d86b93c251a4703c1bc03a351dd59018dbdb4e3c4077830c00070001000000000000000c000800030000000600000008003c00000000ff0a000500ffff0000ffff000006000500000600000a000100626173696300000044000200080001000b00040038000280340002801c0002000500030002000000000008000000000607000000800000001400010040000700010000000400008003000040"], 0x4630}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) (async) close_range(r0, r0, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000001600), r0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001740)={'syztnl0\x00', &(0x7f0000001680)={'tunl0\x00', r1, 0x7, 0x1, 0x0, 0xce34, {{0x24, 0x4, 0x3, 0x32, 0x90, 0x68, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x34, 0xf0, 0x1, 0xe, [{@rand_addr=0x64010101, 0x9fac}, {@local, 0x792d}, {@remote, 0x200}, {@multicast2, 0x7fffffff}, {@rand_addr=0x64010100, 0x8001}, {@empty, 0x5}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x62, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x5}, {@multicast2, 0x400}, {@broadcast}, {@broadcast, 0x1d}, {@private=0xa010102, 0x4}, {@broadcast, 0x6}]}, @generic={0x94, 0xe, "bcd4107fb6e7f8179ef00b49"}, @end]}}}}}) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000018c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xe4, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcd}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x9b81d4ea2c2ad84e}, 0x4800) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000001580)={0x0, 0x4, 0x9, 0xb12, @vifc_lcl_ifindex=r1, @multicast2}, 0x10) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (async) 01:12:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x3}, 0x0) 01:12:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x100000}}, 0x20}}, 0x0) [ 3114.244057][ T4352] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3114.260550][ T4352] device bridge88 entered promiscuous mode [ 3114.267770][ T4355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:12:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x4}, 0x0) 01:12:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/280], 0x118}, 0x1, 0x0, 0x0, 0x40004}, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) pipe2(&(0x7f0000000280), 0x4880) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) [ 3114.294338][ T4355] device bridge424 entered promiscuous mode [ 3114.303006][ T4356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36095 sclass=netlink_route_socket pid=4356 comm=syz-executor.3 [ 3114.329234][ T4361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36095 sclass=netlink_route_socket pid=4361 comm=syz-executor.3 01:12:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x5000000}, 0x0) [ 3114.389735][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3114.414384][ T4359] device bridge79 entered promiscuous mode [ 3114.424009][ T4371] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:12:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x5}, 0x0) [ 3114.439129][ T4371] device bridge425 entered promiscuous mode [ 3114.490381][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3114.506551][ T4377] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3114.521723][ T4377] device bridge550 entered promiscuous mode [ 3114.530105][ T4380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:12:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x11000000}}, 0x20}}, 0x0) 01:12:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180100003100000829bd7000fbdbdf250000000020000100100006000b00010073616d706c6500000c000a0008000300020000003c000100100018000b000100736b626d6f64000010000b000b000100736b626d6f6400000c00080008000300000000030c001b000800030005000000400001000c00080008000300050000000c0008000800030005000000140006000f00010074756e6e656c5f6b6579000010001d000b000100736b626d6f6400002c0001000c00050008000300850000000c000200080003000400000028000100100015000b0001006d69727265640000140016000f00010074756e6e656c5f6b6585000014000100100004000c000100736b626564697400"/280], 0x118}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) (async) pipe2(&(0x7f0000000280), 0x4880) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) 01:12:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x6}, 0x0) [ 3114.556651][ T4380] device bridge426 entered promiscuous mode 01:12:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x8}, 0x0) [ 3114.603563][ T4387] device bridge88 entered promiscuous mode [ 3114.616243][ T4392] device bridge427 entered promiscuous mode [ 3114.698257][ T4396] FAULT_INJECTION: forcing a failure. [ 3114.698257][ T4396] name failslab, interval 1, probability 0, space 0, times 0 [ 3114.711056][ T4396] CPU: 0 PID: 4396 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3114.721267][ T4396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3114.731321][ T4396] Call Trace: [ 3114.734594][ T4396] dump_stack_lvl+0x1e2/0x24b [ 3114.739264][ T4396] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3114.744705][ T4396] ? find_next_bit+0xd6/0x120 [ 3114.749372][ T4396] ? cpumask_next+0x11/0x30 [ 3114.753862][ T4396] dump_stack+0x15/0x17 [ 3114.758004][ T4396] should_fail+0x3c0/0x510 [ 3114.762401][ T4396] ? sbitmap_queue_init_node+0x72c/0x1060 [ 3114.768110][ T4396] __should_failslab+0x9f/0xe0 [ 3114.772857][ T4396] should_failslab+0x9/0x20 [ 3114.777339][ T4396] kmem_cache_alloc_trace+0x3a/0x330 [ 3114.782603][ T4396] ? find_next_bit+0xd6/0x120 [ 3114.787258][ T4396] ? cpumask_next+0x11/0x30 [ 3114.791739][ T4396] sbitmap_queue_init_node+0x72c/0x1060 [ 3114.797260][ T4396] blk_mq_init_tags+0x165/0x410 [ 3114.802092][ T4396] blk_mq_alloc_rq_map+0x7e/0x190 [ 3114.807095][ T4396] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 3114.813052][ T4396] blk_mq_alloc_tag_set+0x662/0xd40 [ 3114.818241][ T4396] loop_add+0x241/0x760 [ 3114.822375][ T4396] loop_control_ioctl+0x564/0x740 [ 3114.827374][ T4396] ? loop_remove+0xb0/0xb0 [ 3114.831768][ T4396] ? __fget_files+0x310/0x370 [ 3114.836422][ T4396] ? security_file_ioctl+0xb1/0xd0 [ 3114.841513][ T4396] ? loop_remove+0xb0/0xb0 [ 3114.845912][ T4396] __se_sys_ioctl+0x115/0x190 [ 3114.850568][ T4396] __x64_sys_ioctl+0x7b/0x90 [ 3114.855136][ T4396] do_syscall_64+0x34/0x70 [ 3114.859530][ T4396] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3114.865484][ T4396] RIP: 0033:0x7f42b4f940c9 [ 3114.869878][ T4396] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3114.889455][ T4396] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3114.897846][ T4396] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3114.905797][ T4396] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3114.913742][ T4396] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3114.921775][ T4396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3114.929723][ T4396] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3114.939041][ T4396] blk-mq: reduced tag depth (128 -> 64) 01:12:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/280], 0x118}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) (async) pipe2(&(0x7f0000000280), 0x4880) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) 01:12:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x6000000}, 0x0) [ 3115.142386][ T4398] device bridge428 entered promiscuous mode [ 3115.172229][ T4407] device bridge550 entered promiscuous mode 01:12:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x8002a0}}, 0x20}}, 0x0) 01:12:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x9}, 0x0) 01:12:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x12000000}}, 0x20}}, 0x0) 01:12:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='attr/current\x00') r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000024001d0f00"/20, @ANYRES32=r7, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001540)={&(0x7f0000001440), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4c001) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x63e0000}, 0x0) [ 3115.350376][ T4411] device bridge429 entered promiscuous mode [ 3115.371117][ T4410] device bridge88 entered promiscuous mode [ 3115.384294][ T4417] device bridge79 entered promiscuous mode 01:12:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xa}, 0x0) [ 3115.395766][ T4416] device bridge550 entered promiscuous mode [ 3115.543125][ T4426] FAULT_INJECTION: forcing a failure. [ 3115.543125][ T4426] name failslab, interval 1, probability 0, space 0, times 0 [ 3115.555898][ T4426] CPU: 0 PID: 4426 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3115.566374][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3115.576409][ T4426] Call Trace: [ 3115.579682][ T4426] dump_stack_lvl+0x1e2/0x24b [ 3115.584351][ T4426] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3115.589793][ T4426] ? find_next_bit+0xd6/0x120 [ 3115.594448][ T4426] ? cpumask_next+0x11/0x30 [ 3115.598931][ T4426] dump_stack+0x15/0x17 [ 3115.603067][ T4426] should_fail+0x3c0/0x510 [ 3115.607464][ T4426] ? sbitmap_queue_init_node+0x72c/0x1060 [ 3115.613168][ T4426] __should_failslab+0x9f/0xe0 [ 3115.617914][ T4426] should_failslab+0x9/0x20 [ 3115.622396][ T4426] kmem_cache_alloc_trace+0x3a/0x330 [ 3115.627660][ T4426] sbitmap_queue_init_node+0x72c/0x1060 [ 3115.633187][ T4426] blk_mq_init_tags+0x1dc/0x410 [ 3115.638015][ T4426] blk_mq_alloc_rq_map+0x7e/0x190 [ 3115.643020][ T4426] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 3115.648975][ T4426] blk_mq_alloc_tag_set+0x662/0xd40 [ 3115.654151][ T4426] loop_add+0x241/0x760 [ 3115.658283][ T4426] loop_control_ioctl+0x564/0x740 [ 3115.663286][ T4426] ? loop_remove+0xb0/0xb0 [ 3115.667682][ T4426] ? __fget_files+0x310/0x370 [ 3115.672333][ T4426] ? security_file_ioctl+0xb1/0xd0 [ 3115.677416][ T4426] ? loop_remove+0xb0/0xb0 [ 3115.681818][ T4426] __se_sys_ioctl+0x115/0x190 [ 3115.686470][ T4426] __x64_sys_ioctl+0x7b/0x90 [ 3115.691034][ T4426] do_syscall_64+0x34/0x70 [ 3115.695426][ T4426] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3115.701292][ T4426] RIP: 0033:0x7f42b4f940c9 [ 3115.705686][ T4426] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3115.725268][ T4426] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3115.733655][ T4426] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3115.741605][ T4426] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3115.749553][ T4426] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3115.757499][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3115.765466][ T4426] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3115.774326][ T4426] blk-mq: reduced tag depth (128 -> 64) 01:12:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x10}, 0x0) [ 3115.959750][ T4419] device bridge430 entered promiscuous mode 01:12:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x13000000}}, 0x20}}, 0x0) 01:12:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='attr/current\x00') r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000024001d0f00"/20, @ANYRES32=r7, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001540)={&(0x7f0000001440), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4c001) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x7000000}, 0x0) 01:12:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x21}, 0x0) [ 3116.041562][ T4431] device bridge431 entered promiscuous mode [ 3116.083530][ T4434] device bridge88 entered promiscuous mode [ 3116.104517][ T4438] device bridge550 entered promiscuous mode [ 3116.119845][ T4444] device bridge432 entered promiscuous mode 01:12:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x800300}}, 0x20}}, 0x0) 01:12:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='attr/current\x00') r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000024001d0f00"/20, @ANYRES32=r7, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001540)={&(0x7f0000001440), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4c001) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='attr/current\x00') (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000024001d0f00"/20, @ANYRES32=r7, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001540)={&(0x7f0000001440), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4c001) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (async) 01:12:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xc5}, 0x0) 01:12:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x18000000}}, 0x20}}, 0x0) 01:12:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x300}, 0x0) [ 3116.363285][ T4452] device bridge79 entered promiscuous mode [ 3116.377124][ T4451] device bridge433 entered promiscuous mode [ 3116.392778][ T4454] device bridge88 entered promiscuous mode [ 3116.467133][ T4459] FAULT_INJECTION: forcing a failure. [ 3116.467133][ T4459] name failslab, interval 1, probability 0, space 0, times 0 [ 3116.480084][ T4459] CPU: 0 PID: 4459 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3116.490307][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3116.500350][ T4459] Call Trace: [ 3116.503631][ T4459] dump_stack_lvl+0x1e2/0x24b [ 3116.508287][ T4459] ? panic+0x7d7/0x7d7 [ 3116.512337][ T4459] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3116.517782][ T4459] ? __kasan_check_read+0x11/0x20 [ 3116.522794][ T4459] ? preempt_schedule_irq+0xef/0x140 [ 3116.528054][ T4459] ? preempt_schedule_notrace+0x140/0x140 [ 3116.533752][ T4459] dump_stack+0x15/0x17 [ 3116.537890][ T4459] should_fail+0x3c0/0x510 [ 3116.542284][ T4459] ? blk_mq_alloc_rq_map+0xa2/0x190 [ 3116.547456][ T4459] __should_failslab+0x9f/0xe0 [ 3116.552196][ T4459] should_failslab+0x9/0x20 [ 3116.556675][ T4459] __kmalloc+0x60/0x360 [ 3116.560806][ T4459] ? blk_mq_init_tags+0x1e7/0x410 [ 3116.565805][ T4459] blk_mq_alloc_rq_map+0xa2/0x190 [ 3116.570806][ T4459] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 3116.576769][ T4459] blk_mq_alloc_tag_set+0x662/0xd40 [ 3116.581950][ T4459] loop_add+0x241/0x760 [ 3116.586083][ T4459] loop_control_ioctl+0x564/0x740 [ 3116.591085][ T4459] ? loop_remove+0xb0/0xb0 [ 3116.595479][ T4459] ? __fget_files+0x310/0x370 [ 3116.600132][ T4459] ? security_file_ioctl+0xb1/0xd0 [ 3116.605217][ T4459] ? loop_remove+0xb0/0xb0 [ 3116.609608][ T4459] __se_sys_ioctl+0x115/0x190 [ 3116.614261][ T4459] __x64_sys_ioctl+0x7b/0x90 [ 3116.618826][ T4459] do_syscall_64+0x34/0x70 [ 3116.623219][ T4459] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3116.629085][ T4459] RIP: 0033:0x7f42b4f940c9 [ 3116.633480][ T4459] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3116.653060][ T4459] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3116.661470][ T4459] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3116.669417][ T4459] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3116.677369][ T4459] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3116.685316][ T4459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3116.693266][ T4459] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3116.702194][ T4459] blk-mq: reduced tag depth (128 -> 64) [ 3116.745609][ T4458] device bridge434 entered promiscuous mode 01:12:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x8000000}, 0x0) 01:12:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x3a0}, 0x0) [ 3116.870380][ T4463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4463 comm=syz-executor.3 01:12:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$FIONCLEX(r0, 0x5450) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r1, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r1, &(0x7f0000000000)=""/144, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r2, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r2, &(0x7f0000000000)=""/144, 0x90) r3 = getpgrp(0x0) fstat(r1, &(0x7f0000008980)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000008a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000008a80)=0x0) r8 = getgid() fstat(r0, &(0x7f0000008e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r11 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) fchownat(r11, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5038c48a6f0eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r12}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, &(0x7f0000002ac0)='./bus\x00', 0x0, 0x1e4, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)="08b68202d6e089fef13fb114fb449fdbbd37cc6003e21ba058ca1137dc136f913be7f5", 0x23}, {&(0x7f00000007c0)="b0fb5e4fa98822806d2bc29e8a2cc46f68e174311d8f5306b287", 0x1a}, {&(0x7f0000000800)="495be310aaa0153628f12e063c33c53fff13c19d61f493fabded688010f2a6fd325bd9c0639a33d0a050acf0c44593f319959b5b5a8cfde84dc71d4d27813e3a4ae8d52281504d2e976d185f26d7d94d48ef3d24627e894925fd257a3a0d9b8d1241d62ab7964b14045005b6d300c3e3fd34268387117fa0", 0x78}], 0x3, &(0x7f0000002c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000008000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000038000040000000ef0100000001000000", @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x140}, 0x4000001) getresgid(&(0x7f0000008f00)=0x0, &(0x7f0000008f40), &(0x7f0000008f80)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009500)=[{{&(0x7f0000001580)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000001680)="bf53fb1bc7fe0c0ade9296c15890e237b9fe0d28ff75b291cbff25ed55e4ae950641ffbd81be64a4adeaaa3d730704ac4972f0ea86d5bf51078991dfc556f2a02d4b2fd10afbc0bb03b55066ae5f794d582c938166e9dcc66c252ea6262d4a7e9019a0c4d2e5f9c22bf70b503f23d29ff4e442856b6e09878a77b294ac49260f6626866d34fc0dbab950cdb0c89dba66eb3b135c3fb26b10ad07152c1bafa9e363c137f5c92275c019e5fe298b2209ac4e2920e63ae961caa56f9bd89f628b8de61e40fb7bf77f992b8143f7f73d0b695675dbcfeb06374649c1d196cb4d2ad3f117e9e58e0e9002f5d2f3b4acb9680b", 0xf0}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000001600)="e8c586bb9a1442", 0x7}, {&(0x7f0000005bc0)="a8b4abe0680795f326c979c110522e492e0017396ba26ccc3b9a03f85d5874e08dc9bce618d39979c78c42fe7260323ded3e8d2c0e456d50c3e0ed1d612804d5a54af1fd44ab1953cdb31735ac7fe2343d0feb1e1c928f605b64c16d04e5b4b1f5b8ce5b44f97be6d6d43e32ee7a32aca3c8c86ea7620ef08fe1f3df395b37aae21e6e80631263aa76aafacb", 