2772.398604][T13339] tipc: 32-bit node address hash set to 0 [ 2772.403846][ T6199] blk_alloc_queue_stats+0x48/0x100 [ 2772.403857][ T6199] blk_alloc_queue_node+0x14d/0x570 [ 2772.403870][ T6199] blk_mq_init_queue+0x33/0xa0 [ 2772.424608][ T6199] loop_add+0x256/0x710 [ 2772.428743][ T6199] ? radix_tree_lookup+0x17a/0x1d0 [ 2772.433916][ T6199] loop_control_ioctl+0x468/0x680 [ 2772.438912][ T6199] ? xor_init+0x60/0x60 [ 2772.443046][ T6199] do_vfs_ioctl+0x6fb/0x15b0 [ 2772.447604][ T6199] __x64_sys_ioctl+0xd4/0x110 [ 2772.452253][ T6199] do_syscall_64+0xcb/0x1e0 [ 2772.456725][ T6199] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2772.462588][ T6199] RIP: 0033:0x7f02d6ed5059 [ 2772.466980][ T6199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2772.486554][ T6199] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2772.494931][ T6199] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2772.502877][ T6199] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2772.510843][ T6199] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.518784][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:10:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 21) 05:10:55 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0xb) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0xefffffff, {0x4}}, 0x14}}, 0x0) 05:10:55 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) (async, rerun: 32) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) (async) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 05:10:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async, rerun: 64) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async, rerun: 32) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) (rerun: 32) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:55 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000140)={0x2c, r2, 0x2, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9817a961bdb1"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7a8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0xf0ffffff, {0x4}}, 0x14}}, 0x0) 05:10:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0xb) 05:10:55 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0xffffff7f, {0x4}}, 0x14}}, 0x0) [ 2772.526727][ T6199] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2772.532241][T13339] tipc: 32-bit node address hash set to 0 [ 2772.541483][T13339] tipc: 32-bit node address hash set to 0 05:10:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000580)=""/49) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000740)=""/83) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000680)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) recvfrom$unix(r1, &(0x7f00000002c0)=""/195, 0xc3, 0x20000021, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c041}, 0x20000000) r5 = geteuid() write$P9_RSYMLINK(r1, &(0x7f0000000240)={0x14, 0x11, 0x1, {0x80, 0x3, 0x8}}, 0x14) r6 = getuid() r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x2040, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=any,debug=0x0000000000000000,posixacl,version=9p2000.u,loose,dont_appraise,uid=', @ANYRESDEC=r5, @ANYBLOB="ebe344139f5ade15298565b7f1d4eb5a4051b11546748d4f3329101ec5541dd297bdd3d6da5a17761c8cf157745469a07141b90c2f813542842fb9e5de5abbb87b71567fe8e64f20c65a5c7c8e7b5ac1658f8f5e145056d034ed5187883e4b2003646b27a2504016192cb28d00cba4354d6372eb29cbf454f8ab8d679338fa6ba83026554e9814a86bed142d40e3653c104e647f4d072702f6544a73103af93868b87c8bb56b1a0bafa264e13315203bc240d551aa06d8ef4414f8", @ANYRESDEC=r6, @ANYBLOB="2c686173682c6673636f6e746578963d73797361646d5f752c6170d572616973655f747970653d696d617369672c00"]) getuid() 05:10:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0xffffff9e, {0x4}}, 0x14}}, 0x0) [ 2772.582299][ T6243] FAULT_INJECTION: forcing a failure. [ 2772.582299][ T6243] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.597637][ T6243] CPU: 0 PID: 6243 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2772.607784][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2772.617814][ T6243] Call Trace: [ 2772.621091][ T6243] dump_stack+0x18e/0x1de [ 2772.625414][ T6243] should_fail+0x5d8/0x740 [ 2772.629814][ T6243] ? blk_stat_alloc_callback+0x5c/0x210 [ 2772.635335][ T6243] should_failslab+0x5/0x20 [ 2772.639816][ T6243] kmem_cache_alloc_trace+0x39/0x2b0 [ 2772.645087][ T6243] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 2772.650427][ T6243] ? blk_mq_free_tag_set+0x470/0x470 [ 2772.655683][ T6243] blk_stat_alloc_callback+0x5c/0x210 [ 2772.661021][ T6243] blk_mq_init_allocated_queue+0x86/0x16e0 [ 2772.666795][ T6243] ? blk_timeout_work+0x10/0x10 [ 2772.671614][ T6243] ? blk_alloc_queue_node+0x4e0/0x570 [ 2772.672232][T13339] tipc: 32-bit node address hash set to 0 [ 2772.676960][ T6243] blk_mq_init_queue+0x48/0xa0 [ 2772.676969][ T6243] loop_add+0x256/0x710 [ 2772.676979][ T6243] ? radix_tree_lookup+0x17a/0x1d0 [ 2772.676991][ T6243] loop_control_ioctl+0x468/0x680 [ 2772.683006][T13339] tipc: 32-bit node address hash set to 0 [ 2772.687421][ T6243] ? xor_init+0x60/0x60 [ 2772.687430][ T6243] do_vfs_ioctl+0x6fb/0x15b0 [ 2772.687444][ T6243] __x64_sys_ioctl+0xd4/0x110 [ 2772.720654][ T6243] do_syscall_64+0xcb/0x1e0 [ 2772.725126][ T6243] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2772.730985][ T6243] RIP: 0033:0x7f02d6ed5059 [ 2772.735384][ T6243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2772.754963][ T6243] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2772.763340][ T6243] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2772.771294][ T6243] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:10:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 22) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0xffffffef, {0x4}}, 0x14}}, 0x0) 05:10:56 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000140)={0x2c, r2, 0x2, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9817a961bdb1"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7a8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000140)={0x2c, r2, 0x2, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9817a961bdb1"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7a8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) 05:10:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000580)=""/49) (async) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000740)=""/83) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000680)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) (async) recvfrom$unix(r1, &(0x7f00000002c0)=""/195, 0xc3, 0x20000021, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c041}, 0x20000000) (async) r5 = geteuid() (async) write$P9_RSYMLINK(r1, &(0x7f0000000240)={0x14, 0x11, 0x1, {0x80, 0x3, 0x8}}, 0x14) r6 = getuid() (async) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x2040, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=any,debug=0x0000000000000000,posixacl,version=9p2000.u,loose,dont_appraise,uid=', @ANYRESDEC=r5, @ANYBLOB="ebe344139f5ade15298565b7f1d4eb5a4051b11546748d4f3329101ec5541dd297bdd3d6da5a17761c8cf157745469a07141b90c2f813542842fb9e5de5abbb87b71567fe8e64f20c65a5c7c8e7b5ac1658f8f5e145056d034ed5187883e4b2003646b27a2504016192cb28d00cba4354d6372eb29cbf454f8ab8d679338fa6ba83026554e9814a86bed142d40e3653c104e647f4d072702f6544a73103af93868b87c8bb56b1a0bafa264e13315203bc240d551aa06d8ef4414f8", @ANYRESDEC=r6, @ANYBLOB="2c686173682c6673636f6e746578963d73797361646d5f752c6170d572616973655f747970653d696d617369672c00"]) (async) getuid() 05:10:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0xb) 05:10:56 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 2772.779253][ T6243] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.787193][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2772.795143][ T6243] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2772.803201][T32365] tipc: 32-bit node address hash set to 0 [ 2772.812301][T13339] tipc: 32-bit node address hash set to 0 05:10:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0xb) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0xfffffff0, {0x4}}, 0x14}}, 0x0) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 2772.831001][T13339] tipc: 32-bit node address hash set to 0 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000580)=""/49) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000740)=""/83) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000680)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) recvfrom$unix(r1, &(0x7f00000002c0)=""/195, 0xc3, 0x20000021, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c041}, 0x20000000) r5 = geteuid() write$P9_RSYMLINK(r1, &(0x7f0000000240)={0x14, 0x11, 0x1, {0x80, 0x3, 0x8}}, 0x14) r6 = getuid() r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x2040, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=any,debug=0x0000000000000000,posixacl,version=9p2000.u,loose,dont_appraise,uid=', @ANYRESDEC=r5, @ANYBLOB="ebe344139f5ade15298565b7f1d4eb5a4051b11546748d4f3329101ec5541dd297bdd3d6da5a17761c8cf157745469a07141b90c2f813542842fb9e5de5abbb87b71567fe8e64f20c65a5c7c8e7b5ac1658f8f5e145056d034ed5187883e4b2003646b27a2504016192cb28d00cba4354d6372eb29cbf454f8ab8d679338fa6ba83026554e9814a86bed142d40e3653c104e647f4d072702f6544a73103af93868b87c8bb56b1a0bafa264e13315203bc240d551aa06d8ef4414f8", @ANYRESDEC=r6, @ANYBLOB="2c686173682c6673636f6e746578963d73797361646d5f752c6170d572616973655f747970653d696d617369672c00"]) getuid() openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000580)=""/49) (async) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000740)=""/83) (async) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000680)='memory.pressure\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) (async) recvfrom$unix(r1, &(0x7f00000002c0)=""/195, 0xc3, 0x20000021, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c041}, 0x20000000) (async) geteuid() (async) write$P9_RSYMLINK(r1, &(0x7f0000000240)={0x14, 0x11, 0x1, {0x80, 0x3, 0x8}}, 0x14) (async) getuid() (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x2040, 0x0) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=any,debug=0x0000000000000000,posixacl,version=9p2000.u,loose,dont_appraise,uid=', @ANYRESDEC=r5, @ANYBLOB="ebe344139f5ade15298565b7f1d4eb5a4051b11546748d4f3329101ec5541dd297bdd3d6da5a17761c8cf157745469a07141b90c2f813542842fb9e5de5abbb87b71567fe8e64f20c65a5c7c8e7b5ac1658f8f5e145056d034ed5187883e4b2003646b27a2504016192cb28d00cba4354d6372eb29cbf454f8ab8d679338fa6ba83026554e9814a86bed142d40e3653c104e647f4d072702f6544a73103af93868b87c8bb56b1a0bafa264e13315203bc240d551aa06d8ef4414f8", @ANYRESDEC=r6, @ANYBLOB="2c686173682c6673636f6e746578963d73797361646d5f752c6170d572616973655f747970653d696d617369672c00"]) (async) getuid() (async) [ 2772.863870][ T6269] FAULT_INJECTION: forcing a failure. [ 2772.863870][ T6269] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.883603][ T6269] CPU: 0 PID: 6269 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2772.893752][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2772.903786][ T6269] Call Trace: [ 2772.907046][ T6269] dump_stack+0x18e/0x1de [ 2772.911346][ T6269] should_fail+0x5d8/0x740 [ 2772.915730][ T6269] ? blk_stat_alloc_callback+0x5c/0x210 [ 2772.921240][ T6269] should_failslab+0x5/0x20 [ 2772.925712][ T6269] kmem_cache_alloc_trace+0x39/0x2b0 [ 2772.930972][ T6269] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 2772.936335][ T6269] ? blk_mq_free_tag_set+0x470/0x470 [ 2772.941592][ T6269] blk_stat_alloc_callback+0x5c/0x210 [ 2772.946933][ T6269] blk_mq_init_allocated_queue+0x86/0x16e0 [ 2772.952233][T13339] tipc: 32-bit node address hash set to 0 [ 2772.952714][ T6269] ? blk_timeout_work+0x10/0x10 [ 2772.958448][T13339] tipc: 32-bit node address hash set to 0 [ 2772.963221][ T6269] ? blk_alloc_queue_node+0x4e0/0x570 [ 2772.963230][ T6269] blk_mq_init_queue+0x48/0xa0 [ 2772.963239][ T6269] loop_add+0x256/0x710 [ 2772.963248][ T6269] ? radix_tree_lookup+0x17a/0x1d0 [ 2772.963260][ T6269] loop_control_ioctl+0x468/0x680 [ 2772.993217][ T6269] ? xor_init+0x60/0x60 [ 2772.997343][ T6269] do_vfs_ioctl+0x6fb/0x15b0 [ 2773.001902][ T6269] __x64_sys_ioctl+0xd4/0x110 [ 2773.006570][ T6269] do_syscall_64+0xcb/0x1e0 [ 2773.011044][ T6269] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2773.016918][ T6269] RIP: 0033:0x7f02d6ed5059 [ 2773.021304][ T6269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2773.040897][ T6269] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2773.049277][ T6269] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:10:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 23) 05:10:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0xb) 05:10:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4, 0x2}}, 0x14}}, 0x0) 05:10:56 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 05:10:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x70300, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) [ 2773.057219][ T6269] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2773.065157][ T6269] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2773.073095][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2773.081032][ T6269] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2773.091582][T10665] tipc: 32-bit node address hash set to 0 [ 2773.092268][T13339] tipc: 32-bit node address hash set to 0 [ 2773.098668][T32365] tipc: 32-bit node address hash set to 0 05:10:56 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0xb) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4, 0x3}}, 0x14}}, 0x0) 05:10:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) 05:10:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x70300, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) r2 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) [ 2773.133700][ T6329] FAULT_INJECTION: forcing a failure. [ 2773.133700][ T6329] name failslab, interval 1, probability 0, space 0, times 0 [ 2773.150385][ T6329] CPU: 0 PID: 6329 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2773.160538][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2773.170579][ T6329] Call Trace: [ 2773.173863][ T6329] dump_stack+0x18e/0x1de [ 2773.178181][ T6329] should_fail+0x5d8/0x740 [ 2773.182590][ T6329] ? blk_mq_init_allocated_queue+0xf0/0x16e0 [ 2773.188537][ T6329] should_failslab+0x5/0x20 [ 2773.193008][ T6329] kmem_cache_alloc_trace+0x39/0x2b0 [ 2773.198260][ T6329] ? blk_stat_alloc_callback+0x1a4/0x210 [ 2773.203857][ T6329] ? blk_mq_free_tag_set+0x470/0x470 [ 2773.209106][ T6329] ? blk_mq_poll_stats_fn+0x1b0/0x1b0 [ 2773.214449][ T6329] blk_mq_init_allocated_queue+0xf0/0x16e0 [ 2773.220222][ T6329] ? blk_alloc_queue_node+0x4e0/0x570 [ 2773.225563][ T6329] blk_mq_init_queue+0x48/0xa0 [ 2773.230302][ T6329] loop_add+0x256/0x710 [ 2773.232229][T13339] tipc: 32-bit node address hash set to 0 [ 2773.234430][ T6329] ? radix_tree_lookup+0x17a/0x1d0 [ 2773.234439][ T6329] loop_control_ioctl+0x468/0x680 [ 2773.234451][ T6329] ? xor_init+0x60/0x60 [ 2773.240198][T13339] tipc: 32-bit node address hash set to 0 [ 2773.245236][ T6329] do_vfs_ioctl+0x6fb/0x15b0 [ 2773.245248][ T6329] __x64_sys_ioctl+0xd4/0x110 [ 2773.245257][ T6329] do_syscall_64+0xcb/0x1e0 [ 2773.245267][ T6329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2773.245280][ T6329] RIP: 0033:0x7f02d6ed5059 [ 2773.284047][ T6329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2773.303617][ T6329] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2773.311994][ T6329] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2773.319931][ T6329] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2773.327869][ T6329] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2773.335810][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2773.343747][ T6329] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2773.351815][T32365] tipc: 32-bit node address hash set to 0 05:10:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 24) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4, 0x0, 0x3}}, 0x14}}, 0x0) 05:10:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x70300, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x70300, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) syz_io_uring_complete(0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) (async) 05:10:56 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0xb) 05:10:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) (async) 05:10:56 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="241a0000", @ANYRES16=r1, @ANYBLOB="02002dbd70000000000004000000080034000100000005002e0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x12, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0x5, 0x2, 0x3ff}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000892}, 0x0) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4, 0x0, 0x300}}, 0x14}}, 0x0) 05:10:56 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0xb) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4, 0x0, 0xe80}}, 0x14}}, 0x0) 05:10:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xb654eedddfd2d51b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x244100, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) [ 2773.388413][T13339] tipc: 32-bit node address hash set to 0 [ 2773.394435][T13339] tipc: 32-bit node address hash set to 0 [ 2773.415183][ T6360] FAULT_INJECTION: forcing a failure. [ 2773.415183][ T6360] name failslab, interval 1, probability 0, space 0, times 0 05:10:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xb654eedddfd2d51b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x244100, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xb654eedddfd2d51b, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) syz_io_uring_complete(0x0) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x244100, 0x0) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) (async) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4, 0x0, 0x4000}}, 0x14}}, 0x0) [ 2773.429657][ T6360] CPU: 0 PID: 6360 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2773.439899][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2773.449937][ T6360] Call Trace: [ 2773.453217][ T6360] dump_stack+0x18e/0x1de [ 2773.457545][ T6360] should_fail+0x5d8/0x740 [ 2773.461955][ T6360] ? blk_mq_init_allocated_queue+0x429/0x16e0 [ 2773.468013][ T6360] should_failslab+0x5/0x20 [ 2773.472499][ T6360] __kmalloc+0x5f/0x2f0 [ 2773.476626][ T6360] ? blk_mq_sysfs_init+0x18b/0x1c0 [ 2773.481708][ T6360] blk_mq_init_allocated_queue+0x429/0x16e0 [ 2773.487570][ T6360] ? blk_alloc_queue_node+0x4e0/0x570 [ 2773.492908][ T6360] blk_mq_init_queue+0x48/0xa0 [ 2773.497637][ T6360] loop_add+0x256/0x710 [ 2773.501762][ T6360] ? radix_tree_lookup+0x17a/0x1d0 [ 2773.506839][ T6360] loop_control_ioctl+0x468/0x680 [ 2773.511829][ T6360] ? xor_init+0x60/0x60 [ 2773.515950][ T6360] do_vfs_ioctl+0x6fb/0x15b0 [ 2773.520509][ T6360] __x64_sys_ioctl+0xd4/0x110 [ 2773.525154][ T6360] do_syscall_64+0xcb/0x1e0 [ 2773.529625][ T6360] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2773.535482][ T6360] RIP: 0033:0x7f02d6ed5059 [ 2773.539868][ T6360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2773.559448][ T6360] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2773.567823][ T6360] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2773.575762][ T6360] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:10:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 25) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4, 0x0, 0x6fdb}}, 0x14}}, 0x0) 05:10:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xb654eedddfd2d51b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x244100, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xb654eedddfd2d51b, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) syz_io_uring_complete(0x0) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x244100, 0x0) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) (async) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4, 0x0, 0x800e}}, 0x14}}, 0x0) 05:10:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1aa4da11bfcca932, &(0x7f0000000040)=""/103, &(0x7f00000000c0)=0x67) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) write$P9_RSTATFS(r2, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x7, 0x340f, 0x2, 0x1, 0x2, 0x5, 0x80000001, 0x2, 0xffffff80}}, 0x43) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) 05:10:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = socket(0x8, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff8bc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x294}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x421efdab}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x48000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1800000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x44}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa44}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x622}]}]}]}, 0x1d8}}, 0x804) 05:10:56 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="241a0000", @ANYRES16=r1, @ANYBLOB="02002dbd70000000000004000000080034000100000005002e0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) r3 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x12, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0x5, 0x2, 0x3ff}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000892}, 0x0) [ 2773.583702][ T6360] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2773.591637][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2773.599573][ T6360] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2773.607717][T32365] tipc: 32-bit node address hash set to 0 [ 2773.612349][T13339] tipc: 32-bit node address hash set to 0 [ 2773.614116][T32365] tipc: 32-bit node address hash set to 0 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4, 0x0, 0xdb6f}}, 0x14}}, 0x0) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0xf}}, 0x0) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x10}}, 0x0) 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0xe68}}, 0x0) [ 2773.654359][ T6405] FAULT_INJECTION: forcing a failure. [ 2773.654359][ T6405] name failslab, interval 1, probability 0, space 0, times 0 [ 2773.669550][ T6405] CPU: 0 PID: 6405 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2773.679691][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2773.689759][ T6405] Call Trace: [ 2773.693040][ T6405] dump_stack+0x18e/0x1de [ 2773.697363][ T6405] should_fail+0x5d8/0x740 05:10:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0xe80}}, 0x0) [ 2773.701773][ T6405] ? blk_mq_init_allocated_queue+0x429/0x16e0 [ 2773.707832][ T6405] should_failslab+0x5/0x20 [ 2773.712324][ T6405] __kmalloc+0x5f/0x2f0 [ 2773.716467][ T6405] ? blk_mq_sysfs_init+0x18b/0x1c0 [ 2773.721565][ T6405] blk_mq_init_allocated_queue+0x429/0x16e0 [ 2773.727440][ T6405] ? blk_alloc_queue_node+0x4e0/0x570 [ 2773.732785][ T6405] blk_mq_init_queue+0x48/0xa0 [ 2773.737531][ T6405] loop_add+0x256/0x710 [ 2773.741658][ T6405] ? radix_tree_lookup+0x17a/0x1d0 [ 2773.746738][ T6405] loop_control_ioctl+0x468/0x680 [ 2773.751732][ T6405] ? xor_init+0x60/0x60 [ 2773.755861][ T6405] do_vfs_ioctl+0x6fb/0x15b0 [ 2773.760424][ T6405] __x64_sys_ioctl+0xd4/0x110 [ 2773.765072][ T6405] do_syscall_64+0xcb/0x1e0 [ 2773.769544][ T6405] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2773.775401][ T6405] RIP: 0033:0x7f02d6ed5059 [ 2773.779788][ T6405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2773.799362][ T6405] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2773.807742][ T6405] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2773.815681][ T6405] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2773.823630][ T6405] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2773.831571][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2773.839516][ T6405] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2773.847944][T32365] tipc: 32-bit node address hash set to 0 05:10:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 26) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x37fe0}}, 0x0) 05:10:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0xffffffef, {0x4}}, 0x14}}, 0x0) 05:10:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1aa4da11bfcca932, &(0x7f0000000040)=""/103, &(0x7f00000000c0)=0x67) (async) r2 = syz_io_uring_complete(0x0) (async) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) write$P9_RSTATFS(r2, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x7, 0x340f, 0x2, 0x1, 0x2, 0x5, 0x80000001, 0x2, 0xffffff80}}, 0x43) (async) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) 05:10:57 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="241a0000", @ANYRES16=r1, @ANYBLOB="02002dbd70000000000004000000080034000100000005002e0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) r3 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) (async, rerun: 64) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x12, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0x5, 0x2, 0x3ff}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000892}, 0x0) 05:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = socket(0x8, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff8bc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x294}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x421efdab}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x48000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1800000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x44}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa44}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x622}]}]}]}, 0x1d8}}, 0x804) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) socket(0x8, 0x3, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff8bc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x294}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x421efdab}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x48000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1800000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x44}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa44}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x622}]}]}]}, 0x1d8}}, 0x804) (async) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x20000054}}, 0x0) 05:10:57 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 2773.852525][T13339] tipc: 32-bit node address hash set to 0 [ 2773.854646][ T12] tipc: 32-bit node address hash set to 0 [ 2773.887442][ T6433] FAULT_INJECTION: forcing a failure. [ 2773.887442][ T6433] name failslab, interval 1, probability 0, space 0, times 0 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x7ffff000}}, 0x0) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0xfffffdef}}, 0x0) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x2}, 0x0) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x3}, 0x0) [ 2773.900600][ T6433] CPU: 0 PID: 6433 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2773.910741][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2773.920782][ T6433] Call Trace: [ 2773.924077][ T6433] dump_stack+0x18e/0x1de [ 2773.928399][ T6433] should_fail+0x5d8/0x740 [ 2773.932801][ T6433] ? blk_mq_realloc_hw_ctxs+0x38a/0x1440 [ 2773.938421][ T6433] should_failslab+0x5/0x20 [ 2773.942914][ T6433] __kmalloc+0x5f/0x2f0 [ 2773.947062][ T6433] ? _raw_spin_lock+0x6c/0x170 [ 2773.951808][ T6433] blk_mq_realloc_hw_ctxs+0x38a/0x1440 [ 2773.957263][ T6433] ? blk_mq_sysfs_init+0x18b/0x1c0 [ 2773.962342][ T6433] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 2773.968206][ T6433] ? blk_alloc_queue_node+0x4e0/0x570 [ 2773.973566][ T6433] blk_mq_init_queue+0x48/0xa0 [ 2773.978297][ T6433] loop_add+0x256/0x710 [ 2773.982425][ T6433] ? radix_tree_lookup+0x17a/0x1d0 [ 2773.987506][ T6433] loop_control_ioctl+0x468/0x680 [ 2773.992502][ T6433] ? xor_init+0x60/0x60 [ 2773.996630][ T6433] do_vfs_ioctl+0x6fb/0x15b0 [ 2774.001197][ T6433] __x64_sys_ioctl+0xd4/0x110 [ 2774.005861][ T6433] do_syscall_64+0xcb/0x1e0 [ 2774.010351][ T6433] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2774.016214][ T6433] RIP: 0033:0x7f02d6ed5059 [ 2774.020601][ T6433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2774.040175][ T6433] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2774.048556][ T6433] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:10:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 27) 05:10:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1aa4da11bfcca932, &(0x7f0000000040)=""/103, &(0x7f00000000c0)=0x67) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (rerun: 32) write$P9_RSTATFS(r2, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x7, 0x340f, 0x2, 0x1, 0x2, 0x5, 0x80000001, 0x2, 0xffffff80}}, 0x43) (async) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x4}, 0x0) 05:10:57 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x86}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="19111323f130"}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000091}, 0x40) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:57 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000140)={0x2c, r2, 0x2, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9817a961bdb1"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7a8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = socket(0x8, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff8bc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x294}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x421efdab}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x48000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1800000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x44}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa44}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x622}]}]}]}, 0x1d8}}, 0x804) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) socket(0x8, 0x3, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff8bc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x294}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x421efdab}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x48000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1800000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x44}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa44}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x622}]}]}]}, 0x1d8}}, 0x804) (async) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x8}, 0x0) [ 2774.056506][ T6433] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2774.064455][ T6433] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2774.072395][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2774.080342][ T6433] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2774.088474][ T12] tipc: 32-bit node address hash set to 0 [ 2774.094639][ T376] tipc: 32-bit node address hash set to 0 [ 2774.095128][ T12] tipc: 32-bit node address hash set to 0 05:10:57 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x86}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="19111323f130"}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000091}, 0x40) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x300}, 0x0) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x2}, 0x0) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x3}, 0x0) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x300}, 0x0) [ 2774.135268][ T6473] FAULT_INJECTION: forcing a failure. [ 2774.135268][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 2774.148194][ T6473] CPU: 0 PID: 6473 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2774.158337][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2774.168466][ T6473] Call Trace: [ 2774.171750][ T6473] dump_stack+0x18e/0x1de [ 2774.176071][ T6473] should_fail+0x5d8/0x740 [ 2774.180472][ T6473] ? sbitmap_init_node+0x145/0x3d0 [ 2774.185574][ T6473] should_failslab+0x5/0x20 [ 2774.190062][ T6473] __kmalloc+0x5f/0x2f0 [ 2774.194189][ T6473] sbitmap_init_node+0x145/0x3d0 [ 2774.199095][ T6473] blk_mq_realloc_hw_ctxs+0x6a1/0x1440 [ 2774.204524][ T6473] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 2774.210387][ T6473] ? blk_alloc_queue_node+0x4e0/0x570 [ 2774.215728][ T6473] blk_mq_init_queue+0x48/0xa0 [ 2774.220460][ T6473] loop_add+0x256/0x710 [ 2774.224585][ T6473] ? radix_tree_lookup+0x17a/0x1d0 [ 2774.229663][ T6473] loop_control_ioctl+0x468/0x680 [ 2774.234665][ T6473] ? xor_init+0x60/0x60 [ 2774.238787][ T6473] do_vfs_ioctl+0x6fb/0x15b0 [ 2774.243362][ T6473] __x64_sys_ioctl+0xd4/0x110 [ 2774.248006][ T6473] do_syscall_64+0xcb/0x1e0 [ 2774.252487][ T6473] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2774.258355][ T6473] RIP: 0033:0x7f02d6ed5059 [ 2774.262745][ T6473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2774.282324][ T6473] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2774.290709][ T6473] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2774.298647][ T6473] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2774.306601][ T6473] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2774.314540][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2774.322477][ T6473] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 05:10:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 28) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xe80}, 0x0) 05:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400a00, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80}, 0xa) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 05:10:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) 05:10:57 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000140)={0x2c, r2, 0x2, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9817a961bdb1"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7a8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) [ 2774.331314][T32365] tipc: 32-bit node address hash set to 0 [ 2774.332333][ T376] tipc: 32-bit node address hash set to 0 [ 2774.337593][T32365] tipc: 32-bit node address hash set to 0 05:10:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) (async) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) 05:10:57 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x86}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="19111323f130"}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000091}, 0x40) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000}, 0x0) 05:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400a00, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80}, 0xa) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400a00, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80}, 0xa) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async) 05:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400a00, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80}, 0xa) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400a00, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80}, 0xa) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async) 05:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2c4481, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) pipe2$9p(&(0x7f0000000040), 0x84000) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, r2) [ 2774.383201][ T6502] FAULT_INJECTION: forcing a failure. [ 2774.383201][ T6502] name failslab, interval 1, probability 0, space 0, times 0 [ 2774.396765][ T6502] CPU: 1 PID: 6502 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2774.406918][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2774.416954][ T6502] Call Trace: [ 2774.420237][ T6502] dump_stack+0x18e/0x1de [ 2774.424558][ T6502] should_fail+0x5d8/0x740 05:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2c4481, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) pipe2$9p(&(0x7f0000000040), 0x84000) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2c4481, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) pipe2$9p(&(0x7f0000000040), 0x84000) (async) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, r2) (async) [ 2774.428964][ T6502] ? blk_alloc_flush_queue+0x7e/0x230 [ 2774.434319][ T6502] should_failslab+0x5/0x20 [ 2774.438812][ T6502] kmem_cache_alloc_trace+0x39/0x2b0 [ 2774.444087][ T6502] blk_alloc_flush_queue+0x7e/0x230 [ 2774.449276][ T6502] blk_mq_realloc_hw_ctxs+0x873/0x1440 [ 2774.454718][ T6502] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 2774.460582][ T6502] ? blk_alloc_queue_node+0x4e0/0x570 [ 2774.462233][T32365] tipc: 32-bit node address hash set to 0 [ 2774.465925][ T6502] blk_mq_init_queue+0x48/0xa0 [ 2774.465940][ T6502] loop_add+0x256/0x710 [ 2774.480496][ T6502] ? radix_tree_lookup+0x17a/0x1d0 [ 2774.485573][ T6502] loop_control_ioctl+0x468/0x680 [ 2774.490566][ T6502] ? xor_init+0x60/0x60 [ 2774.494694][ T6502] do_vfs_ioctl+0x6fb/0x15b0 [ 2774.499253][ T6502] __x64_sys_ioctl+0xd4/0x110 [ 2774.503901][ T6502] do_syscall_64+0xcb/0x1e0 [ 2774.508383][ T6502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2774.514247][ T6502] RIP: 0033:0x7f02d6ed5059 [ 2774.518630][ T6502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2774.538201][ T6502] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2774.546577][ T6502] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2774.554514][ T6502] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2774.562452][ T6502] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2774.570388][ T6502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:10:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 29) 05:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2c4481, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) pipe2$9p(&(0x7f0000000040), 0x84000) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2c4481, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) pipe2$9p(&(0x7f0000000040), 0x84000) (async) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, r2) (async) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x6fdb}, 0x0) 05:10:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40410}, 0x40044) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="720ae06f01701c4937d980f11878925f15110f5a0b0168cdae847f73dad482f94d7be29e95a8541be8875c0b0c5a0123d91c4c", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000270f8183969e52028f180ef2970720e762c6f325f83b0529275f451ea79d133c437d4257836003bf366dc6cf2b591b84870132f958c4250d45a73798499f99e7f5f377d7cb4b98c8de6e9ce4e5ba78655391f4abdbce550eb992eef245762697498781a3fcb8efdad578ef74555830ec3e1b0ce8d730a7d49d76d726252b4eb0a27b04fe11f28d3936306fa2ffa7ab"], 0x30}, 0x1, 0x0, 0x0, 0x400d1}, 0x20040080) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x8, 0x70bd26, 0x25dfdc01, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000045) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x800e}, 0x0) 05:10:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40410}, 0x40044) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="720ae06f01701c4937d980f11878925f15110f5a0b0168cdae847f73dad482f94d7be29e95a8541be8875c0b0c5a0123d91c4c", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000270f8183969e52028f180ef2970720e762c6f325f83b0529275f451ea79d133c437d4257836003bf366dc6cf2b591b84870132f958c4250d45a73798499f99e7f5f377d7cb4b98c8de6e9ce4e5ba78655391f4abdbce550eb992eef245762697498781a3fcb8efdad578ef74555830ec3e1b0ce8d730a7d49d76d726252b4eb0a27b04fe11f28d3936306fa2ffa7ab"], 0x30}, 0x1, 0x0, 0x0, 0x400d1}, 0x20040080) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x8, 0x70bd26, 0x25dfdc01, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000045) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7, 0x4) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40410}, 0x40044) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="720ae06f01701c4937d980f11878925f15110f5a0b0168cdae847f73dad482f94d7be29e95a8541be8875c0b0c5a0123d91c4c", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000270f8183969e52028f180ef2970720e762c6f325f83b0529275f451ea79d133c437d4257836003bf366dc6cf2b591b84870132f958c4250d45a73798499f99e7f5f377d7cb4b98c8de6e9ce4e5ba78655391f4abdbce550eb992eef245762697498781a3fcb8efdad578ef74555830ec3e1b0ce8d730a7d49d76d726252b4eb0a27b04fe11f28d3936306fa2ffa7ab"], 0x30}, 0x1, 0x0, 0x0, 0x400d1}, 0x20040080) (async) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x8, 0x70bd26, 0x25dfdc01, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000045) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) 05:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501080, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) [ 2774.578326][ T6502] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2774.586476][ T376] tipc: 32-bit node address hash set to 0 [ 2774.596555][ T376] tipc: 32-bit node address hash set to 0 [ 2774.612376][T32365] tipc: 32-bit node address hash set to 0 05:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501080, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501080, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) 05:10:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xdb6f}, 0x0) 05:10:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501080, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) [ 2774.631337][ T6571] FAULT_INJECTION: forcing a failure. [ 2774.631337][ T6571] name failslab, interval 1, probability 0, space 0, times 0 [ 2774.644755][ T6571] CPU: 1 PID: 6571 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2774.654899][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2774.664937][ T6571] Call Trace: [ 2774.668214][ T6571] dump_stack+0x18e/0x1de [ 2774.672533][ T6571] should_fail+0x5d8/0x740 [ 2774.676943][ T6571] ? blk_alloc_flush_queue+0x7e/0x230 [ 2774.682290][ T6571] should_failslab+0x5/0x20 [ 2774.686772][ T6571] kmem_cache_alloc_trace+0x39/0x2b0 [ 2774.692043][ T6571] blk_alloc_flush_queue+0x7e/0x230 [ 2774.697222][ T6571] blk_mq_realloc_hw_ctxs+0x873/0x1440 [ 2774.702651][ T6571] blk_mq_init_allocated_queue+0x4d8/0x16e0 [ 2774.708513][ T6571] ? blk_alloc_queue_node+0x4e0/0x570 [ 2774.713850][ T6571] blk_mq_init_queue+0x48/0xa0 [ 2774.718579][ T6571] loop_add+0x256/0x710 [ 2774.722745][ T6571] ? radix_tree_lookup+0x17a/0x1d0 [ 2774.727852][ T6571] loop_control_ioctl+0x468/0x680 [ 2774.732856][ T6571] ? xor_init+0x60/0x60 [ 2774.737070][ T6571] do_vfs_ioctl+0x6fb/0x15b0 [ 2774.741638][ T6571] __x64_sys_ioctl+0xd4/0x110 [ 2774.746287][ T6571] do_syscall_64+0xcb/0x1e0 [ 2774.750762][ T6571] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2774.756622][ T6571] RIP: 0033:0x7f02d6ed5059 [ 2774.761019][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2774.780601][ T6571] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2774.788981][ T6571] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2774.797008][ T6571] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2774.804961][ T6571] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2774.812900][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2774.820847][ T6571] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 05:10:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 30) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x38000}, 0x0) 05:10:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000040)={0xb}, 0xb) write$P9_RCLUNK(r2, &(0x7f00000000c0)={0x7}, 0x7) write$P9_RSTAT(r2, &(0x7f0000000080)={0x3f, 0x7d, 0x2, {0x0, 0x38, 0x362, 0x4, {0x20, 0x4, 0x2}, 0x10000, 0x9, 0x7, 0x20, 0x0, '', 0x5, 'reno\x00'}}, 0x3f) 05:10:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40410}, 0x40044) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="720ae06f01701c4937d980f11878925f15110f5a0b0168cdae847f73dad482f94d7be29e95a8541be8875c0b0c5a0123d91c4c", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000270f8183969e52028f180ef2970720e762c6f325f83b0529275f451ea79d133c437d4257836003bf366dc6cf2b591b84870132f958c4250d45a73798499f99e7f5f377d7cb4b98c8de6e9ce4e5ba78655391f4abdbce550eb992eef245762697498781a3fcb8efdad578ef74555830ec3e1b0ce8d730a7d49d76d726252b4eb0a27b04fe11f28d3936306fa2ffa7ab"], 0x30}, 0x1, 0x0, 0x0, 0x400d1}, 0x20040080) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x8, 0x70bd26, 0x25dfdc01, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000045) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7, 0x4) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40410}, 0x40044) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="720ae06f01701c4937d980f11878925f15110f5a0b0168cdae847f73dad482f94d7be29e95a8541be8875c0b0c5a0123d91c4c", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000270f8183969e52028f180ef2970720e762c6f325f83b0529275f451ea79d133c437d4257836003bf366dc6cf2b591b84870132f958c4250d45a73798499f99e7f5f377d7cb4b98c8de6e9ce4e5ba78655391f4abdbce550eb992eef245762697498781a3fcb8efdad578ef74555830ec3e1b0ce8d730a7d49d76d726252b4eb0a27b04fe11f28d3936306fa2ffa7ab"], 0x30}, 0x1, 0x0, 0x0, 0x400d1}, 0x20040080) (async) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x8, 0x70bd26, 0x25dfdc01, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000045) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) 05:10:58 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0) 05:10:58 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 05:10:58 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0) (async) 05:10:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000040)={0xb}, 0xb) write$P9_RCLUNK(r2, &(0x7f00000000c0)={0x7}, 0x7) write$P9_RSTAT(r2, &(0x7f0000000080)={0x3f, 0x7d, 0x2, {0x0, 0x38, 0x362, 0x4, {0x20, 0x4, 0x2}, 0x10000, 0x9, 0x7, 0x20, 0x0, '', 0x5, 'reno\x00'}}, 0x3f) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x800300}, 0x0) [ 2774.830428][ T376] tipc: 32-bit node address hash set to 0 [ 2774.841301][ T376] tipc: 32-bit node address hash set to 0 [ 2774.869636][ T6604] FAULT_INJECTION: forcing a failure. [ 2774.869636][ T6604] name failslab, interval 1, probability 0, space 0, times 0 05:10:58 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x1000000}, 0x0) [ 2774.882532][ T6604] CPU: 1 PID: 6604 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2774.892666][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2774.902705][ T6604] Call Trace: [ 2774.905987][ T6604] dump_stack+0x18e/0x1de [ 2774.910306][ T6604] should_fail+0x5d8/0x740 [ 2774.914694][ T6604] ? __alloc_disk_node+0x76/0x5a0 [ 2774.919689][ T6604] should_failslab+0x5/0x20 [ 2774.924168][ T6604] kmem_cache_alloc_trace+0x39/0x2b0 [ 2774.929449][ T6604] __alloc_disk_node+0x76/0x5a0 [ 2774.934280][ T6604] loop_add+0x323/0x710 [ 2774.938407][ T6604] loop_control_ioctl+0x468/0x680 [ 2774.943398][ T6604] ? xor_init+0x60/0x60 [ 2774.947524][ T6604] do_vfs_ioctl+0x6fb/0x15b0 [ 2774.952087][ T6604] __x64_sys_ioctl+0xd4/0x110 [ 2774.956736][ T6604] do_syscall_64+0xcb/0x1e0 [ 2774.961217][ T6604] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2774.967168][ T6604] RIP: 0033:0x7f02d6ed5059 [ 2774.971564][ T6604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2774.991143][ T6604] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2774.999542][ T6604] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2775.007496][ T6604] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2775.015446][ T6604] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.023385][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:10:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 31) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x2000000}, 0x0) 05:10:58 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0) (async) 05:10:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000040)={0xb}, 0xb) write$P9_RCLUNK(r2, &(0x7f00000000c0)={0x7}, 0x7) write$P9_RSTAT(r2, &(0x7f0000000080)={0x3f, 0x7d, 0x2, {0x0, 0x38, 0x362, 0x4, {0x20, 0x4, 0x2}, 0x10000, 0x9, 0x7, 0x20, 0x0, '', 0x5, 'reno\x00'}}, 0x3f) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) pipe2$9p(&(0x7f0000000000), 0x0) (async) write$P9_RREADDIR(r2, &(0x7f0000000040)={0xb}, 0xb) (async) write$P9_RCLUNK(r2, &(0x7f00000000c0)={0x7}, 0x7) (async) write$P9_RSTAT(r2, &(0x7f0000000080)={0x3f, 0x7d, 0x2, {0x0, 0x38, 0x362, 0x4, {0x20, 0x4, 0x2}, 0x10000, 0x9, 0x7, 0x20, 0x0, '', 0x5, 'reno\x00'}}, 0x3f) (async) 05:10:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async, rerun: 32) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (rerun: 32) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x3000000}, 0x0) [ 2775.031330][ T6604] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2775.042093][ T376] tipc: 32-bit node address hash set to 0 [ 2775.047996][ T376] tipc: 32-bit node address hash set to 0 [ 2775.058986][T26969] tipc: 32-bit node address hash set to 0 [ 2775.076028][ T6626] FAULT_INJECTION: forcing a failure. 