0x8c}, {&(0x7f0000002800)="19ba8a391ac094759f9ee10e5f38ceea39582e768a13ad992c6f9fa670257e9ed63d490054097f5ffb9ccae6f00265415578ffcea6b097e65861901c26d9911e5ef16fdbce0045d9ce8f89a2584b67e67f8e394fefa00242361c1ec6da97281f91be2cc134ce7a0faa", 0x69}], 0x5, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0x40, 0x20040004}}, {{&(0x7f0000003d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003dc0)="19ed06582d899083cd4f704438923925052cbf4f9381c46fb6f81fce6e0acf72b33d0c02dcfd6abff5442ec45e43e78f3baa49d2909fda46ca946e2dc28f5f240e1e40497f90196c37c708831b67a5503bd427cd028ee99713dce1d64d6955efb9bbf0192206142051b627ef86ca54ba7ffe4994873e55ba507eef6ae452584f4deba1ad202650523812527f204e9c1817e5e8", 0x93}, {&(0x7f0000003e80)="a65cb97cad7a2f84624f0206a0bb606eb02fc1a7f1f12bf9d1f3addf9cd5b7a2188ac668c984e59aa2dae3b705643fccccec30cf6bfdf2779ecaf824", 0x3c}, {&(0x7f0000003ec0)="2c1bef69aa3cc002af45744ef4665a3b13bd1424ad4ad1108204c3e56d865fed872feb6b647d8ae2171404b0ad3ee571dfde3430dbb5cf8720ccabef705ac0e0795bc294d4c33f3e9dcc40594d3c0129338f13e6c928b93ea9e0a1529e8a521dc4e7be7855c61d9602d6892ec4304f4707185e6fca6e354b328f399074fc346cba2cdee66e77bc3c50612e9ab4bd6f136cc345844cce8ee81245dc8b370862bb9654f1dc8da3a91800e8586c04395497969b37ac3a0fa249e5c6e967b4749af4bc6537d9e033cf", 0xc7}, {&(0x7f0000003fc0)="ba7a4b70e1c16c827d61fbd557807e975a862ca64903be8f770f46b7788251d6af86a4ab23f1ea5fb2ea4f47a8d5172a92cf332d0ec33fccf43e4f94bd7ec5b6af79324d028d1406f33212551ff3552476d71dcd715347ffdd9eecf5b12c54b18d71f670d2bb161769a683f2031f8b4f3d65aca345274e3a468da8a38d3db3f9b3849a18e0accbbe470b0cce15af248de7105f9924f07624a8decaa77b00ccbaf70f905fcc8e7ed963dcec8eb06177cb56734aeb77fc28750f0d52f325db23c6a82796cd29befd3df92d57b3af4f7576675a5a0451f1d7db793da31a3c99b884f819973ae45f25554a350a5201ec", 0xee}, {&(0x7f00000040c0)="03b6d6c9f471dc66cc1b67d231a809d507a7fef42b0d299dffe1634e37bfd5298fa119ad", 0x24}], 0x5, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004180)="7645c95018dee12e37363e42d70b55aecf39326147a4", 0x16}, {&(0x7f00000041c0)="ba2bfa2d66777d71e04d34139205f84acfb40b1adece9561ba6b3f3471bf70e08d85a356a4277d78d82de00376c08490dd20aafd485e6c0dcc2775d3a0ded16f07d89ec26632f56b11e312f33a6a15f8a69504dc7df2d88563df0cc8ba28f147ccd1c5f499dbdc76bad438ad8b4855289cb7fd058fa06595ef4d54bd6a44c75a7770c7767b7b04b2305d56da5da6ebc3217a45a8ceb6198157ada31ac0d2cef097f14d1bb5d0b4975b2e8580eac142665d59e57a59d696a3ea57a947e3ce9ffc27e804c289bfe933051ed00dd04b313a50b304c1e2994903dc6a", 0xda}, {&(0x7f00000042c0)}, {&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000005300)="92d248af03e41b1909f48b7e064aac97bd9f4306556aec8b2128854d3f589857f5e785c987b23a8ffe6621a7307b9e67afb7ac55160e907c67a8a480aa4d8e61418b253a65196b7308ba8d4a68f672d31c1bac2cec6126d0488311c035ea0058481fbd76b96a81a5f1554fdbb9af20a5673be57f978139972f4b485dbe61b4504b177a3d23c469c8140b", 0x8a}, {&(0x7f00000053c0)="e49104c2445f143933fed0985334d307ac44df4edc041c0a61ab5f0b6d0f6cdda4dbac1d7b165d206452162396a4d38f08bcf168faf5acc1fc900ed0e38795e001a624cc05547b8550a41fcb0df3397a9a632d212eaade1770d0fcac8a0fb076b6cfe7156f7ca68e2612b49c64c27a82a4c591f890ee923e40f4e29a628426b0ca368ec7f4ada9587ffbe77d7dff3f4135ad7b92558e31b5c5f7161cb48649fb9fa999edc121a8927bc173926344df56f3", 0xb1}], 0x6, 0x0, 0x0, 0x4008000}}, {{&(0x7f0000005500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005a40)=[{&(0x7f0000005580)="30383927706dadd60f4c76d96a5fa5286d568424773fb2b0de326bd2c4413a314b7aea18aa231a33a1898abae1279aeb5fd9aa5099b58cb5e169ace012dbba21f14eab9a9683120e30f6d03606a03eddf3837b7a16257d85b3bb03b8e176106bf4bda4eff5a4423fbb7b72823f9ca0d3fd4ef715fa5ed6f286b15dff95becd903dbc5209e2c2c06d505ac79a8cac906bc4ab8e48399d0d778100b27f184a0eb40516b01ff00581bfe089f5f012e6214e397368c6791ef3ef016f4f7b22cc28049554a5fa3d07581d02677f466187dfc4d009609b7dafb7f95889d6d12320cb274d84e134f47cf81ccc22f0d6aa", 0xed}, {&(0x7f0000005680)="097d3d277742afc67e63d1d1b777755776ad9b3b5990f4f2a0375f54f3328ef3f725c4b72eba1a4493af907c2ed54b304a95dcd263d0d709a6c6b83459767cc930b29b914926c181e35935dfd1f0b81753087d2afae644edf66c8fe6462c472e2aabdbf5028cf6e62a4ca2fd2368", 0x6e}, {&(0x7f0000005700)="77943bb00125d6ced2787a724bf7b65c4a0d80a9a4c5e7a7f661f119c0d53803489755d45c", 0x25}, {&(0x7f0000005740)="9e2c9a235a2795a5496af6bbc653c52f95b9dcd3c0ab610318e0624fe5e1ecc55d05cf8979f66ec073261dfd95e12ddd5b9f531177383772d0183c5681da", 0x3e}, {&(0x7f0000005780)="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", 0xfc}, {&(0x7f0000005880)="4fdedeefb24b35866ae5139b2c736197b5fbfbba0aaf9af42881befd9cacfed7b2a248a75c1ef1aa1e253537238f94e6cd054cfff749f7de85f685972c6b2c69272cb17c862075e67334b9d69d0b09b00e8a743038fc00ac97d36ec94442c9eb38db46908c37fe7fd110a2b2b05dc01fadbb61e3fe1b1ae62e3211a2c6204593e73f92898443416d99bb6ebd9702c5a5abbece7d7763ba966a0b9753c35593e063ee4e0fe712119d2a", 0xa9}, {&(0x7f0000005940)="7ef4f6b5c31d", 0x6}, {&(0x7f0000005980)="f8dbc9407dffdc526c58cac16effb33876aef5ccd8abde6545bbc0a6118234d1ccff3d8ed894174e4d07601fd1c56bbe0ca5c5bf46e68d70b300d05dfdee284320c3167aba44f7ada339681f4489323d51413539e40cbf86277d930b40f89fc4ea4e7e1dbfb96fae53b200c3501f55e2a055e45e1f3c855161dc93908e750953bd210a8a80751b190f54f2eb9c8ec5f666096b05a2f31a795a4888097a3d29b5be9245feaf8a3bb0", 0xa8}], 0x8, &(0x7f0000007dc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r10, r10, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x120, 0x4000000}}, {{&(0x7f0000007f00)=@abs={0x422bfa7a0e2f9107, 0x0, 0x4e22}, 0x6e, &(0x7f0000008240)=[{&(0x7f0000007f80)="96afc720c06a6d743e6ba90c4be3046ee9ed27ea6c2f93d3b2db", 0x1a}, {&(0x7f0000007fc0)="6fdac8fcbe7d64e1f0affbf3897169b31d6a29", 0x13}, {&(0x7f0000008000)="42b1dd94fe0bfafb8362928ad4b3a226dd9be37c2161487490750477b0622335bf7438d481be1231707e968285c4d469a7fbe8031c50ca5b94337aa9", 0x3c}, {&(0x7f0000008040)="c9d04904a9c1835f110e612418b59b8a4d14ad612ce222835b7cae855488fbfce38b9f6adbf7ac20f3ddf15b359d2f863adae5cfb31a728ae64adb163d4a6dc9a2e8637f39ced93ad517f7921ee8fabecc27c4bf954790423af0c5f278b3f6a0583863fe09f2dc79d71c097777afa64da5f7704f5799eb01b4a98d4129ae0dec4a67668f0958123b016fb7b3b58251fefcb2e21bb659f0314358c12110ba", 0x9e}, {&(0x7f0000008100)="2d6cba05afdc246bc1b78c537c09d60775d346ff9ff7bf982b878ef9c2020bb86141ce64bda3e4c8025882fcd8f6d0b097ad898e62a5bc120f7fd3dc097e3174578dbc9da4b54c2790d374d3a8fe2127f30e7c168eadebfd5fa1530774e85315d08e35b75814dc161ebdde66c4f537bb648e77f7028cd14c25684799", 0x7c}, {&(0x7f0000005ac0)="107ca690149dcc6000e1eaf07b29d5f421aafb3695e549d9ff861fb8f1c83940e37286c7c6acae922a3471c745d719ac93ca46956c54c97ff9daafa48add53d8c916af628afaf96561365afabc6f43ddd5632d575b53724a6defb90de147373e2c3f7a911fb8d8e97f9742322514546352cbd5a28599677da8a16c0aa68387164dfa3688ffff228f7e66bbb1cd38df4f897ec07c4bfb31a5a98877bcbe3fe0a28841efa87308e6ce24415a7159db853cfee224a6436e6ac5f5fa5c1338be05e5be074e5e17299da94f1711165dbefb16df0eb6cc8f36858f89f7fad74dd90eb1ed28465aba7a1341b063c38be689f2d2", 0xf0}, {&(0x7f00000081c0)="9d48cce2e8506fd636a5c38804cfcff951c68f77a8c1ac7783204bb5e1f9be21eec376d14d40b3995d0f9ad4e31907cad33f15ada80b5f9497d0a82e49e600a6f41ba78122485b", 0x47}], 0x7, 0x0, 0x0, 0x40}}, {{&(0x7f00000082c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000085c0)=[{&(0x7f0000008340)="fb51485c3736c5768e9afaf89663a1e3c92aad403767a010f57d51540444724a7d13c5f1246b8a713c0394134bf0bfb8de3a0452334dadd8bb3c18090ddf446407ed73b9455234c1fa30dc105e587273d8e3bd96260c9323a14fc86ab8cc11ce7b1b033266b7f7c03d31abe18646c93b2808154c31796c42227603fc8754aeb7f31b4cd32e06ab5f23b175e6", 0x8c}, {&(0x7f0000008400)="e661a0dd4d0ab395e3d0b854f77b4a7e1da23db59ca2e7df5b8ae31676f5265c8bf1bf746aabb899737ff82923991230f41206611ac4bc6f0ea36542cf115da7447577bf73b5d9e01e7455bbbbc8c10b6300706f9be783f12f47b143321593c117e43e8870230babdb6dd4929792ed67d5e4040f2027", 0x76}, {&(0x7f0000003d00)="e83fc3764eae857404af48e9b56f99c380807773cfb36d195a79d1fae62fd7f0678f695209add2b3742b20b13b8cd11a7b9416d015bba8736d618b024e", 0x3d}, {&(0x7f00000084c0)="8e142c4a4d65a16575c25fc43672beefc6aa0d007b2010ffc655ed939d9be0d92241478802e453a0c83d1d0febc7f9c525fbd590a9889e4c3700fee6fdc926f6d1851bbf0f96d38294fd997e48859367fdc866c20ed1c4ebb90a9ffe74fec211f95f653ff5dbebd124162609b273751513e2f7f38c14e43bf2b6b5ab251046116b8284fa6fbf7b778d430e892a4163ff224132a3d0f34797bf9f4cb39460d517b45a9e95bb4fe0c354c8aaaf7f5a0ab9f6f44bd55c27db5f60b02170c092e2e181305d976661e6b9", 0xc8}], 0x4, &(0x7f0000008ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r1, r1, r0, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x170, 0x40811}}, {{&(0x7f0000008c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008e40)=[{&(0x7f0000008cc0)="068026d8f88e40a17fc9c2fdbcdbafd005d3ad1739fd1591f311ebe4cbe98e6d89a447e7f393b3037873c039fe0f89ff342fc7852ca2108a28e0984813fb4e78b505155cced4a40990c5fe3f9f77be16", 0x50}, {&(0x7f0000008d40)="e08d2f6d6fb27ec4909df98e391ee18a5368e93f9db7c15031100c64e2", 