05:10:58 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 05:10:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x14400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:58 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) arch_prctl$ARCH_GET_CPUID(0x1011) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x40000000}, 0x0) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x800e0000}, 0x0) [ 2775.076028][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.098091][ T6626] CPU: 1 PID: 6626 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2775.108237][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2775.118285][ T6626] Call Trace: [ 2775.121572][ T6626] dump_stack+0x18e/0x1de [ 2775.125890][ T6626] should_fail+0x5d8/0x740 [ 2775.130282][ T6626] ? __alloc_disk_node+0x319/0x5a0 [ 2775.135369][ T6626] should_failslab+0x5/0x20 [ 2775.139852][ T6626] kmem_cache_alloc_trace+0x39/0x2b0 [ 2775.145112][ T6626] __alloc_disk_node+0x319/0x5a0 [ 2775.150020][ T6626] loop_add+0x323/0x710 [ 2775.154147][ T6626] loop_control_ioctl+0x468/0x680 [ 2775.159142][ T6626] ? xor_init+0x60/0x60 [ 2775.163271][ T6626] do_vfs_ioctl+0x6fb/0x15b0 [ 2775.167850][ T6626] __x64_sys_ioctl+0xd4/0x110 [ 2775.172504][ T6626] do_syscall_64+0xcb/0x1e0 [ 2775.176977][ T6626] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2775.182849][ T6626] RIP: 0033:0x7f02d6ed5059 [ 2775.187236][ T6626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2775.206809][ T6626] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2775.215185][ T6626] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2775.223127][ T6626] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:10:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 32) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x9effffff}, 0x0) 05:10:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x14400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x14400, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) 05:10:58 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) arch_prctl$ARCH_GET_CPUID(0x1011) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) arch_prctl$ARCH_GET_CPUID(0x1011) (async) [ 2775.231071][ T6626] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.239014][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2775.247063][ T6626] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2775.255179][ T376] tipc: 32-bit node address hash set to 0 [ 2775.261067][ T376] tipc: 32-bit node address hash set to 0 [ 2775.270524][ T376] tipc: 32-bit node address hash set to 0 05:10:58 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xdb6f0000}, 0x0) 05:10:58 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x31050, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x404000, 0x2}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xefffffff}, 0x0) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xf0ffffff}, 0x0) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xffffff7f}, 0x0) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xffffff9e}, 0x0) [ 2775.286750][ T6660] FAULT_INJECTION: forcing a failure. [ 2775.286750][ T6660] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.299394][ T6660] CPU: 1 PID: 6660 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2775.309518][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2775.319558][ T6660] Call Trace: [ 2775.322847][ T6660] dump_stack+0x18e/0x1de [ 2775.327168][ T6660] should_fail+0x5d8/0x740 [ 2775.331567][ T6660] ? rand_initialize_disk+0x4b/0xb0 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xffffffef}, 0x0) [ 2775.336749][ T6660] should_failslab+0x5/0x20 [ 2775.341230][ T6660] kmem_cache_alloc_trace+0x39/0x2b0 [ 2775.346491][ T6660] ? part_release+0xc0/0xc0 [ 2775.350974][ T6660] ? percpu_ref_init+0x189/0x230 [ 2775.355878][ T6660] rand_initialize_disk+0x4b/0xb0 [ 2775.360870][ T6660] __alloc_disk_node+0x3f6/0x5a0 [ 2775.365777][ T6660] loop_add+0x323/0x710 [ 2775.369904][ T6660] loop_control_ioctl+0x468/0x680 [ 2775.374892][ T6660] ? xor_init+0x60/0x60 [ 2775.379016][ T6660] do_vfs_ioctl+0x6fb/0x15b0 [ 2775.383575][ T6660] __x64_sys_ioctl+0xd4/0x110 [ 2775.388233][ T6660] do_syscall_64+0xcb/0x1e0 [ 2775.392705][ T6660] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2775.398570][ T6660] RIP: 0033:0x7f02d6ed5059 [ 2775.402951][ T6660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2775.422521][ T6660] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2775.430899][ T6660] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2775.438836][ T6660] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2775.446775][ T6660] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.454713][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2775.462650][ T6660] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2775.470945][ T376] tipc: 32-bit node address hash set to 0 [ 2775.476975][ T376] tipc: 32-bit node address hash set to 0 05:10:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 33) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfffffff0}, 0x0) 05:10:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x14400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x14400, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) 05:10:58 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) arch_prctl$ARCH_GET_CPUID(0x1011) [ 2775.482777][T26969] tipc: 32-bit node address hash set to 0 05:10:58 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 05:10:58 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x31050, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x404000, 0x2}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x80030000000000}, 0x0) 05:10:58 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) r1 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x400, 0x8, 0x3ff, 0xfffffffffffffffc, 0x39e, 0xd2d, 0x101, 0x1, 0xfffff801}}, 0x43) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x100000000000000}, 0x0) 05:10:58 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x200000000000000}, 0x0) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x300000000000000}, 0x0) 05:10:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4000000000000000}, 0x0) [ 2775.537310][ T6697] FAULT_INJECTION: forcing a failure. [ 2775.537310][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.557706][ T6697] CPU: 0 PID: 6697 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2775.567869][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2775.577917][ T6697] Call Trace: [ 2775.581199][ T6697] dump_stack+0x18e/0x1de [ 2775.585515][ T6697] should_fail+0x5d8/0x740 [ 2775.589905][ T6697] ? blk_mq_init_tags+0x74/0x290 [ 2775.594826][ T6697] should_failslab+0x5/0x20 [ 2775.599310][ T6697] kmem_cache_alloc_trace+0x39/0x2b0 [ 2775.602232][ T376] tipc: 32-bit node address hash set to 0 [ 2775.604570][ T6697] ? mutex_unlock+0x19/0x40 [ 2775.604581][ T6697] blk_mq_init_tags+0x74/0x290 [ 2775.604593][ T6697] ? blk_mq_hw_queue_to_node+0xeb/0x100 [ 2775.610336][ T376] tipc: 32-bit node address hash set to 0 [ 2775.614759][ T6697] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2775.614768][ T6697] blk_mq_init_sched+0x1d6/0xb10 [ 2775.614779][ T6697] elevator_init_mq+0x2cd/0x3f0 [ 2775.614788][ T6697] __device_add_disk+0x87/0x1220 [ 2775.614796][ T6697] ? loop_add+0x3c0/0x710 [ 2775.614804][ T6697] loop_add+0x554/0x710 [ 2775.614812][ T6697] loop_control_ioctl+0x468/0x680 [ 2775.614819][ T6697] ? xor_init+0x60/0x60 [ 2775.614827][ T6697] do_vfs_ioctl+0x6fb/0x15b0 [ 2775.614839][ T6697] __x64_sys_ioctl+0xd4/0x110 [ 2775.614848][ T6697] do_syscall_64+0xcb/0x1e0 [ 2775.614858][ T6697] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2775.614865][ T6697] RIP: 0033:0x7f02d6ed5059 [ 2775.614873][ T6697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2775.614877][ T6697] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2775.719779][ T6697] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2775.727732][ T6697] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:10:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 34) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x8000000000000000}, 0x0) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x800e000000000000}, 0x0) [ 2775.735670][ T6697] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.742237][ T376] tipc: 32-bit node address hash set to 0 [ 2775.743615][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2775.743621][ T6697] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2775.744484][ T6697] "mq-deadline" elevator initialization failed, falling back to "none" [ 2775.749857][ T376] tipc: 32-bit node address hash set to 0 [ 2775.781049][ T376] tipc: 32-bit node address hash set to 0 05:10:59 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:10:59 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x31050, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x404000, 0x2}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x31050, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x404000, 0x2}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) 05:10:59 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) r1 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x400, 0x8, 0x3ff, 0xfffffffffffffffc, 0x39e, 0xd2d, 0x101, 0x1, 0xfffff801}}, 0x43) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x9effffff00000000}, 0x0) 05:10:59 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xdb6f000000000000}, 0x0) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xefffffff00000000}, 0x0) [ 2775.793674][ T6722] FAULT_INJECTION: forcing a failure. [ 2775.793674][ T6722] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.811248][ T6722] CPU: 1 PID: 6722 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2775.821391][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2775.831427][ T6722] Call Trace: [ 2775.834716][ T6722] dump_stack+0x18e/0x1de [ 2775.839038][ T6722] should_fail+0x5d8/0x740 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) [ 2775.843438][ T6722] ? blk_mq_init_tags+0x74/0x290 [ 2775.848348][ T6722] should_failslab+0x5/0x20 [ 2775.852842][ T6722] kmem_cache_alloc_trace+0x39/0x2b0 [ 2775.858111][ T6722] ? mutex_unlock+0x19/0x40 [ 2775.862594][ T6722] blk_mq_init_tags+0x74/0x290 [ 2775.867324][ T6722] ? blk_mq_hw_queue_to_node+0xeb/0x100 [ 2775.872846][ T6722] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2775.877861][ T6722] blk_mq_init_sched+0x1d6/0xb10 [ 2775.882233][ T12] tipc: 32-bit node address hash set to 0 [ 2775.882794][ T6722] elevator_init_mq+0x2cd/0x3f0 [ 2775.882808][ T6722] __device_add_disk+0x87/0x1220 [ 2775.898230][ T6722] ? loop_add+0x3c0/0x710 [ 2775.902530][ T6722] loop_add+0x554/0x710 [ 2775.906652][ T6722] loop_control_ioctl+0x468/0x680 [ 2775.911642][ T6722] ? xor_init+0x60/0x60 [ 2775.915766][ T6722] do_vfs_ioctl+0x6fb/0x15b0 [ 2775.920332][ T6722] __x64_sys_ioctl+0xd4/0x110 [ 2775.924975][ T6722] do_syscall_64+0xcb/0x1e0 [ 2775.929446][ T6722] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2775.935306][ T6722] RIP: 0033:0x7f02d6ed5059 [ 2775.939691][ T6722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2775.959263][ T6722] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2775.967638][ T6722] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2775.975581][ T6722] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2775.983519][ T6722] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 05:10:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 35) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xffffffff00000000}, 0x0) 05:10:59 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:10:59 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:10:59 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040)=""/212, &(0x7f0000000140)=0xd4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:59 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) r1 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x400, 0x8, 0x3ff, 0xfffffffffffffffc, 0x39e, 0xd2d, 0x101, 0x1, 0xfffff801}}, 0x43) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x2}, 0x0) [ 2775.991456][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2775.999403][ T6722] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2776.007438][ T376] tipc: 32-bit node address hash set to 0 [ 2776.008289][ T6722] "mq-deadline" elevator initialization failed, falling back to "none" [ 2776.013355][ T376] tipc: 32-bit node address hash set to 0 [ 2776.033177][ T12] tipc: 32-bit node address hash set to 0 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x3}, 0x0) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x300}, 0x0) 05:10:59 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:10:59 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) r1 = socket(0x2b, 0xa, 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xe80}, 0x0) [ 2776.091648][ T6758] FAULT_INJECTION: forcing a failure. [ 2776.091648][ T6758] name failslab, interval 1, probability 0, space 0, times 0 [ 2776.108325][ T6758] CPU: 1 PID: 6758 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2776.118478][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.128514][ T6758] Call Trace: [ 2776.131797][ T6758] dump_stack+0x18e/0x1de [ 2776.136113][ T6758] should_fail+0x5d8/0x740 [ 2776.140517][ T6758] ? sbitmap_queue_init_node+0x3db/0xbe0 [ 2776.146136][ T6758] should_failslab+0x5/0x20 [ 2776.150627][ T6758] kmem_cache_alloc_trace+0x39/0x2b0 [ 2776.155896][ T6758] sbitmap_queue_init_node+0x3db/0xbe0 [ 2776.161343][ T6758] blk_mq_init_tags+0xef/0x290 [ 2776.166084][ T6758] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2776.171084][ T6758] blk_mq_init_sched+0x1d6/0xb10 [ 2776.175994][ T6758] elevator_init_mq+0x2cd/0x3f0 [ 2776.180814][ T6758] __device_add_disk+0x87/0x1220 [ 2776.185722][ T6758] ? loop_add+0x3c0/0x710 [ 2776.190018][ T6758] loop_add+0x554/0x710 [ 2776.194140][ T6758] loop_control_ioctl+0x468/0x680 [ 2776.199139][ T6758] ? xor_init+0x60/0x60 [ 2776.203273][ T6758] do_vfs_ioctl+0x6fb/0x15b0 [ 2776.207833][ T6758] __x64_sys_ioctl+0xd4/0x110 [ 2776.212481][ T6758] do_syscall_64+0xcb/0x1e0 [ 2776.216955][ T6758] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2776.222819][ T6758] RIP: 0033:0x7f02d6ed5059 [ 2776.227211][ T6758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2776.246783][ T6758] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2776.255171][ T6758] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2776.263113][ T6758] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2776.271053][ T6758] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2776.278993][ T6758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:10:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 36) 05:10:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001500)={0x1a0, r3, 0x208, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4c3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "bdb44fe7e67be7415d6e7724ebdb645d0599338f86c8d2e7f7341a1a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "c4292fb5c8eb26cf53eec2bac0ef6d3afc1720c92006c5e595c64a3195f930"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x519ab399}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd=r1, 0x44a8, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0xb4}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/83, 0x53}, {&(0x7f0000001400)=""/189, 0xbd}], 0x4, 0x1d}, 0x437bc3cd) r4 = epoll_create1(0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x4000}, 0x0) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x6fdb}, 0x0) [ 2776.286939][ T6758] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2776.295156][ T376] tipc: 32-bit node address hash set to 0 [ 2776.300862][ T376] tipc: 32-bit node address hash set to 0 [ 2776.301413][ T6758] "mq-deadline" elevator initialization failed, falling back to "none" [ 2776.314856][T32365] tipc: 32-bit node address hash set to 0 05:10:59 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040)=""/212, &(0x7f0000000140)=0xd4) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async, rerun: 32) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (rerun: 32) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x800e}, 0x0) 05:10:59 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) r1 = socket(0x2b, 0xa, 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) socket(0x2b, 0xa, 0x6) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) (async) 05:10:59 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xdb6f}, 0x0) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x38000}, 0x0) [ 2776.343586][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2776.362136][ T6791] FAULT_INJECTION: forcing a failure. [ 2776.362136][ T6791] name failslab, interval 1, probability 0, space 0, times 0 [ 2776.375093][ T6791] CPU: 0 PID: 6791 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x800300}, 0x0) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) [ 2776.385229][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.395262][ T6791] Call Trace: [ 2776.398542][ T6791] dump_stack+0x18e/0x1de [ 2776.402864][ T6791] should_fail+0x5d8/0x740 [ 2776.407278][ T6791] ? sbitmap_queue_init_node+0x3db/0xbe0 [ 2776.412902][ T6791] should_failslab+0x5/0x20 [ 2776.417387][ T6791] kmem_cache_alloc_trace+0x39/0x2b0 [ 2776.422657][ T6791] sbitmap_queue_init_node+0x3db/0xbe0 [ 2776.428108][ T6791] blk_mq_init_tags+0x153/0x290 [ 2776.432241][ T376] tipc: 32-bit node address hash set to 0 [ 2776.432931][ T6791] blk_mq_alloc_rq_map+0x93/0x1a0 [ 2776.438681][ T376] tipc: 32-bit node address hash set to 0 [ 2776.443624][ T6791] blk_mq_init_sched+0x1d6/0xb10 [ 2776.443636][ T6791] elevator_init_mq+0x2cd/0x3f0 [ 2776.443645][ T6791] __device_add_disk+0x87/0x1220 [ 2776.443654][ T6791] ? loop_add+0x3c0/0x710 [ 2776.443661][ T6791] loop_add+0x554/0x710 [ 2776.443670][ T6791] loop_control_ioctl+0x468/0x680 [ 2776.443677][ T6791] ? xor_init+0x60/0x60 [ 2776.443692][ T6791] do_vfs_ioctl+0x6fb/0x15b0 [ 2776.443704][ T6791] __x64_sys_ioctl+0xd4/0x110 [ 2776.443713][ T6791] do_syscall_64+0xcb/0x1e0 [ 2776.443723][ T6791] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2776.443730][ T6791] RIP: 0033:0x7f02d6ed5059 [ 2776.443743][ T6791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2776.525073][ T6791] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2776.533454][ T6791] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2776.541409][ T6791] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2776.549357][ T6791] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2776.557301][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2776.565250][ T6791] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2776.572236][ T376] tipc: 32-bit node address hash set to 0 [ 2776.574298][ T6791] "mq-deadline" elevator initialization failed, falling back to "none" [ 2776.579401][ T376] tipc: 32-bit node address hash set to 0 05:10:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 37) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 05:10:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001500)={0x1a0, r3, 0x208, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4c3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "bdb44fe7e67be7415d6e7724ebdb645d0599338f86c8d2e7f7341a1a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "c4292fb5c8eb26cf53eec2bac0ef6d3afc1720c92006c5e595c64a3195f930"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x519ab399}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd=r1, 0x44a8, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0xb4}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/83, 0x53}, {&(0x7f0000001400)=""/189, 0xbd}], 0x4, 0x1d}, 0x437bc3cd) (async) r4 = epoll_create1(0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) 05:10:59 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) r1 = socket(0x2b, 0xa, 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) [ 2776.605870][ T376] tipc: 32-bit node address hash set to 0 05:10:59 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040)=""/212, &(0x7f0000000140)=0xd4) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x3000000}, 0x0) 05:10:59 executing program 2: getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000080)=""/214, &(0x7f0000000180)=0xd6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10f01, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) r2 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) read$eventfd(r4, &(0x7f0000000280), 0x8) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x220}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(r5, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x3}, 0x10) 05:10:59 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:10:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001500)={0x1a0, r3, 0x208, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4c3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "bdb44fe7e67be7415d6e7724ebdb645d0599338f86c8d2e7f7341a1a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "c4292fb5c8eb26cf53eec2bac0ef6d3afc1720c92006c5e595c64a3195f930"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x519ab399}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd=r1, 0x44a8, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0xb4}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/83, 0x53}, {&(0x7f0000001400)=""/189, 0xbd}], 0x4, 0x1d}, 0x437bc3cd) r4 = epoll_create1(0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001500)={0x1a0, r3, 0x208, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4c3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "bdb44fe7e67be7415d6e7724ebdb645d0599338f86c8d2e7f7341a1a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "c4292fb5c8eb26cf53eec2bac0ef6d3afc1720c92006c5e595c64a3195f930"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x519ab399}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd=r1, 0x44a8, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0xb4}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/83, 0x53}, {&(0x7f0000001400)=""/189, 0xbd}], 0x4, 0x1d}, 0x437bc3cd) (async) epoll_create1(0x0) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) (async) [ 2776.664515][ T6825] FAULT_INJECTION: forcing a failure. [ 2776.664515][ T6825] name failslab, interval 1, probability 0, space 0, times 0 [ 2776.678503][ T6825] CPU: 0 PID: 6825 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2776.688648][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.698686][ T6825] Call Trace: [ 2776.701947][ T6825] dump_stack+0x18e/0x1de [ 2776.706246][ T6825] should_fail+0x5d8/0x740 05:10:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) [ 2776.710630][ T6825] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2776.715799][ T6825] should_failslab+0x5/0x20 [ 2776.720268][ T6825] __kmalloc+0x5f/0x2f0 [ 2776.724393][ T6825] ? blk_mq_init_tags+0x209/0x290 [ 2776.729388][ T6825] blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2776.734386][ T6825] blk_mq_init_sched+0x1d6/0xb10 [ 2776.739309][ T6825] elevator_init_mq+0x2cd/0x3f0 [ 2776.744146][ T6825] __device_add_disk+0x87/0x1220 [ 2776.749073][ T6825] ? loop_add+0x3c0/0x710 [ 2776.753424][ T6825] loop_add+0x554/0x710 [ 2776.757556][ T6825] loop_control_ioctl+0x468/0x680 [ 2776.762549][ T6825] ? xor_init+0x60/0x60 [ 2776.766674][ T6825] do_vfs_ioctl+0x6fb/0x15b0 [ 2776.771241][ T6825] __x64_sys_ioctl+0xd4/0x110 [ 2776.775885][ T6825] do_syscall_64+0xcb/0x1e0 [ 2776.780355][ T6825] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2776.786216][ T6825] RIP: 0033:0x7f02d6ed5059 [ 2776.790604][ T6825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x40000000}, 0x0) [ 2776.810177][ T6825] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2776.818552][ T6825] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2776.826494][ T6825] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2776.834437][ T6825] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2776.842389][ T6825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2776.850334][ T6825] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x800e0000}, 0x0) 05:11:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 38) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 05:11:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) pipe2$9p(&(0x7f0000000040), 0x4000) (async) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) (async) 05:11:00 executing program 2: getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000080)=""/214, &(0x7f0000000180)=0xd6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10f01, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) r2 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) read$eventfd(r4, &(0x7f0000000280), 0x8) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x220}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(r5, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x3}, 0x10) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000080)=""/214, &(0x7f0000000180)=0xd6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10f01, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) (async) syz_io_uring_complete(0x0) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) read$eventfd(r4, &(0x7f0000000280), 0x8) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x220}}, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$nfc_raw(r5, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x3}, 0x10) (async) [ 2776.861395][T32365] tipc: 32-bit node address hash set to 0 [ 2776.862311][ T376] tipc: 32-bit node address hash set to 0 [ 2776.869093][T10665] tipc: 32-bit node address hash set to 0 [ 2776.881462][ T6825] "mq-deadline" elevator initialization failed, falling back to "none" 05:11:00 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x600000) r2 = eventfd2(0x80000000, 0xc01) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xdb6f0000}, 0x0) 05:11:00 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:00 executing program 2: getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000080)=""/214, &(0x7f0000000180)=0xd6) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10f01, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) r2 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) read$eventfd(r4, &(0x7f0000000280), 0x8) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x220}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$nfc_raw(r5, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x3}, 0x10) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xefffffff}, 0x0) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xf0ffffff}, 0x0) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 2776.927954][ T6882] FAULT_INJECTION: forcing a failure. [ 2776.927954][ T6882] name failslab, interval 1, probability 0, space 0, times 0 [ 2776.944276][ T6882] CPU: 1 PID: 6882 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2776.954431][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.964473][ T6882] Call Trace: [ 2776.967753][ T6882] dump_stack+0x18e/0x1de [ 2776.972077][ T6882] should_fail+0x5d8/0x740 [ 2776.976483][ T6882] ? blk_mq_alloc_rq_map+0xe9/0x1a0 [ 2776.981669][ T6882] should_failslab+0x5/0x20 [ 2776.986158][ T6882] __kmalloc+0x5f/0x2f0 [ 2776.990289][ T6882] ? blk_mq_alloc_rq_map+0xb3/0x1a0 [ 2776.992229][T32365] tipc: 32-bit node address hash set to 0 [ 2776.995457][ T6882] ? blk_mq_init_tags+0x209/0x290 [ 2776.995465][ T6882] blk_mq_alloc_rq_map+0xe9/0x1a0 [ 2776.995478][ T6882] blk_mq_init_sched+0x1d6/0xb10 [ 2777.016077][ T6882] elevator_init_mq+0x2cd/0x3f0 [ 2777.020912][ T6882] __device_add_disk+0x87/0x1220 [ 2777.025831][ T6882] ? loop_add+0x3c0/0x710 [ 2777.030130][ T6882] loop_add+0x554/0x710 [ 2777.034258][ T6882] loop_control_ioctl+0x468/0x680 [ 2777.039254][ T6882] ? xor_init+0x60/0x60 [ 2777.043381][ T6882] do_vfs_ioctl+0x6fb/0x15b0 [ 2777.047942][ T6882] __x64_sys_ioctl+0xd4/0x110 [ 2777.052595][ T6882] do_syscall_64+0xcb/0x1e0 [ 2777.057078][ T6882] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2777.062955][ T6882] RIP: 0033:0x7f02d6ed5059 [ 2777.067338][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2777.087002][ T6882] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2777.095384][ T6882] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2777.103335][ T6882] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2777.111280][ T6882] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2777.119305][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:11:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 39) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xffffffef}, 0x0) 05:11:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) 05:11:00 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x26, 0x80000, 0x16b0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x8001}, 0xb) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x10, 0x2, 0x7}, 0xfff}}, 0x18) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) [ 2777.127509][ T6882] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2777.132239][T32365] tipc: 32-bit node address hash set to 0 [ 2777.135745][ T376] tipc: 32-bit node address hash set to 0 [ 2777.143413][T32365] tipc: 32-bit node address hash set to 0 [ 2777.147368][ T6882] "mq-deadline" elevator initialization failed, falling back to "none" 05:11:00 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x600000) r2 = eventfd2(0x80000000, 0xc01) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x600000) (async) eventfd2(0x80000000, 0xc01) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xfffffff0}, 0x0) 05:11:00 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:00 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket(0x26, 0x80000, 0x16b0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) (async) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x8001}, 0xb) (async) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x10, 0x2, 0x7}, 0xfff}}, 0x18) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:11:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x80030000000000}, 0x0) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 2777.219661][ T6913] FAULT_INJECTION: forcing a failure. [ 2777.219661][ T6913] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2777.237591][ T6913] CPU: 1 PID: 6913 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2777.247750][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2777.257791][ T6913] Call Trace: [ 2777.261075][ T6913] dump_stack+0x18e/0x1de [ 2777.265398][ T6913] should_fail+0x5d8/0x740 [ 2777.269801][ T6913] __alloc_pages_nodemask+0x12e/0x740 [ 2777.272235][T32365] tipc: 32-bit node address hash set to 0 [ 2777.275147][ T6913] blk_mq_alloc_rqs+0x252/0x660 [ 2777.275163][ T6913] ? blk_mq_alloc_rq_map+0x11a/0x1a0 [ 2777.290953][ T6913] blk_mq_init_sched+0x235/0xb10 [ 2777.295871][ T6913] elevator_init_mq+0x2cd/0x3f0 [ 2777.300696][ T6913] __device_add_disk+0x87/0x1220 [ 2777.305623][ T6913] ? loop_add+0x3c0/0x710 [ 2777.309933][ T6913] loop_add+0x554/0x710 [ 2777.314063][ T6913] loop_control_ioctl+0x468/0x680 [ 2777.319054][ T6913] ? xor_init+0x60/0x60 [ 2777.323190][ T6913] do_vfs_ioctl+0x6fb/0x15b0 [ 2777.327754][ T6913] __x64_sys_ioctl+0xd4/0x110 [ 2777.332400][ T6913] do_syscall_64+0xcb/0x1e0 [ 2777.336889][ T6913] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2777.342747][ T6913] RIP: 0033:0x7f02d6ed5059 [ 2777.347132][ T6913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2777.366712][ T6913] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2777.375094][ T6913] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2777.383042][ T6913] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2777.390980][ T6913] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2777.398940][ T6913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2777.406888][ T6913] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2777.412235][T32365] tipc: 32-bit node address hash set to 0 05:11:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 40) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x300000000000000}, 0x0) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x4000000000000000}, 0x0) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x8000000000000000}, 0x0) [ 2777.415022][ T376] tipc: 32-bit node address hash set to 0 [ 2777.421586][T32365] tipc: 32-bit node address hash set to 0 05:11:00 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x600000) (async) r2 = eventfd2(0x80000000, 0xc01) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x800e000000000000}, 0x0) 05:11:00 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) (async) 05:11:00 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x26, 0x80000, 0x16b0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x8001}, 0xb) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x10, 0x2, 0x7}, 0xfff}}, 0x18) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket(0x26, 0x80000, 0x16b0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) (async) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x8001}, 0xb) (async) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x10, 0x2, 0x7}, 0xfff}}, 0x18) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xdb6f000000000000}, 0x0) [ 2777.463521][ T5169] udevd[5169]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2777.473340][ T6943] FAULT_INJECTION: forcing a failure. [ 2777.473340][ T6943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2777.488443][ T6943] CPU: 0 PID: 6943 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2777.498592][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2777.508631][ T6943] Call Trace: 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xefffffff00000000}, 0x0) [ 2777.511913][ T6943] dump_stack+0x18e/0x1de [ 2777.516233][ T6943] should_fail+0x5d8/0x740 [ 2777.520638][ T6943] __alloc_pages_nodemask+0x12e/0x740 [ 2777.525991][ T6943] blk_mq_alloc_rqs+0x252/0x660 [ 2777.530834][ T6943] blk_mq_init_sched+0x235/0xb10 [ 2777.535757][ T6943] elevator_init_mq+0x2cd/0x3f0 [ 2777.540577][ T6943] __device_add_disk+0x87/0x1220 [ 2777.545505][ T6943] ? loop_add+0x3c0/0x710 [ 2777.549807][ T6943] loop_add+0x554/0x710 [ 2777.552247][ T376] tipc: 32-bit node address hash set to 0 [ 2777.553939][ T6943] loop_control_ioctl+0x468/0x680 [ 2777.553947][ T6943] ? xor_init+0x60/0x60 [ 2777.553961][ T6943] do_vfs_ioctl+0x6fb/0x15b0 [ 2777.559667][ T376] tipc: 32-bit node address hash set to 0 [ 2777.564650][ T6943] __x64_sys_ioctl+0xd4/0x110 [ 2777.564659][ T6943] do_syscall_64+0xcb/0x1e0 [ 2777.564669][ T6943] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2777.564677][ T6943] RIP: 0033:0x7f02d6ed5059 05:11:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 41) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 05:11:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 05:11:00 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x3}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) [ 2777.564685][ T6943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2777.564690][ T6943] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2777.564697][ T6943] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2777.564702][ T6943] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2777.564707][ T6943] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2777.564712][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:11:00 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:00 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x3}, 0x10) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) [ 2777.564716][ T6943] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2777.564875][T32365] tipc: 32-bit node address hash set to 0 [ 2777.692256][ T376] tipc: 32-bit node address hash set to 0 [ 2777.698026][ T376] tipc: 32-bit node address hash set to 0 05:11:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 05:11:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async) 05:11:00 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:00 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x3}, 0x10) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) 05:11:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 2777.720901][ T376] tipc: 32-bit node address hash set to 0 [ 2777.741086][ T6989] FAULT_INJECTION: forcing a failure. [ 2777.741086][ T6989] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2777.756827][ T6989] CPU: 0 PID: 6989 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2777.766982][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2777.777009][ T6989] Call Trace: [ 2777.780276][ T6989] dump_stack+0x18e/0x1de [ 2777.784580][ T6989] should_fail+0x5d8/0x740 [ 2777.788971][ T6989] __alloc_pages_nodemask+0x12e/0x740 [ 2777.794317][ T6989] blk_mq_alloc_rqs+0x252/0x660 [ 2777.799246][ T6989] blk_mq_init_sched+0x235/0xb10 [ 2777.804164][ T6989] elevator_init_mq+0x2cd/0x3f0 [ 2777.808998][ T6989] __device_add_disk+0x87/0x1220 [ 2777.813907][ T6989] ? loop_add+0x3c0/0x710 [ 2777.818226][ T6989] loop_add+0x554/0x710 [ 2777.822365][ T6989] loop_control_ioctl+0x468/0x680 [ 2777.827379][ T6989] ? xor_init+0x60/0x60 [ 2777.831508][ T6989] do_vfs_ioctl+0x6fb/0x15b0 [ 2777.832247][ T376] tipc: 32-bit node address hash set to 0 [ 2777.836074][ T6989] __x64_sys_ioctl+0xd4/0x110 [ 2777.836088][ T6989] do_syscall_64+0xcb/0x1e0 [ 2777.841822][ T376] tipc: 32-bit node address hash set to 0 [ 2777.846430][ T6989] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2777.846440][ T6989] RIP: 0033:0x7f02d6ed5059 [ 2777.846449][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2777.846454][ T6989] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2777.846461][ T6989] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2777.846472][ T6989] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2777.910729][ T6989] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 05:11:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 42) 05:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async) 05:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 2777.918676][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2777.926641][ T6989] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2777.935178][T32365] tipc: 32-bit node address hash set to 0 05:11:01 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) 05:11:01 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$bt_hidp(0x1f, 0x3, 0x6) recvmsg$unix(r1, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) r2 = accept$unix(r0, &(0x7f0000000180), &(0x7f00000006c0)=0x6e) getsockname$unix(r2, &(0x7f0000000700)=@abs, &(0x7f0000000140)=0x6e) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x8, 0x3, 0x9) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x4040010) r4 = syz_io_uring_complete(0x0) recvmmsg$unix(r4, &(0x7f0000000640)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/204, 0xcc}], 0x6}}], 0x1, 0x8002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x40086602, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) 05:11:01 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0) 05:11:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) mount$9p_fd(0x0, 0x0, 0x0, 0xff600000, &(0x7f0000000100)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) [ 2777.972234][ T376] tipc: 32-bit node address hash set to 0 [ 2777.977966][ T376] tipc: 32-bit node address hash set to 0 [ 2777.993540][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory 05:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xe80}, 0x0) 05:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 2778.026337][ T7046] FAULT_INJECTION: forcing a failure. [ 2778.026337][ T7046] name failslab, interval 1, probability 0, space 0, times 0 [ 2778.039313][ T7046] CPU: 0 PID: 7046 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2778.049458][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.059506][ T7046] Call Trace: [ 2778.062773][ T7046] dump_stack+0x18e/0x1de [ 2778.067083][ T7046] should_fail+0x5d8/0x740 [ 2778.071473][ T7046] ? elevator_alloc+0x4b/0xc0 [ 2778.076124][ T7046] ? dd_init_queue+0x69/0x330 [ 2778.080774][ T7046] should_failslab+0x5/0x20 [ 2778.085262][ T7046] kmem_cache_alloc_trace+0x39/0x2b0 [ 2778.090516][ T7046] ? memset+0x1f/0x40 [ 2778.094465][ T7046] dd_init_queue+0x69/0x330 [ 2778.098943][ T7046] blk_mq_init_sched+0x444/0xb10 [ 2778.103853][ T7046] elevator_init_mq+0x2cd/0x3f0 [ 2778.108685][ T7046] __device_add_disk+0x87/0x1220 [ 2778.113597][ T7046] ? loop_add+0x3c0/0x710 [ 2778.117896][ T7046] loop_add+0x554/0x710 [ 2778.122026][ T7046] loop_control_ioctl+0x468/0x680 [ 2778.127022][ T7046] ? xor_init+0x60/0x60 [ 2778.131150][ T7046] do_vfs_ioctl+0x6fb/0x15b0 [ 2778.135712][ T7046] __x64_sys_ioctl+0xd4/0x110 [ 2778.140375][ T7046] do_syscall_64+0xcb/0x1e0 [ 2778.144854][ T7046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2778.150718][ T7046] RIP: 0033:0x7f02d6ed5059 [ 2778.155100][ T7046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2778.174680][ T7046] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2778.183063][ T7046] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2778.191004][ T7046] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2778.198946][ T7046] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2778.206886][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2778.214824][ T7046] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 05:11:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 43) 05:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x6fdb}, 0x0) 05:11:01 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) 05:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800e}, 0x0) [ 2778.222923][T32365] tipc: 32-bit node address hash set to 0 [ 2778.228863][ T7046] "mq-deadline" elevator initialization failed, falling back to "none" [ 2778.232291][ T376] tipc: 32-bit node address hash set to 0 [ 2778.246336][ T376] tipc: 32-bit node address hash set to 0 05:11:01 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xdb6f}, 0x0) 05:11:01 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$bt_hidp(0x1f, 0x3, 0x6) recvmsg$unix(r1, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) (async) r2 = accept$unix(r0, &(0x7f0000000180), &(0x7f00000006c0)=0x6e) getsockname$unix(r2, &(0x7f0000000700)=@abs, &(0x7f0000000140)=0x6e) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket(0x8, 0x3, 0x9) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x4040010) (async) r4 = syz_io_uring_complete(0x0) recvmmsg$unix(r4, &(0x7f0000000640)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/204, 0xcc}], 0x6}}], 0x1, 0x8002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x40086602, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) 05:11:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) mount$9p_fd(0x0, 0x0, 0x0, 0xff600000, &(0x7f0000000100)) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:01 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@nodevmap}, {@cache_loose}, {@fscache}, {@mmap}], [{@pcr={'pcr', 0x3d, 0x2c}}, {@obj_user={'obj_user', 0x3d, '/dev/loop-control\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, ',\x04.\xe9'}}, {@subj_role={'subj_role', 0x3d, '])+.:_/).'