0x1d}, {&(0x7f0000008d80)="4d300ccbe6b6c11dbebfd1bc288cd35ebcad0e655151f3", 0x17}, {&(0x7f0000008dc0)="7a4df59fa4255956946c3898c19a954c0b591afc03d096cfcab03f854c46ab929bc4e83844169ca6e6ce9c9bd49cf9d791187d87eb97d623d92d8a659eeb1f34f3130407f3a79f9299d7e5aa66086ebbe81a304882", 0x55}], 0x4, &(0x7f0000008fc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r14}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r15}}}], 0x40, 0x4008000}}, {{&(0x7f0000009000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009480)=[{&(0x7f0000009080)="9b896a61b296d300e2bcfbc9295d1f4e9d1552255351c298cb0185f8a796fb9b129d2d91cc901fd8862442ff250f802baa0a75def9acd822eb98802a", 0x3c}, {&(0x7f00000090c0)="e42a9e3ccd7f4cb22d2975dd9f92e584ab0b05a71d43d8e0bd9c902a0c602ce428e7ae69c7076947dd1486d1b6774774d797c4379b43ccc7e2d840b0df02c40e114af41e6b6df2", 0x47}, {&(0x7f0000009140)="55d457ac82fd40fa97d4dcd7906b1933dc062426034cb33fe3c96f04a6fe51519186b25d182cc1fc08717aa7ea00580894097a6f1ffae1d66d6d0f782b06fbbf5dfdf852e58fa758ed", 0x49}, {&(0x7f00000091c0)="69f8da", 0x3}, {&(0x7f0000009200)="85836c8c052423ae5bb7df6becd371fbe449c5277aa2626045a424327883397e5151545dbf33717e4aa17a9acfaad5ff285ed82d3534a221023809c0038768a9d26171b5b9fdd59510b6f1c4361aebcdcad5b9ae73f2a9a582d418f1cc574e88b05121a83c7e3f2f1dea6eddcfa9b888ab3ad1cc867008c3204ca88e2a44bea340a2c71bf9528a7a561da69df15c32cd7d5d2c2a9ad6d7b93c1a65f28b8b13bf67144f3ef5245b093e4a4896483a2c16c1d0df7095a1ad0aa7b1", 0xba}, {&(0x7f00000092c0)="e03a6e5d4057142c9a1f6868a06f8095ffd9d93561d8a3d0f3e6a322fdb879d875e15f2092c5a6eba8c4d3e76322324d9931a9fa8892f5d0c4f42750c08309efaef98b428c2e924a9c917dd964c5f14fb074cfd02dff46a9afb1277c8836", 0x5e}, {&(0x7f0000009340)="5e7b5385dc21800e05b1fccc3a4b4e9f95489459f7e4523164f6804065321bfffa3e7d9146d05640baebe8ec5c3fe4b81b696b6ef6eac476886a91b24d6878ed00b3e9f4a4b09a8a7af74b585e37ebfb30158ff4c5caf460a331e99e6ea0f1e80d561d79060d6810da6a75b61fa871e74087cc9ec215b90ea5afcda8df3f68f2e12b751359c73c38046885cc3a3d79b0cd13e577957be900993903ea236b82e1ba57ec0017c39a34dd7b89f3640c0cd3beda0042c5022032413cac40812d1d2529e639", 0xc3}, {&(0x7f0000009440)="8a", 0x1}], 0x8, 0x0, 0x0, 0x11}}], 0x8, 0x8014) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003cc0)={'ip6tnl0\x00', &(0x7f0000001440)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x4, 0xfffffe03, 0x20, @loopback, @rand_addr=' \x01\x00', 0x7, 0x8, 0x8000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001500)={&(0x7f0000002940)=ANY=[@ANYBLOB="90404426f517120000650001002abd7000fddb00", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32, @ANYBLOB="060005008005000008000b000500000008000b00000001000600050005050000"], 0x1290}, 0x1, 0x0, 0x0, 0x24000017}, 0x40000) 01:12:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x500}, 0x0) [ 3116.987985][ T4479] device bridge550 entered promiscuous mode [ 3117.010983][ T4481] device bridge435 entered promiscuous mode 01:12:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x20000000}}, 0x20}}, 0x0) 01:12:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) ioctl$FIONCLEX(r0, 0x5450) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') (rerun: 64) read$usbfs(r1, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r1, &(0x7f0000000000)=""/144, 0x90) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r2, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r2, &(0x7f0000000000)=""/144, 0x90) (async, rerun: 32) r3 = getpgrp(0x0) (rerun: 32) fstat(r1, &(0x7f0000008980)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r0, &(0x7f0000008a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000008a80)=0x0) r8 = getgid() fstat(r0, &(0x7f0000008e80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async) r11 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) fchownat(r11, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5038c48a6f0eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r12}, 0x10) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) statx(0xffffffffffffffff, &(0x7f0000002ac0)='./bus\x00', 0x0, 0x1e4, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)="08b68202d6e089fef13fb114fb449fdbbd37cc6003e21ba058ca1137dc136f913be7f5", 0x23}, {&(0x7f00000007c0)="b0fb5e4fa98822806d2bc29e8a2cc46f68e174311d8f5306b287", 0x1a}, {&(0x7f0000000800)="495be310aaa0153628f12e063c33c53fff13c19d61f493fabded688010f2a6fd325bd9c0639a33d0a050acf0c44593f319959b5b5a8cfde84dc71d4d27813e3a4ae8d52281504d2e976d185f26d7d94d48ef3d24627e894925fd257a3a0d9b8d1241d62ab7964b14045005b6d300c3e3fd34268387117fa0", 0x78}], 0x3, &(0x7f0000002c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000008000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000038000040000000ef0100000001000000", @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x140}, 0x4000001) getresgid(&(0x7f0000008f00)=0x0, &(0x7f0000008f40), &(0x7f0000008f80)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009500)=[{{&(0x7f0000001580)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000001680)="bf53fb1bc7fe0c0ade9296c15890e237b9fe0d28ff75b291cbff25ed55e4ae950641ffbd81be64a4adeaaa3d730704ac4972f0ea86d5bf51078991dfc556f2a02d4b2fd10afbc0bb03b55066ae5f794d582c938166e9dcc66c252ea6262d4a7e9019a0c4d2e5f9c22bf70b503f23d29ff4e442856b6e09878a77b294ac49260f6626866d34fc0dbab950cdb0c89dba66eb3b135c3fb26b10ad07152c1bafa9e363c137f5c92275c019e5fe298b2209ac4e2920e63ae961caa56f9bd89f628b8de61e40fb7bf77f992b8143f7f73d0b695675dbcfeb06374649c1d196cb4d2ad3f117e9e58e0e9002f5d2f3b4acb9680b", 0xf0}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000001600)="e8c586bb9a1442", 0x7}, {&(0x7f0000005bc0)="a8b4abe0680795f326c979c110522e492e0017396ba26ccc3b9a03f85d5874e08dc9bce618d39979c78c42fe7260323ded3e8d2c0e456d50c3e0ed1d612804d5a54af1fd44ab1953cdb31735ac7fe2343d0feb1e1c928f605b64c16d04e5b4b1f5b8ce5b44f97be6d6d43e32ee7a32aca3c8c86ea7620ef08fe1f3df395b37aae21e6e80631263aa76aafacb", 0x8c}, {&(0x7f0000002800)="19ba8a391ac094759f9ee10e5f38ceea39582e768a13ad992c6f9fa670257e9ed63d490054097f5ffb9ccae6f00265415578ffcea6b097e65861901c26d9911e5ef16fdbce0045d9ce8f89a2584b67e67f8e394fefa00242361c1ec6da97281f91be2cc134ce7a0faa", 0x69}], 0x5, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0x40, 0x20040004}}, {{&(0x7f0000003d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003dc0)="19ed06582d899083cd4f704438923925052cbf4f9381c46fb6f81fce6e0acf72b33d0c02dcfd6abff5442ec45e43e78f3baa49d2909fda46ca946e2dc28f5f240e1e40497f90196c37c708831b67a5503bd427cd028ee99713dce1d64d6955efb9bbf0192206142051b627ef86ca54ba7ffe4994873e55ba507eef6ae452584f4deba1ad202650523812527f204e9c1817e5e8", 0x93}, {&(0x7f0000003e80)="a65cb97cad7a2f84624f0206a0bb606eb02fc1a7f1f12bf9d1f3addf9cd5b7a2188ac668c984e59aa2dae3b705643fccccec30cf6bfdf2779ecaf824", 0x3c}, {&(0x7f0000003ec0)="2c1bef69aa3cc002af45744ef4665a3b13bd1424ad4ad1108204c3e56d865fed872feb6b647d8ae2171404b0ad3ee571dfde3430dbb5cf8720ccabef705ac0e0795bc294d4c33f3e9dcc40594d3c0129338f13e6c928b93ea9e0a1529e8a521dc4e7be7855c61d9602d6892ec4304f4707185e6fca6e354b328f399074fc346cba2cdee66e77bc3c50612e9ab4bd6f136cc345844cce8ee81245dc8b370862bb9654f1dc8da3a91800e8586c04395497969b37ac3a0fa249e5c6e967b4749af4bc6537d9e033cf", 0xc7}, {&(0x7f0000003fc0)="ba7a4b70e1c16c827d61fbd557807e975a862ca64903be8f770f46b7788251d6af86a4ab23f1ea5fb2ea4f47a8d5172a92cf332d0ec33fccf43e4f94bd7ec5b6af79324d028d1406f33212551ff3552476d71dcd715347ffdd9eecf5b12c54b18d71f670d2bb161769a683f2031f8b4f3d65aca345274e3a468da8a38d3db3f9b3849a18e0accbbe470b0cce15af248de7105f9924f07624a8decaa77b00ccbaf70f905fcc8e7ed963dcec8eb06177cb56734aeb77fc28750f0d52f325db23c6a82796cd29befd3df92d57b3af4f7576675a5a0451f1d7db793da31a3c99b884f819973ae45f25554a350a5201ec", 0xee}, {&(0x7f00000040c0)="03b6d6c9f471dc66cc1b67d231a809d507a7fef42b0d299dffe1634e37bfd5298fa119ad", 0x24}], 0x5, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004180)="7645c95018dee12e37363e42d70b55aecf39326147a4", 0x16}, {&(0x7f00000041c0)="ba2bfa2d66777d71e04d34139205f84acfb40b1adece9561ba6b3f3471bf70e08d85a356a4277d78d82de00376c08490dd20aafd485e6c0dcc2775d3a0ded16f07d89ec26632f56b11e312f33a6a15f8a69504dc7df2d88563df0cc8ba28f147ccd1c5f499dbdc76bad438ad8b4855289cb7fd058fa06595ef4d54bd6a44c75a7770c7767b7b04b2305d56da5da6ebc3217a45a8ceb6198157ada31ac0d2cef097f14d1bb5d0b4975b2e8580eac142665d59e57a59d696a3ea57a947e3ce9ffc27e804c289bfe933051ed00dd04b313a50b304c1e2994903dc6a", 0xda}, {&(0x7f00000042c0)}, {&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000005300)="92d248af03e41b1909f48b7e064aac97bd9f4306556aec8b2128854d3f589857f5e785c987b23a8ffe6621a7307b9e67afb7ac55160e907c67a8a480aa4d8e61418b253a65196b7308ba8d4a68f672d31c1bac2cec6126d0488311c035ea0058481fbd76b96a81a5f1554fdbb9af20a5673be57f978139972f4b485dbe61b4504b177a3d23c469c8140b", 0x8a}, {&(0x7f00000053c0)="e49104c2445f143933fed0985334d307ac44df4edc041c0a61ab5f0b6d0f6cdda4dbac1d7b165d206452162396a4d38f08bcf168faf5acc1fc900ed0e38795e001a624cc05547b8550a41fcb0df3397a9a632d212eaade1770d0fcac8a0fb076b6cfe7156f7ca68e2612b49c64c27a82a4c591f890ee923e40f4e29a628426b0ca368ec7f4ada9587ffbe77d7dff3f4135ad7b92558e31b5c5f7161cb48649fb9fa999edc121a8927bc173926344df56f3", 