}}]}}) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x338, 0x0, 0x100, 0x81, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf27}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x968}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ea17d3a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "c408d9df026056b21cb521977548db0b09fb0d08fed89a86cedf678c8463fc8880e9"}}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6fa9e8674da02e86b88df558cf397667fe8f14c1e6698b7d98d1bade35a5e930478bac"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x7f, 0x3, "8ae910126decbc165d889cbf77e4da478664281bd9be94973b63b9a81a8a9c3282854c98d4cd470c338b6bbeb0806b84b45d668f27b20c55b68430d33f99517db251438b47819e5206a1d7bbf2a4fd8a022bf805d5c82acf53a6af2781ce2ff80f691a220750a9f2f197c0df2a964c85d2612c9831b71edfaccee2"}, @TIPC_NLA_NODE_ID={0x54, 0x3, "905bc4a71fea996e5e358b146cacb9482efabe9fbce24dbdbca6125ad81f205099b00a72d21d23f787e034136536da7bd645fd90a5a422cc948151ab145ee7651ff36822c87ce36d15416f2b248cb407"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "bbc9aa596c479fe77d5bd620b3623b85c7571d5be9"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffa467}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb30}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x521}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f57}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x22e569af}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x338}}, 0x4040000) socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RLINK(r0, &(0x7f0000000600)={0x7, 0x47, 0x2}, 0x7) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x38000}, 0x0) 05:11:01 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800300}, 0x0) [ 2778.309657][ T7068] FAULT_INJECTION: forcing a failure. [ 2778.309657][ T7068] name failslab, interval 1, probability 0, space 0, times 0 [ 2778.323986][ T7068] CPU: 1 PID: 7068 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2778.334132][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.344172][ T7068] Call Trace: [ 2778.347455][ T7068] dump_stack+0x18e/0x1de [ 2778.351776][ T7068] should_fail+0x5d8/0x740 [ 2778.356175][ T7068] ? device_create_vargs+0x7d/0x210 [ 2778.361346][ T7068] should_failslab+0x5/0x20 [ 2778.362257][T32365] tipc: 32-bit node address hash set to 0 [ 2778.365823][ T7068] kmem_cache_alloc_trace+0x39/0x2b0 [ 2778.365831][ T7068] ? number+0xf64/0x11e0 [ 2778.365844][ T7068] device_create_vargs+0x7d/0x210 [ 2778.385981][ T7068] device_create+0x86/0xb0 [ 2778.390392][ T7068] ? vsnprintf+0x1a07/0x1aa0 [ 2778.394955][ T7068] bdi_register_va+0x89/0x5e0 [ 2778.399625][ T7068] bdi_register+0x80/0xa0 [ 2778.403924][ T7068] ? __device_add_disk+0x50a/0x1220 [ 2778.409095][ T7068] bdi_register_owner+0x56/0xf0 [ 2778.413912][ T7068] __device_add_disk+0x583/0x1220 [ 2778.418904][ T7068] loop_add+0x554/0x710 [ 2778.423031][ T7068] loop_control_ioctl+0x468/0x680 [ 2778.428022][ T7068] ? xor_init+0x60/0x60 [ 2778.432147][ T7068] do_vfs_ioctl+0x6fb/0x15b0 [ 2778.436709][ T7068] __x64_sys_ioctl+0xd4/0x110 [ 2778.441353][ T7068] do_syscall_64+0xcb/0x1e0 [ 2778.445829][ T7068] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2778.451688][ T7068] RIP: 0033:0x7f02d6ed5059 [ 2778.456069][ T7068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2778.475640][ T7068] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2778.484015][ T7068] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2778.491963][ T7068] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2778.499903][ T7068] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2778.502239][T32365] tipc: 32-bit node address hash set to 0 [ 2778.507846][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2778.507851][ T7068] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2778.510504][ T376] tipc: 32-bit node address hash set to 0 [ 2778.515514][T32365] tipc: 32-bit node address hash set to 0 [ 2778.522439][ T7068] ------------[ cut here ]------------ [ 2778.546305][ T7068] WARNING: CPU: 1 PID: 7068 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2778.555297][ T7068] Modules linked in: [ 2778.559166][ T7068] CPU: 1 PID: 7068 Comm: syz-executor.3 Not tainted 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2778.569276][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.579307][ T7068] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2778.585080][ T7068] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2778.604651][ T7068] RSP: 0018:ffff8881ed587ce8 EFLAGS: 00010246 [ 2778.610682][ T7068] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2778.618624][ T7068] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2778.626577][ T7068] RBP: ffff8881eec4e718 R08: ffffffff8214628e R09: fffffbfff0bac7d3 [ 2778.634520][ T7068] R10: fffffbfff0bac7d3 R11: 0000000000000000 R12: dffffc0000000000 [ 2778.642233][T32365] tipc: 32-bit node address hash set to 0 [ 2778.642465][ T7068] R13: 1ffff1103e9dcc01 R14: 1ffff1103e9dcc9d R15: ffff8881f4ee6000 [ 2778.656097][ T7068] FS: 00007f02d604b700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2778.664999][ T7068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2778.671556][ T7068] CR2: 00005555557cfb38 CR3: 00000001eaa3b000 CR4: 00000000003406e0 [ 2778.679502][ T7068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2778.687442][ T7068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2778.695391][ T7068] Call Trace: [ 2778.698654][ T7068] loop_add+0x554/0x710 [ 2778.702778][ T7068] loop_control_ioctl+0x468/0x680 [ 2778.707782][ T7068] ? xor_init+0x60/0x60 [ 2778.711906][ T7068] do_vfs_ioctl+0x6fb/0x15b0 [ 2778.716465][ T7068] __x64_sys_ioctl+0xd4/0x110 [ 2778.721112][ T7068] do_syscall_64+0xcb/0x1e0 [ 2778.725602][ T7068] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2778.731460][ T7068] RIP: 0033:0x7f02d6ed5059 [ 2778.735844][ T7068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2778.755417][ T7068] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2778.763794][ T7068] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2778.771733][ T7068] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2778.779672][ T7068] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2778.782236][T32365] tipc: 32-bit node address hash set to 0 [ 2778.787615][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2778.787620][ T7068] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 05:11:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 44) 05:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 05:11:02 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) (rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0xff600000, &(0x7f0000000100)) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:02 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$bt_hidp(0x1f, 0x3, 0x6) recvmsg$unix(r1, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) (async) r2 = accept$unix(r0, &(0x7f0000000180), &(0x7f00000006c0)=0x6e) getsockname$unix(r2, &(0x7f0000000700)=@abs, &(0x7f0000000140)=0x6e) (async) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket(0x8, 0x3, 0x9) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x4040010) (async) r4 = syz_io_uring_complete(0x0) recvmmsg$unix(r4, &(0x7f0000000640)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/204, 0xcc}], 0x6}}], 0x1, 0x8002, 0x0) (async) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x40086602, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) 05:11:02 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 05:11:02 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@nodevmap}, {@cache_loose}, {@fscache}, {@mmap}], [{@pcr={'pcr', 0x3d, 0x2c}}, {@obj_user={'obj_user', 0x3d, '/dev/loop-control\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, ',\x04.\xe9'}}, {@subj_role={'subj_role', 0x3d, '])+.:_/).'}}]}}) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x338, 0x0, 0x100, 0x81, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf27}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x968}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ea17d3a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "c408d9df026056b21cb521977548db0b09fb0d08fed89a86cedf678c8463fc8880e9"}}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6fa9e8674da02e86b88df558cf397667fe8f14c1e6698b7d98d1bade35a5e930478bac"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x7f, 0x3, "8ae910126decbc165d889cbf77e4da478664281bd9be94973b63b9a81a8a9c3282854c98d4cd470c338b6bbeb0806b84b45d668f27b20c55b68430d33f99517db251438b47819e5206a1d7bbf2a4fd8a022bf805d5c82acf53a6af2781ce2ff80f691a220750a9f2f197c0df2a964c85d2612c9831b71edfaccee2"}, @TIPC_NLA_NODE_ID={0x54, 0x3, "905bc4a71fea996e5e358b146cacb9482efabe9fbce24dbdbca6125ad81f205099b00a72d21d23f787e034136536da7bd645fd90a5a422cc948151ab145ee7651ff36822c87ce36d15416f2b248cb407"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "bbc9aa596c479fe77d5bd620b3623b85c7571d5be9"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffa467}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb30}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x521}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f57}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x22e569af}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x338}}, 0x4040000) socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RLINK(r0, &(0x7f0000000600)={0x7, 0x47, 0x2}, 0x7) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@nodevmap}, {@cache_loose}, {@fscache}, {@mmap}], [{@pcr={'pcr', 0x3d, 0x2c}}, {@obj_user={'obj_user', 0x3d, '/dev/loop-control\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, ',\x04.\xe9'}}, {@subj_role={'subj_role', 0x3d, '])+.:_/).'}}]}}) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x338, 0x0, 0x100, 0x81, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf27}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x968}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ea17d3a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "c408d9df026056b21cb521977548db0b09fb0d08fed89a86cedf678c8463fc8880e9"}}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6fa9e8674da02e86b88df558cf397667fe8f14c1e6698b7d98d1bade35a5e930478bac"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x7f, 0x3, "8ae910126decbc165d889cbf77e4da478664281bd9be94973b63b9a81a8a9c3282854c98d4cd470c338b6bbeb0806b84b45d668f27b20c55b68430d33f99517db251438b47819e5206a1d7bbf2a4fd8a022bf805d5c82acf53a6af2781ce2ff80f691a220750a9f2f197c0df2a964c85d2612c9831b71edfaccee2"}, @TIPC_NLA_NODE_ID={0x54, 0x3, "905bc4a71fea996e5e358b146cacb9482efabe9fbce24dbdbca6125ad81f205099b00a72d21d23f787e034136536da7bd645fd90a5a422cc948151ab145ee7651ff36822c87ce36d15416f2b248cb407"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "bbc9aa596c479fe77d5bd620b3623b85c7571d5be9"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffa467}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb30}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x521}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f57}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x22e569af}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x338}}, 0x4040000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) write$P9_RLINK(r0, &(0x7f0000000600)={0x7, 0x47, 0x2}, 0x7) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) [ 2778.787633][ T7068] ---[ end trace a32e41e40fb042cc ]--- [ 2778.814924][ T376] tipc: 32-bit node address hash set to 0 [ 2778.820649][ T376] tipc: 32-bit node address hash set to 0 05:11:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000100)={r0, r2, 0x0, 0xa4, &(0x7f0000000040)="0d60d77882ed9b9b58eb5d83f1098c67cba05066ec4dba9fca6cabb5ad9e1f76e93474b3354b415b0cd4de3e600c1dd3000054d3deee0a80468177afb9b0806d2fba6628f7c0c5eaee84b4200d9a6c5643fd669ac0c1ccbd2a5efc4706c945c89e22aee50bf7b03352bb49d5db2c30135ad22e2014640845ae070ed84f89b07c6f792409bdfdd03724a367dd4c6c9aad6c3ea137f874c46282160f3f074ed9bdbd941271", 0x8, 0xff, 0x800, 0xff81, 0x0, 0x3, 0x8, 'syz1\x00'}) 05:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 05:11:02 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:02 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2bc, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x48884) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) 05:11:02 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1) (async) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2bc, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x48884) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) [ 2778.877097][ T7106] FAULT_INJECTION: forcing a failure. [ 2778.877097][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 2778.893985][ T7106] CPU: 0 PID: 7106 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2778.905531][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.915616][ T7106] Call Trace: [ 2778.918899][ T7106] dump_stack+0x18e/0x1de [ 2778.923226][ T7106] should_fail+0x5d8/0x740 [ 2778.927634][ T7106] ? kobject_set_name_vargs+0x5d/0x110 [ 2778.933084][ T7106] should_failslab+0x5/0x20 [ 2778.937582][ T7106] __kmalloc_track_caller+0x5d/0x2e0 [ 2778.942860][ T7106] kstrdup_const+0x51/0x90 [ 2778.947261][ T7106] kobject_set_name_vargs+0x5d/0x110 [ 2778.952515][ T7106] device_create_vargs+0x182/0x210 [ 2778.957598][ T7106] device_create+0x86/0xb0 [ 2778.961989][ T7106] ? vsnprintf+0x1a07/0x1aa0 [ 2778.966572][ T7106] bdi_register_va+0x89/0x5e0 [ 2778.971224][ T7106] bdi_register+0x80/0xa0 [ 2778.975524][ T7106] ? __device_add_disk+0x50a/0x1220 [ 2778.980689][ T7106] bdi_register_owner+0x56/0xf0 [ 2778.985521][ T7106] __device_add_disk+0x583/0x1220 [ 2778.990528][ T7106] loop_add+0x554/0x710 [ 2778.994656][ T7106] loop_control_ioctl+0x468/0x680 [ 2778.999648][ T7106] ? xor_init+0x60/0x60 [ 2779.003781][ T7106] do_vfs_ioctl+0x6fb/0x15b0 [ 2779.008339][ T7106] __x64_sys_ioctl+0xd4/0x110 [ 2779.012994][ T7106] do_syscall_64+0xcb/0x1e0 [ 2779.017471][ T7106] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2779.023332][ T7106] RIP: 0033:0x7f02d6ed5059 [ 2779.027715][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2779.047306][ T7106] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2779.055720][ T7106] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2779.063679][ T7106] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2779.071633][ T7106] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.079661][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2779.087608][ T7106] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2779.095807][T10665] tipc: 32-bit node address hash set to 0 [ 2779.101648][ T7106] ------------[ cut here ]------------ [ 2779.107130][ T7106] WARNING: CPU: 1 PID: 7106 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2779.116127][ T7106] Modules linked in: [ 2779.119992][ T7106] CPU: 1 PID: 7106 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2779.131495][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2779.141558][ T7106] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2779.147332][ T7106] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2779.166995][ T7106] RSP: 0018:ffff8881edc67ce8 EFLAGS: 00010246 [ 2779.173025][ T7106] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2779.180967][ T7106] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2779.188908][ T7106] RBP: ffff8881eecb88e8 R08: ffffffff8214628e R09: ffffed103db8ced0 [ 2779.196845][ T7106] R10: ffffed103db8ced0 R11: 0000000000000000 R12: dffffc0000000000 [ 2779.204781][ T7106] R13: 1ffff1103d649001 R14: 1ffff1103d64909d R15: ffff8881eb248000 [ 2779.212721][ T7106] FS: 00007f02d604b700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2779.221620][ T7106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2779.228273][ T7106] CR2: 00007f28f00b9718 CR3: 00000001eb194000 CR4: 00000000003406e0 [ 2779.232252][T10665] tipc: 32-bit node address hash set to 0 [ 2779.236219][ T7106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2779.236224][ T7106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2779.236232][ T7106] Call Trace: [ 2779.261058][ T7106] loop_add+0x554/0x710 [ 2779.265182][ T7106] loop_control_ioctl+0x468/0x680 [ 2779.270180][ T7106] ? xor_init+0x60/0x60 [ 2779.274314][ T7106] do_vfs_ioctl+0x6fb/0x15b0 [ 2779.278878][ T7106] __x64_sys_ioctl+0xd4/0x110 [ 2779.283538][ T7106] do_syscall_64+0xcb/0x1e0 [ 2779.288008][ T7106] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2779.293867][ T7106] RIP: 0033:0x7f02d6ed5059 [ 2779.298264][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2779.317834][ T7106] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2779.326210][ T7106] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2779.334150][ T7106] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2779.342090][ T7106] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.350032][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2779.357972][ T7106] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2779.365917][ T7106] ---[ end trace a32e41e40fb042cd ]--- [ 2779.371562][ T376] tipc: 32-bit node address hash set to 0 05:11:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 45) 05:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 05:11:02 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1) (async) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2bc, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x48884) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) 05:11:02 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@nodevmap}, {@cache_loose}, {@fscache}, {@mmap}], [{@pcr={'pcr', 0x3d, 0x2c}}, {@obj_user={'obj_user', 0x3d, '/dev/loop-control\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, ',\x04.\xe9'}}, {@subj_role={'subj_role', 0x3d, '])+.:_/).'}}]}}) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x338, 0x0, 0x100, 0x81, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf27}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x968}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ea17d3a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "c408d9df026056b21cb521977548db0b09fb0d08fed89a86cedf678c8463fc8880e9"}}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6fa9e8674da02e86b88df558cf397667fe8f14c1e6698b7d98d1bade35a5e930478bac"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x7f, 0x3, "8ae910126decbc165d889cbf77e4da478664281bd9be94973b63b9a81a8a9c3282854c98d4cd470c338b6bbeb0806b84b45d668f27b20c55b68430d33f99517db251438b47819e5206a1d7bbf2a4fd8a022bf805d5c82acf53a6af2781ce2ff80f691a220750a9f2f197c0df2a964c85d2612c9831b71edfaccee2"}, @TIPC_NLA_NODE_ID={0x54, 0x3, "905bc4a71fea996e5e358b146cacb9482efabe9fbce24dbdbca6125ad81f205099b00a72d21d23f787e034136536da7bd645fd90a5a422cc948151ab145ee7651ff36822c87ce36d15416f2b248cb407"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "bbc9aa596c479fe77d5bd620b3623b85c7571d5be9"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffa467}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb30}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x521}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f57}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x22e569af}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x338}}, 0x4040000) socket$inet_tcp(0x2, 0x1, 0x0) (async) write$P9_RLINK(r0, &(0x7f0000000600)={0x7, 0x47, 0x2}, 0x7) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000100)={r0, r2, 0x0, 0xa4, &(0x7f0000000040)="0d60d77882ed9b9b58eb5d83f1098c67cba05066ec4dba9fca6cabb5ad9e1f76e93474b3354b415b0cd4de3e600c1dd3000054d3deee0a80468177afb9b0806d2fba6628f7c0c5eaee84b4200d9a6c5643fd669ac0c1ccbd2a5efc4706c945c89e22aee50bf7b03352bb49d5db2c30135ad22e2014640845ae070ed84f89b07c6f792409bdfdd03724a367dd4c6c9aad6c3ea137f874c46282160f3f074ed9bdbd941271", 0x8, 0xff, 0x800, 0xff81, 0x0, 0x3, 0x8, 'syz1\x00'}) 05:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800e0000}, 0x0) 05:11:02 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x9, 0x80000000, &(0x7f0000000040)=0x1f}) 05:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 05:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xdb6f0000}, 0x0) [ 2779.380698][ T376] tipc: 32-bit node address hash set to 0 [ 2779.396864][T13339] tipc: 32-bit node address hash set to 0 [ 2779.464485][ T7156] FAULT_INJECTION: forcing a failure. [ 2779.464485][ T7156] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.481325][ T7156] CPU: 0 PID: 7156 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2779.492863][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2779.502256][ T376] tipc: 32-bit node address hash set to 0 [ 2779.502894][ T7156] Call Trace: [ 2779.508610][ T376] tipc: 32-bit node address hash set to 0 [ 2779.511856][ T7156] dump_stack+0x18e/0x1de [ 2779.521835][ T7156] should_fail+0x5d8/0x740 [ 2779.526218][ T7156] ? device_add+0xcb/0x1820 [ 2779.530692][ T7156] should_failslab+0x5/0x20 [ 2779.535184][ T7156] kmem_cache_alloc_trace+0x39/0x2b0 [ 2779.540451][ T7156] device_add+0xcb/0x1820 [ 2779.544746][ T7156] ? kobject_set_name_vargs+0x5d/0x110 [ 2779.550169][ T7156] ? kstrdup_const+0x6c/0x90 [ 2779.554723][ T7156] ? memcpy+0x38/0x50 [ 2779.558685][ T7156] device_create_vargs+0x1b8/0x210 [ 2779.563761][ T7156] device_create+0x86/0xb0 [ 2779.568145][ T7156] ? vsnprintf+0x1a07/0x1aa0 [ 2779.572709][ T7156] bdi_register_va+0x89/0x5e0 [ 2779.577358][ T7156] bdi_register+0x80/0xa0 [ 2779.581654][ T7156] ? __device_add_disk+0x50a/0x1220 [ 2779.586819][ T7156] bdi_register_owner+0x56/0xf0 [ 2779.591636][ T7156] __device_add_disk+0x583/0x1220 [ 2779.596630][ T7156] loop_add+0x554/0x710 [ 2779.600754][ T7156] loop_control_ioctl+0x468/0x680 [ 2779.605750][ T7156] ? xor_init+0x60/0x60 [ 2779.609873][ T7156] do_vfs_ioctl+0x6fb/0x15b0 [ 2779.614430][ T7156] __x64_sys_ioctl+0xd4/0x110 [ 2779.619073][ T7156] do_syscall_64+0xcb/0x1e0 [ 2779.623544][ T7156] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2779.629402][ T7156] RIP: 0033:0x7f02d6ed5059 [ 2779.633783][ T7156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2779.642235][ T376] tipc: 32-bit node address hash set to 0 05:11:02 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0) 05:11:02 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xefea024309c500ee}, 0x8041) [ 2779.653355][ T7156] RSP: 002b:00007f02d602a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2779.653364][ T7156] RAX: ffffffffffffffda RBX: 00007f02d6fe8030 RCX: 00007f02d6ed5059 [ 2779.653368][ T7156] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2779.653373][ T7156] RBP: 00007f02d602a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.653377][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2779.653387][ T7156] R13: 00007fffb943b23f R14: 00007f02d602a300 R15: 0000000000022000 [ 2779.659109][ T376] tipc: 32-bit node address hash set to 0 [ 2779.670126][ T7156] ------------[ cut here ]------------ [ 2779.679546][ T376] tipc: 32-bit node address hash set to 0 [ 2779.683389][ T7156] WARNING: CPU: 0 PID: 7156 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2779.683391][ T7156] Modules linked in: [ 2779.683404][ T7156] CPU: 0 PID: 7156 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2779.683414][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2779.758411][ T7156] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2779.764182][ T7156] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2779.782236][ T376] tipc: 32-bit node address hash set to 0 [ 2779.783760][ T7156] RSP: 0018:ffff8881df13fce8 EFLAGS: 00010246 [ 2779.789467][ T376] tipc: 32-bit node address hash set to 0 [ 2779.795489][ T7156] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2779.795494][ T7156] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2779.795498][ T7156] RBP: ffff8881eec48058 R08: ffffffff8214628e R09: ffffed103be27ed6 [ 2779.795503][ T7156] R10: ffffed103be27ed6 R11: 0000000000000000 R12: dffffc0000000000 [ 2779.795508][ T7156] R13: 1ffff1103d1a6a01 R14: 1ffff1103d1a6a9d R15: ffff8881e8d35000 [ 2779.795515][ T7156] FS: 00007f02d602a700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2779.795519][ T7156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2779.795530][ T7156] CR2: 0000001b2f021000 CR3: 00000001eb194000 CR4: 00000000003406f0 [ 2779.864301][ T7156] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2779.872251][ T7156] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2779.880201][ T7156] Call Trace: [ 2779.883468][ T7156] loop_add+0x554/0x710 [ 2779.887593][ T7156] loop_control_ioctl+0x468/0x680 [ 2779.892600][ T7156] ? xor_init+0x60/0x60 [ 2779.896726][ T7156] do_vfs_ioctl+0x6fb/0x15b0 [ 2779.901285][ T7156] __x64_sys_ioctl+0xd4/0x110 [ 2779.905931][ T7156] do_syscall_64+0xcb/0x1e0 [ 2779.910403][ T7156] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2779.916261][ T7156] RIP: 0033:0x7f02d6ed5059 [ 2779.920646][ T7156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2779.922239][ T376] tipc: 32-bit node address hash set to 0 [ 2779.940232][ T7156] RSP: 002b:00007f02d602a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2779.940240][ T7156] RAX: ffffffffffffffda RBX: 00007f02d6fe8030 RCX: 00007f02d6ed5059 05:11:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 46) 05:11:03 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x9, 0x80000000, &(0x7f0000000040)=0x1f}) 05:11:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000100)={r0, r2, 0x0, 0xa4, &(0x7f0000000040)="0d60d77882ed9b9b58eb5d83f1098c67cba05066ec4dba9fca6cabb5ad9e1f76e93474b3354b415b0cd4de3e600c1dd3000054d3deee0a80468177afb9b0806d2fba6628f7c0c5eaee84b4200d9a6c5643fd669ac0c1ccbd2a5efc4706c945c89e22aee50bf7b03352bb49d5db2c30135ad22e2014640845ae070ed84f89b07c6f792409bdfdd03724a367dd4c6c9aad6c3ea137f874c46282160f3f074ed9bdbd941271", 0x8, 0xff, 0x800, 0xff81, 0x0, 0x3, 0x8, 'syz1\x00'}) 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0) 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x2) [ 2779.940245][ T7156] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2779.940249][ T7156] RBP: 00007f02d602a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.940253][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2779.940258][ T7156] R13: 00007fffb943b23f R14: 00007f02d602a300 R15: 0000000000022000 [ 2779.940269][ T7156] ---[ end trace a32e41e40fb042ce ]--- [ 2779.946012][ T376] tipc: 32-bit node address hash set to 0 [ 2780.006260][ T376] tipc: 32-bit node address hash set to 0 05:11:03 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:03 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xefea024309c500ee}, 0x8041) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xefea024309c500ee}, 0x8041) (async) 05:11:03 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x9, 0x80000000, &(0x7f0000000040)=0x1f}) [ 2780.038008][ T7184] FAULT_INJECTION: forcing a failure. [ 2780.038008][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 2780.054110][ T7184] CPU: 0 PID: 7184 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2780.062241][ T376] tipc: 32-bit node address hash set to 0 [ 2780.065831][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2780.065835][ T7184] Call Trace: [ 2780.065855][ T7184] dump_stack+0x18e/0x1de [ 2780.071667][ T376] tipc: 32-bit node address hash set to 0 [ 2780.081668][ T7184] should_fail+0x5d8/0x740 [ 2780.081681][ T7184] ? __kernfs_new_node+0x47/0x630 [ 2780.081690][ T7184] should_failslab+0x5/0x20 [ 2780.081705][ T7184] __kmalloc_track_caller+0x5d/0x2e0 [ 2780.114050][ T7184] kstrdup_const+0x51/0x90 [ 2780.118438][ T7184] __kernfs_new_node+0x47/0x630 [ 2780.123260][ T7184] ? bdi_register+0x80/0xa0 [ 2780.127732][ T7184] ? bdi_register_owner+0x56/0xf0 [ 2780.132737][ T7184] ? loop_add+0x554/0x710 [ 2780.137033][ T7184] ? loop_control_ioctl+0x468/0x680 [ 2780.142203][ T7184] ? do_vfs_ioctl+0x6fb/0x15b0 [ 2780.146941][ T7184] ? __x64_sys_ioctl+0xd4/0x110 [ 2780.151760][ T7184] ? do_syscall_64+0xcb/0x1e0 [ 2780.156407][ T7184] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2780.162442][ T7184] kernfs_create_dir_ns+0x90/0x220 [ 2780.167525][ T7184] sysfs_create_dir_ns+0x14e/0x2f0 [ 2780.172612][ T7184] kobject_add_internal+0x595/0xbd0 [ 2780.177780][ T7184] kobject_add+0x100/0x1a0 [ 2780.182164][ T7184] ? get_device_parent+0x2cd/0x430 [ 2780.187241][ T7184] device_add+0x417/0x1820 [ 2780.191625][ T7184] device_create_vargs+0x1b8/0x210 [ 2780.196703][ T7184] device_create+0x86/0xb0 [ 2780.201086][ T7184] ? vsnprintf+0x1a07/0x1aa0 [ 2780.202234][ T376] tipc: 32-bit node address hash set to 0 [ 2780.205650][ T7184] bdi_register_va+0x89/0x5e0 [ 2780.205664][ T7184] bdi_register+0x80/0xa0 [ 2780.211393][ T376] tipc: 32-bit node address hash set to 0 [ 2780.216002][ T7184] ? __device_add_disk+0x50a/0x1220 [ 2780.216012][ T7184] bdi_register_owner+0x56/0xf0 [ 2780.216021][ T7184] __device_add_disk+0x583/0x1220 [ 2780.216035][ T7184] loop_add+0x554/0x710 [ 2780.245099][ T7184] loop_control_ioctl+0x468/0x680 [ 2780.250091][ T7184] ? xor_init+0x60/0x60 [ 2780.254221][ T7184] do_vfs_ioctl+0x6fb/0x15b0 [ 2780.258784][ T7184] __x64_sys_ioctl+0xd4/0x110 [ 2780.263429][ T7184] do_syscall_64+0xcb/0x1e0 [ 2780.267900][ T7184] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2780.273763][ T7184] RIP: 0033:0x7f02d6ed5059 [ 2780.278152][ T7184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2780.297724][ T7184] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2780.306098][ T7184] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2780.314037][ T7184] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2780.321979][ T7184] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2780.329916][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2780.337861][ T7184] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2780.342232][ T376] tipc: 32-bit node address hash set to 0 [ 2780.347217][ T7184] kobject_add_internal failed for 7:11 (error: -12 parent: bdi) [ 2780.353145][ T376] tipc: 32-bit node address hash set to 0 [ 2780.359487][ T7184] ------------[ cut here ]------------ [ 2780.365065][ T376] tipc: 32-bit node address hash set to 0 [ 2780.370281][ T7184] WARNING: CPU: 0 PID: 7184 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2780.370284][ T7184] Modules linked in: [ 2780.370300][ T7184] CPU: 0 PID: 7184 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2780.400312][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2780.410341][ T7184] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2780.416113][ T7184] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2780.435692][ T7184] RSP: 0018:ffff8881cce77ce8 EFLAGS: 00010246 [ 2780.441733][ T7184] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2780.449735][ T7184] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2780.457684][ T7184] RBP: ffff8881eec4bc48 R08: ffffffff8214628e R09: 0000000000000010 [ 2780.465641][ T7184] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2780.473584][ T7184] R13: 1ffff1103d1a6c01 R14: 1ffff1103d1a6c9d R15: ffff8881e8d36000 [ 2780.481531][ T7184] FS: 00007f02d604b700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2780.482261][ T376] tipc: 32-bit node address hash set to 0 [ 2780.490431][ T7184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2780.490437][ T7184] CR2: 0000555555facb38 CR3: 00000001e5585000 CR4: 00000000003406f0 [ 2780.490451][ T7184] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2780.496203][ T376] tipc: 32-bit node address hash set to 0 [ 2780.502698][ T7184] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2780.502701][ T7184] Call Trace: [ 2780.502720][ T7184] loop_add+0x554/0x710 [ 2780.502734][ T7184] loop_control_ioctl+0x468/0x680 [ 2780.544758][ T7184] ? xor_init+0x60/0x60 [ 2780.548882][ T7184] do_vfs_ioctl+0x6fb/0x15b0 [ 2780.553440][ T7184] __x64_sys_ioctl+0xd4/0x110 [ 2780.558086][ T7184] do_syscall_64+0xcb/0x1e0 [ 2780.562561][ T7184] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2780.568453][ T7184] RIP: 0033:0x7f02d6ed5059 [ 2780.572834][ T7184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2780.592403][ T7184] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2780.600779][ T7184] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2780.608734][ T7184] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2780.616676][ T7184] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2780.622233][ T376] tipc: 32-bit node address hash set to 0 [ 2780.624618][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:11:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 47) 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x3) 05:11:03 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 05:11:03 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x10000000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x300) 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xe80) [ 2780.624623][ T7184] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2780.624635][ T7184] ---[ end trace a32e41e40fb042cf ]--- [ 2780.630365][ T376] tipc: 32-bit node address hash set to 0 [ 2780.638444][T10665] tipc: 32-bit node address hash set to 0 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x4000) 05:11:03 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x6fdb) 05:11:03 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x10000000) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:03 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xefea024309c500ee}, 0x8041) 05:11:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x800e) [ 2780.675496][ T22] audit: type=1400 audit(1643433063.899:212): avc: denied { map } for pid=7197 comm="syz-executor.1" path="/dev/loop-control" dev="devtmpfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2780.701186][ T22] audit: type=1400 audit(1643433063.899:213): avc: denied { execute } for pid=7197 comm="syz-executor.1" path="/dev/loop-control" dev="devtmpfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2780.754901][ T7200] FAULT_INJECTION: forcing a failure. [ 2780.754901][ T7200] name failslab, interval 1, probability 0, space 0, times 0 [ 2780.767693][ T376] tipc: 32-bit node address hash set to 0 [ 2780.770136][ T7200] CPU: 0 PID: 7200 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2780.773690][ T376] tipc: 32-bit node address hash set to 0 [ 2780.784911][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2780.784914][ T7200] Call Trace: [ 2780.784928][ T7200] dump_stack+0x18e/0x1de [ 2780.784945][ T7200] should_fail+0x5d8/0x740 [ 2780.812610][ T7200] ? __kernfs_new_node+0x47/0x630 [ 2780.817600][ T7200] should_failslab+0x5/0x20 [ 2780.822073][ T7200] __kmalloc_track_caller+0x5d/0x2e0 [ 2780.827330][ T7200] kstrdup_const+0x51/0x90 [ 2780.831712][ T7200] __kernfs_new_node+0x47/0x630 [ 2780.836532][ T7200] ? bdi_register+0x80/0xa0 [ 2780.841005][ T7200] ? bdi_register_owner+0x56/0xf0 [ 2780.845997][ T7200] ? loop_add+0x554/0x710 [ 2780.850293][ T7200] ? loop_control_ioctl+0x468/0x680 [ 2780.855482][ T7200] ? do_vfs_ioctl+0x6fb/0x15b0 [ 2780.860216][ T7200] ? __x64_sys_ioctl+0xd4/0x110 [ 2780.865033][ T7200] ? do_syscall_64+0xcb/0x1e0 [ 2780.869678][ T7200] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2780.875715][ T7200] kernfs_create_dir_ns+0x90/0x220 [ 2780.880795][ T7200] sysfs_create_dir_ns+0x14e/0x2f0 [ 2780.885875][ T7200] kobject_add_internal+0x595/0xbd0 [ 2780.891040][ T7200] kobject_add+0x100/0x1a0 [ 2780.895424][ T7200] ? get_device_parent+0x2cd/0x430 [ 2780.900503][ T7200] device_add+0x417/0x1820 [ 2780.902257][ T376] tipc: 32-bit node address hash set to 0 [ 2780.904894][ T7200] device_create_vargs+0x1b8/0x210 [ 2780.910598][ T376] tipc: 32-bit node address hash set to 0 [ 2780.915667][ T7200] device_create+0x86/0xb0 [ 2780.915675][ T7200] ? vsnprintf+0x1a07/0x1aa0 [ 2780.915685][ T7200] bdi_register_va+0x89/0x5e0 [ 2780.915699][ T7200] bdi_register+0x80/0xa0 [ 2780.939255][ T7200] ? __device_add_disk+0x50a/0x1220 [ 2780.944417][ T7200] bdi_register_owner+0x56/0xf0 [ 2780.949232][ T7200] __device_add_disk+0x583/0x1220 [ 2780.954222][ T7200] loop_add+0x554/0x710 [ 2780.958345][ T7200] loop_control_ioctl+0x468/0x680 [ 2780.963335][ T7200] ? xor_init+0x60/0x60 [ 2780.967463][ T7200] do_vfs_ioctl+0x6fb/0x15b0 [ 2780.972019][ T7200] __x64_sys_ioctl+0xd4/0x110 [ 2780.976665][ T7200] do_syscall_64+0xcb/0x1e0 [ 2780.981148][ T7200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2780.987018][ T7200] RIP: 0033:0x7f02d6ed5059 [ 2780.991400][ T7200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2781.010971][ T7200] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2781.019349][ T7200] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2781.027286][ T7200] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2781.035223][ T7200] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.042267][ T376] tipc: 32-bit node address hash set to 0 [ 2781.043170][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2781.048875][ T376] tipc: 32-bit node address hash set to 0 [ 2781.056798][ T7200] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2781.057766][ T7200] kobject_add_internal failed for 7:11 (error: -12 parent: bdi) [ 2781.063212][ T376] tipc: 32-bit node address hash set to 0 [ 2781.071310][ T7200] ------------[ cut here ]------------ [ 2781.089339][ T7200] WARNING: CPU: 0 PID: 7200 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2781.098316][ T7200] Modules linked in: [ 2781.102184][ T7200] CPU: 0 PID: 7200 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2781.113685][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2781.123718][ T7200] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2781.129493][ T7200] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2781.149065][ T7200] RSP: 0018:ffff8881eb8ffce8 EFLAGS: 00010246 [ 2781.155100][ T7200] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2781.163042][ T7200] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2781.170981][ T7200] RBP: ffff8881eec4d5f8 R08: ffffffff8214628e R09: 0000000000000010 [ 2781.178917][ T7200] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2781.182241][ T376] tipc: 32-bit node address hash set to 0 [ 2781.186952][ T7200] R13: 1ffff1103cbeaa01 R14: 1ffff1103cbeaa9d R15: ffff8881e5f55000 [ 2781.192700][ T376] tipc: 32-bit node address hash set to 0 [ 2781.200595][ T7200] FS: 00007f02d604b700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2781.215171][ T7200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2781.221720][ T7200] CR2: 00007f1b32fc3718 CR3: 00000001e3520000 CR4: 00000000003406f0 [ 2781.229672][ T7200] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2781.237611][ T7200] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2781.245547][ T7200] Call Trace: [ 2781.248809][ T7200] loop_add+0x554/0x710 [ 2781.252938][ T7200] loop_control_ioctl+0x468/0x680 [ 2781.257930][ T7200] ? xor_init+0x60/0x60 [ 2781.262052][ T7200] do_vfs_ioctl+0x6fb/0x15b0 [ 2781.266611][ T7200] __x64_sys_ioctl+0xd4/0x110 [ 2781.271256][ T7200] do_syscall_64+0xcb/0x1e0 [ 2781.275729][ T7200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2781.281586][ T7200] RIP: 0033:0x7f02d6ed5059 [ 2781.285969][ T7200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2781.305539][ T7200] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2781.313918][ T7200] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2781.321870][ T7200] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2781.322232][ T376] tipc: 32-bit node address hash set to 0 [ 2781.329815][ T7200] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.335552][ T376] tipc: 32-bit node address hash set to 0 [ 2781.343444][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:11:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 48) 05:11:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xdb6f) 05:11:04 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 05:11:04 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x10000000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x10000000) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) 05:11:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x38000) 05:11:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x800300) 05:11:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x1000000) 05:11:04 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:04 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xe00, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)={0x1f, 0x7, 0x1, {{0x12, '/dev/loop-control\x00'}, 0xfffffffa}}, 0x1f) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:04 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x2000000) 05:11:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x3000000) [ 2781.343449][ T7200] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2781.343458][ T7200] ---[ end trace a32e41e40fb042d0 ]--- [ 2781.374506][ T376] tipc: 32-bit node address hash set to 0 [ 2781.394295][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2781.425838][ T7235] FAULT_INJECTION: forcing a failure. [ 2781.425838][ T7235] name failslab, interval 1, probability 0, space 0, times 0 [ 2781.438512][ T7235] CPU: 0 PID: 7235 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2781.450035][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2781.460057][ T7235] Call Trace: [ 2781.463317][ T7235] dump_stack+0x18e/0x1de [ 2781.467620][ T7235] should_fail+0x5d8/0x740 [ 2781.472007][ T7235] ? device_add+0x417/0x1820 [ 2781.476567][ T7235] ? radix_tree_node_alloc+0x18c/0x370 [ 2781.481991][ T7235] should_failslab+0x5/0x20 [ 2781.486465][ T7235] kmem_cache_alloc+0x36/0x290 [ 2781.491198][ T7235] ? __x64_sys_ioctl+0xd4/0x110 [ 2781.496015][ T7235] ? do_syscall_64+0xcb/0x1e0 [ 2781.500659][ T7235] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2781.506692][ T7235] radix_tree_node_alloc+0x18c/0x370 [ 2781.511946][ T7235] idr_get_free+0x29a/0x870 [ 2781.516422][ T7235] idr_alloc_cyclic+0x170/0x510 [ 2781.521243][ T7235] __kernfs_new_node+0xdd/0x630 [ 2781.526062][ T7235] ? bdi_register+0x80/0xa0 [ 2781.530531][ T7235] ? loop_control_ioctl+0x468/0x680 [ 2781.535695][ T7235] ? __x64_sys_ioctl+0xd4/0x110 [ 2781.540511][ T7235] ? do_syscall_64+0xcb/0x1e0 [ 2781.545169][ T7235] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2781.551208][ T7235] kernfs_create_dir_ns+0x90/0x220 [ 2781.556311][ T7235] sysfs_create_dir_ns+0x14e/0x2f0 [ 2781.561388][ T7235] kobject_add_internal+0x595/0xbd0 [ 2781.566555][ T7235] kobject_add+0x100/0x1a0 [ 2781.570937][ T7235] ? get_device_parent+0x2cd/0x430 [ 2781.576016][ T7235] device_add+0x417/0x1820 [ 2781.580407][ T7235] device_create_vargs+0x1b8/0x210 [ 2781.585519][ T7235] device_create+0x86/0xb0 [ 2781.589903][ T7235] ? vsnprintf+0x1a07/0x1aa0 [ 2781.594461][ T7235] bdi_register_va+0x89/0x5e0 [ 2781.599122][ T7235] bdi_register+0x80/0xa0 [ 2781.603424][ T7235] ? __device_add_disk+0x50a/0x1220 [ 2781.608589][ T7235] bdi_register_owner+0x56/0xf0 [ 2781.613406][ T7235] __device_add_disk+0x583/0x1220 [ 2781.618397][ T7235] loop_add+0x554/0x710 [ 2781.622519][ T7235] loop_control_ioctl+0x468/0x680 [ 2781.627509][ T7235] ? xor_init+0x60/0x60 [ 2781.631630][ T7235] do_vfs_ioctl+0x6fb/0x15b0 [ 2781.636188][ T7235] __x64_sys_ioctl+0xd4/0x110 [ 2781.640836][ T7235] do_syscall_64+0xcb/0x1e0 [ 2781.645333][ T7235] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2781.651193][ T7235] RIP: 0033:0x7f02d6ed5059 [ 2781.655575][ T7235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2781.675161][ T7235] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2781.683538][ T7235] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2781.691478][ T7235] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2781.699424][ T7235] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.707373][ T7235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2781.715313][ T7235] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 05:11:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 49) 05:11:04 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 05:11:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x40000000) 05:11:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x800e0000) [ 2781.723691][ T12] tipc: 32-bit node address hash set to 0 [ 2781.742220][ T376] tipc: 32-bit node address hash set to 0 [ 2781.750281][ T376] tipc: 32-bit node address hash set to 0 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x9effffff) 05:11:05 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xe00, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)={0x1f, 0x7, 0x1, {{0x12, '/dev/loop-control\x00'}, 0xfffffffa}}, 0x1f) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:05 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xdb6f0000) 05:11:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x141400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fcdfdf25010000000000000001410000001c00170000001d000080006574683a6e656c7be7863b77c13a15a0"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$unix(r4, &(0x7f0000000040)="070fc48705d4c0aa8e61387802926f3d5904d1896aea075ab5e56d6ba6edd8aca72306b798cbea46baadb6a482708c93852d84192e0ac774e6f96cbe6fb07f038b924c54edbe4045f3b1c63cef8f6d66bac9902c2d9abf9fcfca2f489e48b45440ca755dd60b61506dfc4d0b9fd2d34f", 0x70, 0x40000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4007, @fd=r0, 0x7ac, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x40) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7) 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xefffffff) [ 2781.783268][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory 05:11:05 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:05 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) r1 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x1, 0xe802, 0x10, 0xb3d, 0xfffffffffffff388, 0x3ff, 0x0, 0xfffffffffffffffa, 0x3}}, 0x43) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000140)={{0x2, 0x2, 0x101, 0x3, 0x3}, 0x4, 0x5}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000) [ 2781.832282][ T7279] FAULT_INJECTION: forcing a failure. [ 2781.832282][ T7279] name failslab, interval 1, probability 0, space 0, times 0 [ 2781.848035][ T7279] CPU: 0 PID: 7279 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2781.859577][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2781.869607][ T7279] Call Trace: [ 2781.872252][ T376] tipc: 32-bit node address hash set to 0 [ 2781.872876][ T7279] dump_stack+0x18e/0x1de [ 2781.878579][ T376] tipc: 32-bit node address hash set to 0 [ 2781.882875][ T7279] should_fail+0x5d8/0x740 [ 2781.882886][ T7279] ? __kernfs_new_node+0x8b/0x630 [ 2781.882899][ T7279] should_failslab+0x5/0x20 [ 2781.882914][ T7279] kmem_cache_alloc+0x36/0x290 [ 2781.907283][ T7279] ? kernfs_activate+0x3fc/0x420 [ 2781.912242][ T7279] __kernfs_new_node+0x8b/0x630 [ 2781.917074][ T7279] ? kernfs_create_dir_ns+0x1df/0x220 [ 2781.922435][ T7279] kernfs_new_node+0x95/0x160 [ 2781.927082][ T7279] __kernfs_create_file+0x45/0x260 [ 2781.932165][ T7279] sysfs_add_file_mode_ns+0x293/0x340 [ 2781.937508][ T7279] sysfs_create_file_ns+0x146/0x230 [ 2781.942690][ T7279] device_add+0x5d7/0x1820 [ 2781.947081][ T7279] device_create_vargs+0x1b8/0x210 [ 2781.952164][ T7279] device_create+0x86/0xb0 [ 2781.956550][ T7279] ? vsnprintf+0x1a07/0x1aa0 [ 2781.961222][ T7279] bdi_register_va+0x89/0x5e0 [ 2781.965873][ T7279] bdi_register+0x80/0xa0 [ 2781.970172][ T7279] ? __device_add_disk+0x50a/0x1220 [ 2781.975341][ T7279] bdi_register_owner+0x56/0xf0 [ 2781.980174][ T7279] __device_add_disk+0x583/0x1220 [ 2781.985178][ T7279] loop_add+0x554/0x710 [ 2781.989305][ T7279] loop_control_ioctl+0x468/0x680 [ 2781.994305][ T7279] ? xor_init+0x60/0x60 [ 2781.998439][ T7279] do_vfs_ioctl+0x6fb/0x15b0 [ 2782.003009][ T7279] __x64_sys_ioctl+0xd4/0x110 [ 2782.007681][ T7279] do_syscall_64+0xcb/0x1e0 [ 2782.012159][ T7279] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2782.012243][ T376] tipc: 32-bit node address hash set to 0 [ 2782.018642][ T7279] RIP: 0033:0x7f02d6ed5059 [ 2782.018652][ T7279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2782.018657][ T7279] RSP: 002b:00007f02d602a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2782.018665][ T7279] RAX: ffffffffffffffda RBX: 00007f02d6fe8030 RCX: 00007f02d6ed5059 [ 2782.018677][ T7279] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2782.024485][ T376] tipc: 32-bit node address hash set to 0 [ 2782.028756][ T7279] RBP: 00007f02d602a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2782.028760][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2782.028765][ T7279] R13: 00007fffb943b23f R14: 00007f02d602a300 R15: 0000000000022000 [ 2782.028982][ T12] tipc: 32-bit node address hash set to 0 [ 2782.051472][ T7279] ------------[ cut here ]------------ [ 2782.113331][ T7279] WARNING: CPU: 1 PID: 7279 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2782.122326][ T7279] Modules linked in: [ 2782.126218][ T7279] CPU: 1 PID: 7279 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2782.137726][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2782.147764][ T7279] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2782.153542][ T7279] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2782.173134][ T7279] RSP: 0018:ffff8881e9387ce8 EFLAGS: 00010246 [ 2782.179186][ T7279] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2782.187132][ T7279] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2782.195077][ T7279] RBP: ffff8881eecb8058 R08: ffffffff8214628e R09: 0000000000000010 [ 2782.203039][ T7279] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2782.211068][ T7279] R13: 1ffff1103c90b001 R14: 1ffff1103c90b09d R15: ffff8881e4858000 [ 2782.219010][ T7279] FS: 00007f02d602a700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2782.227923][ T7279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2782.234477][ T7279] CR2: 00007f1b32fc3718 CR3: 00000001e924b000 CR4: 00000000003406e0 [ 2782.242418][ T7279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2782.250360][ T7279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2782.258300][ T7279] Call Trace: [ 2782.261580][ T7279] loop_add+0x554/0x710 [ 2782.265707][ T7279] loop_control_ioctl+0x468/0x680 [ 2782.270715][ T7279] ? xor_init+0x60/0x60 [ 2782.274839][ T7279] do_vfs_ioctl+0x6fb/0x15b0 [ 2782.279405][ T7279] __x64_sys_ioctl+0xd4/0x110 [ 2782.284060][ T7279] do_syscall_64+0xcb/0x1e0 [ 2782.288536][ T7279] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2782.294397][ T7279] RIP: 0033:0x7f02d6ed5059 [ 2782.298802][ T7279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2782.318396][ T7279] RSP: 002b:00007f02d602a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:11:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 50) 05:11:05 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xe00, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)={0x1f, 0x7, 0x1, {{0x12, '/dev/loop-control\x00'}, 0xfffffffa}}, 0x1f) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x141400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fcdfdf25010000000000000001410000001c00170000001d000080006574683a6e656c7be7863b77c13a15a0"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$unix(r4, &(0x7f0000000040)="070fc48705d4c0aa8e61387802926f3d5904d1896aea075ab5e56d6ba6edd8aca72306b798cbea46baadb6a482708c93852d84192e0ac774e6f96cbe6fb07f038b924c54edbe4045f3b1c63cef8f6d66bac9902c2d9abf9fcfca2f489e48b45440ca755dd60b61506dfc4d0b9fd2d34f", 0x70, 0x40000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4007, @fd=r0, 0x7ac, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x40) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x141400, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fcdfdf25010000000000000001410000001c00170000001d000080006574683a6e656c7be7863b77c13a15a0"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendto$unix(r4, &(0x7f0000000040)="070fc48705d4c0aa8e61387802926f3d5904d1896aea075ab5e56d6ba6edd8aca72306b798cbea46baadb6a482708c93852d84192e0ac774e6f96cbe6fb07f038b924c54edbe4045f3b1c63cef8f6d66bac9902c2d9abf9fcfca2f489e48b45440ca755dd60b61506dfc4d0b9fd2d34f", 0x70, 0x40000, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4007, @fd=r0, 0x7ac, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x40) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r6, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r8, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7) (async) 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xf0ffffff) 05:11:05 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) r1 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x1, 0xe802, 0x10, 0xb3d, 0xfffffffffffff388, 0x3ff, 0x0, 0xfffffffffffffffa, 0x3}}, 0x43) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000140)={{0x2, 0x2, 0x101, 0x3, 0x3}, 0x4, 0x5}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000) 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xffffff7f) 05:11:05 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) [ 2782.326783][ T7279] RAX: ffffffffffffffda RBX: 00007f02d6fe8030 RCX: 00007f02d6ed5059 [ 2782.334725][ T7279] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2782.342665][ T7279] RBP: 00007f02d602a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2782.350616][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2782.358558][ T7279] R13: 00007fffb943b23f R14: 00007f02d602a300 R15: 0000000000022000 [ 2782.366502][ T7279] ---[ end trace a32e41e40fb042d1 ]--- [ 2782.372226][ T376] tipc: 32-bit node address hash set to 0 [ 2782.378002][ T376] tipc: 32-bit node address hash set to 0 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xffffff9e) 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xffffffef) 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xfffffff0) 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x80030000000000) 05:11:05 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) r1 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x1, 0xe802, 0x10, 0xb3d, 0xfffffffffffff388, 0x3ff, 0x0, 0xfffffffffffffffa, 0x3}}, 0x43) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000140)={{0x2, 0x2, 0x101, 0x3, 0x3}, 0x4, 0x5}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) syz_io_uring_complete(0x0) (async) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x1, 0xe802, 0x10, 0xb3d, 0xfffffffffffff388, 0x3ff, 0x0, 0xfffffffffffffffa, 0x3}}, 0x43) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000140)={{0x2, 0x2, 0x101, 0x3, 0x3}, 0x4, 0x5}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000) (async) [ 2782.411156][ T7296] FAULT_INJECTION: forcing a failure. [ 2782.411156][ T7296] name failslab, interval 1, probability 0, space 0, times 0 [ 2782.423796][ T7296] CPU: 1 PID: 7296 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2782.435318][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2782.445367][ T7296] Call Trace: [ 2782.448649][ T7296] dump_stack+0x18e/0x1de [ 2782.452972][ T7296] should_fail+0x5d8/0x740 [ 2782.457379][ T7296] ? device_add+0x417/0x1820 [ 2782.461964][ T7296] ? radix_tree_node_alloc+0x18c/0x370 [ 2782.467413][ T7296] should_failslab+0x5/0x20 [ 2782.471923][ T7296] kmem_cache_alloc+0x36/0x290 [ 2782.476662][ T7296] ? __x64_sys_ioctl+0xd4/0x110 [ 2782.481482][ T7296] ? do_syscall_64+0xcb/0x1e0 [ 2782.486128][ T7296] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2782.492163][ T7296] radix_tree_node_alloc+0x18c/0x370 [ 2782.497422][ T7296] idr_get_free+0x29a/0x870 [ 2782.501898][ T7296] idr_alloc_cyclic+0x170/0x510 [ 2782.506721][ T7296] __kernfs_new_node+0xdd/0x630 [ 2782.511549][ T7296] ? bdi_register+0x80/0xa0 [ 2782.516045][ T7296] ? loop_control_ioctl+0x468/0x680 [ 2782.521225][ T7296] ? __x64_sys_ioctl+0xd4/0x110 [ 2782.526065][ T7296] ? do_syscall_64+0xcb/0x1e0 [ 2782.530725][ T7296] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2782.536781][ T7296] kernfs_create_dir_ns+0x90/0x220 [ 2782.541876][ T7296] sysfs_create_dir_ns+0x14e/0x2f0 [ 2782.546966][ T7296] kobject_add_internal+0x595/0xbd0 [ 2782.552133][ T7296] kobject_add+0x100/0x1a0 [ 2782.556522][ T7296] ? get_device_parent+0x2cd/0x430 [ 2782.561725][ T7296] device_add+0x417/0x1820 [ 2782.566112][ T7296] device_create_vargs+0x1b8/0x210 [ 2782.571206][ T7296] device_create+0x86/0xb0 [ 2782.575593][ T7296] ? vsnprintf+0x1a07/0x1aa0 [ 2782.580156][ T7296] bdi_register_va+0x89/0x5e0 [ 2782.584801][ T7296] bdi_register+0x80/0xa0 [ 2782.589136][ T7296] ? __device_add_disk+0x50a/0x1220 [ 2782.594301][ T7296] bdi_register_owner+0x56/0xf0 [ 2782.599126][ T7296] __device_add_disk+0x583/0x1220 [ 2782.604127][ T7296] loop_add+0x554/0x710 [ 2782.608250][ T7296] loop_control_ioctl+0x468/0x680 [ 2782.613239][ T7296] ? xor_init+0x60/0x60 [ 2782.617363][ T7296] do_vfs_ioctl+0x6fb/0x15b0 [ 2782.621957][ T7296] __x64_sys_ioctl+0xd4/0x110 [ 2782.626627][ T7296] do_syscall_64+0xcb/0x1e0 [ 2782.631551][ T7296] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2782.637411][ T7296] RIP: 0033:0x7f02d6ed5059 [ 2782.641794][ T7296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2782.661369][ T7296] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2782.669760][ T7296] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2782.677704][ T7296] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2782.685657][ T7296] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2782.693597][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2782.701536][ T7296] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 05:11:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 51) 05:11:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x141400, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fcdfdf25010000000000000001410000001c00170000001d000080006574683a6e656c7be7863b77c13a15a0"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$unix(r4, &(0x7f0000000040)="070fc48705d4c0aa8e61387802926f3d5904d1896aea075ab5e56d6ba6edd8aca72306b798cbea46baadb6a482708c93852d84192e0ac774e6f96cbe6fb07f038b924c54edbe4045f3b1c63cef8f6d66bac9902c2d9abf9fcfca2f489e48b45440ca755dd60b61506dfc4d0b9fd2d34f", 0x70, 0x40000, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4007, @fd=r0, 0x7ac, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x40) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7) 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x100000000000000) 05:11:05 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 05:11:05 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x2f, 0x7, 0x7f, 0x7, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x700, 0x7800, 0x7, 0xb5e}}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000001c0)=""/123, &(0x7f0000000080)=0x7b) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x218980, 0x0) geteuid() r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10300, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x40086602, 0x0) 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x200000000000000) [ 2782.709730][ T376] tipc: 32-bit node address hash set to 0 [ 2782.715620][ T376] tipc: 32-bit node address hash set to 0 [ 2782.721398][T26969] tipc: 32-bit node address hash set to 0 [ 2782.751980][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory 05:11:05 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:05 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x2f, 0x7, 0x7f, 0x7, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x700, 0x7800, 0x7, 0xb5e}}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000001c0)=""/123, &(0x7f0000000080)=0x7b) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x218980, 0x0) (async, rerun: 32) geteuid() (async, rerun: 32) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10300, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x40086602, 0x0) 05:11:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42802, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:11:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x300000000000000) 05:11:05 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) 05:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x4000000000000000) [ 2782.763193][ T7355] FAULT_INJECTION: forcing a failure. [ 2782.763193][ T7355] name failslab, interval 1, probability 0, space 0, times 0 [ 2782.779195][ T7355] CPU: 1 PID: 7355 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2782.790733][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2782.800766][ T7355] Call Trace: [ 2782.804031][ T7355] dump_stack+0x18e/0x1de [ 2782.808334][ T7355] should_fail+0x5d8/0x740 [ 2782.812725][ T7355] ? __kernfs_new_node+0x8b/0x630 [ 2782.817718][ T7355] should_failslab+0x5/0x20 [ 2782.822196][ T7355] kmem_cache_alloc+0x36/0x290 [ 2782.826943][ T7355] __kernfs_new_node+0x8b/0x630 [ 2782.831791][ T7355] ? mutex_unlock+0x19/0x40 [ 2782.836272][ T7355] ? kernfs_add_one+0x49e/0x5c0 [ 2782.841110][ T7355] ? __kernfs_create_file+0x1f1/0x260 [ 2782.846480][ T7355] kernfs_new_node+0x95/0x160 [ 2782.851131][ T7355] kernfs_create_link+0x9c/0x1f0 [ 2782.856040][ T7355] sysfs_do_create_link_sd+0x85/0x100 [ 2782.861393][ T7355] device_add+0x6dc/0x1820 [ 2782.865804][ T7355] device_create_vargs+0x1b8/0x210 [ 2782.870904][ T7355] device_create+0x86/0xb0 [ 2782.875291][ T7355] ? vsnprintf+0x1a07/0x1aa0 [ 2782.879858][ T7355] bdi_register_va+0x89/0x5e0 [ 2782.884507][ T7355] bdi_register+0x80/0xa0 [ 2782.888810][ T7355] ? __device_add_disk+0x50a/0x1220 [ 2782.893978][ T7355] bdi_register_owner+0x56/0xf0 [ 2782.898804][ T7355] __device_add_disk+0x583/0x1220 [ 2782.903819][ T7355] loop_add+0x554/0x710 [ 2782.907946][ T7355] loop_control_ioctl+0x468/0x680 [ 2782.912943][ T7355] ? xor_init+0x60/0x60 [ 2782.917071][ T7355] do_vfs_ioctl+0x6fb/0x15b0 [ 2782.921639][ T7355] __x64_sys_ioctl+0xd4/0x110 [ 2782.926288][ T7355] do_syscall_64+0xcb/0x1e0 [ 2782.930776][ T7355] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2782.936652][ T7355] RIP: 0033:0x7f02d6ed5059 [ 2782.941063][ T7355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2782.960649][ T7355] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2782.969033][ T7355] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2782.976979][ T7355] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2782.984920][ T7355] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2782.992862][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2783.000804][ T7355] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2783.008956][ T376] tipc: 32-bit node address hash set to 0 [ 2783.014750][ T376] tipc: 32-bit node address hash set to 0 [ 2783.015813][ T7355] ------------[ cut here ]------------ [ 2783.025909][ T7355] WARNING: CPU: 0 PID: 7355 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2783.034917][ T7355] Modules linked in: [ 2783.038788][ T7355] CPU: 0 PID: 7355 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2783.050339][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2783.060384][ T7355] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2783.066158][ T7355] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2783.085733][ T7355] RSP: 0018:ffff8881e3197ce8 EFLAGS: 00010246 [ 2783.092189][ T7355] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2783.100130][ T7355] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2783.108157][ T7355] RBP: ffff8881f072ab28 R08: ffffffff8214628e R09: 0000000000000010 [ 2783.116097][ T7355] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2783.124035][ T7355] R13: 1ffff1103d6cae01 R14: 1ffff1103d6cae9d R15: ffff8881eb657000 [ 2783.131974][ T7355] FS: 00007f02d604b700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2783.140871][ T7355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2783.142242][ T376] tipc: 32-bit node address hash set to 0 [ 2783.147441][ T7355] CR2: 00007f125ba55718 CR3: 00000001eb26b000 CR4: 00000000003406f0 [ 2783.147455][ T7355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2783.153213][ T376] tipc: 32-bit node address hash set to 0 [ 2783.161095][ T7355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2783.161098][ T7355] Call Trace: [ 2783.161119][ T7355] loop_add+0x554/0x710 [ 2783.190077][ T7355] loop_control_ioctl+0x468/0x680 [ 2783.195069][ T7355] ? xor_init+0x60/0x60 [ 2783.199193][ T7355] do_vfs_ioctl+0x6fb/0x15b0 [ 2783.203754][ T7355] __x64_sys_ioctl+0xd4/0x110 [ 2783.208402][ T7355] do_syscall_64+0xcb/0x1e0 [ 2783.212875][ T7355] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2783.218834][ T7355] RIP: 0033:0x7f02d6ed5059 [ 2783.223218][ T7355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2783.242805][ T7355] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2783.251279][ T7355] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:11:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 52) 05:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x8000000000000000) 05:11:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42802, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:11:06 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x2f, 0x7, 0x7f, 0x7, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x700, 0x7800, 0x7, 0xb5e}}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000001c0)=""/123, &(0x7f0000000080)=0x7b) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x218980, 0x0) geteuid() r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10300, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x40086602, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x2f, 0x7, 0x7f, 0x7, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x700, 0x7800, 0x7, 0xb5e}}) (async) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000001c0)=""/123, &(0x7f0000000080)=0x7b) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x218980, 0x0) (async) geteuid() (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10300, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x40086602, 0x0) (async) 05:11:06 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 05:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x800e000000000000) [ 2783.259225][ T7355] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2783.267172][ T7355] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2783.275111][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2783.282239][ T376] tipc: 32-bit node address hash set to 0 [ 2783.283055][ T7355] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2783.283069][ T7355] ---[ end trace a32e41e40fb042d2 ]--- [ 2783.288816][ T376] tipc: 32-bit node address hash set to 0 [ 2783.307983][ T376] tipc: 32-bit node address hash set to 0 05:11:06 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x9effffff00000000) 05:11:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42802, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42802, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 05:11:06 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async) 05:11:06 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 05:11:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xdb6f000000000000) [ 2783.376318][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2783.395407][ T7389] FAULT_INJECTION: forcing a failure. [ 2783.395407][ T7389] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.409161][ T7389] CPU: 1 PID: 7389 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2783.420696][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2783.430733][ T7389] Call Trace: [ 2783.434001][ T7389] dump_stack+0x18e/0x1de [ 2783.438302][ T7389] should_fail+0x5d8/0x740 [ 2783.442689][ T7389] ? __kernfs_new_node+0x47/0x630 [ 2783.447683][ T7389] should_failslab+0x5/0x20 [ 2783.452161][ T7389] __kmalloc_track_caller+0x5d/0x2e0 [ 2783.457444][ T7389] kstrdup_const+0x51/0x90 [ 2783.461839][ T7389] __kernfs_new_node+0x47/0x630 [ 2783.466662][ T7389] ? mutex_lock+0x6c/0xc0 [ 2783.470969][ T7389] ? kernfs_activate+0x3fc/0x420 [ 2783.475886][ T7389] kernfs_new_node+0x95/0x160 [ 2783.480540][ T7389] kernfs_create_link+0x9c/0x1f0 [ 2783.485454][ T7389] sysfs_do_create_link_sd+0x85/0x100 [ 2783.490805][ T7389] device_add+0x93a/0x1820 [ 2783.495202][ T7389] device_create_vargs+0x1b8/0x210 [ 2783.500285][ T7389] device_create+0x86/0xb0 [ 2783.504673][ T7389] ? vsnprintf+0x1a07/0x1aa0 [ 2783.509239][ T7389] bdi_register_va+0x89/0x5e0 [ 2783.513894][ T7389] bdi_register+0x80/0xa0 [ 2783.518211][ T7389] ? __device_add_disk+0x50a/0x1220 [ 2783.523388][ T7389] bdi_register_owner+0x56/0xf0 [ 2783.528223][ T7389] __device_add_disk+0x583/0x1220 [ 2783.533233][ T7389] loop_add+0x554/0x710 [ 2783.537371][ T7389] loop_control_ioctl+0x468/0x680 [ 2783.542374][ T7389] ? xor_init+0x60/0x60 [ 2783.546500][ T7389] do_vfs_ioctl+0x6fb/0x15b0 [ 2783.551063][ T7389] __x64_sys_ioctl+0xd4/0x110 [ 2783.555723][ T7389] do_syscall_64+0xcb/0x1e0 [ 2783.560201][ T7389] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2783.566070][ T7389] RIP: 0033:0x7f02d6ed5059 [ 2783.570456][ T7389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2783.590036][ T7389] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2783.598417][ T7389] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2783.606359][ T7389] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2783.614303][ T7389] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2783.622245][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2783.630188][ T7389] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2783.638253][ T376] tipc: 32-bit node address hash set to 0 [ 2783.641212][ T7389] ------------[ cut here ]------------ [ 2783.644041][ T376] tipc: 32-bit node address hash set to 0 [ 2783.649409][ T7389] WARNING: CPU: 0 PID: 7389 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2783.649417][ T7389] Modules linked in: [ 2783.667958][ T7389] CPU: 0 PID: 7389 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2783.679459][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2783.689491][ T7389] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2783.695279][ T7389] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2783.714870][ T7389] RSP: 0018:ffff8881f2fcfce8 EFLAGS: 00010246 [ 2783.720903][ T7389] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2783.728845][ T7389] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2783.736786][ T7389] RBP: ffff8881f072b3b8 R08: ffffffff8214628e R09: 0000000000000010 [ 2783.744727][ T7389] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2783.752668][ T7389] R13: 1ffff1103d072201 R14: 1ffff1103d07229d R15: ffff8881e8391000 [ 2783.760617][ T7389] FS: 00007f02d604b700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2783.769529][ T7389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2783.772247][ T376] tipc: 32-bit node address hash set to 0 [ 2783.776088][ T7389] CR2: 00007f28f1047058 CR3: 00000001ede5b000 CR4: 00000000003406f0 [ 2783.776097][ T7389] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2783.776101][ T7389] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2783.776110][ T7389] Call Trace: [ 2783.781847][ T376] tipc: 32-bit node address hash set to 0 [ 2783.789766][ T7389] loop_add+0x554/0x710 [ 2783.789777][ T7389] loop_control_ioctl+0x468/0x680 [ 2783.789784][ T7389] ? xor_init+0x60/0x60 [ 2783.789799][ T7389] do_vfs_ioctl+0x6fb/0x15b0 [ 2783.832547][ T7389] __x64_sys_ioctl+0xd4/0x110 [ 2783.837197][ T7389] do_syscall_64+0xcb/0x1e0 [ 2783.841672][ T7389] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2783.847539][ T7389] RIP: 0033:0x7f02d6ed5059 [ 2783.851935][ T7389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2783.871514][ T7389] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2783.879901][ T7389] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2783.887849][ T7389] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2783.895814][ T7389] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2783.903764][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2783.911710][ T7389] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2783.912276][ T376] tipc: 32-bit node address hash set to 0 05:11:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 53) 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xefffffff00000000) 05:11:07 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 05:11:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x2, 0x60bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7fffffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x44041) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, 0xb) 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xf0ffffff00000000) 05:11:07 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:07 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40054) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) [ 2783.919663][ T7389] ---[ end trace a32e41e40fb042d3 ]--- [ 2783.931789][ T376] tipc: 32-bit node address hash set to 0 [ 2783.937724][ T376] tipc: 32-bit node address hash set to 0 [ 2783.945519][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2783.958329][ T7423] FAULT_INJECTION: forcing a failure. [ 2783.958329][ T7423] name failslab, interval 1, probability 0, space 0, times 0 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xffffff7f00000000) [ 2783.979774][ T7423] CPU: 1 PID: 7423 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2783.991407][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2784.001449][ T7423] Call Trace: [ 2784.004732][ T7423] dump_stack+0x18e/0x1de [ 2784.009052][ T7423] should_fail+0x5d8/0x740 [ 2784.013461][ T7423] ? __kernfs_new_node+0x8b/0x630 [ 2784.018473][ T7423] should_failslab+0x5/0x20 [ 2784.022965][ T7423] kmem_cache_alloc+0x36/0x290 05:11:07 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) r1 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x80000000) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0xffffffff00000000) 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xb1d, 0x0, 0x25dfdafc, {0x4}}, 0x14}}, 0x20040040) 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xb1d, 0x0, 0x25dfdafc, {0x4}}, 0x14}}, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xb1d, 0x0, 0x25dfdafc, {0x4}}, 0x14}}, 0x20040040) (async) [ 2784.027717][ T7423] ? memcpy+0x38/0x50 [ 2784.031699][ T7423] __kernfs_new_node+0x8b/0x630 [ 2784.036541][ T7423] ? mutex_lock+0x6c/0xc0 [ 2784.040864][ T7423] ? kernfs_activate+0x3fc/0x420 [ 2784.045796][ T7423] kernfs_new_node+0x95/0x160 [ 2784.050463][ T7423] kernfs_create_link+0x9c/0x1f0 [ 2784.055394][ T7423] sysfs_do_create_link_sd+0x85/0x100 [ 2784.060753][ T7423] device_add+0x93a/0x1820 [ 2784.065163][ T7423] device_create_vargs+0x1b8/0x210 [ 2784.067277][T32365] tipc: 32-bit node address hash set to 0 [ 2784.070258][ T7423] device_create+0x86/0xb0 [ 2784.070267][ T7423] ? vsnprintf+0x1a07/0x1aa0 [ 2784.070282][ T7423] bdi_register_va+0x89/0x5e0 [ 2784.089593][ T7423] bdi_register+0x80/0xa0 [ 2784.093894][ T7423] ? __device_add_disk+0x50a/0x1220 [ 2784.099060][ T7423] bdi_register_owner+0x56/0xf0 [ 2784.103881][ T7423] __device_add_disk+0x583/0x1220 [ 2784.108875][ T7423] loop_add+0x554/0x710 [ 2784.113002][ T7423] loop_control_ioctl+0x468/0x680 [ 2784.118018][ T7423] ? xor_init+0x60/0x60 [ 2784.122144][ T7423] do_vfs_ioctl+0x6fb/0x15b0 [ 2784.126707][ T7423] __x64_sys_ioctl+0xd4/0x110 [ 2784.131354][ T7423] do_syscall_64+0xcb/0x1e0 [ 2784.135844][ T7423] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2784.141710][ T7423] RIP: 0033:0x7f02d6ed5059 [ 2784.146093][ T7423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2784.165666][ T7423] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2784.174045][ T7423] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2784.181988][ T7423] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2784.189927][ T7423] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2784.197869][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2784.205809][ T7423] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2784.214044][ T376] tipc: 32-bit node address hash set to 0 [ 2784.219992][ T376] tipc: 32-bit node address hash set to 0 [ 2784.224322][ T7423] ------------[ cut here ]------------ [ 2784.225808][ T116] tipc: 32-bit node address hash set to 0 [ 2784.231135][ T7423] WARNING: CPU: 0 PID: 7423 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2784.231142][ T7423] Modules linked in: [ 2784.249680][ T7423] CPU: 0 PID: 7423 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2784.261225][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2784.271266][ T7423] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2784.277042][ T7423] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2784.296615][ T7423] RSP: 0018:ffff8881e34d7ce8 EFLAGS: 00010246 [ 2784.302650][ T7423] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2784.310608][ T7423] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2784.318550][ T7423] RBP: ffff8881f0729178 R08: ffffffff8214628e R09: 0000000000000010 [ 2784.327537][ T7423] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2784.335484][ T7423] R13: 1ffff1103c857c01 R14: 1ffff1103c857c9d R15: ffff8881e42be000 [ 2784.343429][ T7423] FS: 00007f02d604b700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2784.352231][ T116] tipc: 32-bit node address hash set to 0 [ 2784.352336][ T7423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2784.358086][ T116] tipc: 32-bit node address hash set to 0 [ 2784.364581][ T7423] CR2: 00007f28f00b8d80 CR3: 00000001ea20a000 CR4: 00000000003406f0 [ 2784.364589][ T7423] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2784.364593][ T7423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2784.364596][ T7423] Call Trace: [ 2784.364615][ T7423] loop_add+0x554/0x710 [ 2784.364624][ T7423] loop_control_ioctl+0x468/0x680 [ 2784.364631][ T7423] ? xor_init+0x60/0x60 [ 2784.364641][ T7423] do_vfs_ioctl+0x6fb/0x15b0 [ 2784.364653][ T7423] __x64_sys_ioctl+0xd4/0x110 [ 2784.364662][ T7423] do_syscall_64+0xcb/0x1e0 [ 2784.364684][ T7423] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2784.430200][ T7423] RIP: 0033:0x7f02d6ed5059 [ 2784.434586][ T7423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2784.454178][ T7423] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2784.462571][ T7423] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2784.470513][ T7423] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:11:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 54) 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xb1d, 0x0, 0x25dfdafc, {0x4}}, 0x14}}, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0xb1d, 0x0, 0x25dfdafc, {0x4}}, 0x14}}, 0x20040040) (async) 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x184, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb3a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x74}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5e}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x480f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d52eefa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x97c8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x174e}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2784.478455][ T7423] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2784.486399][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2784.492231][ T116] tipc: 32-bit node address hash set to 0 [ 2784.494344][ T7423] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2784.494354][ T7423] ---[ end trace a32e41e40fb042d4 ]--- [ 2784.513552][ T116] tipc: 32-bit node address hash set to 0 05:11:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x2, 0x60bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7fffffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x44041) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, 0xb) 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x184, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb3a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x74}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5e}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x480f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d52eefa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x97c8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x174e}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x184, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb3a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x74}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5e}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x480f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d52eefa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x97c8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x174e}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) 05:11:07 executing program 4: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:07 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40054) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:07 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) r1 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x80000000) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 2784.563665][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2784.573747][ T7453] FAULT_INJECTION: forcing a failure. [ 2784.573747][ T7453] name failslab, interval 1, probability 0, space 0, times 0 [ 2784.589235][ T7453] CPU: 0 PID: 7453 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2784.600773][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2784.610815][ T7453] Call Trace: 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x184, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb3a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x74}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5e}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x480f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d52eefa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x97c8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x174e}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1d0b00131c9584f5a75e0000000000000004000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r3 = syz_io_uring_complete(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000001c0)={0x2, &(0x7f0000000180), 0x0, 0xffffffffffffffff, 0x5}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000081) [ 2784.614100][ T7453] dump_stack+0x18e/0x1de [ 2784.618419][ T7453] should_fail+0x5d8/0x740 [ 2784.622837][ T7453] ? __kernfs_new_node+0x8b/0x630 [ 2784.627857][ T7453] should_failslab+0x5/0x20 [ 2784.632234][ T116] tipc: 32-bit node address hash set to 0 [ 2784.632353][ T7453] kmem_cache_alloc+0x36/0x290 [ 2784.638144][ T116] tipc: 32-bit node address hash set to 0 [ 2784.642780][ T7453] __kernfs_new_node+0x8b/0x630 [ 2784.642790][ T7453] ? mutex_unlock+0x19/0x40 [ 2784.642797][ T7453] ? kernfs_xattr_get+0x81/0x90 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1d0b00131c9584f5a75e0000000000000004000000"], 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) r3 = syz_io_uring_complete(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000001c0)={0x2, &(0x7f0000000180), 0x0, 0xffffffffffffffff, 0x5}) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000081) 05:11:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1d0b00131c9584f5a75e0000000000000004000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async, rerun: 32) r3 = syz_io_uring_complete(0x0) (rerun: 32) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000001c0)={0x2, &(0x7f0000000180), 0x0, 0xffffffffffffffff, 0x5}) (async, rerun: 64) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000081) (rerun: 64) [ 2784.642807][ T7453] ? selinux_kernfs_init_security+0x12d/0x720 [ 2784.642821][ T7453] kernfs_new_node+0x95/0x160 [ 2784.673347][ T7453] __kernfs_create_file+0x45/0x260 [ 2784.678452][ T7453] sysfs_add_file_mode_ns+0x293/0x340 [ 2784.683817][ T7453] internal_create_group+0x486/0xd70 [ 2784.689107][ T7453] sysfs_create_groups+0x5d/0x130 [ 2784.694122][ T7453] device_add+0x9fa/0x1820 [ 2784.698535][ T7453] device_create_vargs+0x1b8/0x210 [ 2784.703628][ T7453] device_create+0x86/0xb0 [ 2784.708017][ T7453] ? vsnprintf+0x1a07/0x1aa0 [ 2784.712579][ T7453] bdi_register_va+0x89/0x5e0 [ 2784.717228][ T7453] bdi_register+0x80/0xa0 [ 2784.721531][ T7453] ? __device_add_disk+0x50a/0x1220 [ 2784.726700][ T7453] bdi_register_owner+0x56/0xf0 [ 2784.731521][ T7453] __device_add_disk+0x583/0x1220 [ 2784.736518][ T7453] loop_add+0x554/0x710 [ 2784.740645][ T7453] loop_control_ioctl+0x468/0x680 [ 2784.745664][ T7453] ? xor_init+0x60/0x60 [ 2784.749792][ T7453] do_vfs_ioctl+0x6fb/0x15b0 [ 2784.754363][ T7453] __x64_sys_ioctl+0xd4/0x110 [ 2784.759014][ T7453] do_syscall_64+0xcb/0x1e0 [ 2784.763504][ T7453] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2784.769371][ T7453] RIP: 0033:0x7f02d6ed5059 [ 2784.772230][ T116] tipc: 32-bit node address hash set to 0 [ 2784.773762][ T7453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2784.773767][ T7453] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2784.773782][ T7453] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2784.779492][ T116] tipc: 32-bit node address hash set to 0 [ 2784.799153][ T7453] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2784.799158][ T7453] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2784.799162][ T7453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2784.799166][ T7453] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2784.799956][ T7453] ------------[ cut here ]------------ [ 2784.810061][ T116] tipc: 32-bit node address hash set to 0 [ 2784.815535][ T7453] WARNING: CPU: 0 PID: 7453 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2784.815537][ T7453] Modules linked in: [ 2784.815550][ T7453] CPU: 0 PID: 7453 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2784.815560][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2784.898607][ T7453] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2784.904381][ T7453] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2784.912258][ T116] tipc: 32-bit node address hash set to 0 [ 2784.923955][ T7453] RSP: 0018:ffff8881e2cd7ce8 EFLAGS: 00010246 [ 2784.923961][ T7453] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2784.923966][ T7453] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2784.923971][ T7453] RBP: ffff8881eecbbc48 R08: ffffffff8214628e R09: 0000000000000010 [ 2784.923981][ T7453] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2784.929696][ T116] tipc: 32-bit node address hash set to 0 [ 2784.935711][ T7453] R13: 1ffff1103cbd2c01 R14: 1ffff1103cbd2c9d R15: ffff8881e5e96000 [ 2784.935717][ T7453] FS: 00007f02d604b700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2784.935722][ T7453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2784.935727][ T7453] CR2: 00007f02d604aff8 CR3: 00000001ceb6a000 CR4: 00000000003406f0 [ 2784.935738][ T7453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2785.012437][ T7453] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2785.020378][ T7453] Call Trace: [ 2785.023643][ T7453] loop_add+0x554/0x710 [ 2785.027766][ T7453] loop_control_ioctl+0x468/0x680 [ 2785.032757][ T7453] ? xor_init+0x60/0x60 [ 2785.036880][ T7453] do_vfs_ioctl+0x6fb/0x15b0 [ 2785.041440][ T7453] __x64_sys_ioctl+0xd4/0x110 [ 2785.046082][ T7453] do_syscall_64+0xcb/0x1e0 [ 2785.050554][ T7453] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2785.052245][ T116] tipc: 32-bit node address hash set to 0 [ 2785.056421][ T7453] RIP: 0033:0x7f02d6ed5059 [ 2785.062125][ T116] tipc: 32-bit node address hash set to 0 [ 2785.066494][ T7453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2785.066498][ T7453] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2785.066506][ T7453] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2785.066510][ T7453] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:11:08 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 55) 05:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8e}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8e}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2785.066515][ T7453] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2785.066524][ T7453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2785.131911][ T7453] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2785.139856][ T7453] ---[ end trace a32e41e40fb042d5 ]--- [ 2785.145595][T32365] tipc: 32-bit node address hash set to 0 05:11:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x2, 0x60bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7fffffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x44041) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c82, 0xb) 05:11:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8e}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:08 executing program 4: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:08 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40054) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:08 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async, rerun: 64) r1 = syz_io_uring_complete(0x0) (rerun: 64) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x80000000) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 2785.192269][ T116] tipc: 32-bit node address hash set to 0 [ 2785.198377][ T7493] FAULT_INJECTION: forcing a failure. [ 2785.198377][ T7493] name failslab, interval 1, probability 0, space 0, times 0 [ 2785.210494][ T116] tipc: 32-bit node address hash set to 0 [ 2785.225849][ T7493] CPU: 0 PID: 7493 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2785.237388][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2785.247426][ T7493] Call Trace: [ 2785.250694][ T7493] dump_stack+0x18e/0x1de [ 2785.255012][ T7493] should_fail+0x5d8/0x740 [ 2785.259417][ T7493] ? __kernfs_new_node+0x8b/0x630 [ 2785.264417][ T7493] should_failslab+0x5/0x20 [ 2785.268887][ T7493] kmem_cache_alloc+0x36/0x290 [ 2785.273623][ T7493] __kernfs_new_node+0x8b/0x630 [ 2785.278446][ T7493] ? mutex_lock+0x6c/0xc0 [ 2785.282754][ T7493] ? kernfs_activate+0x3fc/0x420 [ 2785.287662][ T7493] kernfs_new_node+0x95/0x160 [ 2785.292310][ T7493] __kernfs_create_file+0x45/0x260 [ 2785.297389][ T7493] sysfs_add_file_mode_ns+0x293/0x340 [ 2785.302744][ T7493] internal_create_group+0x486/0xd70 [ 2785.307998][ T7493] sysfs_create_groups+0x5d/0x130 [ 2785.312994][ T7493] device_add+0x9fa/0x1820 [ 2785.317380][ T7493] device_create_vargs+0x1b8/0x210 [ 2785.322457][ T7493] device_create+0x86/0xb0 [ 2785.326845][ T7493] ? vsnprintf+0x1a07/0x1aa0 [ 2785.331404][ T7493] bdi_register_va+0x89/0x5e0 [ 2785.332249][ T116] tipc: 32-bit node address hash set to 0 05:11:08 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2785.336058][ T7493] bdi_register+0x80/0xa0 [ 2785.336069][ T7493] ? __device_add_disk+0x50a/0x1220 [ 2785.336081][ T7493] bdi_register_owner+0x56/0xf0 [ 2785.341839][ T116] tipc: 32-bit node address hash set to 0 [ 2785.346079][ T7493] __device_add_disk+0x583/0x1220 [ 2785.346090][ T7493] loop_add+0x554/0x710 [ 2785.346100][ T7493] loop_control_ioctl+0x468/0x680 [ 2785.346108][ T7493] ? xor_init+0x60/0x60 [ 2785.346117][ T7493] do_vfs_ioctl+0x6fb/0x15b0 [ 2785.346131][ T7493] __x64_sys_ioctl+0xd4/0x110 [ 2785.389263][ T7493] do_syscall_64+0xcb/0x1e0 [ 2785.393745][ T7493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2785.399611][ T7493] RIP: 0033:0x7f02d6ed5059 [ 2785.404003][ T7493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2785.423584][ T7493] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2785.431975][ T7493] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2785.439916][ T7493] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2785.447862][ T7493] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2785.455803][ T7493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2785.463753][ T7493] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2785.471888][T32365] tipc: 32-bit node address hash set to 0 [ 2785.481452][ T7493] ------------[ cut here ]------------ [ 2785.482954][ T376] tipc: 32-bit node address hash set to 0 05:11:08 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = getuid() mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x82802, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@cache_none}, {@msize={'msize', 0x3d, 0x8000}}, {@access_uid={'access', 0x3d, r1}}, {@cachetag={'cachetag', 0x3d, 'ib\x00'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\'\xcc'}}, {@subj_type={'subj_type', 0x3d, 'ib\x00'}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, 'ib\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsroot={'smackfsroot', 0x3d, '#(^(@]'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000003c0)='\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x284, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa0}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6c25}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36a8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x379800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x870f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6d5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9046}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8a8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x284}}, 0x841) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0x8, 0x3, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) 05:11:08 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r1 = getuid() mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x82802, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@cache_none}, {@msize={'msize', 0x3d, 0x8000}}, {@access_uid={'access', 0x3d, r1}}, {@cachetag={'cachetag', 0x3d, 'ib\x00'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\'\xcc'}}, {@subj_type={'subj_type', 0x3d, 'ib\x00'}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, 'ib\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsroot={'smackfsroot', 0x3d, '#(^(@]'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000003c0)='\x00') (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x284, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa0}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6c25}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36a8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x379800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x870f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6d5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9046}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8a8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x284}}, 0x841) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0x8, 0x3, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) (rerun: 64) [ 2785.486922][ T7493] WARNING: CPU: 0 PID: 7493 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2785.486930][ T7493] Modules linked in: [ 2785.496878][ T376] tipc: 32-bit node address hash set to 0 [ 2785.501620][ T7493] CPU: 0 PID: 7493 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2785.501625][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2785.501639][ T7493] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2785.501648][ T7493] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2785.501663][ T7493] RSP: 0018:ffff8881e2cd7ce8 EFLAGS: 00010246 [ 2785.564151][ T7493] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2785.572093][ T7493] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2785.580211][ T7493] RBP: ffff8881eecbde88 R08: ffffffff8214628e R09: 0000000000000010 [ 2785.588157][ T7493] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2785.596102][ T7493] R13: 1ffff11039fa2a01 R14: 1ffff11039fa2a9d R15: ffff8881cfd15000 [ 2785.604053][ T7493] FS: 00007f02d604b700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2785.612954][ T7493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2785.619517][ T7493] CR2: 00007f1b32fc3718 CR3: 00000001e60b2000 CR4: 00000000003406f0 [ 2785.627479][ T7493] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2785.635424][ T7493] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2785.643364][ T7493] Call Trace: [ 2785.646647][ T7493] loop_add+0x554/0x710 [ 2785.650871][ T7493] loop_control_ioctl+0x468/0x680 [ 2785.655872][ T7493] ? xor_init+0x60/0x60 [ 2785.660003][ T7493] do_vfs_ioctl+0x6fb/0x15b0 [ 2785.664565][ T7493] __x64_sys_ioctl+0xd4/0x110 [ 2785.669215][ T7493] do_syscall_64+0xcb/0x1e0 [ 2785.673700][ T7493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2785.679652][ T7493] RIP: 0033:0x7f02d6ed5059 [ 2785.684040][ T7493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2785.703628][ T7493] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2785.712007][ T7493] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2785.719981][ T7493] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2785.727935][ T7493] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2785.736050][ T7493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:11:08 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = getuid() mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x82802, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@cache_none}, {@msize={'msize', 0x3d, 0x8000}}, {@access_uid={'access', 0x3d, r1}}, {@cachetag={'cachetag', 0x3d, 'ib\x00'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\'\xcc'}}, {@subj_type={'subj_type', 0x3d, 'ib\x00'}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, 'ib\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsroot={'smackfsroot', 0x3d, '#(^(@]'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000003c0)='\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x284, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa0}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6c25}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36a8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x379800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x870f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6d5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9046}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8a8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x284}}, 0x841) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0x8, 0x3, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) getuid() (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x82802, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@cache_none}, {@msize={'msize', 0x3d, 0x8000}}, {@access_uid={'access', 0x3d, r1}}, {@cachetag={'cachetag', 0x3d, 'ib\x00'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\'\xcc'}}, {@subj_type={'subj_type', 0x3d, 'ib\x00'}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, 'ib\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsroot={'smackfsroot', 