0xb1}], 0x6, 0x0, 0x0, 0x4008000}}, {{&(0x7f0000005500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005a40)=[{&(0x7f0000005580)="30383927706dadd60f4c76d96a5fa5286d568424773fb2b0de326bd2c4413a314b7aea18aa231a33a1898abae1279aeb5fd9aa5099b58cb5e169ace012dbba21f14eab9a9683120e30f6d03606a03eddf3837b7a16257d85b3bb03b8e176106bf4bda4eff5a4423fbb7b72823f9ca0d3fd4ef715fa5ed6f286b15dff95becd903dbc5209e2c2c06d505ac79a8cac906bc4ab8e48399d0d778100b27f184a0eb40516b01ff00581bfe089f5f012e6214e397368c6791ef3ef016f4f7b22cc28049554a5fa3d07581d02677f466187dfc4d009609b7dafb7f95889d6d12320cb274d84e134f47cf81ccc22f0d6aa", 0xed}, {&(0x7f0000005680)="097d3d277742afc67e63d1d1b777755776ad9b3b5990f4f2a0375f54f3328ef3f725c4b72eba1a4493af907c2ed54b304a95dcd263d0d709a6c6b83459767cc930b29b914926c181e35935dfd1f0b81753087d2afae644edf66c8fe6462c472e2aabdbf5028cf6e62a4ca2fd2368", 0x6e}, {&(0x7f0000005700)="77943bb00125d6ced2787a724bf7b65c4a0d80a9a4c5e7a7f661f119c0d53803489755d45c", 0x25}, {&(0x7f0000005740)="9e2c9a235a2795a5496af6bbc653c52f95b9dcd3c0ab610318e0624fe5e1ecc55d05cf8979f66ec073261dfd95e12ddd5b9f531177383772d0183c5681da", 0x3e}, {&(0x7f0000005780)="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", 0xfc}, {&(0x7f0000005880)="4fdedeefb24b35866ae5139b2c736197b5fbfbba0aaf9af42881befd9cacfed7b2a248a75c1ef1aa1e253537238f94e6cd054cfff749f7de85f685972c6b2c69272cb17c862075e67334b9d69d0b09b00e8a743038fc00ac97d36ec94442c9eb38db46908c37fe7fd110a2b2b05dc01fadbb61e3fe1b1ae62e3211a2c6204593e73f92898443416d99bb6ebd9702c5a5abbece7d7763ba966a0b9753c35593e063ee4e0fe712119d2a", 0xa9}, {&(0x7f0000005940)="7ef4f6b5c31d", 0x6}, {&(0x7f0000005980)="f8dbc9407dffdc526c58cac16effb33876aef5ccd8abde6545bbc0a6118234d1ccff3d8ed894174e4d07601fd1c56bbe0ca5c5bf46e68d70b300d05dfdee284320c3167aba44f7ada339681f4489323d51413539e40cbf86277d930b40f89fc4ea4e7e1dbfb96fae53b200c3501f55e2a055e45e1f3c855161dc93908e750953bd210a8a80751b190f54f2eb9c8ec5f666096b05a2f31a795a4888097a3d29b5be9245feaf8a3bb0", 0xa8}], 0x8, &(0x7f0000007dc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r10, r10, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x120, 0x4000000}}, {{&(0x7f0000007f00)=@abs={0x422bfa7a0e2f9107, 0x0, 0x4e22}, 0x6e, &(0x7f0000008240)=[{&(0x7f0000007f80)="96afc720c06a6d743e6ba90c4be3046ee9ed27ea6c2f93d3b2db", 0x1a}, {&(0x7f0000007fc0)="6fdac8fcbe7d64e1f0affbf3897169b31d6a29", 0x13}, {&(0x7f0000008000)="42b1dd94fe0bfafb8362928ad4b3a226dd9be37c2161487490750477b0622335bf7438d481be1231707e968285c4d469a7fbe8031c50ca5b94337aa9", 0x3c}, {&(0x7f0000008040)="c9d04904a9c1835f110e612418b59b8a4d14ad612ce222835b7cae855488fbfce38b9f6adbf7ac20f3ddf15b359d2f863adae5cfb31a728ae64adb163d4a6dc9a2e8637f39ced93ad517f7921ee8fabecc27c4bf954790423af0c5f278b3f6a0583863fe09f2dc79d71c097777afa64da5f7704f5799eb01b4a98d4129ae0dec4a67668f0958123b016fb7b3b58251fefcb2e21bb659f0314358c12110ba", 0x9e}, {&(0x7f0000008100)="2d6cba05afdc246bc1b78c537c09d60775d346ff9ff7bf982b878ef9c2020bb86141ce64bda3e4c8025882fcd8f6d0b097ad898e62a5bc120f7fd3dc097e3174578dbc9da4b54c2790d374d3a8fe2127f30e7c168eadebfd5fa1530774e85315d08e35b75814dc161ebdde66c4f537bb648e77f7028cd14c25684799", 0x7c}, {&(0x7f0000005ac0)="107ca690149dcc6000e1eaf07b29d5f421aafb3695e549d9ff861fb8f1c83940e37286c7c6acae922a3471c745d719ac93ca46956c54c97ff9daafa48add53d8c916af628afaf96561365afabc6f43ddd5632d575b53724a6defb90de147373e2c3f7a911fb8d8e97f9742322514546352cbd5a28599677da8a16c0aa68387164dfa3688ffff228f7e66bbb1cd38df4f897ec07c4bfb31a5a98877bcbe3fe0a28841efa87308e6ce24415a7159db853cfee224a6436e6ac5f5fa5c1338be05e5be074e5e17299da94f1711165dbefb16df0eb6cc8f36858f89f7fad74dd90eb1ed28465aba7a1341b063c38be689f2d2", 0xf0}, {&(0x7f00000081c0)="9d48cce2e8506fd636a5c38804cfcff951c68f77a8c1ac7783204bb5e1f9be21eec376d14d40b3995d0f9ad4e31907cad33f15ada80b5f9497d0a82e49e600a6f41ba78122485b", 0x47}], 0x7, 0x0, 0x0, 0x40}}, {{&(0x7f00000082c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000085c0)=[{&(0x7f0000008340)="fb51485c3736c5768e9afaf89663a1e3c92aad403767a010f57d51540444724a7d13c5f1246b8a713c0394134bf0bfb8de3a0452334dadd8bb3c18090ddf446407ed73b9455234c1fa30dc105e587273d8e3bd96260c9323a14fc86ab8cc11ce7b1b033266b7f7c03d31abe18646c93b2808154c31796c42227603fc8754aeb7f31b4cd32e06ab5f23b175e6", 0x8c}, {&(0x7f0000008400)="e661a0dd4d0ab395e3d0b854f77b4a7e1da23db59ca2e7df5b8ae31676f5265c8bf1bf746aabb899737ff82923991230f41206611ac4bc6f0ea36542cf115da7447577bf73b5d9e01e7455bbbbc8c10b6300706f9be783f12f47b143321593c117e43e8870230babdb6dd4929792ed67d5e4040f2027", 0x76}, {&(0x7f0000003d00)="e83fc3764eae857404af48e9b56f99c380807773cfb36d195a79d1fae62fd7f0678f695209add2b3742b20b13b8cd11a7b9416d015bba8736d618b024e", 0x3d}, {&(0x7f00000084c0)="8e142c4a4d65a16575c25fc43672beefc6aa0d007b2010ffc655ed939d9be0d92241478802e453a0c83d1d0febc7f9c525fbd590a9889e4c3700fee6fdc926f6d1851bbf0f96d38294fd997e48859367fdc866c20ed1c4ebb90a9ffe74fec211f95f653ff5dbebd124162609b273751513e2f7f38c14e43bf2b6b5ab251046116b8284fa6fbf7b778d430e892a4163ff224132a3d0f34797bf9f4cb39460d517b45a9e95bb4fe0c354c8aaaf7f5a0ab9f6f44bd55c27db5f60b02170c092e2e181305d976661e6b9", 0xc8}], 0x4, &(0x7f0000008ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r1, r1, r0, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x170, 0x40811}}, {{&(0x7f0000008c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008e40)=[{&(0x7f0000008cc0)="068026d8f88e40a17fc9c2fdbcdbafd005d3ad1739fd1591f311ebe4cbe98e6d89a447e7f393b3037873c039fe0f89ff342fc7852ca2108a28e0984813fb4e78b505155cced4a40990c5fe3f9f77be16", 0x50}, {&(0x7f0000008d40)="e08d2f6d6fb27ec4909df98e391ee18a5368e93f9db7c15031100c64e2", 0x1d}, {&(0x7f0000008d80)="4d300ccbe6b6c11dbebfd1bc288cd35ebcad0e655151f3", 0x17}, {&(0x7f0000008dc0)="7a4df59fa4255956946c3898c19a954c0b591afc03d096cfcab03f854c46ab929bc4e83844169ca6e6ce9c9bd49cf9d791187d87eb97d623d92d8a659eeb1f34f3130407f3a79f9299d7e5aa66086ebbe81a304882", 0x55}], 0x4, &(0x7f0000008fc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r14}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r15}}}], 0x40, 0x4008000}}, {{&(0x7f0000009000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009480)=[{&(0x7f0000009080)="9b896a61b296d300e2bcfbc9295d1f4e9d1552255351c298cb0185f8a796fb9b129d2d91cc901fd8862442ff250f802baa0a75def9acd822eb98802a", 0x3c}, {&(0x7f00000090c0)="e42a9e3ccd7f4cb22d2975dd9f92e584ab0b05a71d43d8e0bd9c902a0c602ce428e7ae69c7076947dd1486d1b6774774d797c4379b43ccc7e2d840b0df02c40e114af41e6b6df2", 0x47}, {&(0x7f0000009140)="55d457ac82fd40fa97d4dcd7906b1933dc062426034cb33fe3c96f04a6fe51519186b25d182cc1fc08717aa7ea00580894097a6f1ffae1d66d6d0f782b06fbbf5dfdf852e58fa758ed", 0x49}, {&(0x7f00000091c0)="69f8da", 0x3}, {&(0x7f0000009200)="85836c8c052423ae5bb7df6becd371fbe449c5277aa2626045a424327883397e5151545dbf33717e4aa17a9acfaad5ff285ed82d3534a221023809c0038768a9d26171b5b9fdd59510b6f1c4361aebcdcad5b9ae73f2a9a582d418f1cc574e88b05121a83c7e3f2f1dea6eddcfa9b888ab3ad1cc867008c3204ca88e2a44bea340a2c71bf9528a7a561da69df15c32cd7d5d2c2a9ad6d7b93c1a65f28b8b13bf67144f3ef5245b093e4a4896483a2c16c1d0df7095a1ad0aa7b1", 0xba}, {&(0x7f00000092c0)="e03a6e5d4057142c9a1f6868a06f8095ffd9d93561d8a3d0f3e6a322fdb879d875e15f2092c5a6eba8c4d3e76322324d9931a9fa8892f5d0c4f42750c08309efaef98b428c2e924a9c917dd964c5f14fb074cfd02dff46a9afb1277c8836", 0x5e}, {&(0x7f0000009340)="5e7b5385dc21800e05b1fccc3a4b4e9f95489459f7e4523164f6804065321bfffa3e7d9146d05640baebe8ec5c3fe4b81b696b6ef6eac476886a91b24d6878ed00b3e9f4a4b09a8a7af74b585e37ebfb30158ff4c5caf460a331e99e6ea0f1e80d561d79060d6810da6a75b61fa871e74087cc9ec215b90ea5afcda8df3f68f2e12b751359c73c38046885cc3a3d79b0cd13e577957be900993903ea236b82e1ba57ec0017c39a34dd7b89f3640c0cd3beda0042c5022032413cac40812d1d2529e639", 0xc3}, {&(0x7f0000009440)="8a", 0x1}], 0x8, 0x0, 0x0, 0x11}}], 0x8, 0x8014) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003cc0)={'ip6tnl0\x00', &(0x7f0000001440)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x4, 0xfffffe03, 0x20, @loopback, @rand_addr=' \x01\x00', 0x7, 0x8, 0x8000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001500)={&(0x7f0000002940)=ANY=[@ANYBLOB="90404426f517120000650001002abd7000fddb00", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32, @ANYBLOB="060005008005000008000b000500000008000b00000001000600050005050000"], 0x1290}, 0x1, 0x0, 0x0, 0x24000017}, 0x40000) [ 3117.101431][ T4487] device bridge436 entered promiscuous mode [ 3117.136106][ T4490] device bridge88 entered promiscuous mode 01:12:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x1000000}}, 0x20}}, 0x0) 01:12:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x600}, 0x0) 01:12:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x9000000}, 0x0) 01:12:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 9) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x21000000}}, 