0x3d, '#(^(@]'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) (async) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000003c0)='\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x284, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa0}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6c25}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36a8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x379800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x870f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6d5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9046}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8a8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x284}}, 0x841) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0x8, 0x3, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) (async) 05:11:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 56) 05:11:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r2, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) (rerun: 64) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r2, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2785.744093][ T7493] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2785.752049][ T7493] ---[ end trace a32e41e40fb042d6 ]--- [ 2785.757721][T32365] tipc: 32-bit node address hash set to 0 [ 2785.762529][ T376] tipc: 32-bit node address hash set to 0 [ 2785.764663][ T12] tipc: 32-bit node address hash set to 0 05:11:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="090000006f020000001e1a6464496e2192207c"], 0x9) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:09 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) 05:11:09 executing program 4: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:09 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2785.804590][ T7539] FAULT_INJECTION: forcing a failure. [ 2785.804590][ T7539] name failslab, interval 1, probability 0, space 0, times 0 [ 2785.829842][ T7539] CPU: 1 PID: 7539 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2785.841432][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2785.851461][ T7539] Call Trace: [ 2785.854726][ T7539] dump_stack+0x18e/0x1de [ 2785.859026][ T7539] should_fail+0x5d8/0x740 [ 2785.863410][ T7539] ? __kernfs_new_node+0x8b/0x630 [ 2785.868404][ T7539] should_failslab+0x5/0x20 [ 2785.872875][ T7539] kmem_cache_alloc+0x36/0x290 [ 2785.877622][ T7539] __kernfs_new_node+0x8b/0x630 [ 2785.882458][ T7539] ? mutex_lock+0x6c/0xc0 [ 2785.886761][ T7539] ? kernfs_activate+0x3fc/0x420 [ 2785.891670][ T7539] kernfs_new_node+0x95/0x160 [ 2785.892237][ T12] tipc: 32-bit node address hash set to 0 [ 2785.896321][ T7539] __kernfs_create_file+0x45/0x260 [ 2785.896331][ T7539] sysfs_add_file_mode_ns+0x293/0x340 [ 2785.896344][ T7539] internal_create_group+0x486/0xd70 [ 2785.917712][ T7539] sysfs_create_groups+0x5d/0x130 [ 2785.922716][ T7539] device_add+0x9fa/0x1820 [ 2785.927115][ T7539] device_create_vargs+0x1b8/0x210 [ 2785.932211][ T7539] device_create+0x86/0xb0 [ 2785.936598][ T7539] ? vsnprintf+0x1a07/0x1aa0 [ 2785.941158][ T7539] bdi_register_va+0x89/0x5e0 [ 2785.945813][ T7539] bdi_register+0x80/0xa0 [ 2785.950212][ T7539] ? __device_add_disk+0x50a/0x1220 [ 2785.955470][ T7539] bdi_register_owner+0x56/0xf0 [ 2785.960305][ T7539] __device_add_disk+0x583/0x1220 [ 2785.965387][ T7539] loop_add+0x554/0x710 [ 2785.969520][ T7539] loop_control_ioctl+0x468/0x680 [ 2785.974543][ T7539] ? xor_init+0x60/0x60 [ 2785.978693][ T7539] do_vfs_ioctl+0x6fb/0x15b0 [ 2785.983266][ T7539] __x64_sys_ioctl+0xd4/0x110 [ 2785.987918][ T7539] do_syscall_64+0xcb/0x1e0 [ 2785.992398][ T7539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2785.998278][ T7539] RIP: 0033:0x7f02d6ed5059 [ 2786.002666][ T7539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2786.022253][ T7539] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2786.030655][ T7539] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2786.032240][ T12] tipc: 32-bit node address hash set to 0 [ 2786.038615][ T7539] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:11:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r2, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdffe}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8800}, 0x20004011) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r2, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdffe}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8800}, 0x20004011) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r2, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdffe}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8800}, 0x20004011) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r2, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdffe}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8800}, 0x20004011) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r2, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) 05:11:09 executing program 0: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3f}, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="de5a6595", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) [ 2786.038620][ T7539] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2786.038625][ T7539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2786.038630][ T7539] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2786.039460][ T376] tipc: 32-bit node address hash set to 0 [ 2786.046776][ T12] tipc: 32-bit node address hash set to 0 [ 2786.058250][ T7539] ------------[ cut here ]------------ [ 2786.093142][ T7539] WARNING: CPU: 1 PID: 7539 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2786.102139][ T7539] Modules linked in: [ 2786.106032][ T7539] CPU: 1 PID: 7539 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2786.117557][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.127598][ T7539] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2786.133381][ T7539] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2786.152957][ T7539] RSP: 0018:ffff8881e2cd7ce8 EFLAGS: 00010246 [ 2786.159014][ T7539] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2786.166956][ T7539] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2786.172240][ T12] tipc: 32-bit node address hash set to 0 [ 2786.174899][ T7539] RBP: ffff8881eecba298 R08: ffffffff8214628e R09: 0000000000000010 [ 2786.174904][ T7539] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2786.174915][ T7539] R13: 1ffff1103cc17001 R14: 1ffff1103cc1709d R15: ffff8881e60b8000 [ 2786.204455][ T7539] FS: 00007f02d604b700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2786.213356][ T7539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2786.219919][ T7539] CR2: 00007f125ba97718 CR3: 00000001ed748000 CR4: 00000000003406e0 [ 2786.227863][ T7539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2786.235804][ T7539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2786.243742][ T7539] Call Trace: [ 2786.247013][ T7539] loop_add+0x554/0x710 [ 2786.251149][ T7539] loop_control_ioctl+0x468/0x680 [ 2786.256140][ T7539] ? xor_init+0x60/0x60 [ 2786.260267][ T7539] do_vfs_ioctl+0x6fb/0x15b0 [ 2786.264831][ T7539] __x64_sys_ioctl+0xd4/0x110 [ 2786.269480][ T7539] do_syscall_64+0xcb/0x1e0 [ 2786.273969][ T7539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2786.279831][ T7539] RIP: 0033:0x7f02d6ed5059 [ 2786.284224][ T7539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2786.303821][ T7539] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2786.312203][ T7539] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2786.312231][ T12] tipc: 32-bit node address hash set to 0 [ 2786.320151][ T7539] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2786.320156][ T7539] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2786.320161][ T7539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:11:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 57) 05:11:09 executing program 0: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3f}, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="de5a6595", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3f}, 0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="de5a6595", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) (async) 05:11:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="090000006f020000001e1a6464496e2192207c"], 0x9) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:09 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 05:11:09 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 05:11:09 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) [ 2786.320166][ T7539] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2786.320180][ T7539] ---[ end trace a32e41e40fb042d7 ]--- [ 2786.363754][T26969] tipc: 32-bit node address hash set to 0 [ 2786.369494][T26969] tipc: 32-bit node address hash set to 0 [ 2786.380339][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2786.391122][ T7576] FAULT_INJECTION: forcing a failure. [ 2786.391122][ T7576] name failslab, interval 1, probability 0, space 0, times 0 05:11:09 executing program 0: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3f}, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="de5a6595", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) 05:11:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x40008) 05:11:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = syz_io_uring_complete(0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x40008) 05:11:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x40008) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) syz_io_uring_complete(0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x40008) (async) [ 2786.410952][ T7576] CPU: 1 PID: 7576 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2786.422487][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.432526][ T7576] Call Trace: [ 2786.435809][ T7576] dump_stack+0x18e/0x1de [ 2786.440126][ T7576] should_fail+0x5d8/0x740 [ 2786.444525][ T7576] ? __kernfs_new_node+0x8b/0x630 [ 2786.449535][ T7576] should_failslab+0x5/0x20 [ 2786.452217][ T12] tipc: 32-bit node address hash set to 0 05:11:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x168, r2, 0x800, 0x1, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x5}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd605}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfde}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa26}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3cbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x71fb3a13117f79a6) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x420881, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d9c274d}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c4}, 0x20000004) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="e1f000000000000000", @ANYRES16=r3, @ANYBLOB="1d0b2bbd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) 05:11:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x168, r2, 0x800, 0x1, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x5}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd605}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfde}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa26}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3cbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x71fb3a13117f79a6) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x420881, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d9c274d}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c4}, 0x20000004) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="e1f000000000000000", @ANYRES16=r3, @ANYBLOB="1d0b2bbd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) [ 2786.454021][ T7576] kmem_cache_alloc+0x36/0x290 [ 2786.454038][ T7576] __kernfs_new_node+0x8b/0x630 [ 2786.469321][ T7576] ? mutex_lock+0x6c/0xc0 [ 2786.473640][ T7576] ? kernfs_activate+0x3fc/0x420 [ 2786.478558][ T7576] kernfs_new_node+0x95/0x160 [ 2786.483217][ T7576] __kernfs_create_file+0x45/0x260 [ 2786.488315][ T7576] sysfs_add_file_mode_ns+0x293/0x340 [ 2786.493668][ T7576] internal_create_group+0x486/0xd70 [ 2786.498928][ T7576] sysfs_create_groups+0x5d/0x130 [ 2786.503942][ T7576] device_add+0x9fa/0x1820 [ 2786.508345][ T7576] device_create_vargs+0x1b8/0x210 [ 2786.513430][ T7576] device_create+0x86/0xb0 [ 2786.517816][ T7576] ? vsnprintf+0x1a07/0x1aa0 [ 2786.522385][ T7576] bdi_register_va+0x89/0x5e0 [ 2786.527032][ T7576] bdi_register+0x80/0xa0 [ 2786.531330][ T7576] ? __device_add_disk+0x50a/0x1220 [ 2786.536495][ T7576] bdi_register_owner+0x56/0xf0 [ 2786.541329][ T7576] __device_add_disk+0x583/0x1220 [ 2786.546324][ T7576] loop_add+0x554/0x710 [ 2786.550449][ T7576] loop_control_ioctl+0x468/0x680 [ 2786.555440][ T7576] ? xor_init+0x60/0x60 [ 2786.559567][ T7576] do_vfs_ioctl+0x6fb/0x15b0 [ 2786.564131][ T7576] __x64_sys_ioctl+0xd4/0x110 [ 2786.568776][ T7576] do_syscall_64+0xcb/0x1e0 [ 2786.573260][ T7576] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2786.579121][ T7576] RIP: 0033:0x7f02d6ed5059 [ 2786.583506][ T7576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2786.592224][ T12] tipc: 32-bit node address hash set to 0 [ 2786.603078][ T7576] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2786.603087][ T7576] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2786.603092][ T7576] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2786.603096][ T7576] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2786.603101][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2786.603106][ T7576] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2786.603407][T26969] tipc: 32-bit node address hash set to 0 [ 2786.610365][ T12] tipc: 32-bit node address hash set to 0 [ 2786.618004][ T7576] ------------[ cut here ]------------ [ 2786.673853][ T7576] WARNING: CPU: 1 PID: 7576 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2786.682851][ T7576] Modules linked in: [ 2786.686720][ T7576] CPU: 1 PID: 7576 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2786.698219][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.708250][ T7576] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2786.714024][ T7576] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2786.732224][ T12] tipc: 32-bit node address hash set to 0 [ 2786.733604][ T7576] RSP: 0018:ffff8881e271fce8 EFLAGS: 00010246 [ 2786.733612][ T7576] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2786.733617][ T7576] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2786.733628][ T7576] RBP: ffff8881f072c4d8 R08: ffffffff8214628e R09: 0000000000000010 [ 2786.769265][ T7576] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2786.777207][ T7576] R13: 1ffff1103dc9ba01 R14: 1ffff1103dc9ba9d R15: ffff8881ee4dd000 [ 2786.785150][ T7576] FS: 00007f02d604b700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2786.794056][ T7576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2786.800665][ T7576] CR2: 00007f125ca56090 CR3: 00000001e9cf5000 CR4: 00000000003406e0 [ 2786.808629][ T7576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2786.816578][ T7576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2786.824556][ T7576] Call Trace: [ 2786.827826][ T7576] loop_add+0x554/0x710 [ 2786.831974][ T7576] loop_control_ioctl+0x468/0x680 [ 2786.836986][ T7576] ? xor_init+0x60/0x60 [ 2786.841141][ T7576] do_vfs_ioctl+0x6fb/0x15b0 [ 2786.845709][ T7576] __x64_sys_ioctl+0xd4/0x110 [ 2786.850360][ T7576] do_syscall_64+0xcb/0x1e0 [ 2786.854840][ T7576] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2786.860705][ T7576] RIP: 0033:0x7f02d6ed5059 [ 2786.865093][ T7576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2786.872234][ T12] tipc: 32-bit node address hash set to 0 [ 2786.884674][ T7576] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2786.884683][ T7576] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:11:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 58) 05:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x168, r2, 0x800, 0x1, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x5}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd605}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfde}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa26}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3cbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x71fb3a13117f79a6) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x420881, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d9c274d}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c4}, 0x20000004) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="e1f000000000000000", @ANYRES16=r3, @ANYBLOB="1d0b2bbd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) [ 2786.884688][ T7576] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2786.884693][ T7576] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2786.884698][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2786.884703][ T7576] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2786.884711][ T7576] ---[ end trace a32e41e40fb042d8 ]--- [ 2786.885044][ T376] tipc: 32-bit node address hash set to 0 [ 2786.892016][ T12] tipc: 32-bit node address hash set to 0 05:11:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) (async, rerun: 64) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="090000006f020000001e1a6464496e2192207c"], 0x9) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:10 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000041edb700"], 0x14}}, 0x0) 05:11:10 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) (rerun: 32) [ 2787.012300][ T12] tipc: 32-bit node address hash set to 0 [ 2787.022429][ T116] tipc: 32-bit node address hash set to 0 [ 2787.028589][ T7623] FAULT_INJECTION: forcing a failure. [ 2787.028589][ T7623] name failslab, interval 1, probability 0, space 0, times 0 [ 2787.042271][ T116] tipc: 32-bit node address hash set to 0 [ 2787.048882][ T7623] CPU: 0 PID: 7623 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 05:11:10 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)) 05:11:10 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)) 05:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000041edb700"], 0x14}}, 0x0) [ 2787.060420][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2787.070462][ T7623] Call Trace: [ 2787.073744][ T7623] dump_stack+0x18e/0x1de [ 2787.078069][ T7623] should_fail+0x5d8/0x740 [ 2787.082477][ T7623] ? __kernfs_new_node+0x8b/0x630 [ 2787.087491][ T7623] should_failslab+0x5/0x20 [ 2787.091987][ T7623] kmem_cache_alloc+0x36/0x290 [ 2787.096744][ T7623] __kernfs_new_node+0x8b/0x630 [ 2787.101585][ T7623] ? kernfs_add_one+0x49e/0x5c0 [ 2787.106425][ T7623] kernfs_new_node+0x95/0x160 05:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000041edb700"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000041edb700"], 0x14}}, 0x0) (async) 05:11:10 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async, rerun: 32) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)) 05:11:10 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xd, 0xc7f, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) [ 2787.111096][ T7623] __kernfs_create_file+0x45/0x260 [ 2787.116201][ T7623] sysfs_add_file_mode_ns+0x293/0x340 [ 2787.121565][ T7623] sysfs_create_file_ns+0x146/0x230 [ 2787.126758][ T7623] device_add+0xbc7/0x1820 [ 2787.131168][ T7623] device_create_vargs+0x1b8/0x210 [ 2787.136270][ T7623] device_create+0x86/0xb0 [ 2787.140678][ T7623] ? vsnprintf+0x1a07/0x1aa0 [ 2787.145262][ T7623] bdi_register_va+0x89/0x5e0 [ 2787.149931][ T7623] bdi_register+0x80/0xa0 [ 2787.154257][ T7623] ? __device_add_disk+0x50a/0x1220 [ 2787.159440][ T7623] bdi_register_owner+0x56/0xf0 [ 2787.162235][ T116] tipc: 32-bit node address hash set to 0 [ 2787.164272][ T7623] __device_add_disk+0x583/0x1220 [ 2787.164284][ T7623] loop_add+0x554/0x710 [ 2787.164297][ T7623] loop_control_ioctl+0x468/0x680 [ 2787.170089][ T116] tipc: 32-bit node address hash set to 0 [ 2787.175031][ T7623] ? xor_init+0x60/0x60 [ 2787.175047][ T7623] do_vfs_ioctl+0x6fb/0x15b0 [ 2787.175058][ T7623] __x64_sys_ioctl+0xd4/0x110 [ 2787.175068][ T7623] do_syscall_64+0xcb/0x1e0 [ 2787.175078][ T7623] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2787.175091][ T7623] RIP: 0033:0x7f02d6ed5059 [ 2787.217919][ T7623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2787.237494][ T7623] RSP: 002b:00007f02d602a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2787.245892][ T7623] RAX: ffffffffffffffda RBX: 00007f02d6fe8030 RCX: 00007f02d6ed5059 [ 2787.253857][ T7623] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2787.261800][ T7623] RBP: 00007f02d602a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2787.269742][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2787.277686][ T7623] R13: 00007fffb943b23f R14: 00007f02d602a300 R15: 0000000000022000 [ 2787.285784][ T12] tipc: 32-bit node address hash set to 0 [ 2787.292879][ T7623] ------------[ cut here ]------------ [ 2787.298336][ T7623] WARNING: CPU: 0 PID: 7623 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2787.307318][ T7623] Modules linked in: [ 2787.311191][ T7623] CPU: 0 PID: 7623 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2787.322700][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2787.332734][ T7623] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2787.338539][ T7623] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2787.358136][ T7623] RSP: 0018:ffff8881f040fce8 EFLAGS: 00010246 [ 2787.364174][ T7623] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2787.372130][ T7623] RDX: ffffc90002355000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2787.380073][ T7623] RBP: ffff8881f0729a08 R08: ffffffff8214628e R09: 0000000000000010 [ 2787.388013][ T7623] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2787.395962][ T7623] R13: 1ffff1103abd9a01 R14: 1ffff1103abd9a9d R15: ffff8881d5ecd000 [ 2787.403904][ T7623] FS: 00007f02d602a700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2787.412803][ T7623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2787.419359][ T7623] CR2: 00007f283c4bf7f8 CR3: 00000001e9cf5000 CR4: 00000000003406f0 [ 2787.427305][ T7623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2787.435249][ T7623] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2787.443188][ T7623] Call Trace: [ 2787.446452][ T7623] loop_add+0x554/0x710 [ 2787.450584][ T7623] loop_control_ioctl+0x468/0x680 [ 2787.455588][ T7623] ? xor_init+0x60/0x60 [ 2787.459714][ T7623] do_vfs_ioctl+0x6fb/0x15b0 [ 2787.464275][ T7623] __x64_sys_ioctl+0xd4/0x110 [ 2787.468923][ T7623] do_syscall_64+0xcb/0x1e0 [ 2787.473409][ T7623] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2787.479285][ T7623] RIP: 0033:0x7f02d6ed5059 [ 2787.483668][ T7623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2787.503244][ T7623] RSP: 002b:00007f02d602a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2787.511621][ T7623] RAX: ffffffffffffffda RBX: 00007f02d6fe8030 RCX: 00007f02d6ed5059 [ 2787.519563][ T7623] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2787.527505][ T7623] RBP: 00007f02d602a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2787.535449][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2787.543401][ T7623] R13: 00007fffb943b23f R14: 00007f02d602a300 R15: 0000000000022000 [ 2787.551348][ T7623] ---[ end trace a32e41e40fb042d9 ]--- [ 2787.556856][ T12] tipc: 32-bit node address hash set to 0 05:11:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 59) 05:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x59}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2787.562318][ T116] tipc: 32-bit node address hash set to 0 [ 2787.562711][ T12] tipc: 32-bit node address hash set to 0 05:11:10 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xf829fba0d7302f1, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0x2) 05:11:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000001380)={0x2, 0xffffffffffffffff, 0x1}) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000001040)={r0, r0, 0x6, 0x1000, &(0x7f0000000040)="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", 0x3, 0x0, 0x48, 0xe7, 0x14, 0x1, 0x3, 'syz1\x00'}) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000001300)=""/105) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/95, 0x5f, 0x1, &(0x7f0000001180)=""/213, 0xd5}, &(0x7f00000012c0)=0x40) 05:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x59}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x59}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) 05:11:10 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:10 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xd, 0xc7f, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) 05:11:10 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xf829fba0d7302f1, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0x2) 05:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x59}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2787.613055][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2787.634217][ T7659] FAULT_INJECTION: forcing a failure. [ 2787.634217][ T7659] name failslab, interval 1, probability 0, space 0, times 0 [ 2787.649480][ T7659] CPU: 0 PID: 7659 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 05:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x298, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6ecd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa7d2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb613}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbda}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x85b}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x631}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x99}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "85bd57cd723f3e23ca3f84f1cacb537ec37d11a3edf8a69dd500c937ad5c8f1174f5e0ad2225fc0fc4383ffe60644b677a2f9a1316a10b7c56492035bdf0dc67012cce9fc7aaf9b0d6b8a791a5d74563946f87b45231bbd1fc00a54a27f48d0a8c460093d82ec5d9f9e8af93397f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdba9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x341c}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xae}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 05:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x298, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6ecd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa7d2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb613}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbda}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x85b}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x631}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x99}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "85bd57cd723f3e23ca3f84f1cacb537ec37d11a3edf8a69dd500c937ad5c8f1174f5e0ad2225fc0fc4383ffe60644b677a2f9a1316a10b7c56492035bdf0dc67012cce9fc7aaf9b0d6b8a791a5d74563946f87b45231bbd1fc00a54a27f48d0a8c460093d82ec5d9f9e8af93397f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdba9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x341c}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xae}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x298, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6ecd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa7d2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb613}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbda}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x85b}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x631}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x99}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "85bd57cd723f3e23ca3f84f1cacb537ec37d11a3edf8a69dd500c937ad5c8f1174f5e0ad2225fc0fc4383ffe60644b677a2f9a1316a10b7c56492035bdf0dc67012cce9fc7aaf9b0d6b8a791a5d74563946f87b45231bbd1fc00a54a27f48d0a8c460093d82ec5d9f9e8af93397f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdba9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x341c}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xae}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) [ 2787.661027][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2787.671071][ T7659] Call Trace: [ 2787.674351][ T7659] dump_stack+0x18e/0x1de [ 2787.678675][ T7659] should_fail+0x5d8/0x740 [ 2787.683083][ T7659] ? __kernfs_new_node+0x8b/0x630 [ 2787.688097][ T7659] should_failslab+0x5/0x20 [ 2787.692590][ T7659] kmem_cache_alloc+0x36/0x290 [ 2787.695248][ T116] tipc: 32-bit node address hash set to 0 [ 2787.697378][ T7659] __kernfs_new_node+0x8b/0x630 [ 2787.704630][ T116] tipc: 32-bit node address hash set to 0 [ 2787.707891][ T7659] ? kernfs_add_one+0x49e/0x5c0 [ 2787.707901][ T7659] kernfs_new_node+0x95/0x160 [ 2787.707916][ T7659] __kernfs_create_file+0x45/0x260 [ 2787.728171][ T7659] sysfs_add_file_mode_ns+0x293/0x340 [ 2787.733535][ T7659] sysfs_create_file_ns+0x146/0x230 [ 2787.738734][ T7659] device_add+0xbc7/0x1820 [ 2787.743128][ T7659] device_create_vargs+0x1b8/0x210 [ 2787.748208][ T7659] device_create+0x86/0xb0 [ 2787.752593][ T7659] ? vsnprintf+0x1a07/0x1aa0 [ 2787.757153][ T7659] bdi_register_va+0x89/0x5e0 [ 2787.761813][ T7659] bdi_register+0x80/0xa0 [ 2787.766111][ T7659] ? __device_add_disk+0x50a/0x1220 [ 2787.771279][ T7659] bdi_register_owner+0x56/0xf0 [ 2787.776101][ T7659] __device_add_disk+0x583/0x1220 [ 2787.781097][ T7659] loop_add+0x554/0x710 [ 2787.785225][ T7659] loop_control_ioctl+0x468/0x680 [ 2787.790218][ T7659] ? xor_init+0x60/0x60 [ 2787.794356][ T7659] do_vfs_ioctl+0x6fb/0x15b0 [ 2787.798916][ T7659] __x64_sys_ioctl+0xd4/0x110 [ 2787.803572][ T7659] do_syscall_64+0xcb/0x1e0 [ 2787.808056][ T7659] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2787.813922][ T7659] RIP: 0033:0x7f02d6ed5059 [ 2787.818324][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2787.832247][ T116] tipc: 32-bit node address hash set to 0 [ 2787.837905][ T7659] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2787.837914][ T7659] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:11:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x298, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6ecd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa7d2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb613}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbda}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x85b}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x631}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x99}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "85bd57cd723f3e23ca3f84f1cacb537ec37d11a3edf8a69dd500c937ad5c8f1174f5e0ad2225fc0fc4383ffe60644b677a2f9a1316a10b7c56492035bdf0dc67012cce9fc7aaf9b0d6b8a791a5d74563946f87b45231bbd1fc00a54a27f48d0a8c460093d82ec5d9f9e8af93397f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdba9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x341c}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xae}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x298, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6ecd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa7d2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb613}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbda}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x85b}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x631}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x99}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "85bd57cd723f3e23ca3f84f1cacb537ec37d11a3edf8a69dd500c937ad5c8f1174f5e0ad2225fc0fc4383ffe60644b677a2f9a1316a10b7c56492035bdf0dc67012cce9fc7aaf9b0d6b8a791a5d74563946f87b45231bbd1fc00a54a27f48d0a8c460093d82ec5d9f9e8af93397f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdba9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x341c}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xae}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) [ 2787.837919][ T7659] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2787.837931][ T7659] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2787.843694][ T116] tipc: 32-bit node address hash set to 0 [ 2787.852008][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2787.852012][ T7659] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2787.855194][ T12] tipc: 32-bit node address hash set to 0 [ 2787.863580][ T7659] ------------[ cut here ]------------ [ 2787.908612][ T7659] WARNING: CPU: 1 PID: 7659 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2787.917600][ T7659] Modules linked in: [ 2787.921489][ T7659] CPU: 1 PID: 7659 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2787.932990][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2787.943040][ T7659] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2787.948817][ T7659] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2787.968394][ T7659] RSP: 0018:ffff8881cd357ce8 EFLAGS: 00010246 [ 2787.974436][ T7659] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2787.982378][ T7659] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2787.990333][ T7659] RBP: ffff8881f072a298 R08: ffffffff8214628e R09: 0000000000000010 [ 2787.998277][ T7659] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2788.006232][ T7659] R13: 1ffff1103cdba001 R14: 1ffff1103cdba09d R15: ffff8881e6dd0000 [ 2788.014180][ T7659] FS: 00007f02d604b700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2788.023089][ T7659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2788.029642][ T7659] CR2: 0000000020001380 CR3: 00000001cfef0000 CR4: 00000000003406e0 [ 2788.037601][ T7659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2788.045540][ T7659] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2788.053493][ T7659] Call Trace: [ 2788.056762][ T7659] loop_add+0x554/0x710 [ 2788.060898][ T7659] loop_control_ioctl+0x468/0x680 [ 2788.065893][ T7659] ? xor_init+0x60/0x60 [ 2788.070020][ T7659] do_vfs_ioctl+0x6fb/0x15b0 [ 2788.074590][ T7659] __x64_sys_ioctl+0xd4/0x110 [ 2788.079235][ T7659] do_syscall_64+0xcb/0x1e0 [ 2788.083720][ T7659] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2788.089592][ T7659] RIP: 0033:0x7f02d6ed5059 [ 2788.093979][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2788.113557][ T7659] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2788.121936][ T7659] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2788.129886][ T7659] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2788.137844][ T7659] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2788.145800][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2788.153742][ T7659] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 05:11:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 60) 05:11:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x26, 0x3, 0x5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x91) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x174, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7e46}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf872}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x56f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "eea0947606e77889eb70c29aa66c7d23f237d761bcb17fa26e9eeec9"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xca}, @TIPC_NLA_NODE_ID={0x60, 0x3, "dcf5174993df2ed14692bc8c8b58cbe3272e8589d16b54c8c0c22cc1a287a6d2c98b5a7807aa8b393cf4f366b4bdf3b7bc82f878decdcc2a4f65e19303e88bec01b238bf1c42b77f1a323ef7c653ac82cbe656778d387496ce015fb7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x6008005) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) 05:11:11 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xf829fba0d7302f1, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c82, 0x2) 05:11:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000001380)={0x2, 0xffffffffffffffff, 0x1}) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000001040)={r0, r0, 0x6, 0x1000, &(0x7f0000000040)="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", 0x3, 0x0, 0x48, 0xe7, 0x14, 0x1, 0x3, 'syz1\x00'}) (async) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000001300)=""/105) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/95, 0x5f, 0x1, &(0x7f0000001180)=""/213, 0xd5}, &(0x7f00000012c0)=0x40) 05:11:11 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:11 executing program 1: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:11 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xd, 0xc7f, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) 05:11:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r2 = socket(0x26, 0x3, 0x5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x91) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x174, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7e46}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf872}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x56f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "eea0947606e77889eb70c29aa66c7d23f237d761bcb17fa26e9eeec9"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xca}, @TIPC_NLA_NODE_ID={0x60, 0x3, "dcf5174993df2ed14692bc8c8b58cbe3272e8589d16b54c8c0c22cc1a287a6d2c98b5a7807aa8b393cf4f366b4bdf3b7bc82f878decdcc2a4f65e19303e88bec01b238bf1c42b77f1a323ef7c653ac82cbe656778d387496ce015fb7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x6008005) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) [ 2788.161703][ T7659] ---[ end trace a32e41e40fb042da ]--- [ 2788.167518][ T116] tipc: 32-bit node address hash set to 0 [ 2788.177564][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2788.187776][ T116] tipc: 32-bit node address hash set to 0 [ 2788.221123][ T7717] FAULT_INJECTION: forcing a failure. [ 2788.221123][ T7717] name failslab, interval 1, probability 0, space 0, times 0 [ 2788.234213][ T7717] CPU: 1 PID: 7717 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2788.245740][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.255785][ T7717] Call Trace: [ 2788.259050][ T7717] dump_stack+0x18e/0x1de [ 2788.263351][ T7717] should_fail+0x5d8/0x740 [ 2788.267738][ T7717] ? __kernfs_new_node+0x8b/0x630 [ 2788.272732][ T7717] should_failslab+0x5/0x20 [ 2788.277267][ T7717] kmem_cache_alloc+0x36/0x290 [ 2788.282004][ T7717] __kernfs_new_node+0x8b/0x630 [ 2788.286844][ T7717] ? kernfs_add_one+0x49e/0x5c0 [ 2788.291671][ T7717] kernfs_new_node+0x95/0x160 [ 2788.296323][ T7717] __kernfs_create_file+0x45/0x260 [ 2788.301412][ T7717] sysfs_add_file_mode_ns+0x293/0x340 [ 2788.306762][ T7717] sysfs_create_file_ns+0x146/0x230 [ 2788.311938][ T7717] device_add+0xbc7/0x1820 [ 2788.316335][ T7717] device_create_vargs+0x1b8/0x210 [ 2788.321422][ T7717] device_create+0x86/0xb0 [ 2788.325814][ T7717] ? vsnprintf+0x1a07/0x1aa0 [ 2788.330374][ T7717] bdi_register_va+0x89/0x5e0 [ 2788.335018][ T7717] bdi_register+0x80/0xa0 [ 2788.339316][ T7717] ? __device_add_disk+0x50a/0x1220 [ 2788.344485][ T7717] bdi_register_owner+0x56/0xf0 [ 2788.349306][ T7717] __device_add_disk+0x583/0x1220 [ 2788.354305][ T7717] loop_add+0x554/0x710 [ 2788.358449][ T7717] loop_control_ioctl+0x468/0x680 [ 2788.363443][ T7717] ? xor_init+0x60/0x60 [ 2788.367569][ T7717] do_vfs_ioctl+0x6fb/0x15b0 [ 2788.372132][ T7717] __x64_sys_ioctl+0xd4/0x110 [ 2788.376781][ T7717] do_syscall_64+0xcb/0x1e0 [ 2788.381278][ T7717] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2788.387139][ T7717] RIP: 0033:0x7f02d6ed5059 [ 2788.391612][ T7717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2788.411211][ T7717] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2788.419614][ T7717] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2788.427555][ T7717] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2788.435509][ T7717] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2788.443451][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2788.451393][ T7717] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2788.460908][ T116] tipc: 32-bit node address hash set to 0 [ 2788.463658][ T7717] ------------[ cut here ]------------ 05:11:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r2 = socket(0x26, 0x3, 0x5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x91) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x174, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7e46}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf872}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x56f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "eea0947606e77889eb70c29aa66c7d23f237d761bcb17fa26e9eeec9"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xca}, @TIPC_NLA_NODE_ID={0x60, 0x3, "dcf5174993df2ed14692bc8c8b58cbe3272e8589d16b54c8c0c22cc1a287a6d2c98b5a7807aa8b393cf4f366b4bdf3b7bc82f878decdcc2a4f65e19303e88bec01b238bf1c42b77f1a323ef7c653ac82cbe656778d387496ce015fb7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x6008005) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) [ 2788.472072][ T7717] WARNING: CPU: 0 PID: 7717 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2788.476240][ T116] tipc: 32-bit node address hash set to 0 [ 2788.481104][ T7717] Modules linked in: [ 2788.481119][ T7717] CPU: 0 PID: 7717 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2788.481124][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.481138][ T7717] RIP: 0010:__device_add_disk+0xe90/0x1220 05:11:11 executing program 0: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "470f5473eae2204f", "2d2f82569acaf3192aee8e892f726466", "d2812dde", "5a769b816e122e82"}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x40811) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="d80000005760ad7353e40b2b920923ac91e4eabc34a993b4dd596216fd7f6c6c9452254c2ab76f579e2221f102b474f17006c22bb1f0f9c392a58a8250447c17a7561838f4687f93a31fa3f6d52f394749c735acaa69723c17ad4f66725a57841c2734604223b652ccf4b04eb3755cb0af0434ab7708cfd92b17907626142fab9b1cd38a890f548b004477fafce0f02f415ad438", @ANYRES16=r1, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) 05:11:11 executing program 0: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "470f5473eae2204f", "2d2f82569acaf3192aee8e892f726466", "d2812dde", "5a769b816e122e82"}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x40811) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="d80000005760ad7353e40b2b920923ac91e4eabc34a993b4dd596216fd7f6c6c9452254c2ab76f579e2221f102b474f17006c22bb1f0f9c392a58a8250447c17a7561838f4687f93a31fa3f6d52f394749c735acaa69723c17ad4f66725a57841c2734604223b652ccf4b04eb3755cb0af0434ab7708cfd92b17907626142fab9b1cd38a890f548b004477fafce0f02f415ad438", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000c000018008000300000001000d0001007564703a73797a3200000000110001006574683a6d6163767461703000000000240002800800030006000000080003007f090000080003000400000008000400007900001200010069623a6e657464657673696d30000000180001006574683a76657468305f766972745f776966690008000300f7ffffff38000400200001000a004e2200004f48fe8000000000000000000000000000bbff0100001400020002004e20ac1414bb000000000000000004000380eba8eb4c9b7a59c759a473b883e02584082b17822bdef32e2ece73edcb40be1eabe1cf761d7827ea032cdc965cc6015541e3d6ff0f3bc64d62e3d9f6408e47e661bbddfd670af844038e73388f072e1cd84ef6b653a5"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) 05:11:11 executing program 0: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "470f5473eae2204f", "2d2f82569acaf3192aee8e892f726466", "d2812dde", "5a769b816e122e82"}, 0x28) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x40811) (async, rerun: 32) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="d80000005760ad7353e40b2b920923ac91e4eabc34a993b4dd596216fd7f6c6c9452254c2ab76f579e2221f102b474f17006c22bb1f0f9c392a58a8250447c17a7561838f4687f93a31fa3f6d52f394749c735acaa69723c17ad4f66725a57841c2734604223b652ccf4b04eb3755cb0af0434ab7708cfd92b17907626142fab9b1cd38a890f548b004477fafce0f02f415ad438", @ANYRES16=r1, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) [ 2788.481147][ T7717] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2788.481157][ T7717] RSP: 0018:ffff8881e20c7ce8 EFLAGS: 00010246 [ 2788.491207][ T116] tipc: 32-bit node address hash set to 0 [ 2788.502220][ T7717] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2788.502226][ T7717] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2788.502231][ T7717] RBP: ffff8881eed2bc48 R08: ffffffff8214628e R09: 0000000000000010 [ 2788.502236][ T7717] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2788.502241][ T7717] R13: 1ffff1103c651201 R14: 1ffff1103c65129d R15: ffff8881e3289000 [ 2788.502248][ T7717] FS: 00007f02d604b700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2788.502259][ T7717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2788.592230][ T116] tipc: 32-bit node address hash set to 0 [ 2788.598016][ T7717] CR2: 00007f125ba95ff8 CR3: 00000001ebb61000 CR4: 00000000003406f0 [ 2788.598024][ T7717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2788.598035][ T7717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2788.604685][ T116] tipc: 32-bit node address hash set to 0 [ 2788.610277][ T7717] Call Trace: [ 2788.610294][ T7717] loop_add+0x554/0x710 [ 2788.610308][ T7717] loop_control_ioctl+0x468/0x680 [ 2788.652167][ T7717] ? xor_init+0x60/0x60 [ 2788.656310][ T7717] do_vfs_ioctl+0x6fb/0x15b0 [ 2788.660979][ T7717] __x64_sys_ioctl+0xd4/0x110 [ 2788.665631][ T7717] do_syscall_64+0xcb/0x1e0 [ 2788.670105][ T7717] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2788.675968][ T7717] RIP: 0033:0x7f02d6ed5059 [ 2788.680372][ T7717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2788.699947][ T7717] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2788.708331][ T7717] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:11:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 61) 05:11:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x9c, r1, 0xb1d, 0x0, 0x0, {0x4}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x9c}}, 0x0) 05:11:12 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a8, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x3f}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x32}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc12c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4045}, 0x80) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000001380)={0x2, 0xffffffffffffffff, 0x1}) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000001040)={r0, r0, 0x6, 0x1000, &(0x7f0000000040)="f818d9f38c10e7403c083acd7923441743404c8a748681bc63c508070947a6d67be392b21f2c1aeaa8f41b1244248ce7d58f7ee495e9ff8ce9409209c93ad99870d0d54e72ab7608d9946e11847624c5c87eaa2a2e82456e3b13cbdb2ba93728335a41775bcb47d9cc3e59b58da3440edc293fbee828641db4218e63d2667dfecfc95da6742999191d33a856a09367479dd08b5fdb28390d219b9aa7b120795ce86910b2b812cce92163186d9f424d7147b27186c3b1ecee21e2a4d0dde97d2b7fb8bd963e1448711b76fa842730a5042cf0d8fd8d8a24d7af6b6e78309c4cf22dc99411294beb0f0292589505880b5b7d5e3d18cf703ce476a22a010d55cb4f7af8df5f079776f05afdb512d72b95b77956a15126f1d2682511fb53dd767b31c94911d8e93d2a6d382223781716148fea827cbb98da584470a06cb32b70a69cc524b65f41e78fcb6e7e8c926321736d2e241cf6b2b7b2728871e010568a71cf243f52f13590a402ed7f47fbad232af5923589f36737d379fab10d39e73db3d900043b4521f28db5310f786fe29c14fe2a5bc57438c7c80bd456ea4eaa851d658f2948467f585c3f16942abd098317fe21433b77923487217b590e767f3442b065595341e2b3a0ec0aa4658afc1ff4166a127519c48b0460d4043e340651f17202320add2798c7d7a17237a6d9e5f0468156db49f11ea59c9659465401abc10d30a712d9d110a57d6c04bc4dff08fc4a895d8273a82f37ec5083f40eb69c5126d8b4f10d4ba41e714078d9a5416392f8dbe4f52fabfd995c7c15e8cf2c79dda3dcba36b6c38062f14f49d1aeeff6ae5c3450c933071b01378bf0176269f68d6b850817a9069af7ef7bc33e59349aa2b40f70cac778b64c08c7f686514354faa5d924e8a81f81227b6e16c3525e732489697ee9d12f207e76f6c31941aabb3585cf00a93820aecfa29f42676ec5ce4be5e4395376c9c5c69853e26f566740ac4a5962bb9642da0d5460d50e9b1ac4421edaa5183c6a47d0550e980737f17a1ec4e0c7b8ea425da521937c5bdec86e988f438d92e50560a6e9733c19e8c65342d9af9109945bbe07c6ffafc7e6964e1d09c0a22ed58bbefec66011d49a377d347b0346f4c088f1a052634b081c3f5ba07d17b0b17e986f7bceddaef109418e56bfc16ff51f7a960d9cefd5abee5738d55b0219d306260065d8937a4ade03ba45295513afd1cb7e0b5b344102ef8dfead07c127593d9ad9021c0076161cd0b0cb6bfd2149b304a324852beb6e9d6857e4e42855e0808378c6931cdac9efc20410e9ae1fde2ab8bfececf482567d621d2963a9ecf75befd22158148053bef9369d6f24362b89076ec7b3179add1d7a92363f80e25622ce155308056e0ef6d8ce9d422215ea392ef7fc01658608ead40678491fa63cf0b20b6979787dcb0564e5d428b88bd4113d62a0bc7d9dfa236cde51631dea089bc8e3e083200d26471ad8ff836213e411892bab096bc69bd1b92c949f8d7960b94c8d527557a1800e6e31cea3b0228dd91760471d401454caef32d4d7169db9e73d1f33a3f63629ac991845060214f2a416cc7dd2dc50c84ae7ff05cf87d7875800026a5cdf294fb88cdf2585bbb234a4e2b94b4295d91c587f62a8a74ff350f4b19effa19a14ba9b1746fbc09f5e0ba300e56916dced88b8e67161443a7752e645baf678dd0ce4bf73f088ae6cc195fef6e6c29c1b53d987589bebaddfeefda33f53768faa9dec207274370f63698b76a4f091c11ec9c06d6afd5806c10be61a5aac6df2c57ec8b2a6098b474ac8de5c9f82ad08bce0ec91d3afcbb8610c029ed604faf39eedf462631929aac6d8814b75d63740582fa8410b5cf6d9287b4f4e585981b9a273fd8d4bd8f074674663a217f1afe5f2b280487c06c0113142079339be49ba595afd1b1d320b83691f3114a544e63253bd1cbffbb62106a831ea7e621593dde3b1eaffc71b7b08167c97104aa155cea7e7468f142d5d3d366d31cd145e8828f186e35de6d62269164512cb8bbe3bef76450211d3eda1fdd9726432a366befd9027cc8c732b9ab658ea491d6451162bb9dffc72be20f74ad6c5ff30d7f803c213326fa9372307e8ce28a2024664d8a27a183b547856595f6544e90eee6a83ae9ce8b883717ae70625a0369fd9479962751bfb2bcfcf6d35334124cd2fc1dac1880f9ee6c8711eefee8d95090c9eb8128e7b0b6ef49958aa8c1cfb4f60c9de3daf6725810fa89f19ee13b57e45555be640aa5ed293c422101aa33716ad806a2763beb8e42e502f799d055445f5d97ac758547d69f96e96296e72bbf9f785c706407a043697fa3a84198c4273a90e1effa47f83a32b5bbb09817635e49d9c16ac6f27f6b4c0e2d00e5fc446492d5b7bc83c4551d28fbaae3807d02d50eabe6231259ff19c2a19f4a411cc177bff21389b4d5871b38c78fb218de0434920cfaef65409988852e4a6b2fc0a6ae2ea233b989c2f8bef0ce0cb57db1e1d53a1460573b634b3539a7316f8be71e7eaf45880609b24a09ef4d2be217e78867c5ad0bf766f59db6e1b587ed9f7c93f1ab3f15df6146297f782b31efedeec30d55d832d62b07a9c7de32ba9bc1317929f40f18bfd066fd4907f68af6125d52d0f2ab3472164095c05dc1e0c6cd8f900d7985b892608504f8b94fa0891859fa42b4af0cd19b54cb6e18322185c01efbd31d02ec62036e8bb10938ed3620069db9acd2bc8c073a20ccf7c1bd02250e5194cd54c82095ff07072bb81f40150675780077716d52339616e049b3e175838e4d394d1f1b5ef415fed534c1f9cd5fb4a799093ff1b4d375739cf0880129d25f08dea759d55de9b98adb5af21dd202ed87e40724b2c1f7f8c71c52f49e29deeeaa911dc357cb9b84687403b70ef6b23a38b50b256118768b113ca8e89170cc796ebcd70fb79566bcc9a8f13a2549ff7fa1713b6b47028840ccf1b8a9bec2780ef77393525a77beccf15d33c8b0f00fc26810ac49f27e5bff2460a666ed5015b750656c415bc3d60342cd549543faefdc62f98731d1136a73718fdb3e9f71e1ba9b0c902035b95c0baaa7bdbcda579fd3f1efaae6b75875c6acbb832a7c275b5e720ef2811086ad274a0949f2cebc587fbc7cd4074e6c717d49fc2eafa9107a5ac4d59813e6e29a0a35bdd9bc5ad8a1332dc595cd83130f478f7e78dd13929176ef488ae93a39ad1db83958a110289d3098e2a01220d7dd44f588f85bd80a1667705dabb3b877270521c2c736850b2ca3ed467730d5b1cab5571a034e082bb829ea3ac884ea369f81b3d8cc6b016f74f10b7ba7b675082eff31e7e36c59f5f0ad9e43b4e4f509fb47318afe6e1770b45d391bd3fa9dbdc2e3f6988e9354a80e8e61bd98b243b4c865de719c988ec4d88d7cfd6163b841619ce508453234b09ee187921f5693274cd9eb9cb1cb1c8e44ef10633f765b4d6313e9dd62498e0bd0c9c800f86ac72e55cece9336793cd98a2c412d3374a7611c7d750bfa00b04e4c55e932256667d3717a36999cb7b8031abd0f63e279bf3bbdf82267ef6f7c69d4844020b1f7d0e19eb040b85bbefd1a205b13c1f506f0645a7a0589f65ac61e7a220dfdbac0a82fdee470bd984860ee7f9e67e7df0915ec1d3df57b86a8bc189969dd3a65929fc9d7b98a8bec0d1b57e06fc2f37aba49bdbc132ea460dd84e3ce7dcfb2d58d145eb1a9ca9cda013e5cd37891a56867a6ed02c253848f9c87e65f5eee56df3bc629423b57fa5f9d9a06d247337cd309caba3fe992875a2e095b3e473a540d29092f0e2b35e6327a8c34203062b30d56692b6809cba436709d948d3c52b3c599fe0a0a54611da613398dce38da744afad9131d8a2f750a23c95280da91bd7e9f387d646f3ac9a13dfba02aaf5f60740689d256e2fa11c83c3999bda5b9af9428230b47589fd024b9b70c4dc663fb17695046a84b7bc3e2d7e65868925a1653158d9d9b94834f7cb5072e9e26aee1f5092d29ad28d0af6d4168eb394474000bb5fbaff642fbdf27d1815d4bb72f62f7e8a59f1157280368ff9fbccedfa84deca4e3f6cb744c775570f6122467606fc50664e1a3b732c2f8b20b54c453d63d5920eecdf224952acb1497a49a4ca55597b4fd80de99456b4867c95230cc71fbf1cd406a4bf3b26ef26b9d8e4c49b2e20a8221281e400329529c608cd1ce741797f26064629994ca025de141e1c64836ae5347c0fdf0fcffb0fabb481c3fe673268ebfa188fbfbbc0d98f8a1d00dd8032126e0aa1a5977700be5fe9a81a2416ec7072dd6bc328fbbdce4ba7e88de18f915ff65861f21360219b2b597c615c75c55de97b61576deb24d2fa16084b9cf9d8afa76aa1b00a07d403d0353847768d4485cdcae93e3b27d571544739848b86679baf1a99828badb4e944b55d19be7d16ad8ca445f521f83b26619c007e2919d44dd193e70d0fe42c22b9f704422551b306d2633c61464db1b69908af32c3ba5466f1cfbfbf7a02bd3772d311e77770af8278ec54a5925217853bfa9b1f3bffcb64b7afc8d6a98233c774f5c0c1bfc987f2ed0e2d1e8dcdd2a80f943f56363ec7f3eef6336c62e24568a4440a0c02d2772647c99fc55fb5c9d5b019d8f4facc97ce138ef8b2b7355da16e426f90a51e52c2a45eec5404fa9ea882a1ecaf4654ec5303285d077e6c62c6a8947baeb81de8313f97fea804eec15533083d0a08a12573ef1a53034ebd8d61672324b26773e3cc377eb1945da51bb4bdd2df2d3e7ecdad23f23819df58aa980bf022941e85c8eacb6490237f8ef8505a0892c4596ff4acb2f728fdb15f25ba8be82626208e4a2d27aa4d2f4107af7d94a2da6e3044a146d86c36ca6b3c22c7444c9df673c376b321f134ee7d6c7fd54d468f84dea7ef39dc6902c626c8e2118108e795a31ac919a323670d9d1fd94229963b36c8bb19ed410849a04bbc58f35e5cd97dba0cd1d5e0ce197cbe0e938fe3ede8d5625b4dc6ff55b3341b133b456ad326a014bae86bd5b74d34d8a65b167952060bbfc6c675d52642ec87992465b050bed3f0c0d412594a52f7541e9140dbc6b1e03222021dad4f760d7800fd6d09b5cb3b713a09106d07a913be0f961ceb852302329a8551d7d824480c5d637a9d66ed04442bef3f8a8eb661149c26f640f47d0324b0e4bf432d56a483a02924a9d769ee3a1ecddd27134e96e8d6321fd19434c220f93ef298c85b5836160a7fb2ccea50fb75ca6f10c2aa72f141ae760f7dd1287ddb5f25ceba73bf9c3156c48aab604d01f4547cde225e23bf61ee43ad818710af78679bad8a3177f1ca4193392ed960877bc2eb517d6990eefc72f2fc0d8f9d380e73c2a59f8e937f7b450562f4d55f4612dec6b353fb45873399763f06f3619fdf1ea01b9d8df7b60b6ed00c3914c6d446b8b4830245cfba594234f9f0a7f412b8b3c3098db6b4d999873684e5d3b3b2aa494ae64c14d5c241d6ae87e1a9c60809091c9f65b961481cb0045f5b16c820855c2aafc32d2842ab06e61c8a163358307ef268e89634cd7662ce8bbba235210ce1245642d65b9245f65d2de6e171905f92bdf87b169d5376379943f5469b3603c67570495cb8fd51cbc85292fa29cfc923ed6249dc8acb9cdaba673112efad46c52a8a5edef24d9581b1cd1c6fb9bdf6a10674061f1083e41c7a2bd4a8a79ef9a68f45fbb9737ea048d535139d09a429c29b588748d5cd10c4b63f99040261aec294b4d98e0c00ff50934cf179b306354bba2fb61a210e69441a7e26", 0x3, 0x0, 0x48, 0xe7, 0x14, 0x1, 0x3, 'syz1\x00'}) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000001300)=""/105) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/95, 0x5f, 0x1, &(0x7f0000001180)=""/213, 0xd5}, &(0x7f00000012c0)=0x40) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000001380)={0x2, 0xffffffffffffffff, 0x1}) (async) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000001040)={r0, r0, 0x6, 0x1000, &(0x7f0000000040)="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", 0x3, 0x0, 0x48, 0xe7, 0x14, 0x1, 0x3, 'syz1\x00'}) (async) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000001300)=""/105) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/95, 0x5f, 0x1, &(0x7f0000001180)=""/213, 0xd5}, &(0x7f00000012c0)=0x40) (async) 05:11:12 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:12 executing program 1: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:12 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a8, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x3f}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x32}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc12c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4045}, 0x80) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) (async) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a8, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x3f}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x32}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc12c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4045}, 0x80) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) [ 2788.716278][ T7717] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2788.724222][ T7717] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2788.732178][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2788.732236][ T116] tipc: 32-bit node address hash set to 0 [ 2788.740130][ T7717] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2788.740139][ T7717] ---[ end trace a32e41e40fb042db ]--- 05:11:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x9c, r1, 0xb1d, 0x0, 0x0, {0x4}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x9c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x9c, r1, 0xb1d, 0x0, 0x0, {0x4}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x9c}}, 0x0) (async) 05:11:12 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x19, 0x1, {0x800, {0x10, 0x4, 0x7}, 0x10, 0xee01, 0xee01, 0x5, 0x195e0c94, 0x7, 0x5, 0x8, 0x3, 0x0, 0x3, 0x3, 0x3ff, 0x8, 0x9, 0x7, 0xa96, 0x3}}, 0xa0) getgid() syz_io_uring_setup(0x3661, &(0x7f00000001c0)={0x0, 0xa6e6, 0x20, 0x0, 0x2b4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x5) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000100)={0x63, 0x7d, 0x1, {0x0, 0x5c, 0xbe69, 0x592, {0x10, 0x2, 0x5}, 0x0, 0x8, 0x9, 0x0, 0x4, '\\-[(', 0x12, '/dev/loop-control\x00', 0x1, '-', 0x12, '/dev/loop-control\x00'}}, 0x63) r2 = syz_io_uring_complete(0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0x6b0, 0x3, 0x44}}) 05:11:12 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) (async) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a8, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x3f}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x32}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc12c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4045}, 0x80) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:12 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:12 executing program 1: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) [ 2788.792243][ T116] tipc: 32-bit node address hash set to 0 [ 2788.808174][ T116] tipc: 32-bit node address hash set to 0 [ 2788.858771][ T7782] FAULT_INJECTION: forcing a failure. [ 2788.858771][ T7782] name failslab, interval 1, probability 0, space 0, times 0 [ 2788.871421][ T7782] CPU: 1 PID: 7782 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2788.882926][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.893127][ T7782] Call Trace: [ 2788.896403][ T7782] dump_stack+0x18e/0x1de [ 2788.900734][ T7782] should_fail+0x5d8/0x740 [ 2788.905122][ T7782] ? __kernfs_new_node+0x8b/0x630 [ 2788.910116][ T7782] should_failslab+0x5/0x20 [ 2788.914608][ T7782] kmem_cache_alloc+0x36/0x290 [ 2788.919346][ T7782] ? selinux_kernfs_init_security+0x12d/0x720 [ 2788.925383][ T7782] __kernfs_new_node+0x8b/0x630 [ 2788.930211][ T7782] ? mutex_lock+0x6c/0xc0 [ 2788.934531][ T7782] kernfs_new_node+0x95/0x160 [ 2788.939176][ T7782] __kernfs_create_file+0x45/0x260 [ 2788.944255][ T7782] sysfs_add_file_mode_ns+0x293/0x340 [ 2788.949598][ T7782] sysfs_merge_group+0x19b/0x320 [ 2788.954504][ T7782] dpm_sysfs_add+0xbd/0x260 [ 2788.958977][ T7782] device_add+0xcec/0x1820 [ 2788.963362][ T7782] device_create_vargs+0x1b8/0x210 [ 2788.968447][ T7782] device_create+0x86/0xb0 [ 2788.972872][ T7782] ? vsnprintf+0x1a07/0x1aa0 [ 2788.977447][ T7782] bdi_register_va+0x89/0x5e0 [ 2788.982108][ T7782] bdi_register+0x80/0xa0 [ 2788.986420][ T7782] ? __device_add_disk+0x50a/0x1220 [ 2788.991588][ T7782] bdi_register_owner+0x56/0xf0 [ 2788.996426][ T7782] __device_add_disk+0x583/0x1220 [ 2789.001440][ T7782] loop_add+0x554/0x710 [ 2789.005573][ T7782] loop_control_ioctl+0x468/0x680 [ 2789.010570][ T7782] ? xor_init+0x60/0x60 [ 2789.014727][ T7782] do_vfs_ioctl+0x6fb/0x15b0 [ 2789.019310][ T7782] __x64_sys_ioctl+0xd4/0x110 [ 2789.023961][ T7782] do_syscall_64+0xcb/0x1e0 [ 2789.028438][ T7782] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2789.034423][ T7782] RIP: 0033:0x7f02d6ed5059 [ 2789.038817][ T7782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2789.058392][ T7782] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2789.066777][ T7782] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2789.074723][ T7782] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2789.082666][ T7782] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.090611][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2789.098553][ T7782] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2789.106647][ T116] tipc: 32-bit node address hash set to 0 [ 2789.108822][ T7782] ------------[ cut here ]------------ [ 2789.113087][ T116] tipc: 32-bit node address hash set to 0 [ 2789.117799][ T7782] WARNING: CPU: 0 PID: 7782 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2789.132469][ T7782] Modules linked in: [ 2789.136339][ T7782] CPU: 0 PID: 7782 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2789.147837][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2789.157871][ T7782] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2789.163648][ T7782] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2789.183222][ T7782] RSP: 0018:ffff8881e0d67ce8 EFLAGS: 00010246 [ 2789.189290][ T7782] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2789.197242][ T7782] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2789.205182][ T7782] RBP: ffff8881eed28058 R08: ffffffff8214628e R09: 0000000000000010 [ 2789.213124][ T7782] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2789.221063][ T7782] R13: 1ffff1103d475601 R14: 1ffff1103d47569d R15: ffff8881ea3ab000 [ 2789.229017][ T7782] FS: 00007f02d604b700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2789.237925][ T7782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2789.242436][T26969] tipc: 32-bit node address hash set to 0 [ 2789.244486][ T7782] CR2: 00007f02d6fe9090 CR3: 00000001deff3000 CR4: 00000000003406f0 [ 2789.250195][T26969] tipc: 32-bit node address hash set to 0 [ 2789.258127][ T7782] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2789.258131][ T7782] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2789.258134][ T7782] Call Trace: [ 2789.258151][ T7782] loop_add+0x554/0x710 [ 2789.258166][ T7782] loop_control_ioctl+0x468/0x680 [ 2789.292108][ T7782] ? xor_init+0x60/0x60 [ 2789.296249][ T7782] do_vfs_ioctl+0x6fb/0x15b0 [ 2789.300808][ T7782] __x64_sys_ioctl+0xd4/0x110 [ 2789.305454][ T7782] do_syscall_64+0xcb/0x1e0 [ 2789.309939][ T7782] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2789.315802][ T7782] RIP: 0033:0x7f02d6ed5059 [ 2789.320187][ T7782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2789.339776][ T7782] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2789.348154][ T7782] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:11:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 62) 05:11:12 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80900, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x804) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x79, 0x1}, 0x7) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:12 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x19, 0x1, {0x800, {0x10, 0x4, 0x7}, 0x10, 0xee01, 0xee01, 0x5, 0x195e0c94, 0x7, 0x5, 0x8, 0x3, 0x0, 0x3, 0x3, 0x3ff, 0x8, 0x9, 0x7, 0xa96, 0x3}}, 0xa0) (async) getgid() (async) syz_io_uring_setup(0x3661, &(0x7f00000001c0)={0x0, 0xa6e6, 0x20, 0x0, 0x2b4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x5) (async) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000100)={0x63, 0x7d, 0x1, {0x0, 0x5c, 0xbe69, 0x592, {0x10, 0x2, 0x5}, 0x0, 0x8, 0x9, 0x0, 0x4, '\\-[(', 0x12, '/dev/loop-control\x00', 0x1, '-', 0x12, '/dev/loop-control\x00'}}, 0x63) r2 = syz_io_uring_complete(0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0x6b0, 0x3, 0x44}}) 05:11:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x9c, r1, 0xb1d, 0x0, 0x0, {0x4}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x9c}}, 0x0) 05:11:12 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x54e0060}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x5, 0x9, 0x3}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8000, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6e6f657874676e642c63616368653d667363616368652c6163636573733d616e792c756e616d653d2c6163636573733d636c69656e742c6163636573733d757365722c6e6f6465876d61702c6e6f6465766d61702c6163636573733d616e792c667363616368652c646f6e745f61707072616973652c686173682c7065726d69745f646972656374696f2c6d61736b3d4d41595f57524954452c736d61636b6673726f6f743d2f6465762f6c6f6f702d636f6e74726f6c002c7065726d69745f646972656374696f2c6f626a5f726f6c653d2c7375626a5f726f6c653d28242c00"]) 05:11:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x7, 0x1, {0x3, '-{-'}}, 0xc) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x0, 0x0, 0x21, 0x0, "6a52355a5ba4a75f7f83e915544ba3df8d30d11d977975e4df4f80ff664d858ba8cf50cd66e60b8a802862e1461b88edc533a6ac4f46e62ac8be84a9ddaa259a2243eb5ea19b87b9d1674f3796c46456"}, 0xd8) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:12 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async, rerun: 32) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x19, 0x1, {0x800, {0x10, 0x4, 0x7}, 0x10, 0xee01, 0xee01, 0x5, 0x195e0c94, 0x7, 0x5, 0x8, 0x3, 0x0, 0x3, 0x3, 0x3ff, 0x8, 0x9, 0x7, 0xa96, 0x3}}, 0xa0) (async, rerun: 32) getgid() (async) syz_io_uring_setup(0x3661, &(0x7f00000001c0)={0x0, 0xa6e6, 0x20, 0x0, 0x2b4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x5) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000100)={0x63, 0x7d, 0x1, {0x0, 0x5c, 0xbe69, 0x592, {0x10, 0x2, 0x5}, 0x0, 0x8, 0x9, 0x0, 0x4, '\\-[(', 0x12, '/dev/loop-control\x00', 0x1, '-', 0x12, '/dev/loop-control\x00'}}, 0x63) r2 = syz_io_uring_complete(0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0x6b0, 0x3, 0x44}}) 05:11:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x7, 0x1, {0x3, '-{-'}}, 0xc) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x0, 0x0, 0x21, 0x0, "6a52355a5ba4a75f7f83e915544ba3df8d30d11d977975e4df4f80ff664d858ba8cf50cd66e60b8a802862e1461b88edc533a6ac4f46e62ac8be84a9ddaa259a2243eb5ea19b87b9d1674f3796c46456"}, 0xd8) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x7, 0x1, {0x3, '-{-'}}, 0xc) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x0, 0x0, 0x21, 0x0, "6a52355a5ba4a75f7f83e915544ba3df8d30d11d977975e4df4f80ff664d858ba8cf50cd66e60b8a802862e1461b88edc533a6ac4f46e62ac8be84a9ddaa259a2243eb5ea19b87b9d1674f3796c46456"}, 0xd8) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2789.356096][ T7782] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2789.364037][ T7782] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.371993][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2789.379954][ T7782] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2789.382242][T26969] tipc: 32-bit node address hash set to 0 [ 2789.387904][ T7782] ---[ end trace a32e41e40fb042dc ]--- [ 2789.393635][T26969] tipc: 32-bit node address hash set to 0 [ 2789.404809][T26969] tipc: 32-bit node address hash set to 0 05:11:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2c4800, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x44, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) 05:11:12 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80900, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x804) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x79, 0x1}, 0x7) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80900, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x804) (async) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x79, 0x1}, 0x7) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) [ 2789.473156][ T7792] FAULT_INJECTION: forcing a failure. [ 2789.473156][ T7792] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.486709][ T7792] CPU: 1 PID: 7792 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2789.498241][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2789.508278][ T7792] Call Trace: [ 2789.511554][ T7792] dump_stack+0x18e/0x1de [ 2789.515861][ T7792] should_fail+0x5d8/0x740 [ 2789.520257][ T7792] ? __kernfs_new_node+0x8b/0x630 [ 2789.525329][ T7792] should_failslab+0x5/0x20 [ 2789.529848][ T7792] kmem_cache_alloc+0x36/0x290 [ 2789.534583][ T7792] __kernfs_new_node+0x8b/0x630 [ 2789.539408][ T7792] ? mutex_lock+0x6c/0xc0 [ 2789.543708][ T7792] ? kernfs_activate+0x3fc/0x420 [ 2789.548612][ T7792] kernfs_new_node+0x95/0x160 [ 2789.553260][ T7792] __kernfs_create_file+0x45/0x260 [ 2789.558340][ T7792] sysfs_add_file_mode_ns+0x293/0x340 [ 2789.562224][ T12] tipc: 32-bit node address hash set to 0 [ 2789.563689][ T7792] sysfs_merge_group+0x19b/0x320 [ 2789.563702][ T7792] dpm_sysfs_add+0xbd/0x260 [ 2789.578767][ T7792] device_add+0xcec/0x1820 [ 2789.583155][ T7792] device_create_vargs+0x1b8/0x210 [ 2789.588237][ T7792] device_create+0x86/0xb0 [ 2789.592644][ T7792] ? vsnprintf+0x1a07/0x1aa0 [ 2789.597205][ T7792] bdi_register_va+0x89/0x5e0 [ 2789.601866][ T7792] bdi_register+0x80/0xa0 [ 2789.606164][ T7792] ? __device_add_disk+0x50a/0x1220 [ 2789.611346][ T7792] bdi_register_owner+0x56/0xf0 [ 2789.616173][ T7792] __device_add_disk+0x583/0x1220 [ 2789.621169][ T7792] loop_add+0x554/0x710 [ 2789.625294][ T7792] loop_control_ioctl+0x468/0x680 [ 2789.630285][ T7792] ? xor_init+0x60/0x60 [ 2789.634412][ T7792] do_vfs_ioctl+0x6fb/0x15b0 [ 2789.638981][ T7792] __x64_sys_ioctl+0xd4/0x110 [ 2789.643629][ T7792] do_syscall_64+0xcb/0x1e0 [ 2789.648102][ T7792] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2789.653961][ T7792] RIP: 0033:0x7f02d6ed5059 [ 2789.658347][ T7792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2789.677931][ T7792] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2789.686309][ T7792] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2789.694249][ T7792] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2789.702234][ T7792] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.702245][ T12] tipc: 32-bit node address hash set to 0 [ 2789.710181][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2789.710187][ T7792] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2789.710484][ T116] tipc: 32-bit node address hash set to 0 [ 2789.718257][ T12] tipc: 32-bit node address hash set to 0 [ 2789.724280][ T7792] ------------[ cut here ]------------ [ 2789.748694][ T7792] WARNING: CPU: 1 PID: 7792 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2789.757672][ T7792] Modules linked in: [ 2789.761539][ T7792] CPU: 1 PID: 7792 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2789.773039][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2789.783072][ T7792] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2789.788865][ T7792] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2789.808453][ T7792] RSP: 0018:ffff8881ceb97ce8 EFLAGS: 00010246 [ 2789.814488][ T7792] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2789.822434][ T7792] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2789.830377][ T7792] RBP: ffff8881eecbe718 R08: ffffffff8214628e R09: 0000000000000010 [ 2789.838323][ T7792] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2789.842239][ T12] tipc: 32-bit node address hash set to 0 [ 2789.846275][ T7792] R13: 1ffff11039f12e01 R14: 1ffff11039f12e9d R15: ffff8881cf897000 [ 2789.859921][ T7792] FS: 00007f02d604b700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2789.868817][ T7792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2789.875369][ T7792] CR2: 00007f125ba97718 CR3: 00000001e5ff7000 CR4: 00000000003406e0 [ 2789.883316][ T7792] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2789.891259][ T7792] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2789.899200][ T7792] Call Trace: [ 2789.902465][ T7792] loop_add+0x554/0x710 [ 2789.906591][ T7792] loop_control_ioctl+0x468/0x680 [ 2789.911586][ T7792] ? xor_init+0x60/0x60 [ 2789.915714][ T7792] do_vfs_ioctl+0x6fb/0x15b0 [ 2789.920276][ T7792] __x64_sys_ioctl+0xd4/0x110 [ 2789.924940][ T7792] do_syscall_64+0xcb/0x1e0 [ 2789.929415][ T7792] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2789.935277][ T7792] RIP: 0033:0x7f02d6ed5059 [ 2789.939661][ T7792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2789.959235][ T7792] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2789.967613][ T7792] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2789.975568][ T7792] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2789.982229][ T12] tipc: 32-bit node address hash set to 0 [ 2789.983509][ T7792] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.983514][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2789.983524][ T7792] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2790.013045][ T7792] ---[ end trace a32e41e40fb042dd ]--- 05:11:13 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 63) 05:11:13 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2c4800, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async, rerun: 64) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x44, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) 05:11:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x54e0060}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x5, 0x9, 0x3}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8000, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6e6f657874676e642c63616368653d667363616368652c6163636573733d616e792c756e616d653d2c6163636573733d636c69656e742c6163636573733d757365722c6e6f6465876d61702c6e6f6465766d61702c6163636573733d616e792c667363616368652c646f6e745f61707072616973652c686173682c7065726d69745f646972656374696f2c6d61736b3d4d41595f57524954452c736d61636b6673726f6f743d2f6465762f6c6f6f702d636f6e74726f6c002c7065726d69745f646972656374696f2c6f626a5f726f6c653d2c7375626a5f726f6c653d28242c00"]) 05:11:13 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x40086602, r1) 05:11:13 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80900, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x804) (async, rerun: 32) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x79, 0x1}, 0x7) (rerun: 32) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x54e0060}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x5, 0x9, 0x3}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8000, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6e6f657874676e642c63616368653d667363616368652c6163636573733d616e792c756e616d653d2c6163636573733d636c69656e742c6163636573733d757365722c6e6f6465876d61702c6e6f6465766d61702c6163636573733d616e792c667363616368652c646f6e745f61707072616973652c686173682c7065726d69745f646972656374696f2c6d61736b3d4d41595f57524954452c736d61636b6673726f6f743d2f6465762f6c6f6f702d636f6e74726f6c002c7065726d69745f646972656374696f2c6f626a5f726f6c653d2c7375626a5f726f6c653d28242c00"]) 05:11:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2c4800, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x44, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) [ 2790.021031][T26969] tipc: 32-bit node address hash set to 0 [ 2790.026829][T26969] tipc: 32-bit node address hash set to 0 [ 2790.065552][ T7828] FAULT_INJECTION: forcing a failure. 05:11:13 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x458e02, 0x0) 05:11:13 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async, rerun: 32) r2 = syz_io_uring_complete(0x0) (rerun: 32) ioctl$LOOP_CTL_REMOVE(r2, 0x40086602, r1) 05:11:13 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080c1}, 0x40000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r1, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x41}, 0x40) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x20, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004001}, 0x40001) [ 2790.065552][ T7828] name failslab, interval 1, probability 0, space 0, times 0 [ 2790.089311][ T7828] CPU: 1 PID: 7828 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2790.100854][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2790.110987][ T7828] Call Trace: [ 2790.114261][ T7828] dump_stack+0x18e/0x1de [ 2790.118575][ T7828] should_fail+0x5d8/0x740 [ 2790.122988][ T7828] ? __kernfs_new_node+0x8b/0x630 [ 2790.127999][ T7828] should_failslab+0x5/0x20 [ 2790.132483][ T7828] kmem_cache_alloc+0x36/0x290 [ 2790.137232][ T7828] __kernfs_new_node+0x8b/0x630 [ 2790.142060][ T7828] ? mutex_lock+0x6c/0xc0 [ 2790.146367][ T7828] ? kernfs_activate+0x3fc/0x420 [ 2790.151285][ T7828] kernfs_new_node+0x95/0x160 [ 2790.155958][ T7828] __kernfs_create_file+0x45/0x260 [ 2790.161067][ T7828] sysfs_add_file_mode_ns+0x293/0x340 [ 2790.166444][ T7828] sysfs_merge_group+0x19b/0x320 [ 2790.171359][ T7828] dpm_sysfs_add+0xbd/0x260 [ 2790.175854][ T7828] device_add+0xcec/0x1820 [ 2790.180247][ T7828] device_create_vargs+0x1b8/0x210 [ 2790.185337][ T7828] device_create+0x86/0xb0 [ 2790.189724][ T7828] ? vsnprintf+0x1a07/0x1aa0 [ 2790.194301][ T7828] bdi_register_va+0x89/0x5e0 [ 2790.198964][ T7828] bdi_register+0x80/0xa0 [ 2790.203280][ T7828] ? __device_add_disk+0x50a/0x1220 [ 2790.208448][ T7828] bdi_register_owner+0x56/0xf0 [ 2790.213270][ T7828] __device_add_disk+0x583/0x1220 [ 2790.218273][ T7828] loop_add+0x554/0x710 [ 2790.222406][ T7828] loop_control_ioctl+0x468/0x680 [ 2790.227403][ T7828] ? xor_init+0x60/0x60 [ 2790.231531][ T7828] do_vfs_ioctl+0x6fb/0x15b0 [ 2790.236095][ T7828] __x64_sys_ioctl+0xd4/0x110 [ 2790.240744][ T7828] do_syscall_64+0xcb/0x1e0 [ 2790.245221][ T7828] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2790.251084][ T7828] RIP: 0033:0x7f02d6ed5059 [ 2790.255470][ T7828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2790.275059][ T7828] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2790.283526][ T7828] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2790.291484][ T7828] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2790.299425][ T7828] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2790.307366][ T7828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2790.315313][ T7828] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2790.326197][T26969] tipc: 32-bit node address hash set to 0 [ 2790.326626][ T7828] ------------[ cut here ]------------ [ 2790.332115][T26969] tipc: 32-bit node address hash set to 0 [ 2790.337368][ T7828] WARNING: CPU: 0 PID: 7828 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2790.337370][ T7828] Modules linked in: [ 2790.337383][ T7828] CPU: 0 PID: 7828 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2790.337393][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2790.377563][ T7828] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2790.383341][ T7828] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2790.402920][ T7828] RSP: 0018:ffff8881e756fce8 EFLAGS: 00010246 [ 2790.408960][ T7828] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2790.416905][ T7828] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2790.424847][ T7828] RBP: ffff8881ef3dcd68 R08: ffffffff8214628e R09: 0000000000000010 [ 2790.432793][ T7828] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2790.440738][ T7828] R13: 1ffff1103de0f401 R14: 1ffff1103de0f49d R15: ffff8881ef07a000 [ 2790.448700][ T7828] FS: 00007f02d604b700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2790.457599][ T7828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2790.462234][T26969] tipc: 32-bit node address hash set to 0 [ 2790.464168][ T7828] CR2: 00007f1b32fc3718 CR3: 00000001eab06000 CR4: 00000000003406f0 [ 2790.464176][ T7828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2790.464186][ T7828] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2790.469926][T26969] tipc: 32-bit node address hash set to 0 [ 2790.477831][ T7828] Call Trace: [ 2790.477850][ T7828] loop_add+0x554/0x710 [ 2790.477860][ T7828] loop_control_ioctl+0x468/0x680 [ 2790.477873][ T7828] ? xor_init+0x60/0x60 [ 2790.516045][ T7828] do_vfs_ioctl+0x6fb/0x15b0 [ 2790.520629][ T7828] __x64_sys_ioctl+0xd4/0x110 [ 2790.525277][ T7828] do_syscall_64+0xcb/0x1e0 [ 2790.529751][ T7828] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2790.535612][ T7828] RIP: 0033:0x7f02d6ed5059 [ 2790.539998][ T7828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2790.559584][ T7828] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2790.567964][ T7828] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:11:13 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 64) 05:11:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080c1}, 0x40000) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r1, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x41}, 0x40) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x20, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004001}, 0x40001) 05:11:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 2790.575928][ T7828] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2790.583882][ T7828] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2790.591822][ T7828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2790.599762][ T7828] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2790.602231][T26969] tipc: 32-bit node address hash set to 0 [ 2790.607707][ T7828] ---[ end trace a32e41e40fb042de ]--- [ 2790.619147][T26969] tipc: 32-bit node address hash set to 0 05:11:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 05:11:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080c1}, 0x40000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r1, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x41}, 0x40) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x20, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004001}, 0x40001) 05:11:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async) 05:11:13 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x40086602, r1) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) syz_io_uring_complete(0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x40086602, r1) (async) 05:11:13 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:13 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x458e02, 0x0) [ 2790.627154][T26969] tipc: 32-bit node address hash set to 0 [ 2790.634637][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2790.648448][ T7860] FAULT_INJECTION: forcing a failure. [ 2790.648448][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 2790.670524][ T7860] CPU: 0 PID: 7860 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2790.682061][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2790.692090][ T7860] Call Trace: [ 2790.695352][ T7860] dump_stack+0x18e/0x1de [ 2790.699655][ T7860] should_fail+0x5d8/0x740 [ 2790.704055][ T7860] ? __kernfs_new_node+0x8b/0x630 [ 2790.709047][ T7860] should_failslab+0x5/0x20 [ 2790.713518][ T7860] kmem_cache_alloc+0x36/0x290 [ 2790.718266][ T7860] __kernfs_new_node+0x8b/0x630 [ 2790.723089][ T7860] ? mutex_lock+0x6c/0xc0 [ 2790.727389][ T7860] ? kernfs_activate+0x3fc/0x420 [ 2790.732293][ T7860] kernfs_new_node+0x95/0x160 [ 2790.736961][ T7860] __kernfs_create_file+0x45/0x260 [ 2790.742047][ T7860] sysfs_add_file_mode_ns+0x293/0x340 [ 2790.742241][T26969] tipc: 32-bit node address hash set to 0 [ 2790.747395][ T7860] sysfs_merge_group+0x19b/0x320 [ 2790.747411][ T7860] dpm_sysfs_add+0xbd/0x260 [ 2790.753210][T26969] tipc: 32-bit node address hash set to 0 [ 2790.758017][ T7860] device_add+0xcec/0x1820 [ 2790.758028][ T7860] device_create_vargs+0x1b8/0x210 [ 2790.758040][ T7860] device_create+0x86/0xb0 [ 2790.782045][ T7860] ? vsnprintf+0x1a07/0x1aa0 [ 2790.786609][ T7860] bdi_register_va+0x89/0x5e0 [ 2790.791256][ T7860] bdi_register+0x80/0xa0 [ 2790.795560][ T7860] ? __device_add_disk+0x50a/0x1220 [ 2790.800741][ T7860] bdi_register_owner+0x56/0xf0 [ 2790.805572][ T7860] __device_add_disk+0x583/0x1220 [ 2790.810570][ T7860] loop_add+0x554/0x710 [ 2790.814700][ T7860] loop_control_ioctl+0x468/0x680 [ 2790.819693][ T7860] ? xor_init+0x60/0x60 [ 2790.823827][ T7860] do_vfs_ioctl+0x6fb/0x15b0 [ 2790.828411][ T7860] __x64_sys_ioctl+0xd4/0x110 [ 2790.833058][ T7860] do_syscall_64+0xcb/0x1e0 [ 2790.837555][ T7860] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2790.843424][ T7860] RIP: 0033:0x7f02d6ed5059 [ 2790.847819][ T7860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2790.867394][ T7860] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:11:14 executing program 0: r0 = socket(0xe, 0x800, 0x8) getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r2, 0x800, 0x200, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) [ 2790.875771][ T7860] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2790.882234][T26969] tipc: 32-bit node address hash set to 0 [ 2790.883716][ T7860] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2790.883722][ T7860] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2790.883726][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2790.883731][ T7860] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2790.888995][ T7860] ------------[ cut here ]------------ 05:11:14 executing program 0: r0 = socket(0xe, 0x800, 0x8) getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r2, 0x800, 0x200, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socket(0xe, 0x800, 0x8) (async) getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r2, 0x800, 0x200, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) 05:11:14 executing program 0: r0 = socket(0xe, 0x800, 0x8) getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r2, 0x800, 0x200, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) [ 2790.891300][T26969] tipc: 32-bit node address hash set to 0 [ 2790.897435][ T7860] WARNING: CPU: 0 PID: 7860 at block/genhd.c:742 __device_add_disk+0xe90/0x1220 [ 2790.897437][ T7860] Modules linked in: [ 2790.897450][ T7860] CPU: 0 PID: 7860 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2790.897455][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2790.897464][ T7860] RIP: 0010:__device_add_disk+0xe90/0x1220 [ 2790.897472][ T7860] Code: ff e8 f4 3a 4c ff 0f 0b e9 6b fe ff ff e8 e8 3a 4c ff 0f 0b e9 a1 f2 ff ff e8 dc 3a 4c ff 0f 0b e9 5d f8 ff ff e8 d0 3a 4c ff <0f> 0b e9 04 f7 ff ff e8 c4 3a 4c ff 43 80 3c 26 00 0f 85 4f fd ff [ 2790.897477][ T7860] RSP: 0018:ffff8881d0c5fce8 EFLAGS: 00010246 [ 2790.897484][ T7860] RAX: ffffffff82146b90 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2790.897489][ T7860] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2790.897494][ T7860] RBP: ffff8881ef3d88e8 R08: ffffffff8214628e R09: 0000000000000010 05:11:14 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 65) 05:11:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) 05:11:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) [ 2790.897499][ T7860] R10: ffffffff84600000 R11: 0000000000000000 R12: dffffc0000000000 [ 2790.897504][ T7860] R13: 1ffff1103d1dce01 R14: 1ffff1103d1dce9d R15: ffff8881e8ee7000 [ 2790.897511][ T7860] FS: 00007f02d604b700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2790.897516][ T7860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2790.897521][ T7860] CR2: 00007f1b32fc3718 CR3: 00000001e7526000 CR4: 00000000003406f0 [ 2790.897531][ T7860] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2790.897536][ T7860] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 05:11:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) 05:11:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x386, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = socket(0x29, 0xa, 0xff) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x20b9, 0x1b, 0xfffffffb}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r7, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 2790.897538][ T7860] Call Trace: [ 2790.897553][ T7860] loop_add+0x554/0x710 [ 2790.906547][T26969] tipc: 32-bit node address hash set to 0 [ 2790.913447][ T7860] loop_control_ioctl+0x468/0x680 [ 2790.913456][ T7860] ? xor_init+0x60/0x60 [ 2790.913466][ T7860] do_vfs_ioctl+0x6fb/0x15b0 [ 2790.913483][ T7860] __x64_sys_ioctl+0xd4/0x110 [ 2791.022229][T26969] tipc: 32-bit node address hash set to 0 [ 2791.030153][ T7860] do_syscall_64+0xcb/0x1e0 [ 2791.030165][ T7860] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2791.030177][ T7860] RIP: 0033:0x7f02d6ed5059 [ 2791.030192][ T7860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2791.038276][T26969] tipc: 32-bit node address hash set to 0 [ 2791.047065][ T7860] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2791.047074][ T7860] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2791.047079][ T7860] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2791.047084][ T7860] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2791.047089][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2791.047094][ T7860] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2791.047102][ T7860] ---[ end trace a32e41e40fb042df ]--- [ 2791.208456][T26969] tipc: 32-bit node address hash set to 0 [ 2791.214210][T26969] tipc: 32-bit node address hash set to 0 05:11:14 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = eventfd2(0x5, 0x80800) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x80) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x4, 0x20, 0x6}, 0x2f) 05:11:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x386, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) r5 = socket(0x29, 0xa, 0xff) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x20b9, 0x1b, 0xfffffffb}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r7, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 05:11:14 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:11:14 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:14 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x458e02, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x458e02, 0x0) (async) [ 2791.234907][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2791.248101][ T7915] FAULT_INJECTION: forcing a failure. [ 2791.248101][ T7915] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.265209][ T7915] CPU: 1 PID: 7915 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 05:11:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x386, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = socket(0x29, 0xa, 0xff) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x20b9, 0x1b, 0xfffffffb}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r7, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 05:11:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="06950c8be14567346cd816bc17f00c0138ad6bf28172836a1fecdb8ee0214f57adc5fa054e00619977a7ece567aeca542e01ac5fc3653bf9be5ace31c414d4d40ddd224f344a0e4d38258adc7af38202b9046f47b069c2fdf77f697062fd851f01474932a58139accf5641792378a8b5513cd473daa4d646c57ec37ecd244b788b375ceebcc3348cc808dfadf28b824b684eccb0014f2c524cc76118", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xd8, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4464}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0xd8}}, 0x4000000) [ 2791.276778][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2791.286816][ T7915] Call Trace: [ 2791.290092][ T7915] dump_stack+0x18e/0x1de [ 2791.294424][ T7915] should_fail+0x5d8/0x740 [ 2791.298824][ T7915] ? kzalloc+0x1d/0x30 [ 2791.302889][ T7915] should_failslab+0x5/0x20 [ 2791.307384][ T7915] __kmalloc+0x5f/0x2f0 [ 2791.311531][ T7915] kzalloc+0x1d/0x30 [ 2791.315406][ T7915] kobject_get_path+0xb3/0x190 [ 2791.320154][ T7915] kobject_uevent_env+0x269/0x1000 [ 2791.325239][ T7915] ? mutex_lock+0x6c/0xc0 [ 2791.329541][ T7915] device_add+0xecf/0x1820 [ 2791.333936][ T7915] device_create_vargs+0x1b8/0x210 [ 2791.339045][ T7915] device_create+0x86/0xb0 [ 2791.343431][ T7915] ? vsnprintf+0x1a07/0x1aa0 [ 2791.348001][ T7915] bdi_register_va+0x89/0x5e0 [ 2791.352659][ T7915] bdi_register+0x80/0xa0 [ 2791.356969][ T7915] ? __device_add_disk+0x50a/0x1220 [ 2791.362138][ T7915] bdi_register_owner+0x56/0xf0 [ 2791.366965][ T7915] __device_add_disk+0x583/0x1220 [ 2791.371974][ T7915] loop_add+0x554/0x710 [ 2791.376103][ T7915] loop_control_ioctl+0x468/0x680 [ 2791.381096][ T7915] ? xor_init+0x60/0x60 [ 2791.385232][ T7915] do_vfs_ioctl+0x6fb/0x15b0 [ 2791.389794][ T7915] __x64_sys_ioctl+0xd4/0x110 [ 2791.394443][ T7915] do_syscall_64+0xcb/0x1e0 [ 2791.398917][ T7915] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2791.404780][ T7915] RIP: 0033:0x7f02d6ed5059 [ 2791.409168][ T7915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2791.428743][ T7915] RSP: 002b:00007f02d602a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2791.437124][ T7915] RAX: ffffffffffffffda RBX: 00007f02d6fe8030 RCX: 00007f02d6ed5059 [ 2791.445069][ T7915] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2791.453031][ T7915] RBP: 00007f02d602a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2791.460975][ T7915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2791.468917][ T7915] R13: 00007fffb943b23f R14: 00007f02d602a300 R15: 0000000000022000 [ 2791.477323][T26969] tipc: 32-bit node address hash set to 0 05:11:14 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 66) 05:11:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="06950c8be14567346cd816bc17f00c0138ad6bf28172836a1fecdb8ee0214f57adc5fa054e00619977a7ece567aeca542e01ac5fc3653bf9be5ace31c414d4d40ddd224f344a0e4d38258adc7af38202b9046f47b069c2fdf77f697062fd851f01474932a58139accf5641792378a8b5513cd473daa4d646c57ec37ecd244b788b375ceebcc3348cc808dfadf28b824b684eccb0014f2c524cc76118", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xd8, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4464}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0xd8}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="06950c8be14567346cd816bc17f00c0138ad6bf28172836a1fecdb8ee0214f57adc5fa054e00619977a7ece567aeca542e01ac5fc3653bf9be5ace31c414d4d40ddd224f344a0e4d38258adc7af38202b9046f47b069c2fdf77f697062fd851f01474932a58139accf5641792378a8b5513cd473daa4d646c57ec37ecd244b788b375ceebcc3348cc808dfadf28b824b684eccb0014f2c524cc76118", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xd8, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4464}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0xd8}}, 0x4000000) (async) 05:11:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="06950c8be14567346cd816bc17f00c0138ad6bf28172836a1fecdb8ee0214f57adc5fa054e00619977a7ece567aeca542e01ac5fc3653bf9be5ace31c414d4d40ddd224f344a0e4d38258adc7af38202b9046f47b069c2fdf77f697062fd851f01474932a58139accf5641792378a8b5513cd473daa4d646c57ec37ecd244b788b375ceebcc3348cc808dfadf28b824b684eccb0014f2c524cc76118", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xd8, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4464}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0xd8}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="06950c8be14567346cd816bc17f00c0138ad6bf28172836a1fecdb8ee0214f57adc5fa054e00619977a7ece567aeca542e01ac5fc3653bf9be5ace31c414d4d40ddd224f344a0e4d38258adc7af38202b9046f47b069c2fdf77f697062fd851f01474932a58139accf5641792378a8b5513cd473daa4d646c57ec37ecd244b788b375ceebcc3348cc808dfadf28b824b684eccb0014f2c524cc76118", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xd8, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4464}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0xd8}}, 0x4000000) (async) 05:11:14 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:14 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) r1 = eventfd2(0x5, 0x80800) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x80) (rerun: 32) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x4, 0x20, 0x6}, 0x2f) 05:11:14 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2202, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x78}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1f3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004011) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:14 