0x20}}, 0x0) 01:12:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x900}, 0x0) [ 3117.397437][ T4501] device bridge437 entered promiscuous mode [ 3117.424274][ T4499] device bridge550 entered promiscuous mode [ 3117.436128][ T4505] device bridge79 entered promiscuous mode [ 3117.446041][ T4504] device bridge88 entered promiscuous mode [ 3117.514200][ T4510] FAULT_INJECTION: forcing a failure. [ 3117.514200][ T4510] name failslab, interval 1, probability 0, space 0, times 0 [ 3117.527088][ T4510] CPU: 0 PID: 4510 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3117.537590][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3117.547882][ T4510] Call Trace: [ 3117.551501][ T4510] dump_stack_lvl+0x1e2/0x24b [ 3117.556155][ T4510] ? panic+0x7d7/0x7d7 [ 3117.560202][ T4510] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3117.565638][ T4510] dump_stack+0x15/0x17 [ 3117.569772][ T4510] should_fail+0x3c0/0x510 [ 3117.574169][ T4510] ? blk_mq_alloc_rq_map+0xe2/0x190 [ 3117.579342][ T4510] __should_failslab+0x9f/0xe0 [ 3117.584083][ T4510] should_failslab+0x9/0x20 [ 3117.588581][ T4510] __kmalloc+0x60/0x360 [ 3117.592714][ T4510] ? blk_mq_alloc_rq_map+0xa2/0x190 [ 3117.597899][ T4510] blk_mq_alloc_rq_map+0xe2/0x190 [ 3117.602899][ T4510] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 3117.608857][ T4510] blk_mq_alloc_tag_set+0x662/0xd40 [ 3117.614035][ T4510] loop_add+0x241/0x760 [ 3117.618171][ T4510] loop_control_ioctl+0x564/0x740 [ 3117.623170][ T4510] ? loop_remove+0xb0/0xb0 [ 3117.627560][ T4510] ? irqentry_exit+0x50/0x60 [ 3117.632124][ T4510] ? sysvec_reschedule_ipi+0x84/0x160 [ 3117.637472][ T4510] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3117.643084][ T4510] ? loop_remove+0xb0/0xb0 [ 3117.647476][ T4510] __se_sys_ioctl+0x115/0x190 [ 3117.652478][ T4510] __x64_sys_ioctl+0x7b/0x90 [ 3117.657158][ T4510] do_syscall_64+0x34/0x70 [ 3117.661641][ T4510] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3117.667709][ T4510] RIP: 0033:0x7f42b4f940c9 [ 3117.672546][ T4510] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3117.693082][ T4510] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3117.701995][ T4510] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3117.709944][ T4510] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3117.717891][ T4510] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3117.725840][ T4510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3117.733787][ T4510] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3117.742969][ T4510] blk-mq: reduced tag depth (128 -> 64) 01:12:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$FIONCLEX(r0, 0x5450) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r1, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r1, &(0x7f0000000000)=""/144, 0x90) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r2, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r2, &(0x7f0000000000)=""/144, 0x90) (async, rerun: 32) r3 = getpgrp(0x0) (async, rerun: 32) fstat(r1, &(0x7f0000008980)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r0, &(0x7f0000008a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000008a80)=0x0) (async) r8 = getgid() (async) fstat(r0, &(0x7f0000008e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async) r11 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) fchownat(r11, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5038c48a6f0eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r12}, 0x10) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) statx(0xffffffffffffffff, &(0x7f0000002ac0)='./bus\x00', 0x0, 0x1e4, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)="08b68202d6e089fef13fb114fb449fdbbd37cc6003e21ba058ca1137dc136f913be7f5", 0x23}, {&(0x7f00000007c0)="b0fb5e4fa98822806d2bc29e8a2cc46f68e174311d8f5306b287", 0x1a}, {&(0x7f0000000800)="495be310aaa0153628f12e063c33c53fff13c19d61f493fabded688010f2a6fd325bd9c0639a33d0a050acf0c44593f319959b5b5a8cfde84dc71d4d27813e3a4ae8d52281504d2e976d185f26d7d94d48ef3d24627e894925fd257a3a0d9b8d1241d62ab7964b14045005b6d300c3e3fd34268387117fa0", 0x78}], 0x3, &(0x7f0000002c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000008000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000038000040000000ef0100000001000000", @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x140}, 0x4000001) (async) getresgid(&(0x7f0000008f00)=0x0, &(0x7f0000008f40), &(0x7f0000008f80)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009500)=[{{&(0x7f0000001580)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000001680)="bf53fb1bc7fe0c0ade9296c15890e237b9fe0d28ff75b291cbff25ed55e4ae950641ffbd81be64a4adeaaa3d730704ac4972f0ea86d5bf51078991dfc556f2a02d4b2fd10afbc0bb03b55066ae5f794d582c938166e9dcc66c252ea6262d4a7e9019a0c4d2e5f9c22bf70b503f23d29ff4e442856b6e09878a77b294ac49260f6626866d34fc0dbab950cdb0c89dba66eb3b135c3fb26b10ad07152c1bafa9e363c137f5c92275c019e5fe298b2209ac4e2920e63ae961caa56f9bd89f628b8de61e40fb7bf77f992b8143f7f73d0b695675dbcfeb06374649c1d196cb4d2ad3f117e9e58e0e9002f5d2f3b4acb9680b", 0xf0}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000001600)="e8c586bb9a1442", 0x7}, {&(0x7f0000005bc0)="a8b4abe0680795f326c979c110522e492e0017396ba26ccc3b9a03f85d5874e08dc9bce618d39979c78c42fe7260323ded3e8d2c0e456d50c3e0ed1d612804d5a54af1fd44ab1953cdb31735ac7fe2343d0feb1e1c928f605b64c16d04e5b4b1f5b8ce5b44f97be6d6d43e32ee7a32aca3c8c86ea7620ef08fe1f3df395b37aae21e6e80631263aa76aafacb", 0x8c}, {&(0x7f0000002800)="19ba8a391ac094759f9ee10e5f38ceea39582e768a13ad992c6f9fa670257e9ed63d490054097f5ffb9ccae6f00265415578ffcea6b097e65861901c26d9911e5ef16fdbce0045d9ce8f89a2584b67e67f8e394fefa00242361c1ec6da97281f91be2cc134ce7a0faa", 0x69}], 0x5, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0x40, 0x20040004}}, {{&(0x7f0000003d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003dc0)="19ed06582d899083cd4f704438923925052cbf4f9381c46fb6f81fce6e0acf72b33d0c02dcfd6abff5442ec45e43e78f3baa49d2909fda46ca946e2dc28f5f240e1e40497f90196c37c708831b67a5503bd427cd028ee99713dce1d64d6955efb9bbf0192206142051b627ef86ca54ba7ffe4994873e55ba507eef6ae452584f4deba1ad202650523812527f204e9c1817e5e8", 0x93}, {&(0x7f0000003e80)="a65cb97cad7a2f84624f0206a0bb606eb02fc1a7f1f12bf9d1f3addf9cd5b7a2188ac668c984e59aa2dae3b705643fccccec30cf6bfdf2779ecaf824", 0x3c}, {&(0x7f0000003ec0)="2c1bef69aa3cc002af45744ef4665a3b13bd1424ad4ad1108204c3e56d865fed872feb6b647d8ae2171404b0ad3ee571dfde3430dbb5cf8720ccabef705ac0e0795bc294d4c33f3e9dcc40594d3c0129338f13e6c928b93ea9e0a1529e8a521dc4e7be7855c61d9602d6892ec4304f4707185e6fca6e354b328f399074fc346cba2cdee66e77bc3c50612e9ab4bd6f136cc345844cce8ee81245dc8b370862bb9654f1dc8da3a91800e8586c04395497969b37ac3a0fa249e5c6e967b4749af4bc6537d9e033cf", 0xc7}, {&(0x7f0000003fc0)="ba7a4b70e1c16c827d61fbd557807e975a862ca64903be8f770f46b7788251d6af86a4ab23f1ea5fb2ea4f47a8d5172a92cf332d0ec33fccf43e4f94bd7ec5b6af79324d028d1406f33212551ff3552476d71dcd715347ffdd9eecf5b12c54b18d71f670d2bb161769a683f2031f8b4f3d65aca345274e3a468da8a38d3db3f9b3849a18e0accbbe470b0cce15af248de7105f9924f07624a8decaa77b00ccbaf70f905fcc8e7ed963dcec8eb06177cb56734aeb77fc28750f0d52f325db23c6a82796cd29befd3df92d57b3af4f7576675a5a0451f1d7db793da31a3c99b884f819973ae45f25554a350a5201ec", 0xee}, {&(0x7f00000040c0)="03b6d6c9f471dc66cc1b67d231a809d507a7fef42b0d299dffe1634e37bfd5298fa119ad", 0x24}], 0x5, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004180)="7645c95018dee12e37363e42d70b55aecf39326147a4", 0x16}, {&(0x7f00000041c0)="ba2bfa2d66777d71e04d34139205f84acfb40b1adece9561ba6b3f3471bf70e08d85a356a4277d78d82de00376c08490dd20aafd485e6c0dcc2775d3a0ded16f07d89ec26632f56b11e312f33a6a15f8a69504dc7df2d88563df0cc8ba28f147ccd1c5f499dbdc76bad438ad8b4855289cb7fd058fa06595ef4d54bd6a44c75a7770c7767b7b04b2305d56da5da6ebc3217a45a8ceb6198157ada31ac0d2cef097f14d1bb5d0b4975b2e8580eac142665d59e57a59d696a3ea57a947e3ce9ffc27e804c289bfe933051ed00dd04b313a50b304c1e2994903dc6a", 0xda}, {&(0x7f00000042c0)}, {&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000005300)="92d248af03e41b1909f48b7e064aac97bd9f4306556aec8b2128854d3f589857f5e785c987b23a8ffe6621a7307b9e67afb7ac55160e907c67a8a480aa4d8e61418b253a65196b7308ba8d4a68f672d31c1bac2cec6126d0488311c035ea0058481fbd76b96a81a5f1554fdbb9af20a5673be57f978139972f4b485dbe61b4504b177a3d23c469c8140b", 0x8a}, {&(0x7f00000053c0)="e49104c2445f143933fed0985334d307ac44df4edc041c0a61ab5f0b6d0f6cdda4dbac1d7b165d206452162396a4d38f08bcf168faf5acc1fc900ed0e38795e001a624cc05547b8550a41fcb0df3397a9a632d212eaade1770d0fcac8a0fb076b6cfe7156f7ca68e2612b49c64c27a82a4c591f890ee923e40f4e29a628426b0ca368ec7f4ada9587ffbe77d7dff3f4135ad7b92558e31b5c5f7161cb48649fb9fa999edc121a8927bc173926344df56f3", 0xb1}], 0x6, 0x0, 0x0, 