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) [ 2791.484683][T26969] tipc: 32-bit node address hash set to 0 [ 2791.503983][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2791.514162][ T7949] FAULT_INJECTION: forcing a failure. [ 2791.514162][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.534898][ T7949] CPU: 1 PID: 7949 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2791.546439][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2791.556477][ T7949] Call Trace: [ 2791.559757][ T7949] dump_stack+0x18e/0x1de [ 2791.564083][ T7949] should_fail+0x5d8/0x740 [ 2791.568481][ T7949] ? __alloc_skb+0x75/0x4d0 [ 2791.572955][ T7949] should_failslab+0x5/0x20 [ 2791.577431][ T7949] kmem_cache_alloc+0x36/0x290 [ 2791.582164][ T7949] __alloc_skb+0x75/0x4d0 [ 2791.586463][ T7949] ? mutex_lock+0x6c/0xc0 [ 2791.590762][ T7949] alloc_uevent_skb+0x73/0x220 [ 2791.595520][ T7949] kobject_uevent_env+0xaee/0x1000 [ 2791.600607][ T7949] device_add+0xecf/0x1820 [ 2791.604993][ T7949] device_create_vargs+0x1b8/0x210 [ 2791.610083][ T7949] device_create+0x86/0xb0 [ 2791.612231][T32365] tipc: 32-bit node address hash set to 0 [ 2791.614475][ T7949] ? vsnprintf+0x1a07/0x1aa0 [ 2791.614488][ T7949] bdi_register_va+0x89/0x5e0 [ 2791.614501][ T7949] bdi_register+0x80/0xa0 [ 2791.633724][ T7949] ? __device_add_disk+0x50a/0x1220 [ 2791.638893][ T7949] bdi_register_owner+0x56/0xf0 [ 2791.643715][ T7949] __device_add_disk+0x583/0x1220 [ 2791.648709][ T7949] loop_add+0x554/0x710 [ 2791.652834][ T7949] loop_control_ioctl+0x468/0x680 [ 2791.657841][ T7949] ? xor_init+0x60/0x60 [ 2791.661968][ T7949] do_vfs_ioctl+0x6fb/0x15b0 [ 2791.666534][ T7949] __x64_sys_ioctl+0xd4/0x110 [ 2791.671189][ T7949] do_syscall_64+0xcb/0x1e0 [ 2791.675661][ T7949] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2791.681523][ T7949] RIP: 0033:0x7f02d6ed5059 [ 2791.685911][ T7949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2791.705493][ T7949] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2791.713884][ T7949] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2791.721824][ T7949] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:11:14 executing program 0: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x74bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048881}, 0x24040004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 05:11:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) r1 = eventfd2(0x5, 0x80800) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x80) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x4, 0x20, 0x6}, 0x2f) 05:11:15 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 67) 05:11:15 executing program 0: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x74bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048881}, 0x24040004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 05:11:15 executing program 0: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x74bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048881}, 0x24040004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x74bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048881}, 0x24040004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) 05:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000c34a02a2f25e68444084c61d2c75efd515c1bc1259363e4c65fb80195c22d4d30c00ed42710dcd53c0ea7754735521bffeadb2ab8f496bdf", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) [ 2791.729766][ T7949] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2791.737707][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2791.745646][ T7949] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2791.752228][T32365] tipc: 32-bit node address hash set to 0 [ 2791.756183][T26969] tipc: 32-bit node address hash set to 0 [ 2791.761848][T32365] tipc: 32-bit node address hash set to 0 05:11:15 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000c34a02a2f25e68444084c61d2c75efd515c1bc1259363e4c65fb80195c22d4d30c00ed42710dcd53c0ea7754735521bffeadb2ab8f496bdf", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) 05:11:15 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2202, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x78}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1f3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004011) (async, rerun: 64) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (rerun: 64) 05:11:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0xb, 0xfff, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x10c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x36a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa196}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20004800}, 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c82, 0xb) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) 05:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000c34a02a2f25e68444084c61d2c75efd515c1bc1259363e4c65fb80195c22d4d30c00ed42710dcd53c0ea7754735521bffeadb2ab8f496bdf", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000c34a02a2f25e68444084c61d2c75efd515c1bc1259363e4c65fb80195c22d4d30c00ed42710dcd53c0ea7754735521bffeadb2ab8f496bdf", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) (async) 05:11:15 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:15 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:15 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) [ 2791.819688][ T7975] FAULT_INJECTION: forcing a failure. [ 2791.819688][ T7975] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.832579][ T7975] CPU: 0 PID: 7975 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2791.844112][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2791.854584][ T7975] Call Trace: [ 2791.857866][ T7975] dump_stack+0x18e/0x1de [ 2791.862192][ T7975] should_fail+0x5d8/0x740 [ 2791.866601][ T7975] ? alloc_uevent_skb+0x73/0x220 [ 2791.871535][ T7975] should_failslab+0x5/0x20 [ 2791.876026][ T7975] __kmalloc_track_caller+0x5d/0x2e0 [ 2791.881307][ T7975] ? kmem_cache_alloc+0x115/0x290 [ 2791.886322][ T7975] ? alloc_uevent_skb+0x73/0x220 [ 2791.891249][ T7975] __alloc_skb+0xaf/0x4d0 [ 2791.895560][ T7975] ? mutex_lock+0x6c/0xc0 [ 2791.899860][ T7975] alloc_uevent_skb+0x73/0x220 [ 2791.904593][ T7975] kobject_uevent_env+0xaee/0x1000 [ 2791.909674][ T7975] device_add+0xecf/0x1820 [ 2791.914068][ T7975] device_create_vargs+0x1b8/0x210 [ 2791.919162][ T7975] device_create+0x86/0xb0 [ 2791.923554][ T7975] ? vsnprintf+0x1a07/0x1aa0 [ 2791.928117][ T7975] bdi_register_va+0x89/0x5e0 [ 2791.932762][ T7975] bdi_register+0x80/0xa0 [ 2791.937065][ T7975] ? __device_add_disk+0x50a/0x1220 [ 2791.942233][ T7975] bdi_register_owner+0x56/0xf0 [ 2791.947074][ T7975] __device_add_disk+0x583/0x1220 [ 2791.952083][ T7975] loop_add+0x554/0x710 [ 2791.956209][ T7975] loop_control_ioctl+0x468/0x680 [ 2791.961224][ T7975] ? xor_init+0x60/0x60 [ 2791.965353][ T7975] do_vfs_ioctl+0x6fb/0x15b0 [ 2791.969915][ T7975] __x64_sys_ioctl+0xd4/0x110 [ 2791.974559][ T7975] do_syscall_64+0xcb/0x1e0 [ 2791.979056][ T7975] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2791.984925][ T7975] RIP: 0033:0x7f02d6ed5059 [ 2791.989312][ T7975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2792.008892][ T7975] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2792.017281][ T7975] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2792.025279][ T7975] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2792.033221][ T7975] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.041167][ T7975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2792.049133][ T7975] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2792.057578][T32365] tipc: 32-bit node address hash set to 0 [ 2792.062243][T26969] tipc: 32-bit node address hash set to 0 05:11:15 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 68) 05:11:15 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000ba", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1e451c6038b5e5bb}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}}, 0x8881) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x14, 0x2, @l2={'ib', 0x3a, 'syzkaller1\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4044804}, 0x408c0) 05:11:15 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2202, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x78}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1f3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004011) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:15 executing program 2: sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x8, 0x1, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008801}, 0x20004840) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:11:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0xb, 0xfff, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x10c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x36a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa196}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20004800}, 0x1) (async) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c82, 0xb) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) 05:11:15 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) [ 2792.064697][T10665] tipc: 32-bit node address hash set to 0 05:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000ba", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1e451c6038b5e5bb}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}}, 0x8881) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x14, 0x2, @l2={'ib', 0x3a, 'syzkaller1\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4044804}, 0x408c0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000ba", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1e451c6038b5e5bb}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}}, 0x8881) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x14, 0x2, @l2={'ib', 0x3a, 'syzkaller1\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4044804}, 0x408c0) (async) 05:11:15 executing program 2: sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x8, 0x1, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008801}, 0x20004840) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:11:15 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) 05:11:15 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) 05:11:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0xb, 0xfff, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x10c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x36a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa196}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20004800}, 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c82, 0xb) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) [ 2792.137407][ T8026] FAULT_INJECTION: forcing a failure. [ 2792.137407][ T8026] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.154594][ T8026] CPU: 0 PID: 8026 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2792.166146][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2792.176176][ T8026] Call Trace: [ 2792.179442][ T8026] dump_stack+0x18e/0x1de [ 2792.183748][ T8026] should_fail+0x5d8/0x740 [ 2792.188139][ T8026] ? skb_clone+0x1b2/0x360 [ 2792.192623][ T8026] should_failslab+0x5/0x20 [ 2792.197108][ T8026] kmem_cache_alloc+0x36/0x290 [ 2792.201849][ T8026] ? string+0x280/0x2c0 [ 2792.205981][ T8026] skb_clone+0x1b2/0x360 [ 2792.210199][ T8026] netlink_broadcast_filtered+0x5e1/0x10b0 [ 2792.215973][ T8026] ? skb_put+0x101/0x1e0 [ 2792.220187][ T8026] netlink_broadcast+0x35/0x50 [ 2792.224923][ T8026] kobject_uevent_env+0xb1f/0x1000 [ 2792.230024][ T8026] device_add+0xecf/0x1820 [ 2792.234411][ T8026] device_create_vargs+0x1b8/0x210 [ 2792.239491][ T8026] device_create+0x86/0xb0 [ 2792.243875][ T8026] ? vsnprintf+0x1a07/0x1aa0 [ 2792.248435][ T8026] bdi_register_va+0x89/0x5e0 [ 2792.253081][ T8026] bdi_register+0x80/0xa0 [ 2792.257380][ T8026] ? __device_add_disk+0x50a/0x1220 [ 2792.262547][ T8026] bdi_register_owner+0x56/0xf0 [ 2792.267368][ T8026] __device_add_disk+0x583/0x1220 [ 2792.272364][ T8026] loop_add+0x554/0x710 [ 2792.276495][ T8026] loop_control_ioctl+0x468/0x680 [ 2792.281487][ T8026] ? xor_init+0x60/0x60 [ 2792.285613][ T8026] do_vfs_ioctl+0x6fb/0x15b0 [ 2792.290171][ T8026] __x64_sys_ioctl+0xd4/0x110 [ 2792.294821][ T8026] do_syscall_64+0xcb/0x1e0 [ 2792.299296][ T8026] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2792.305165][ T8026] RIP: 0033:0x7f02d6ed5059 [ 2792.309570][ T8026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2792.329146][ T8026] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2792.337530][ T8026] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2792.345474][ T8026] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2792.353418][ T8026] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.361365][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2792.369310][ T8026] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2792.377514][T10665] tipc: 32-bit node address hash set to 0 05:11:15 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 69) 05:11:15 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) 05:11:15 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000ba", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1e451c6038b5e5bb}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}}, 0x8881) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x14, 0x2, @l2={'ib', 0x3a, 'syzkaller1\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4044804}, 0x408c0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000ba", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1e451c6038b5e5bb}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}}, 0x8881) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x5dedb2652ef15bdf, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x14, 0x2, @l2={'ib', 0x3a, 'syzkaller1\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4044804}, 0x408c0) (async) 05:11:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:15 executing program 2: sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x8, 0x1, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008801}, 0x20004840) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x8, 0x1, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008801}, 0x20004840) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) 05:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xfaa4c16e8c2b7af7) r2 = socket(0x11, 0x2, 0x401) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xfffff2d9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xfaa4c16e8c2b7af7) r2 = socket(0x11, 0x2, 0x401) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xfffff2d9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async, rerun: 32) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (rerun: 32) [ 2792.382235][T26969] tipc: 32-bit node address hash set to 0 [ 2792.383341][T10665] tipc: 32-bit node address hash set to 0 05:11:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:15 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) 05:11:15 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xcb}, 0xa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103440, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) 05:11:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xfaa4c16e8c2b7af7) r2 = socket(0x11, 0x2, 0x401) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xfffff2d9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xfaa4c16e8c2b7af7) (async) socket(0x11, 0x2, 0x401) (async) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xfffff2d9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) [ 2792.493156][ T8064] FAULT_INJECTION: forcing a failure. [ 2792.493156][ T8064] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.505831][ T8064] CPU: 0 PID: 8064 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2792.512214][T26969] tipc: 32-bit node address hash set to 0 [ 2792.517349][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2792.517352][ T8064] Call Trace: [ 2792.517366][ T8064] dump_stack+0x18e/0x1de [ 2792.517383][ T8064] should_fail+0x5d8/0x740 [ 2792.528585][T26969] tipc: 32-bit node address hash set to 0 [ 2792.533119][ T8064] ? __d_alloc+0x2a/0x6a0 [ 2792.533129][ T8064] should_failslab+0x5/0x20 [ 2792.533138][ T8064] kmem_cache_alloc+0x36/0x290 [ 2792.533153][ T8064] ? kobject_uevent_env+0x335/0x1000 [ 2792.569583][ T8064] __d_alloc+0x2a/0x6a0 [ 2792.573729][ T8064] ? kobject_uevent_env+0xbb2/0x1000 [ 2792.579002][ T8064] d_alloc_parallel+0x7d/0x12b0 [ 2792.583838][ T8064] ? avc_has_perm_noaudit+0x2fc/0x380 [ 2792.589199][ T8064] ? avc_has_perm_noaudit+0x2b0/0x380 [ 2792.594560][ T8064] ? __d_lookup+0x4b8/0x510 [ 2792.599047][ T8064] __lookup_slow+0xef/0x3b0 [ 2792.603539][ T8064] lookup_one_len+0x11d/0x210 [ 2792.608211][ T8064] start_creating+0xec/0x270 [ 2792.612791][ T8064] debugfs_create_dir+0x24/0x3f0 [ 2792.617715][ T8064] bdi_register_va+0x232/0x5e0 [ 2792.622462][ T8064] bdi_register+0x80/0xa0 [ 2792.626778][ T8064] ? __device_add_disk+0x50a/0x1220 [ 2792.631962][ T8064] bdi_register_owner+0x56/0xf0 [ 2792.636802][ T8064] __device_add_disk+0x583/0x1220 [ 2792.641819][ T8064] loop_add+0x554/0x710 [ 2792.645963][ T8064] loop_control_ioctl+0x468/0x680 [ 2792.650975][ T8064] ? xor_init+0x60/0x60 [ 2792.652214][T26969] tipc: 32-bit node address hash set to 0 [ 2792.655111][ T8064] do_vfs_ioctl+0x6fb/0x15b0 [ 2792.655126][ T8064] __x64_sys_ioctl+0xd4/0x110 [ 2792.660857][T26969] tipc: 32-bit node address hash set to 0 [ 2792.665383][ T8064] do_syscall_64+0xcb/0x1e0 [ 2792.665395][ T8064] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2792.665408][ T8064] RIP: 0033:0x7f02d6ed5059 [ 2792.690502][ T8064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2792.710090][ T8064] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2792.718490][ T8064] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2792.726448][ T8064] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2792.734409][ T8064] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 05:11:16 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 70) 05:11:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="945ec813b8de746fa30cff6cf6441948ad000001", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) 05:11:16 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) [ 2792.742364][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2792.750329][ T8064] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2792.758468][ T12] tipc: 32-bit node address hash set to 0 05:11:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:16 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xcb}, 0xa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103440, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) 05:11:16 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:11:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="945ec813b8de746fa30cff6cf6441948ad000001", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) [ 2792.798487][T26969] tipc: 32-bit node address hash set to 0 [ 2792.815427][T26969] tipc: 32-bit node address hash set to 0 05:11:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="945ec813b8de746fa30cff6cf6441948ad000001", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="945ec813b8de746fa30cff6cf6441948ad000001", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) (async) 05:11:16 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) [ 2792.858025][ T8112] FAULT_INJECTION: forcing a failure. [ 2792.858025][ T8112] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.879218][ T8112] CPU: 0 PID: 8112 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2792.890761][ T8112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2792.900800][ T8112] Call Trace: [ 2792.904084][ T8112] dump_stack+0x18e/0x1de [ 2792.908414][ T8112] should_fail+0x5d8/0x740 [ 2792.912825][ T8112] ? new_inode_pseudo+0x79/0x220 [ 2792.917753][ T8112] should_failslab+0x5/0x20 [ 2792.922242][ T8112] kmem_cache_alloc+0x36/0x290 [ 2792.927004][ T8112] new_inode_pseudo+0x79/0x220 [ 2792.931766][ T8112] new_inode+0x25/0x1d0 [ 2792.932230][ T116] tipc: 32-bit node address hash set to 0 [ 2792.935905][ T8112] ? start_creating+0x183/0x270 [ 2792.935916][ T8112] debugfs_create_dir+0x68/0x3f0 [ 2792.935930][ T8112] bdi_register_va+0x232/0x5e0 [ 2792.941694][ T116] tipc: 32-bit node address hash set to 0 [ 2792.946447][ T8112] bdi_register+0x80/0xa0 [ 2792.946458][ T8112] ? __device_add_disk+0x50a/0x1220 [ 2792.946467][ T8112] bdi_register_owner+0x56/0xf0 [ 2792.946476][ T8112] __device_add_disk+0x583/0x1220 [ 2792.946492][ T8112] loop_add+0x554/0x710 [ 2792.985269][ T8112] loop_control_ioctl+0x468/0x680 [ 2792.990284][ T8112] ? xor_init+0x60/0x60 [ 2792.994430][ T8112] do_vfs_ioctl+0x6fb/0x15b0 [ 2792.999012][ T8112] __x64_sys_ioctl+0xd4/0x110 [ 2793.003676][ T8112] do_syscall_64+0xcb/0x1e0 [ 2793.008223][ T8112] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2793.014101][ T8112] RIP: 0033:0x7f02d6ed5059 [ 2793.018514][ T8112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2793.038108][ T8112] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2793.046512][ T8112] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 05:11:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x200, 0x3, 0x81, 0x1}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4c880}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x880) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r6) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8002) 05:11:16 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 71) 05:11:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xb2742, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='r\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x23c}}, 0x0) [ 2793.054482][ T8112] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2793.062440][ T8112] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2793.070401][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2793.072222][ T116] tipc: 32-bit node address hash set to 0 [ 2793.078374][ T8112] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2793.078856][ T8112] debugfs: out of free dentries, can not create directory '7:11' [ 2793.091791][ T116] tipc: 32-bit node address hash set to 0 05:11:16 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADDIR(r2, &(0x7f0000000080)={0x122, 0x29, 0x1, {0x7, [{{0x8, 0x0, 0x5}, 0x9, 0x1, 0x7, './file0'}, {{0x10, 0x2, 0x6}, 0x95, 0x5, 0x7, './file0'}, {{0x40, 0x4, 0x1}, 0x3568, 0x44, 0x7, './file0'}, {{0x10, 0x3, 0x6}, 0x7f, 0x4, 0x7, './file0'}, {{0x0, 0x4, 0x1}, 0x4, 0x2, 0x7, './file0'}, {{0x0, 0x0, 0x5}, 0x29, 0x7, 0x7, './file0'}, {{0x0, 0x1, 0x8}, 0x1, 0x6, 0x7, './file0'}, {{0x10, 0x0, 0x7}, 0x95, 0x4, 0x7, './file0'}, {{0x40, 0x1}, 0x9e13, 0x7, 0x7, './file0'}]}}, 0x122) syz_io_uring_complete(0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$unix(r1, &(0x7f00000001c0)="88633103ee03818721040d9729b992d515a148700149249ebf6331f41a5949b2cc5de0c7b470c1547086c64279e27ade4b3209444fc727ff256c0341", 0x3c, 0x80, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:16 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xcb}, 0xa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103440, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xcb}, 0xa) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103440, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) (async) 05:11:16 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) 05:11:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xb2742, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='r\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x23c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xb2742, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='r\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x23c}}, 0x0) (async) 05:11:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x200, 0x3, 0x81, 0x1}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4c880}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x880) (async) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r6) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8002) [ 2793.168775][ T8139] FAULT_INJECTION: forcing a failure. [ 2793.168775][ T8139] name failslab, interval 1, probability 0, space 0, times 0 [ 2793.203582][ T8139] CPU: 1 PID: 8139 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2793.215308][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2793.225355][ T8139] Call Trace: [ 2793.228649][ T8139] dump_stack+0x18e/0x1de [ 2793.232969][ T8139] should_fail+0x5d8/0x740 [ 2793.237464][ T8139] ? security_inode_alloc+0x32/0x1d0 [ 2793.242741][ T8139] should_failslab+0x5/0x20 [ 2793.247227][ T8139] kmem_cache_alloc+0x36/0x290 [ 2793.251979][ T8139] security_inode_alloc+0x32/0x1d0 [ 2793.257081][ T8139] inode_init_always+0x387/0x810 [ 2793.262001][ T8139] new_inode_pseudo+0x90/0x220 [ 2793.266754][ T8139] new_inode+0x25/0x1d0 [ 2793.270894][ T8139] ? start_creating+0x183/0x270 [ 2793.275738][ T8139] debugfs_create_dir+0x68/0x3f0 [ 2793.280663][ T8139] bdi_register_va+0x232/0x5e0 [ 2793.285408][ T8139] bdi_register+0x80/0xa0 [ 2793.289722][ T8139] ? __device_add_disk+0x50a/0x1220 [ 2793.294912][ T8139] bdi_register_owner+0x56/0xf0 [ 2793.299750][ T8139] __device_add_disk+0x583/0x1220 [ 2793.304767][ T8139] loop_add+0x554/0x710 [ 2793.308910][ T8139] loop_control_ioctl+0x468/0x680 [ 2793.313916][ T8139] ? xor_init+0x60/0x60 [ 2793.318062][ T8139] do_vfs_ioctl+0x6fb/0x15b0 [ 2793.322646][ T8139] __x64_sys_ioctl+0xd4/0x110 [ 2793.327308][ T8139] do_syscall_64+0xcb/0x1e0 [ 2793.331797][ T8139] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2793.337673][ T8139] RIP: 0033:0x7f02d6ed5059 [ 2793.342078][ T8139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 05:11:16 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADDIR(r2, &(0x7f0000000080)={0x122, 0x29, 0x1, {0x7, [{{0x8, 0x0, 0x5}, 0x9, 0x1, 0x7, './file0'}, {{0x10, 0x2, 0x6}, 0x95, 0x5, 0x7, './file0'}, {{0x40, 0x4, 0x1}, 0x3568, 0x44, 0x7, './file0'}, {{0x10, 0x3, 0x6}, 0x7f, 0x4, 0x7, './file0'}, {{0x0, 0x4, 0x1}, 0x4, 0x2, 0x7, './file0'}, {{0x0, 0x0, 0x5}, 0x29, 0x7, 0x7, './file0'}, {{0x0, 0x1, 0x8}, 0x1, 0x6, 0x7, './file0'}, {{0x10, 0x0, 0x7}, 0x95, 0x4, 0x7, './file0'}, {{0x40, 0x1}, 0x9e13, 0x7, 0x7, './file0'}]}}, 0x122) syz_io_uring_complete(0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$unix(r1, &(0x7f00000001c0)="88633103ee03818721040d9729b992d515a148700149249ebf6331f41a5949b2cc5de0c7b470c1547086c64279e27ade4b3209444fc727ff256c0341", 0x3c, 0x80, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) [ 2793.361664][ T8139] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2793.370060][ T8139] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2793.378018][ T8139] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2793.385977][ T8139] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2793.393935][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2793.401888][ T8139] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2793.410848][ T116] tipc: 32-bit node address hash set to 0 05:11:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 05:11:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xb2742, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='r\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x23c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xb2742, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='r\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x23c}}, 0x0) (async) 05:11:16 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADDIR(r2, &(0x7f0000000080)={0x122, 0x29, 0x1, {0x7, [{{0x8, 0x0, 0x5}, 0x9, 0x1, 0x7, './file0'}, {{0x10, 0x2, 0x6}, 0x95, 0x5, 0x7, './file0'}, {{0x40, 0x4, 0x1}, 0x3568, 0x44, 0x7, './file0'}, {{0x10, 0x3, 0x6}, 0x7f, 0x4, 0x7, './file0'}, {{0x0, 0x4, 0x1}, 0x4, 0x2, 0x7, './file0'}, {{0x0, 0x0, 0x5}, 0x29, 0x7, 0x7, './file0'}, {{0x0, 0x1, 0x8}, 0x1, 0x6, 0x7, './file0'}, {{0x10, 0x0, 0x7}, 0x95, 0x4, 0x7, './file0'}, {{0x40, 0x1}, 0x9e13, 0x7, 0x7, './file0'}]}}, 0x122) syz_io_uring_complete(0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$unix(r1, &(0x7f00000001c0)="88633103ee03818721040d9729b992d515a148700149249ebf6331f41a5949b2cc5de0c7b470c1547086c64279e27ade4b3209444fc727ff256c0341", 0x3c, 0x80, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:16 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 72) 05:11:16 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) 05:11:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x200, 0x3, 0x81, 0x1}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4c880}, 0x40000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x880) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r6) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8002) 05:11:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 05:11:16 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x8001, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0x3f, 0x1}}) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:16 executing program 0: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0xffffffc1, 0x3, 0x100}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x1f, 0x4, 0x9) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f0000000340)=""/202, 0xca}, &(0x7f00000000c0)=0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRESDEC=r5, @ANYBLOB="1d0b000017000000c06893decd5f8bf169bdef20c47b338c654611e266c0adcc3a19733f1d6e280300000000ee3b00000000000800"/62, @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRES16=r1, @ANYRESHEX=r3, @ANYRESDEC=r6, @ANYRES64=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 2793.424522][ T116] tipc: 32-bit node address hash set to 0 [ 2793.436620][ T116] tipc: 32-bit node address hash set to 0 [ 2793.449312][ T8139] debugfs: out of free dentries, can not create directory '7:11' 05:11:16 executing program 0: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0xffffffc1, 0x3, 0x100}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0x1f, 0x4, 0x9) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f0000000340)=""/202, 0xca}, &(0x7f00000000c0)=0x40) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRESDEC=r5, @ANYBLOB="1d0b000017000000c06893decd5f8bf169bdef20c47b338c654611e266c0adcc3a19733f1d6e280300000000ee3b00000000000800"/62, @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRES16=r1, @ANYRESHEX=r3, @ANYRESDEC=r6, @ANYRES64=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 05:11:16 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) [ 2793.504783][ T8194] FAULT_INJECTION: forcing a failure. [ 2793.504783][ T8194] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2793.534725][ T8194] CPU: 0 PID: 8194 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2793.546279][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2793.556321][ T8194] Call Trace: [ 2793.559605][ T8194] dump_stack+0x18e/0x1de [ 2793.563929][ T8194] should_fail+0x5d8/0x740 [ 2793.568335][ T8194] __alloc_pages_nodemask+0x12e/0x740 [ 2793.573696][ T8194] __get_free_pages+0xa/0x30 [ 2793.578277][ T8194] inode_doinit_with_dentry+0x8d4/0x1170 [ 2793.583905][ T8194] security_d_instantiate+0xa5/0x100 [ 2793.589176][ T8194] d_instantiate+0x51/0x90 [ 2793.593623][ T8194] debugfs_create_dir+0x1bc/0x3f0 [ 2793.598635][ T8194] bdi_register_va+0x232/0x5e0 [ 2793.603392][ T8194] bdi_register+0x80/0xa0 [ 2793.607709][ T8194] ? __device_add_disk+0x50a/0x1220 [ 2793.612893][ T8194] bdi_register_owner+0x56/0xf0 [ 2793.617727][ T8194] __device_add_disk+0x583/0x1220 [ 2793.622740][ T8194] loop_add+0x554/0x710 [ 2793.626881][ T8194] loop_control_ioctl+0x468/0x680 [ 2793.631888][ T8194] ? xor_init+0x60/0x60 [ 2793.636032][ T8194] do_vfs_ioctl+0x6fb/0x15b0 [ 2793.640610][ T8194] __x64_sys_ioctl+0xd4/0x110 [ 2793.645277][ T8194] do_syscall_64+0xcb/0x1e0 [ 2793.649767][ T8194] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2793.655646][ T8194] RIP: 0033:0x7f02d6ed5059 [ 2793.660045][ T8194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2793.679636][ T8194] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2793.688030][ T8194] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2793.695983][ T8194] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:11:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xb) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) 05:11:16 executing program 0: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0xffffffc1, 0x3, 0x100}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0x1f, 0x4, 0x9) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f0000000340)=""/202, 0xca}, &(0x7f00000000c0)=0x40) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRESDEC=r5, @ANYBLOB="1d0b000017000000c06893decd5f8bf169bdef20c47b338c654611e266c0adcc3a19733f1d6e280300000000ee3b00000000000800"/62, @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRES16=r1, @ANYRESHEX=r3, @ANYRESDEC=r6, @ANYRES64=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 05:11:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:17 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 73) 05:11:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="010000005ecf6121b10a85328a237bcc0094bcb09117d8f14024b5dda4222115a942155f4b5cab156edc88fcc63a7792d9d475c8fe2ae68b", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) [ 2793.703943][ T8194] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2793.711896][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2793.719854][ T8194] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2793.728608][ T12] tipc: 32-bit node address hash set to 0 [ 2793.732277][ T116] tipc: 32-bit node address hash set to 0 [ 2793.735174][T10665] tipc: 32-bit node address hash set to 0 05:11:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="010000005ecf6121b10a85328a237bcc0094bcb09117d8f14024b5dda4222115a942155f4b5cab156edc88fcc63a7792d9d475c8fe2ae68b", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="010000005ecf6121b10a85328a237bcc0094bcb09117d8f14024b5dda4222115a942155f4b5cab156edc88fcc63a7792d9d475c8fe2ae68b", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) (async) 05:11:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="010000005ecf6121b10a85328a237bcc0094bcb09117d8f14024b5dda4222115a942155f4b5cab156edc88fcc63a7792d9d475c8fe2ae68b", @ANYRES16=r1, @ANYBLOB="1d0b000000000000000004000000"], 0x14}}, 0x0) 05:11:17 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 05:11:17 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x8001, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0x3f, 0x1}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) (async) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x210, r1, 0xb1d, 0x0, 0x0, {0x4}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "23eebd58c9f7af8c15699c4f2603802c67d44019bad0fb4196ae679fc4fc2fde75e4a607064d80156c2ea07ef55ba3e1f60e533ea6bcf67e360cb8f7da04ad34e6699d2c8aa17eb0f1dd2294448ecf72d3219ab0dc08182374a080a5e1cec9d4276b9165f048d5dc7b23de8447c4280df38313bafe1fd0ac2e483aede2b59f2fc4321b32bdbb101411"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5b8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3ff, @mcast2, 0x10000}}}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4c5d55ce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}]}, 0x210}}, 0x0) 05:11:17 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) [ 2793.830461][ T8226] FAULT_INJECTION: forcing a failure. [ 2793.830461][ T8226] name failslab, interval 1, probability 0, space 0, times 0 [ 2793.862229][T10665] tipc: 32-bit node address hash set to 0 [ 2793.862232][ T376] tipc: 32-bit node address hash set to 0 [ 2793.868212][ T8226] CPU: 1 PID: 8226 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2793.885193][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2793.895227][ T8226] Call Trace: [ 2793.898507][ T8226] dump_stack+0x18e/0x1de [ 2793.902823][ T8226] should_fail+0x5d8/0x740 [ 2793.907232][ T8226] ? new_inode_pseudo+0x79/0x220 [ 2793.912153][ T8226] should_failslab+0x5/0x20 [ 2793.916646][ T8226] kmem_cache_alloc+0x36/0x290 [ 2793.921401][ T8226] new_inode_pseudo+0x79/0x220 [ 2793.926150][ T8226] new_inode+0x25/0x1d0 [ 2793.930295][ T8226] ? start_creating+0x183/0x270 [ 2793.935132][ T8226] __debugfs_create_file+0xb5/0x460 [ 2793.940318][ T8226] ? debugfs_create_dir+0x302/0x3f0 [ 2793.945504][ T8226] bdi_register_va+0x274/0x5e0 [ 2793.950256][ T8226] bdi_register+0x80/0xa0 [ 2793.954609][ T8226] ? __device_add_disk+0x50a/0x1220 [ 2793.959790][ T8226] bdi_register_owner+0x56/0xf0 [ 2793.964624][ T8226] __device_add_disk+0x583/0x1220 [ 2793.969646][ T8226] loop_add+0x554/0x710 [ 2793.973795][ T8226] loop_control_ioctl+0x468/0x680 [ 2793.978809][ T8226] ? xor_init+0x60/0x60 [ 2793.982956][ T8226] do_vfs_ioctl+0x6fb/0x15b0 [ 2793.987541][ T8226] __x64_sys_ioctl+0xd4/0x110 [ 2793.992210][ T8226] do_syscall_64+0xcb/0x1e0 [ 2793.996704][ T8226] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2794.002580][ T8226] RIP: 0033:0x7f02d6ed5059 [ 2794.006980][ T8226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2794.026567][ T8226] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2794.034970][ T8226] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2794.042932][ T8226] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2794.050888][ T8226] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2794.058843][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2794.066796][ T8226] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2794.075923][ T376] tipc: 32-bit node address hash set to 0 05:11:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x210, r1, 0xb1d, 0x0, 0x0, {0x4}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "23eebd58c9f7af8c15699c4f2603802c67d44019bad0fb4196ae679fc4fc2fde75e4a607064d80156c2ea07ef55ba3e1f60e533ea6bcf67e360cb8f7da04ad34e6699d2c8aa17eb0f1dd2294448ecf72d3219ab0dc08182374a080a5e1cec9d4276b9165f048d5dc7b23de8447c4280df38313bafe1fd0ac2e483aede2b59f2fc4321b32bdbb101411"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5b8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3ff, @mcast2, 0x10000}}}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4c5d55ce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}]}, 0x210}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x210, r1, 0xb1d, 0x0, 0x0, {0x4}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "23eebd58c9f7af8c15699c4f2603802c67d44019bad0fb4196ae679fc4fc2fde75e4a607064d80156c2ea07ef55ba3e1f60e533ea6bcf67e360cb8f7da04ad34e6699d2c8aa17eb0f1dd2294448ecf72d3219ab0dc08182374a080a5e1cec9d4276b9165f048d5dc7b23de8447c4280df38313bafe1fd0ac2e483aede2b59f2fc4321b32bdbb101411"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5b8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3ff, @mcast2, 0x10000}}}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4c5d55ce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}]}, 0x210}}, 0x0) (async) 05:11:17 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:17 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 74) [ 2794.081708][ T376] tipc: 32-bit node address hash set to 0 [ 2794.096878][ T116] tipc: 32-bit node address hash set to 0 [ 2794.109291][ T8226] debugfs: out of free dentries, can not create file 'stats' 05:11:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xa) r3 = socket(0x26, 0x6, 0x4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_io_uring_complete(0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=0x0, @ANYBLOB="010827bd7000fcdbdf25140000002400028008000200e0ffffff0800010009000000080002000300000008000200ffff00000800068004000500040003800c00058007000100696200005c0005802400028008000400800400000800020005000000080004000400000008000200390c0000240002800800020007000000080004000600000008000100050000000800020004000000080001007564700008000100756470001c0003800800010013000000080002000600000008000100000000800c0003800800020002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4021}, 0xc014) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_io_uring_setup(0x134e, &(0x7f00000000c0)={0x0, 0x9f23, 0x20, 0x2, 0xe1, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x3b9e) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001340), 0x208300, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000012c0), 0x4) r7 = syz_open_dev$loop(&(0x7f0000001300), 0x10000, 0x400400) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x6) recvfrom$unix(r6, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000001240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/28, 0x1c, 0x0, &(0x7f0000001380)=""/4083, 0xff3}, &(0x7f0000000240)=0x40) 05:11:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x210, r1, 0xb1d, 0x0, 0x0, {0x4}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "23eebd58c9f7af8c15699c4f2603802c67d44019bad0fb4196ae679fc4fc2fde75e4a607064d80156c2ea07ef55ba3e1f60e533ea6bcf67e360cb8f7da04ad34e6699d2c8aa17eb0f1dd2294448ecf72d3219ab0dc08182374a080a5e1cec9d4276b9165f048d5dc7b23de8447c4280df38313bafe1fd0ac2e483aede2b59f2fc4321b32bdbb101411"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5b8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3ff, @mcast2, 0x10000}}}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4c5d55ce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}]}, 0x210}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x210, r1, 0xb1d, 0x0, 0x0, {0x4}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "23eebd58c9f7af8c15699c4f2603802c67d44019bad0fb4196ae679fc4fc2fde75e4a607064d80156c2ea07ef55ba3e1f60e533ea6bcf67e360cb8f7da04ad34e6699d2c8aa17eb0f1dd2294448ecf72d3219ab0dc08182374a080a5e1cec9d4276b9165f048d5dc7b23de8447c4280df38313bafe1fd0ac2e483aede2b59f2fc4321b32bdbb101411"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5b8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3ff, @mcast2, 0x10000}}}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4c5d55ce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}]}, 0x210}}, 0x0) (async) 05:11:17 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) socket(0xb, 0x3, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @none, 0x9}, 0xa) 05:11:17 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x8001, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0x3f, 0x1}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:17 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 2794.203064][ T8269] FAULT_INJECTION: forcing a failure. [ 2794.203064][ T8269] name failslab, interval 1, probability 0, space 0, times 0 [ 2794.212242][ T376] tipc: 32-bit node address hash set to 0 [ 2794.217757][ T8269] CPU: 0 PID: 8269 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2794.223513][ T376] tipc: 32-bit node address hash set to 0 [ 2794.232878][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2794.232881][ T8269] Call Trace: [ 2794.232896][ T8269] dump_stack+0x18e/0x1de [ 2794.232908][ T8269] should_fail+0x5d8/0x740 [ 2794.232923][ T8269] ? new_inode_pseudo+0x79/0x220 [ 2794.256230][ T376] tipc: 32-bit node address hash set to 0 [ 2794.260595][ T8269] should_failslab+0x5/0x20 [ 2794.260604][ T8269] kmem_cache_alloc+0x36/0x290 [ 2794.260619][ T8269] new_inode_pseudo+0x79/0x220 [ 2794.285262][ T8269] new_inode+0x25/0x1d0 [ 2794.289411][ T8269] ? start_creating+0x183/0x270 [ 2794.294250][ T8269] __debugfs_create_file+0xb5/0x460 [ 2794.299444][ T8269] ? debugfs_create_dir+0x302/0x3f0 [ 2794.304633][ T8269] bdi_register_va+0x274/0x5e0 [ 2794.309384][ T8269] bdi_register+0x80/0xa0 [ 2794.313704][ T8269] ? __device_add_disk+0x50a/0x1220 [ 2794.318891][ T8269] bdi_register_owner+0x56/0xf0 [ 2794.323726][ T8269] __device_add_disk+0x583/0x1220 [ 2794.328735][ T8269] loop_add+0x554/0x710 [ 2794.332875][ T8269] loop_control_ioctl+0x468/0x680 [ 2794.337891][ T8269] ? xor_init+0x60/0x60 [ 2794.342036][ T8269] do_vfs_ioctl+0x6fb/0x15b0 [ 2794.346614][ T8269] __x64_sys_ioctl+0xd4/0x110 [ 2794.351277][ T8269] do_syscall_64+0xcb/0x1e0 [ 2794.352244][ T376] tipc: 32-bit node address hash set to 0 [ 2794.355763][ T8269] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2794.355772][ T8269] RIP: 0033:0x7f02d6ed5059 [ 2794.355780][ T8269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2794.355791][ T8269] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2794.361565][ T376] tipc: 32-bit node address hash set to 0 [ 2794.367340][ T8269] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2794.367345][ T8269] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2794.367349][ T8269] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2794.367354][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2794.367359][ T8269] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2794.367619][ T8269] debugfs: out of free dentries, can not create file 'stats' 05:11:17 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 75) 05:11:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 05:11:17 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) socket(0xb, 0x3, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @none, 0x9}, 0xa) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) socket(0xb, 0x3, 0x3) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @none, 0x9}, 0xa) (async) 05:11:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xa) r3 = socket(0x26, 0x6, 0x4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_io_uring_complete(0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=0x0, @ANYBLOB="010827bd7000fcdbdf25140000002400028008000200e0ffffff0800010009000000080002000300000008000200ffff00000800068004000500040003800c00058007000100696200005c0005802400028008000400800400000800020005000000080004000400000008000200390c0000240002800800020007000000080004000600000008000100050000000800020004000000080001007564700008000100756470001c0003800800010013000000080002000600000008000100000000800c0003800800020002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4021}, 0xc014) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_io_uring_setup(0x134e, &(0x7f00000000c0)={0x0, 0x9f23, 0x20, 0x2, 0xe1, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x3b9e) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001340), 0x208300, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000012c0), 0x4) r7 = syz_open_dev$loop(&(0x7f0000001300), 0x10000, 0x400400) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x6) recvfrom$unix(r6, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000001240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/28, 0x1c, 0x0, &(0x7f0000001380)=""/4083, 0xff3}, &(0x7f0000000240)=0x40) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xa) (async) socket(0x26, 0x6, 0x4) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) syz_io_uring_complete(0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=0x0, @ANYBLOB="010827bd7000fcdbdf25140000002400028008000200e0ffffff0800010009000000080002000300000008000200ffff00000800068004000500040003800c00058007000100696200005c0005802400028008000400800400000800020005000000080004000400000008000200390c0000240002800800020007000000080004000600000008000100050000000800020004000000080001007564700008000100756470001c0003800800010013000000080002000600000008000100000000800c0003800800020002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4021}, 0xc014) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) (async) syz_io_uring_setup(0x134e, &(0x7f00000000c0)={0x0, 0x9f23, 0x20, 0x2, 0xe1, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x3b9e) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001340), 