0x4008000}}, {{&(0x7f0000005500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005a40)=[{&(0x7f0000005580)="30383927706dadd60f4c76d96a5fa5286d568424773fb2b0de326bd2c4413a314b7aea18aa231a33a1898abae1279aeb5fd9aa5099b58cb5e169ace012dbba21f14eab9a9683120e30f6d03606a03eddf3837b7a16257d85b3bb03b8e176106bf4bda4eff5a4423fbb7b72823f9ca0d3fd4ef715fa5ed6f286b15dff95becd903dbc5209e2c2c06d505ac79a8cac906bc4ab8e48399d0d778100b27f184a0eb40516b01ff00581bfe089f5f012e6214e397368c6791ef3ef016f4f7b22cc28049554a5fa3d07581d02677f466187dfc4d009609b7dafb7f95889d6d12320cb274d84e134f47cf81ccc22f0d6aa", 0xed}, {&(0x7f0000005680)="097d3d277742afc67e63d1d1b777755776ad9b3b5990f4f2a0375f54f3328ef3f725c4b72eba1a4493af907c2ed54b304a95dcd263d0d709a6c6b83459767cc930b29b914926c181e35935dfd1f0b81753087d2afae644edf66c8fe6462c472e2aabdbf5028cf6e62a4ca2fd2368", 0x6e}, {&(0x7f0000005700)="77943bb00125d6ced2787a724bf7b65c4a0d80a9a4c5e7a7f661f119c0d53803489755d45c", 0x25}, {&(0x7f0000005740)="9e2c9a235a2795a5496af6bbc653c52f95b9dcd3c0ab610318e0624fe5e1ecc55d05cf8979f66ec073261dfd95e12ddd5b9f531177383772d0183c5681da", 0x3e}, {&(0x7f0000005780)="65fc3c1e5c37d578db3bdb3ead7dea08bcfbcbb22cff8fddfc99161712e51b8634b5e994f1c7d4d79492aaab4bdf313b9e9665d13c720a6d40b7a91c0740be0f52630ff76b58f1d931c2ec24c683b995e408ac722e7570742403f9646795d7e93dc232f3cd624dfe1c25ce037970f768e760c6d538f05c94f77be83c4642daed1606020c43e9cecf3ec3cf63f3a8049a5bdd591f19786663d34c63b0620533a1250d5cc8913464aa9b0c7b62b2040939a53cbcad7d43314762b7a3c3d7677132b14318b4ab3511ad99300a6011f490ea7f3f76de7b19e350e3007acdd584bb00cbbf7c119d9fe57f93f687cc6b95a7c916e6459ae4ea2c64631bc13f", 0xfc}, {&(0x7f0000005880)="4fdedeefb24b35866ae5139b2c736197b5fbfbba0aaf9af42881befd9cacfed7b2a248a75c1ef1aa1e253537238f94e6cd054cfff749f7de85f685972c6b2c69272cb17c862075e67334b9d69d0b09b00e8a743038fc00ac97d36ec94442c9eb38db46908c37fe7fd110a2b2b05dc01fadbb61e3fe1b1ae62e3211a2c6204593e73f92898443416d99bb6ebd9702c5a5abbece7d7763ba966a0b9753c35593e063ee4e0fe712119d2a", 0xa9}, {&(0x7f0000005940)="7ef4f6b5c31d", 0x6}, {&(0x7f0000005980)="f8dbc9407dffdc526c58cac16effb33876aef5ccd8abde6545bbc0a6118234d1ccff3d8ed894174e4d07601fd1c56bbe0ca5c5bf46e68d70b300d05dfdee284320c3167aba44f7ada339681f4489323d51413539e40cbf86277d930b40f89fc4ea4e7e1dbfb96fae53b200c3501f55e2a055e45e1f3c855161dc93908e750953bd210a8a80751b190f54f2eb9c8ec5f666096b05a2f31a795a4888097a3d29b5be9245feaf8a3bb0", 0xa8}], 0x8, &(0x7f0000007dc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r10, r10, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x120, 0x4000000}}, {{&(0x7f0000007f00)=@abs={0x422bfa7a0e2f9107, 0x0, 0x4e22}, 0x6e, &(0x7f0000008240)=[{&(0x7f0000007f80)="96afc720c06a6d743e6ba90c4be3046ee9ed27ea6c2f93d3b2db", 0x1a}, {&(0x7f0000007fc0)="6fdac8fcbe7d64e1f0affbf3897169b31d6a29", 0x13}, {&(0x7f0000008000)="42b1dd94fe0bfafb8362928ad4b3a226dd9be37c2161487490750477b0622335bf7438d481be1231707e968285c4d469a7fbe8031c50ca5b94337aa9", 0x3c}, {&(0x7f0000008040)="c9d04904a9c1835f110e612418b59b8a4d14ad612ce222835b7cae855488fbfce38b9f6adbf7ac20f3ddf15b359d2f863adae5cfb31a728ae64adb163d4a6dc9a2e8637f39ced93ad517f7921ee8fabecc27c4bf954790423af0c5f278b3f6a0583863fe09f2dc79d71c097777afa64da5f7704f5799eb01b4a98d4129ae0dec4a67668f0958123b016fb7b3b58251fefcb2e21bb659f0314358c12110ba", 0x9e}, {&(0x7f0000008100)="2d6cba05afdc246bc1b78c537c09d60775d346ff9ff7bf982b878ef9c2020bb86141ce64bda3e4c8025882fcd8f6d0b097ad898e62a5bc120f7fd3dc097e3174578dbc9da4b54c2790d374d3a8fe2127f30e7c168eadebfd5fa1530774e85315d08e35b75814dc161ebdde66c4f537bb648e77f7028cd14c25684799", 0x7c}, {&(0x7f0000005ac0)="107ca690149dcc6000e1eaf07b29d5f421aafb3695e549d9ff861fb8f1c83940e37286c7c6acae922a3471c745d719ac93ca46956c54c97ff9daafa48add53d8c916af628afaf96561365afabc6f43ddd5632d575b53724a6defb90de147373e2c3f7a911fb8d8e97f9742322514546352cbd5a28599677da8a16c0aa68387164dfa3688ffff228f7e66bbb1cd38df4f897ec07c4bfb31a5a98877bcbe3fe0a28841efa87308e6ce24415a7159db853cfee224a6436e6ac5f5fa5c1338be05e5be074e5e17299da94f1711165dbefb16df0eb6cc8f36858f89f7fad74dd90eb1ed28465aba7a1341b063c38be689f2d2", 0xf0}, {&(0x7f00000081c0)="9d48cce2e8506fd636a5c38804cfcff951c68f77a8c1ac7783204bb5e1f9be21eec376d14d40b3995d0f9ad4e31907cad33f15ada80b5f9497d0a82e49e600a6f41ba78122485b", 0x47}], 0x7, 0x0, 0x0, 0x40}}, {{&(0x7f00000082c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000085c0)=[{&(0x7f0000008340)="fb51485c3736c5768e9afaf89663a1e3c92aad403767a010f57d51540444724a7d13c5f1246b8a713c0394134bf0bfb8de3a0452334dadd8bb3c18090ddf446407ed73b9455234c1fa30dc105e587273d8e3bd96260c9323a14fc86ab8cc11ce7b1b033266b7f7c03d31abe18646c93b2808154c31796c42227603fc8754aeb7f31b4cd32e06ab5f23b175e6", 0x8c}, {&(0x7f0000008400)="e661a0dd4d0ab395e3d0b854f77b4a7e1da23db59ca2e7df5b8ae31676f5265c8bf1bf746aabb899737ff82923991230f41206611ac4bc6f0ea36542cf115da7447577bf73b5d9e01e7455bbbbc8c10b6300706f9be783f12f47b143321593c117e43e8870230babdb6dd4929792ed67d5e4040f2027", 0x76}, {&(0x7f0000003d00)="e83fc3764eae857404af48e9b56f99c380807773cfb36d195a79d1fae62fd7f0678f695209add2b3742b20b13b8cd11a7b9416d015bba8736d618b024e", 0x3d}, {&(0x7f00000084c0)="8e142c4a4d65a16575c25fc43672beefc6aa0d007b2010ffc655ed939d9be0d92241478802e453a0c83d1d0febc7f9c525fbd590a9889e4c3700fee6fdc926f6d1851bbf0f96d38294fd997e48859367fdc866c20ed1c4ebb90a9ffe74fec211f95f653ff5dbebd124162609b273751513e2f7f38c14e43bf2b6b5ab251046116b8284fa6fbf7b778d430e892a4163ff224132a3d0f34797bf9f4cb39460d517b45a9e95bb4fe0c354c8aaaf7f5a0ab9f6f44bd55c27db5f60b02170c092e2e181305d976661e6b9", 0xc8}], 0x4, &(0x7f0000008ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r1, r1, r0, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x170, 0x40811}}, {{&(0x7f0000008c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008e40)=[{&(0x7f0000008cc0)="068026d8f88e40a17fc9c2fdbcdbafd005d3ad1739fd1591f311ebe4cbe98e6d89a447e7f393b3037873c039fe0f89ff342fc7852ca2108a28e0984813fb4e78b505155cced4a40990c5fe3f9f77be16", 0x50}, {&(0x7f0000008d40)="e08d2f6d6fb27ec4909df98e391ee18a5368e93f9db7c15031100c64e2", 0x1d}, {&(0x7f0000008d80)="4d300ccbe6b6c11dbebfd1bc288cd35ebcad0e655151f3", 0x17}, {&(0x7f0000008dc0)="7a4df59fa4255956946c3898c19a954c0b591afc03d096cfcab03f854c46ab929bc4e83844169ca6e6ce9c9bd49cf9d791187d87eb97d623d92d8a659eeb1f34f3130407f3a79f9299d7e5aa66086ebbe81a304882", 0x55}], 0x4, &(0x7f0000008fc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r14}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r15}}}], 0x40, 0x4008000}}, {{&(0x7f0000009000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009480)=[{&(0x7f0000009080)="9b896a61b296d300e2bcfbc9295d1f4e9d1552255351c298cb0185f8a796fb9b129d2d91cc901fd8862442ff250f802baa0a75def9acd822eb98802a", 0x3c}, {&(0x7f00000090c0)="e42a9e3ccd7f4cb22d2975dd9f92e584ab0b05a71d43d8e0bd9c902a0c602ce428e7ae69c7076947dd1486d1b6774774d797c4379b43ccc7e2d840b0df02c40e114af41e6b6df2", 0x47}, {&(0x7f0000009140)="55d457ac82fd40fa97d4dcd7906b1933dc062426034cb33fe3c96f04a6fe51519186b25d182cc1fc08717aa7ea00580894097a6f1ffae1d66d6d0f782b06fbbf5dfdf852e58fa758ed", 0x49}, {&(0x7f00000091c0)="69f8da", 0x3}, {&(0x7f0000009200)="85836c8c052423ae5bb7df6becd371fbe449c5277aa2626045a424327883397e5151545dbf33717e4aa17a9acfaad5ff285ed82d3534a221023809c0038768a9d26171b5b9fdd59510b6f1c4361aebcdcad5b9ae73f2a9a582d418f1cc574e88b05121a83c7e3f2f1dea6eddcfa9b888ab3ad1cc867008c3204ca88e2a44bea340a2c71bf9528a7a561da69df15c32cd7d5d2c2a9ad6d7b93c1a65f28b8b13bf67144f3ef5245b093e4a4896483a2c16c1d0df7095a1ad0aa7b1", 0xba}, {&(0x7f00000092c0)="e03a6e5d4057142c9a1f6868a06f8095ffd9d93561d8a3d0f3e6a322fdb879d875e15f2092c5a6eba8c4d3e76322324d9931a9fa8892f5d0c4f42750c08309efaef98b428c2e924a9c917dd964c5f14fb074cfd02dff46a9afb1277c8836", 0x5e}, {&(0x7f0000009340)="5e7b5385dc21800e05b1fccc3a4b4e9f95489459f7e4523164f6804065321bfffa3e7d9146d05640baebe8ec5c3fe4b81b696b6ef6eac476886a91b24d6878ed00b3e9f4a4b09a8a7af74b585e37ebfb30158ff4c5caf460a331e99e6ea0f1e80d561d79060d6810da6a75b61fa871e74087cc9ec215b90ea5afcda8df3f68f2e12b751359c73c38046885cc3a3d79b0cd13e577957be900993903ea236b82e1ba57ec0017c39a34dd7b89f3640c0cd3beda0042c5022032413cac40812d1d2529e639", 0xc3}, {&(0x7f0000009440)="8a", 0x1}], 0x8, 0x0, 0x0, 0x11}}], 0x8, 0x8014) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003cc0)={'ip6tnl0\x00', &(0x7f0000001440)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x4, 0xfffffe03, 0x20, @loopback, @rand_addr=' \x01\x00', 0x7, 0x8, 0x8000}}) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001500)={&(0x7f0000002940)=ANY=[@ANYBLOB="90404426f517120000650001002abd7000fddb00", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32, @ANYBLOB="060005008005000008000b000500000008000b00000001000600050005050000"], 0x1290}, 0x1, 0x0, 0x0, 0x24000017}, 0x40000) 01:12:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xa00}, 0x0) [ 3117.973959][ T4507] device bridge438 entered promiscuous mode 01:12:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000011c0), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001500)={'sit0\x00', &(0x7f0000001480)={'gre0\x00', 0x0, 0x7800, 0x0, 0x8, 0x0, {{0x9, 0x4, 0x0, 0x2d, 0x24, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast1, @multicast2, {[@end, @end, @timestamp={0x44, 