0x208300, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000012c0), 0x4) (async) syz_open_dev$loop(&(0x7f0000001300), 0x10000, 0x400400) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r8, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x6) (async) recvfrom$unix(r6, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000001240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/28, 0x1c, 0x0, &(0x7f0000001380)=""/4083, 0xff3}, &(0x7f0000000240)=0x40) (async) [ 2794.377487][ T376] tipc: 32-bit node address hash set to 0 05:11:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)) (async) recvmsg$unix(r2, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) (async) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async) 05:11:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x6e, 0x0}, 0x1) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 05:11:17 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80300, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:17 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) [ 2794.492218][ T376] tipc: 32-bit node address hash set to 0 [ 2794.497973][ T376] tipc: 32-bit node address hash set to 0 [ 2794.512386][T10665] tipc: 32-bit node address hash set to 0 [ 2794.529457][ T8289] FAULT_INJECTION: forcing a failure. [ 2794.529457][ T8289] name failslab, interval 1, probability 0, space 0, times 0 [ 2794.547574][ T8289] CPU: 1 PID: 8289 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2794.559111][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2794.569150][ T8289] Call Trace: [ 2794.572437][ T8289] dump_stack+0x18e/0x1de [ 2794.576765][ T8289] should_fail+0x5d8/0x740 [ 2794.581176][ T8289] ? security_inode_alloc+0x32/0x1d0 [ 2794.586447][ T8289] should_failslab+0x5/0x20 [ 2794.590939][ T8289] kmem_cache_alloc+0x36/0x290 [ 2794.595687][ T8289] security_inode_alloc+0x32/0x1d0 [ 2794.600790][ T8289] inode_init_always+0x387/0x810 [ 2794.605714][ T8289] new_inode_pseudo+0x90/0x220 [ 2794.610465][ T8289] new_inode+0x25/0x1d0 [ 2794.614612][ T8289] ? start_creating+0x183/0x270 [ 2794.619449][ T8289] __debugfs_create_file+0xb5/0x460 [ 2794.624628][ T8289] ? debugfs_create_dir+0x302/0x3f0 [ 2794.629811][ T8289] bdi_register_va+0x274/0x5e0 [ 2794.634567][ T8289] bdi_register+0x80/0xa0 [ 2794.638885][ T8289] ? __device_add_disk+0x50a/0x1220 [ 2794.644067][ T8289] bdi_register_owner+0x56/0xf0 [ 2794.648901][ T8289] __device_add_disk+0x583/0x1220 [ 2794.653912][ T8289] loop_add+0x554/0x710 [ 2794.658052][ T8289] loop_control_ioctl+0x468/0x680 [ 2794.663061][ T8289] ? xor_init+0x60/0x60 [ 2794.667199][ T8289] do_vfs_ioctl+0x6fb/0x15b0 [ 2794.671859][ T8289] __x64_sys_ioctl+0xd4/0x110 [ 2794.676519][ T8289] do_syscall_64+0xcb/0x1e0 [ 2794.681008][ T8289] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2794.686879][ T8289] RIP: 0033:0x7f02d6ed5059 [ 2794.691279][ T8289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2794.710867][ T8289] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2794.719273][ T8289] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2794.727226][ T8289] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2794.735183][ T8289] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 05:11:17 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async, rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async, rerun: 64) socket(0xb, 0x3, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @none, 0x9}, 0xa) 05:11:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xa) r3 = socket(0x26, 0x6, 0x4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_io_uring_complete(0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=0x0, @ANYBLOB="010827bd7000fcdbdf25140000002400028008000200e0ffffff0800010009000000080002000300000008000200ffff00000800068004000500040003800c00058007000100696200005c0005802400028008000400800400000800020005000000080004000400000008000200390c0000240002800800020007000000080004000600000008000100050000000800020004000000080001007564700008000100756470001c0003800800010013000000080002000600000008000100000000800c0003800800020002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4021}, 0xc014) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_io_uring_setup(0x134e, &(0x7f00000000c0)={0x0, 0x9f23, 0x20, 0x2, 0xe1, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x3b9e) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001340), 0x208300, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000012c0), 0x4) r7 = syz_open_dev$loop(&(0x7f0000001300), 0x10000, 0x400400) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x6) recvfrom$unix(r6, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000001240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/28, 0x1c, 0x0, &(0x7f0000001380)=""/4083, 0xff3}, &(0x7f0000000240)=0x40) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x40086602, 0xa) (async) socket(0x26, 0x6, 0x4) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) syz_io_uring_complete(0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=0x0, @ANYBLOB="010827bd7000fcdbdf25140000002400028008000200e0ffffff0800010009000000080002000300000008000200ffff00000800068004000500040003800c00058007000100696200005c0005802400028008000400800400000800020005000000080004000400000008000200390c0000240002800800020007000000080004000600000008000100050000000800020004000000080001007564700008000100756470001c0003800800010013000000080002000600000008000100000000800c0003800800020002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4021}, 0xc014) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) (async) syz_io_uring_setup(0x134e, &(0x7f00000000c0)={0x0, 0x9f23, 0x20, 0x2, 0xe1, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x3b9e) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001340), 0x208300, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000012c0), 0x4) (async) syz_open_dev$loop(&(0x7f0000001300), 0x10000, 0x400400) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r8, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x6) (async) recvfrom$unix(r6, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000001240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/28, 0x1c, 0x0, &(0x7f0000001380)=""/4083, 0xff3}, &(0x7f0000000240)=0x40) (async) 05:11:18 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1d, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = socket(0x22, 0x1, 0x8) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r0, 0x2, 0x70bd2c, 0x0, {0x4}}, 0x9}, 0x1, 0x0, 0x0, 0x2000005a}, 0x0) 05:11:18 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x34d6, &(0x7f0000000040)={0x0, 0xa859, 0x10, 0x100, 0x306, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r1, 0x0) r2 = epoll_create1(0x80000) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x40086602, 0xb) epoll_create1(0x0) 05:11:18 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 76) 05:11:18 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1d, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = socket(0x22, 0x1, 0x8) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r0, 0x2, 0x70bd2c, 0x0, {0x4}}, 0x9}, 0x1, 0x0, 0x0, 0x2000005a}, 0x0) [ 2794.743134][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2794.751095][ T8289] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2794.759509][ T376] tipc: 32-bit node address hash set to 0 [ 2794.767965][ T376] tipc: 32-bit node address hash set to 0 [ 2794.777673][ T8289] debugfs: out of free dentries, can not create file 'stats' 05:11:18 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x34d6, &(0x7f0000000040)={0x0, 0xa859, 0x10, 0x100, 0x306, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r1, 0x0) (async) r2 = epoll_create1(0x80000) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x40086602, 0xb) (async) epoll_create1(0x0) 05:11:18 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) 05:11:18 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80300, 0x0) (rerun: 64) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) getegid() syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x9, 0xf9, 0x18000000, 0x3c, @private1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x40, 0x1, 0x3e7, 0x9}}) [ 2794.846072][ T8371] FAULT_INJECTION: forcing a failure. [ 2794.846072][ T8371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2794.874911][ T8371] CPU: 1 PID: 8371 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2794.886464][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2794.896504][ T8371] Call Trace: [ 2794.899789][ T8371] dump_stack+0x18e/0x1de [ 2794.904113][ T8371] should_fail+0x5d8/0x740 [ 2794.908524][ T8371] __alloc_pages_nodemask+0x12e/0x740 [ 2794.913888][ T8371] __get_free_pages+0xa/0x30 [ 2794.918463][ T8371] inode_doinit_with_dentry+0x8d4/0x1170 [ 2794.924087][ T8371] security_d_instantiate+0xa5/0x100 [ 2794.929362][ T8371] d_instantiate+0x51/0x90 [ 2794.933779][ T8371] __debugfs_create_file+0x256/0x460 [ 2794.939061][ T8371] bdi_register_va+0x274/0x5e0 [ 2794.943816][ T8371] bdi_register+0x80/0xa0 [ 2794.948246][ T8371] ? __device_add_disk+0x50a/0x1220 [ 2794.953444][ T8371] bdi_register_owner+0x56/0xf0 [ 2794.958286][ T8371] __device_add_disk+0x583/0x1220 [ 2794.963314][ T8371] loop_add+0x554/0x710 [ 2794.967495][ T8371] loop_control_ioctl+0x468/0x680 [ 2794.972511][ T8371] ? xor_init+0x60/0x60 [ 2794.976663][ T8371] do_vfs_ioctl+0x6fb/0x15b0 [ 2794.981248][ T8371] __x64_sys_ioctl+0xd4/0x110 [ 2794.985915][ T8371] do_syscall_64+0xcb/0x1e0 [ 2794.990415][ T8371] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2794.996298][ T8371] RIP: 0033:0x7f02d6ed5059 [ 2795.000704][ T8371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2795.020303][ T8371] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2795.028703][ T8371] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2795.036658][ T8371] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 05:11:18 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1d, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = socket(0x22, 0x1, 0x8) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r0, 0x2, 0x70bd2c, 0x0, {0x4}}, 0x9}, 0x1, 0x0, 0x0, 0x2000005a}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) socket(0x1d, 0x1, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) socket(0x22, 0x1, 0x8) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r0, 0x2, 0x70bd2c, 0x0, {0x4}}, 0x9}, 0x1, 0x0, 0x0, 0x2000005a}, 0x0) (async) 05:11:18 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) 05:11:18 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) 05:11:18 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) 05:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x8000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r3, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:18 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 77) 05:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x8000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r3, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2795.044618][ T8371] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.052575][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2795.060533][ T8371] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2795.069223][T26969] tipc: 32-bit node address hash set to 0 [ 2795.078089][T26969] tipc: 32-bit node address hash set to 0 [ 2795.088731][T26969] tipc: 32-bit node address hash set to 0 05:11:18 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) 05:11:18 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x34d6, &(0x7f0000000040)={0x0, 0xa859, 0x10, 0x100, 0x306, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r1, 0x0) (async) r2 = epoll_create1(0x80000) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x40086602, 0xb) (async) epoll_create1(0x0) 05:11:18 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80300, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) [ 2795.143885][ T8405] FAULT_INJECTION: forcing a failure. [ 2795.143885][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 2795.171960][ T8405] CPU: 1 PID: 8405 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2795.183510][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2795.193554][ T8405] Call Trace: [ 2795.196838][ T8405] dump_stack+0x18e/0x1de [ 2795.201162][ T8405] should_fail+0x5d8/0x740 [ 2795.205564][ T8405] ? kobj_map+0x70/0x650 [ 2795.209796][ T8405] should_failslab+0x5/0x20 [ 2795.214283][ T8405] __kmalloc+0x5f/0x2f0 [ 2795.218424][ T8405] kobj_map+0x70/0x650 [ 2795.222482][ T8405] ? exact_match+0x10/0x10 [ 2795.226881][ T8405] ? refcount_inc_checked+0x1a/0x50 [ 2795.232063][ T8405] ? disk_check_events+0x580/0x580 [ 2795.237156][ T8405] __device_add_disk+0x5ff/0x1220 [ 2795.242170][ T8405] loop_add+0x554/0x710 [ 2795.246318][ T8405] loop_control_ioctl+0x468/0x680 [ 2795.251329][ T8405] ? xor_init+0x60/0x60 [ 2795.255472][ T8405] do_vfs_ioctl+0x6fb/0x15b0 [ 2795.260074][ T8405] __x64_sys_ioctl+0xd4/0x110 [ 2795.264737][ T8405] do_syscall_64+0xcb/0x1e0 [ 2795.269228][ T8405] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2795.275101][ T8405] RIP: 0033:0x7f02d6ed5059 [ 2795.279510][ T8405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2795.299097][ T8405] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2795.307490][ T8405] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2795.315447][ T8405] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2795.323401][ T8405] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.331358][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:11:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) getegid() syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x9, 0xf9, 0x18000000, 0x3c, @private1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x40, 0x1, 0x3e7, 0x9}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getegid() (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x9, 0xf9, 0x18000000, 0x3c, @private1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x40, 0x1, 0x3e7, 0x9}}) (async) 05:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x8000) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r3, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:11:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) getegid() syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x9, 0xf9, 0x18000000, 0x3c, @private1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x40, 0x1, 0x3e7, 0x9}}) 05:11:18 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (fail_nth: 78) [ 2795.339316][ T8405] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2795.348030][ T376] tipc: 32-bit node address hash set to 0 [ 2795.354111][ T376] tipc: 32-bit node address hash set to 0 05:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x20c, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff8043}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x97b8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x86c4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x41746961}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x348}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc189}]}]}, 0x20c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x2c4, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd, 0x3, "33280edb9bc1a5fccd"}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "31197220760816b8f98eed52ca523c6937a1915592c6b7f5aab284923a5e27f6f54e73334e8ee555ecfb77299d71c1f5f0ee83a871ee23b79754cace192fba567ca6f12cde2f8539efa6a378ef376146ca84eace858286da97f617cce991a97d2378809c23753a8e72eafae3dc67178508d9aa4b753a42e7ee0592b6fc9452d3e9de95dc63aec7"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb1a1}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "b5b7c14b0767a6509665d35e8ac4bd2906d4c03d64b239"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "13c37f96c7ff14c75db42fb0c7fdcf6b687f93dcd0f8ed55"}}, @TIPC_NLA_NODE_ID={0x9, 0x3, '~vj6G'}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @local, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @remote, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x400, @local, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf6}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x2c4}}, 0x10) 05:11:18 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) 05:11:18 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x39) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) 05:11:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @mss={0x2, 0x6}, @window={0x3, 0x1ff, 0x1}, @window={0x3, 0x80, 0x2}, @timestamp, @timestamp, @window={0x3, 0x6, 0x56}, @mss={0x2, 0x7}], 0x8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 05:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x20c, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff8043}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x97b8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x86c4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x41746961}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x348}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc189}]}]}, 0x20c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x2c4, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd, 0x3, "33280edb9bc1a5fccd"}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "31197220760816b8f98eed52ca523c6937a1915592c6b7f5aab284923a5e27f6f54e73334e8ee555ecfb77299d71c1f5f0ee83a871ee23b79754cace192fba567ca6f12cde2f8539efa6a378ef376146ca84eace858286da97f617cce991a97d2378809c23753a8e72eafae3dc67178508d9aa4b753a42e7ee0592b6fc9452d3e9de95dc63aec7"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb1a1}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "b5b7c14b0767a6509665d35e8ac4bd2906d4c03d64b239"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "13c37f96c7ff14c75db42fb0c7fdcf6b687f93dcd0f8ed55"}}, @TIPC_NLA_NODE_ID={0x9, 0x3, '~vj6G'}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @local, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @remote, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x400, @local, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf6}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x2c4}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x20c, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff8043}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x97b8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x86c4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x41746961}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x348}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc189}]}]}, 0x20c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x2c4, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd, 0x3, "33280edb9bc1a5fccd"}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "31197220760816b8f98eed52ca523c6937a1915592c6b7f5aab284923a5e27f6f54e73334e8ee555ecfb77299d71c1f5f0ee83a871ee23b79754cace192fba567ca6f12cde2f8539efa6a378ef376146ca84eace858286da97f617cce991a97d2378809c23753a8e72eafae3dc67178508d9aa4b753a42e7ee0592b6fc9452d3e9de95dc63aec7"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb1a1}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "b5b7c14b0767a6509665d35e8ac4bd2906d4c03d64b239"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "13c37f96c7ff14c75db42fb0c7fdcf6b687f93dcd0f8ed55"}}, @TIPC_NLA_NODE_ID={0x9, 0x3, '~vj6G'}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @local, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @remote, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x400, @local, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf6}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x2c4}}, 0x10) (async) [ 2795.432086][ T8439] FAULT_INJECTION: forcing a failure. [ 2795.432086][ T8439] name failslab, interval 1, probability 0, space 0, times 0 [ 2795.459284][ T8439] CPU: 1 PID: 8439 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2795.470838][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2795.480876][ T8439] Call Trace: [ 2795.484158][ T8439] dump_stack+0x18e/0x1de [ 2795.488506][ T8439] should_fail+0x5d8/0x740 [ 2795.492910][ T8439] ? kobject_set_name_vargs+0x5d/0x110 [ 2795.498357][ T8439] should_failslab+0x5/0x20 [ 2795.502855][ T8439] __kmalloc_track_caller+0x5d/0x2e0 [ 2795.508131][ T8439] kstrdup_const+0x51/0x90 [ 2795.512539][ T8439] kobject_set_name_vargs+0x5d/0x110 [ 2795.517898][ T8439] dev_set_name+0x80/0xa0 [ 2795.522210][ T8439] ? kobj_map+0x61e/0x650 [ 2795.526530][ T8439] __device_add_disk+0x678/0x1220 [ 2795.531550][ T8439] loop_add+0x554/0x710 [ 2795.535692][ T8439] loop_control_ioctl+0x468/0x680 [ 2795.540700][ T8439] ? xor_init+0x60/0x60 [ 2795.544844][ T8439] do_vfs_ioctl+0x6fb/0x15b0 [ 2795.549421][ T8439] __x64_sys_ioctl+0xd4/0x110 [ 2795.554083][ T8439] do_syscall_64+0xcb/0x1e0 [ 2795.558577][ T8439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2795.564454][ T8439] RIP: 0033:0x7f02d6ed5059 [ 2795.568852][ T8439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2795.588436][ T8439] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2795.596831][ T8439] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2795.604790][ T8439] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2795.612747][ T8439] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.620703][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:11:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x5380, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x40) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000040)=""/198, 0xc6, 0x101, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 05:11:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x5380, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x40) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000040)=""/198, 0xc6, 0x101, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) [ 2795.628656][ T8439] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2795.636948][ T376] tipc: 32-bit node address hash set to 0 [ 2795.643006][ T376] tipc: 32-bit node address hash set to 0 [ 2795.650341][ T376] tipc: 32-bit node address hash set to 0 [ 2795.663334][ T8439] kobject_add_internal failed for queue (error: -2 parent: (null)) [ 2795.671318][ T8439] ------------[ cut here ]------------ [ 2795.676771][ T8439] WARNING: CPU: 1 PID: 8439 at fs/sysfs/file.c:328 sysfs_create_files+0x1ef/0x380 [ 2795.685932][ T8439] Modules linked in: [ 2795.689815][ T8439] CPU: 1 PID: 8439 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2795.701330][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2795.711380][ T8439] RIP: 0010:sysfs_create_files+0x1ef/0x380 [ 2795.717175][ T8439] Code: 85 ed 0f 84 a4 00 00 00 e8 9e 8e ae ff 89 eb 48 8b 6c 24 10 4c 8b 7c 24 28 e9 ad fe ff ff e8 88 8e ae ff eb 05 e8 81 8e ae ff <0f> 0b 41 bc ea ff ff ff eb 8d 3c 03 0f 8f a1 fe ff ff 48 8d 7c 24 [ 2795.736761][ T8439] RSP: 0018:ffff8881cb8cfc68 EFLAGS: 00010246 [ 2795.742813][ T8439] RAX: ffffffff81b217df RBX: 0000000000000000 RCX: 0000000000040000 [ 2795.750774][ T8439] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2795.758729][ T8439] RBP: ffff8881e201e0a0 R08: ffffffff821b10ec R09: ffffed1039719f8b [ 2795.766684][ T8439] R10: ffffed1039719f8b R11: 0000000000000000 R12: dffffc0000000000 [ 2795.774649][ T8439] R13: ffffffff84e29a80 R14: dffffc0000000000 R15: ffff8881e201e070 [ 2795.782607][ T8439] FS: 00007f02d604b700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2795.791525][ T8439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2795.798092][ T8439] CR2: 00007f283b4f7dc0 CR3: 00000001ef362000 CR4: 00000000003406e0 [ 2795.806049][ T8439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2795.814004][ T8439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2795.821956][ T8439] Call Trace: [ 2795.825239][ T8439] __device_add_disk+0xced/0x1220 [ 2795.830254][ T8439] loop_add+0x554/0x710 [ 2795.834395][ T8439] loop_control_ioctl+0x468/0x680 [ 2795.839411][ T8439] ? xor_init+0x60/0x60 [ 2795.843554][ T8439] do_vfs_ioctl+0x6fb/0x15b0 [ 2795.848132][ T8439] __x64_sys_ioctl+0xd4/0x110 [ 2795.852797][ T8439] do_syscall_64+0xcb/0x1e0 [ 2795.857292][ T8439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2795.863168][ T8439] RIP: 0033:0x7f02d6ed5059 [ 2795.867570][ T8439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2795.887158][ T8439] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2795.895553][ T8439] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2795.903595][ T8439] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2795.911554][ T8439] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.919511][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:11:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x5380, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x40) (async) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000040)=""/198, 0xc6, 0x101, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 05:11:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0xb1d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) (rerun: 32) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x20c, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff8043}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x97b8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x86c4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x41746961}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x348}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc189}]}]}, 0x20c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x2c4, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd, 0x3, "33280edb9bc1a5fccd"}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "31197220760816b8f98eed52ca523c6937a1915592c6b7f5aab284923a5e27f6f54e73334e8ee555ecfb77299d71c1f5f0ee83a871ee23b79754cace192fba567ca6f12cde2f8539efa6a378ef376146ca84eace858286da97f617cce991a97d2378809c23753a8e72eafae3dc67178508d9aa4b753a42e7ee0592b6fc9452d3e9de95dc63aec7"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb1a1}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "b5b7c14b0767a6509665d35e8ac4bd2906d4c03d64b239"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "13c37f96c7ff14c75db42fb0c7fdcf6b687f93dcd0f8ed55"}}, @TIPC_NLA_NODE_ID={0x9, 0x3, '~vj6G'}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @local, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @remote, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x400, @local, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf6}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x2c4}}, 0x10) [ 2795.927467][ T8439] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2795.935425][ T8439] ---[ end trace a32e41e40fb042e0 ]--- [ 2795.941304][ T376] tipc: 32-bit node address hash set to 0 [ 2795.947094][ T376] tipc: 32-bit node address hash set to 0 [ 2795.973277][ T8439] ------------[ cut here ]------------ [ 2795.978839][ T8439] kernfs: can not remove 'events', no directory [ 2795.986021][ T8439] WARNING: CPU: 1 PID: 8439 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 2795.995634][ T8439] Modules linked in: [ 2795.999525][ T8439] CPU: 1 PID: 8439 Comm: syz-executor.3 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2796.011039][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2796.021092][ T8439] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2796.027228][ T8439] Code: 48 89 c3 e8 41 ea ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 30 ea ae ff 48 c7 c7 00 c7 cb 84 4c 89 fe 31 c0 e8 4f 8e 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 11 ea ae ff bb fe ff ff ff 48 c7 c7 [ 2796.046847][ T8439] RSP: 0018:ffff8881cb8cfc48 EFLAGS: 00010246 [ 2796.052904][ T8439] RAX: b646b84d52f99700 RBX: 0000000000000000 RCX: 0000000000040000 [ 2796.061216][ T8439] RDX: ffffc90002154000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2796.069180][ T8439] RBP: ffffffff84e29a80 R08: ffffffff814b15ec R09: ffffed103edeaa08 [ 2796.077138][ T8439] R10: ffffed103edeaa08 R11: 0000000000000000 R12: 00000000ffffffea [ 2796.085183][ T8439] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff84e29b40 [ 2796.093138][ T8439] FS: 00007f02d604b700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2796.102058][ T8439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2796.108629][ T8439] CR2: 00007f3c6438d718 CR3: 00000001ef362000 CR4: 00000000003406e0 [ 2796.116586][ T8439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2796.124544][ T8439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2796.132496][ T8439] Call Trace: [ 2796.135769][ T8439] sysfs_create_files+0x321/0x380 [ 2796.140783][ T8439] __device_add_disk+0xced/0x1220 [ 2796.145794][ T8439] loop_add+0x554/0x710 [ 2796.149933][ T8439] loop_control_ioctl+0x468/0x680 [ 2796.154941][ T8439] ? xor_init+0x60/0x60 [ 2796.159080][ T8439] do_vfs_ioctl+0x6fb/0x15b0 [ 2796.163657][ T8439] __x64_sys_ioctl+0xd4/0x110 [ 2796.168317][ T8439] do_syscall_64+0xcb/0x1e0 [ 2796.172807][ T8439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2796.178684][ T8439] RIP: 0033:0x7f02d6ed5059 [ 2796.183084][ T8439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2796.202673][ T8439] RSP: 002b:00007f02d604b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2796.211072][ T8439] RAX: ffffffffffffffda RBX: 00007f02d6fe7f60 RCX: 00007f02d6ed5059 [ 2796.219028][ T8439] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000004 [ 2796.226985][ T8439] RBP: 00007f02d604b1d0 R08: 0000000000000000 R09: 0000000000000000 05:11:19 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000040)={0xb}, 0xb) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7}, 0x7) write$P9_RLERROR(r1, &(0x7f00000000c0)={0xa, 0x7, 0x2, {0x1, '/'}}, 0xa) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x482004, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0xb) 05:11:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="2b0bf5e78b000ac930010400000044b087bb5beef9bfad19831a2beb493981772b31ce225e9e3cc8466f976a999874a34d3c8b0b4f4894cc9a481934bc5ff934c0eb90efd03b4f509b0efca2e7c008a811db529d006fcd087d7a820d941971acde59edddb2b0d435fed2151919570430bbcd6796dcd5a08b1689"], 0x14}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) [ 2796.234940][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2796.242891][ T8439] R13: 00007fffb943b23f R14: 00007f02d604b300 R15: 0000000000022000 [ 2796.250848][ T8439] ---[ end trace a32e41e40fb042e1 ]--- [ 2796.259785][ T376] tipc: 32-bit node address hash set to 0 [ 2796.266570][ T376] tipc: 32-bit node address hash set to 0 [ 2796.276531][T26969] tipc: 32-bit node address hash set to 0 [ 2796.282424][ T8439] loop11: failed to create sysfs files for events [ 2796.288862][ T8450] ------------[ cut here ]------------ [ 2796.294342][ T8450] kernfs: can not remove 'events', no directory [ 2796.305971][ T8450] WARNING: CPU: 1 PID: 8450 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 2796.315585][ T8450] Modules linked in: [ 2796.319480][ T8450] CPU: 1 PID: 8450 Comm: syz-executor.5 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2796.330993][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2796.341044][ T8450] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2796.347179][ T8450] Code: 48 89 c3 e8 41 ea ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 30 ea ae ff 48 c7 c7 00 c7 cb 84 4c 89 fe 31 c0 e8 4f 8e 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 11 ea ae ff bb fe ff ff ff 48 c7 c7 [ 2796.366765][ T8450] RSP: 0018:ffff8881ea94fcf8 EFLAGS: 00010246 [ 2796.372814][ T8450] RAX: 487b8f98bd99ee00 RBX: 0000000000000000 RCX: 0000000000040000 [ 2796.380768][ T8450] RDX: ffffc90000f4b000 RSI: 00000000000128dd RDI: 00000000000128de [ 2796.388722][ T8450] RBP: ffffffff85e46c20 R08: ffffffff814b15ec R09: ffffed103edeaa08 [ 2796.396675][ T8450] R10: ffffed103edeaa08 R11: 0000000000000000 R12: 0000000000000000 [ 2796.404629][ T8450] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84e29b40 [ 2796.412589][ T8450] FS: 00007f125bab8700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2796.421503][ T8450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2796.428160][ T8450] CR2: 00007f3c6536d090 CR3: 00000001ead5e000 CR4: 00000000003406e0 [ 2796.436117][ T8450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2796.444072][ T8450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2796.452027][ T8450] Call Trace: [ 2796.455305][ T8450] sysfs_remove_files+0x99/0xf0 [ 2796.460158][ T8450] del_gendisk+0x259/0xb70 [ 2796.464565][ T8450] ? radix_tree_delete_item+0x22a/0x320 [ 2796.470121][ T8450] loop_control_ioctl+0x563/0x680 [ 2796.475134][ T8450] ? xor_init+0x60/0x60 [ 2796.479272][ T8450] do_vfs_ioctl+0x6fb/0x15b0 [ 2796.483853][ T8450] __x64_sys_ioctl+0xd4/0x110 [ 2796.488513][ T8450] do_syscall_64+0xcb/0x1e0 [ 2796.493005][ T8450] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2796.498883][ T8450] RIP: 0033:0x7f125c942059 [ 2796.503283][ T8450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2796.522868][ T8450] RSP: 002b:00007f125bab8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:11:19 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) 05:11:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="2b0bf5e78b000ac930010400000044b087bb5beef9bfad19831a2beb493981772b31ce225e9e3cc8466f976a999874a34d3c8b0b4f4894cc9a481934bc5ff934c0eb90efd03b4f509b0efca2e7c008a811db529d006fcd087d7a820d941971acde59edddb2b0d435fed2151919570430bbcd6796dcd5a08b1689"], 0x14}}, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 05:11:19 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x39) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x39) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x40086602, 0xb) (async) 05:11:19 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x2f) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) openat$hwrng(0xffffffffffffff9c, 0x0, 0x802, 0x0) [ 2796.531260][ T8450] RAX: ffffffffffffffda RBX: 00007f125ca54f60 RCX: 00007f125c942059 [ 2796.539215][ T8450] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000004 [ 2796.547168][ T8450] RBP: 00007f125c99c08d R08: 0000000000000000 R09: 0000000000000000 [ 2796.555120][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2796.563506][ T8450] R13: 00007ffecb8c208f R14: 00007f125bab8300 R15: 0000000000022000 [ 2796.571460][ T8450] ---[ end trace a32e41e40fb042e2 ]--- [ 2796.577338][T26969] tipc: 32-bit node address hash set to 0 [ 2796.583149][T26969] tipc: 32-bit node address hash set to 0 [ 2796.594993][ T8450] ------------[ cut here ]------------ [ 2796.600478][ T8450] kernfs: can not remove 'events_async', no directory [ 2796.607692][ T8450] WARNING: CPU: 1 PID: 8450 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 2796.617303][ T8450] Modules linked in: [ 2796.621184][ T8450] CPU: 1 PID: 8450 Comm: syz-executor.5 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2796.632692][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2796.642747][ T8450] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2796.648889][ T8450] Code: 48 89 c3 e8 41 ea ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 30 ea ae ff 48 c7 c7 00 c7 cb 84 4c 89 fe 31 c0 e8 4f 8e 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 11 ea ae ff bb fe ff ff ff 48 c7 c7 [ 2796.668483][ T8450] RSP: 0018:ffff8881ea94fcf8 EFLAGS: 00010246 [ 2796.674533][ T8450] RAX: 487b8f98bd99ee00 RBX: 0000000000000000 RCX: 0000000000040000 [ 2796.682490][ T8450] RDX: ffffc90000f4b000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2796.690445][ T8450] RBP: ffffffff85e46c20 R08: ffffffff814b15ec R09: ffffed103edeaa08 [ 2796.698404][ T8450] R10: ffffed103edeaa08 R11: 0000000000000000 R12: 0000000000000000 [ 2796.706359][ T8450] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84e29c80 [ 2796.714313][ T8450] FS: 00007f125bab8700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2796.723225][ T8450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2796.729792][ T8450] CR2: 00007f02d6fe9090 CR3: 00000001ead5e000 CR4: 00000000003406e0 [ 2796.737750][ T8450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2796.745706][ T8450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2796.753655][ T8450] Call Trace: [ 2796.756935][ T8450] sysfs_remove_files+0x99/0xf0 [ 2796.761773][ T8450] del_gendisk+0x259/0xb70 [ 2796.766177][ T8450] ? radix_tree_delete_item+0x22a/0x320 [ 2796.771709][ T8450] loop_control_ioctl+0x563/0x680 [ 2796.776715][ T8450] ? xor_init+0x60/0x60 [ 2796.780857][ T8450] do_vfs_ioctl+0x6fb/0x15b0 [ 2796.785448][ T8450] __x64_sys_ioctl+0xd4/0x110 [ 2796.790114][ T8450] do_syscall_64+0xcb/0x1e0 [ 2796.794608][ T8450] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2796.800483][ T8450] RIP: 0033:0x7f125c942059 [ 2796.804882][ T8450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2796.824470][ T8450] RSP: 002b:00007f125bab8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2796.832953][ T8450] RAX: ffffffffffffffda RBX: 00007f125ca54f60 RCX: 00007f125c942059 [ 2796.840910][ T8450] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000004 [ 2796.848867][ T8450] RBP: 00007f125c99c08d R08: 0000000000000000 R09: 0000000000000000 [ 2796.856822][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2796.864777][ T8450] R13: 00007ffecb8c208f R14: 00007f125bab8300 R15: 0000000000022000 [ 2796.872732][ T8450] ---[ end trace a32e41e40fb042e3 ]--- [ 2796.879055][T26969] tipc: 32-bit node address hash set to 0 [ 2796.886388][T26969] tipc: 32-bit node address hash set to 0 [ 2796.892136][T26969] tipc: 32-bit node address hash set to 0 [ 2796.898230][ T8450] ------------[ cut here ]------------ [ 2796.903871][ T8450] kernfs: can not remove 'events_poll_msecs', no directory [ 2796.911149][ T8450] WARNING: CPU: 1 PID: 8450 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 2796.920751][ T8450] Modules linked in: [ 2796.924633][ T8450] CPU: 1 PID: 8450 Comm: syz-executor.5 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2796.936148][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2796.946193][ T8450] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2796.952332][ T8450] Code: 48 89 c3 e8 41 ea ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 30 ea ae ff 48 c7 c7 00 c7 cb 84 4c 89 fe 31 c0 e8 4f 8e 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 11 ea ae ff bb fe ff ff ff 48 c7 c7 [ 2796.971922][ T8450] RSP: 0018:ffff8881ea94fcf8 EFLAGS: 00010246 [ 2796.977986][ T8450] RAX: 487b8f98bd99ee00 RBX: 0000000000000000 RCX: 0000000000040000 [ 2796.985944][ T8450] RDX: ffffc90000f4b000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2796.993901][ T8450] RBP: ffffffff85e46c20 R08: ffffffff814b15ec R09: ffffed103ede52b2 [ 2797.001863][ T8450] R10: ffffed103ede52b2 R11: 0000000000000000 R12: 0000000000000000 [ 2797.009820][ T8450] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84e29cc0 [ 2797.017783][ T8450] FS: 00007f125bab8700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2797.026698][ T8450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2797.033267][ T8450] CR2: 00007f02d602a718 CR3: 00000001ead5e000 CR4: 00000000003406e0 [ 2797.041227][ T8450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2797.049185][ T8450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2797.057139][ T8450] Call Trace: [ 2797.060422][ T8450] sysfs_remove_files+0x99/0xf0 [ 2797.065262][ T8450] del_gendisk+0x259/0xb70 [ 2797.069673][ T8450] ? radix_tree_delete_item+0x22a/0x320 [ 2797.075206][ T8450] loop_control_ioctl+0x563/0x680 [ 2797.080212][ T8450] ? xor_init+0x60/0x60 [ 2797.084353][ T8450] do_vfs_ioctl+0x6fb/0x15b0 [ 2797.088934][ T8450] __x64_sys_ioctl+0xd4/0x110 [ 2797.093596][ T8450] do_syscall_64+0xcb/0x1e0 [ 2797.098086][ T8450] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2797.103965][ T8450] RIP: 0033:0x7f125c942059 [ 2797.108371][ T8450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2797.127961][ T8450] RSP: 002b:00007f125bab8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2797.136363][ T8450] RAX: ffffffffffffffda RBX: 00007f125ca54f60 RCX: 00007f125c942059 [ 2797.144318][ T8450] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000004 [ 2797.152276][ T8450] RBP: 00007f125c99c08d R08: 0000000000000000 R09: 0000000000000000 [ 2797.160233][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2797.168199][ T8450] R13: 00007ffecb8c208f R14: 00007f125bab8300 R15: 0000000000022000 [ 2797.176160][ T8450] ---[ end trace a32e41e40fb042e4 ]--- [ 2797.182328][T26969] tipc: 32-bit node address hash set to 0 [ 2797.188101][ T376] tipc: 32-bit node address hash set to 0 [ 2797.194072][ T8450] ------------[ cut here ]------------ [ 2797.199650][ T8450] kernfs: can not remove 'bdi', no directory [ 2797.205852][ T8450] WARNING: CPU: 1 PID: 8450 at fs/kernfs/dir.c:1504 kernfs_remove_by_name_ns+0x61/0x90 [ 2797.215454][ T8450] Modules linked in: [ 2797.219339][ T8450] CPU: 1 PID: 8450 Comm: syz-executor.5 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2797.230852][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2797.240903][ T8450] RIP: 0010:kernfs_remove_by_name_ns+0x61/0x90 [ 2797.247036][ T8450] Code: 48 89 c3 e8 41 ea ae ff 48 89 df e8 b9 f0 ff ff 31 db eb 29 e8 30 ea ae ff 48 c7 c7 00 c7 cb 84 4c 89 fe 31 c0 e8 4f 8e 88 ff <0f> 0b bb fe ff ff ff eb 16 e8 11 ea ae ff bb fe ff ff ff 48 c7 c7 [ 2797.266627][ T8450] RSP: 0018:ffff8881ea94fd38 EFLAGS: 00010246 [ 2797.272681][ T8450] RAX: 487b8f98bd99ee00 RBX: 0000000000000000 RCX: 0000000000040000 [ 2797.280635][ T8450] RDX: ffffc90000f4b000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2797.288596][ T8450] RBP: 0000000000000000 R08: ffffffff814b15ec R09: ffffed103edeaa08 [ 2797.296557][ T8450] R10: ffffed103edeaa08 R11: 0000000000000000 R12: 1ffff1103c403c00 [ 2797.304513][ T8450] R13: ffff8881e201e4e8 R14: 0000000000000000 R15: ffffffff84e29560 [ 2797.312475][ T8450] FS: 00007f125bab8700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2797.321388][ T8450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2797.327961][ T8450] CR2: 0000000000000000 CR3: 00000001ead5e000 CR4: 00000000003406e0 [ 2797.335928][ T8450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2797.343885][ T8450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2797.351840][ T8450] Call Trace: [ 2797.355117][ T8450] del_gendisk+0x543/0xb70 [ 2797.359526][ T8450] loop_control_ioctl+0x563/0x680 [ 2797.364534][ T8450] ? xor_init+0x60/0x60 [ 2797.368675][ T8450] do_vfs_ioctl+0x6fb/0x15b0 [ 2797.373253][ T8450] __x64_sys_ioctl+0xd4/0x110 [ 2797.377915][ T8450] do_syscall_64+0xcb/0x1e0 [ 2797.382406][ T8450] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2797.388279][ T8450] RIP: 0033:0x7f125c942059 [ 2797.392677][ T8450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2797.412263][ T8450] RSP: 002b:00007f125bab8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2797.420665][ T8450] RAX: ffffffffffffffda RBX: 00007f125ca54f60 RCX: 00007f125c942059 [ 2797.428620][ T8450] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000004 [ 2797.436575][ T8450] RBP: 00007f125c99c08d R08: 0000000000000000 R09: 0000000000000000 [ 2797.444526][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2797.452482][ T8450] R13: 00007ffecb8c208f R14: 00007f125bab8300 R15: 0000000000022000 [ 2797.460442][ T8450] ---[ end trace a32e41e40fb042e5 ]--- [ 2797.471579][T26969] tipc: 32-bit node address hash set to 0 [ 2797.478368][T26969] tipc: 32-bit node address hash set to 0 [ 2797.484312][ T376] tipc: 32-bit node address hash set to 0 [ 2797.490444][ T8450] kasan: CONFIG_KASAN_INLINE enabled [ 2797.495925][ T8450] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2797.504245][ T8450] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2797.511170][ T8450] CPU: 1 PID: 8450 Comm: syz-executor.5 Tainted: G W 5.4.161-syzkaller-00052-g57f9b292a6a3 #0 [ 2797.522682][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2797.532728][ T8450] RIP: 0010:strlen+0x27/0x60 [ 2797.537299][ T8450] Code: 0f 1f 00 41 57 41 56 53 49 89 fe 49 bf 00 00 00 00 00 fc ff df 48 89 f8 66 66 2e 0f 1f 84 00 00 00 00 00 48 89 c3 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 0b 48 8d 43 01 80 3b 00 75 e7 eb 13 89 d9 [ 2797.556888][ T8450] RSP: 0018:ffff8881ea94fcd0 EFLAGS: 00010246 [ 2797.562940][ T8450] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 2797.570896][ T8450] RDX: ffffc90000f4b000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2797.578848][ T8450] RBP: 0000000000000000 R08: ffffffff81b18f1b R09: ffffed103d529fa0 [ 2797.586803][ T8450] R10: ffffed103d529fa0 R11: 0000000000000000 R12: ffff8881f18e44b0 [ 2797.594760][ T8450] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 2797.602720][ T8450] FS: 00007f125bab8700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2797.611629][ T8450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2797.618196][ T8450] CR2: 0000000000000000 CR3: 00000001ead5e000 CR4: 00000000003406e0 [ 2797.626157][ T8450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2797.634114][ T8450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2797.642066][ T8450] Call Trace: [ 2797.645344][ T8450] kernfs_find_ns+0x83/0x430 [ 2797.649928][ T8450] ? mutex_lock+0x6c/0xc0 [ 2797.654247][ T8450] kernfs_remove_by_name_ns+0x32/0x90 [ 2797.659601][ T8450] del_gendisk+0x93d/0xb70 [ 2797.664004][ T8450] loop_control_ioctl+0x563/0x680 [ 2797.669012][ T8450] ? xor_init+0x60/0x60 [ 2797.673149][ T8450] do_vfs_ioctl+0x6fb/0x15b0 [ 2797.677731][ T8450] __x64_sys_ioctl+0xd4/0x110 [ 2797.682393][ T8450] do_syscall_64+0xcb/0x1e0 [ 2797.686883][ T8450] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2797.692756][ T8450] RIP: 0033:0x7f125c942059 [ 2797.697157][ T8450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2797.716742][ T8450] RSP: 002b:00007f125bab8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2797.725133][ T8450] RAX: ffffffffffffffda RBX: 00007f125ca54f60 RCX: 00007f125c942059 [ 2797.733085][ T8450] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000004 [ 2797.741041][ T8450] RBP: 00007f125c99c08d R08: 0000000000000000 R09: 0000000000000000 [ 2797.748992][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2797.756948][ T8450] R13: 00007ffecb8c208f R14: 00007f125bab8300 R15: 0000000000022000 [ 2797.765339][ T8450] Modules linked in: [ 2797.769837][T26969] tipc: 32-bit node address hash set to 0 [ 2797.777058][T26969] tipc: 32-bit node address hash set to 0 [ 2797.783035][ T8450] ---[ end trace a32e41e40fb042e6 ]--- [ 2797.788521][ T8450] RIP: 0010:strlen+0x27/0x60 [ 2797.793318][ T8450] Code: 0f 1f 00 41 57 41 56 53 49 89 fe 49 bf 00 00 00 00 00 fc ff df 48 89 f8 66 66 2e 0f 1f 84 00 00 00 00 00 48 89 c3 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 0b 48 8d 43 01 80 3b 00 75 e7 eb 13 89 d9 [ 2797.813439][ T8450] RSP: 0018:ffff8881ea94fcd0 EFLAGS: 00010246 [ 2797.819529][ T8450] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 2797.827700][ T8450] RDX: ffffc90000f4b000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2797.835849][ T8450] RBP: 0000000000000000 R08: ffffffff81b18f1b R09: ffffed103d529fa0 [ 2797.843964][ T8450] R10: ffffed103d529fa0 R11: 0000000000000000 R12: ffff8881f18e44b0 [ 2797.851950][ T8450] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 2797.860130][ T8450] FS: 00007f125bab8700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2797.869212][ T8450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2797.875928][ T8450] CR2: 0000000000000000 CR3: 00000001ead5e000 CR4: 00000000003406e0 [ 2797.884036][ T8450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2797.892022][ T8450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2797.900182][ T8450] Kernel panic - not syncing: Fatal exception [ 2797.906384][ T8450] Kernel Offset: disabled [ 2797.910687][ T8450] Rebooting in 86400 seconds..