0xc, 0x2c, 0x0, 0x5, [0x2, 0x9]}, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f00000016c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)=ANY=[@ANYBLOB="c40000006d00020028bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="008000005000000008001f00ffbf8db10e9a2dad9061b93574ab2c6f510300006800348014003500628e68aaa6765f736c6176655f3000001400350069705f7674cc300000000000000017001400350070696d726567300000000000000000001400350076657468305f6d6163767461700000001400350065727370616e30000000000000000000240012800b0001006d61637365630000140002800500cd48bcb484fd0700010000000500"], 0xc4}, 0x1, 0x0, 0x0, 0xc014}, 0x801) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xa000000}, 0x0) 01:12:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x1f00}, 0x0) 01:12:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000011c0), 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001500)={'sit0\x00', &(0x7f0000001480)={'gre0\x00', 0x0, 0x7800, 0x0, 0x8, 0x0, {{0x9, 0x4, 0x0, 0x2d, 0x24, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast1, @multicast2, {[@end, @end, @timestamp={0x44, 0xc, 0x2c, 0x0, 0x5, [0x2, 0x9]}, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f00000016c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)=ANY=[@ANYBLOB="c40000006d00020028bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="008000005000000008001f00ffbf8db10e9a2dad9061b93574ab2c6f510300006800348014003500628e68aaa6765f736c6176655f3000001400350069705f7674cc300000000000000017001400350070696d726567300000000000000000001400350076657468305f6d6163767461700000001400350065727370616e30000000000000000000240012800b0001006d61637365630000140002800500cd48bcb484fd0700010000000500"], 0xc4}, 0x1, 0x0, 0x0, 0xc014}, 0x801) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) [ 3118.155268][ T4517] device bridge439 entered promiscuous mode [ 3118.184386][ T4527] device bridge550 entered promiscuous mode 01:12:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x1080000}}, 0x20}}, 0x0) 01:12:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x3a570000}}, 0x20}}, 0x0) 01:12:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 10) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x2100}, 0x0) [ 3118.219517][ T4532] device bridge440 entered promiscuous mode 01:12:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000011c0), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001500)={'sit0\x00', &(0x7f0000001480)={'gre0\x00', 0x0, 0x7800, 0x0, 0x8, 0x0, {{0x9, 0x4, 0x0, 0x2d, 0x24, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast1, @multicast2, {[@end, @end, @timestamp={0x44, 0xc, 0x2c, 0x0, 0x5, [0x2, 0x9]}, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f00000016c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)=ANY=[@ANYBLOB="c40000006d00020028bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="008000005000000008001f00ffbf8db10e9a2dad9061b93574ab2c6f510300006800348014003500628e68aaa6765f736c6176655f3000001400350069705f7674cc300000000000000017001400350070696d726567300000000000000000001400350076657468305f6d6163767461700000001400350065727370616e30000000000000000000240012800b0001006d61637365630000140002800500cd48bcb484fd0700010000000500"], 0xc4}, 0x1, 0x0, 0x0, 0xc014}, 0x801) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) [ 3118.291078][ T4536] __nla_validate_parse: 34 callbacks suppressed [ 3118.291087][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3118.369820][ T4547] FAULT_INJECTION: forcing a failure. [ 3118.369820][ T4547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3118.383440][ T4547] CPU: 0 PID: 4547 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3118.394349][ T4547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3118.404400][ T4547] Call Trace: [ 3118.407670][ T4547] dump_stack_lvl+0x1e2/0x24b [ 3118.412325][ T4547] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3118.417760][ T4547] ? blk_mq_alloc_tag_set+0x662/0xd40 [ 3118.423108][ T4547] ? __x64_sys_ioctl+0x7b/0x90 [ 3118.427848][ T4547] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3118.433907][ T4547] dump_stack+0x15/0x17 [ 3118.438047][ T4547] should_fail+0x3c0/0x510 [ 3118.442439][ T4547] should_fail_alloc_page+0x50/0x60 [ 3118.447614][ T4547] __alloc_pages_nodemask+0x1c0/0x890 [ 3118.452961][ T4547] ? __se_sys_ioctl+0x115/0x190 [ 3118.457787][ T4547] ? __x64_sys_ioctl+0x7b/0x90 [ 3118.462528][ T4547] ? do_syscall_64+0x34/0x70 [ 3118.467095][ T4547] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 3118.472620][ T4547] ? cpumask_next+0x23/0x30 [ 3118.477099][ T4547] ? blk_mq_hw_queue_to_node+0x101/0x120 [ 3118.482709][ T4547] blk_mq_alloc_rqs+0x323/0x910 [ 3118.487540][ T4547] ? __kasan_kmalloc+0x9/0x10 [ 3118.492192][ T4547] ? blk_mq_alloc_rq_map+0x190/0x190 [ 3118.497450][ T4547] ? blk_mq_alloc_rq_map+0x11b/0x190 [ 3118.502729][ T4547] blk_mq_alloc_map_and_requests+0x1cb/0x7d0 [ 3118.508698][ T4547] blk_mq_alloc_tag_set+0x662/0xd40 [ 3118.513878][ T4547] loop_add+0x241/0x760 [ 3118.518016][ T4547] loop_control_ioctl+0x564/0x740 [ 3118.523034][ T4547] ? loop_remove+0xb0/0xb0 [ 3118.527440][ T4547] ? __fget_files+0x310/0x370 [ 3118.532102][ T4547] ? security_file_ioctl+0xb1/0xd0 [ 3118.537192][ T4547] ? loop_remove+0xb0/0xb0 [ 3118.541590][ T4547] __se_sys_ioctl+0x115/0x190 [ 3118.546251][ T4547] __x64_sys_ioctl+0x7b/0x90 [ 3118.550824][ T4547] do_syscall_64+0x34/0x70 [ 3118.555225][ T4547] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3118.561104][ T4547] RIP: 0033:0x7f42b4f940c9 [ 3118.565499][ T4547] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3118.585546][ T4547] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3118.593940][ T4547] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3118.601887][ T4547] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3118.609836][ T4547] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3118.617793][ T4547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3118.625740][ T4547] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3118.680547][ T4536] device bridge88 entered promiscuous mode [ 3118.759748][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:12:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x3eb9}, 0x0) [ 3118.804086][ T4541] device bridge441 entered promiscuous mode [ 3118.812016][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3118.823509][ T4540] device bridge79 entered promiscuous mode 01:12:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xb000000}, 0x0) 01:12:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x8100}, 0x0) 01:12:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x3f000000}}, 0x20}}, 0x0) [ 3118.937815][ T4555] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3118.954893][ T4555] device bridge442 entered promiscuous mode [ 3118.963156][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3118.980618][ T4557] device bridge550 entered promiscuous mode 01:12:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xb93e}, 0x0) [ 3119.019846][ T4561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3119.033211][ T4561] device bridge443 entered promiscuous mode [ 3119.042122][ T4563] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3119.060929][ T4563] device bridge88 entered promiscuous mode 01:12:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 11) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xc000000}, 0x0) [ 3119.112504][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3119.135871][ T4567] device bridge444 entered promiscuous mode [ 3119.145233][ T4572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3119.169799][ T4572] device bridge550 entered promiscuous mode [ 3119.218742][ T4574] FAULT_INJECTION: forcing a failure. [ 3119.218742][ T4574] name failslab, interval 1, probability 0, space 0, times 0 [ 3119.231556][ T4574] CPU: 0 PID: 4574 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3119.241774][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3119.251807][ T4574] Call Trace: [ 3119.255077][ T4574] dump_stack_lvl+0x1e2/0x24b [ 3119.259730][ T4574] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3119.265167][ T4574] dump_stack+0x15/0x17 [ 3119.269300][ T4574] should_fail+0x3c0/0x510 [ 3119.273694][ T4574] __should_failslab+0x9f/0xe0 [ 3119.278434][ T4574] should_failslab+0x9/0x20 [ 3119.282912][ T4574] kmem_cache_alloc+0x3f/0x300 [ 3119.287658][ T4574] ? blk_alloc_queue+0x2a/0x640 [ 3119.292483][ T4574] blk_alloc_queue+0x2a/0x640 [ 3119.297134][ T4574] ? __mutex_init+0xa1/0xf0 [ 3119.301614][ T4574] ? blk_mq_alloc_tag_set+0xa57/0xd40 [ 3119.306959][ T4574] blk_mq_init_queue+0x35/0xc0 [ 3119.311699][ T4574] loop_add+0x270/0x760 [ 3119.315829][ T4574] loop_control_ioctl+0x564/0x740 [ 3119.320960][ T4574] ? loop_remove+0xb0/0xb0 [ 3119.325380][ T4574] ? __fget_files+0x310/0x370 [ 3119.330048][ T4574] ? security_file_ioctl+0xb1/0xd0 [ 3119.335139][ T4574] ? loop_remove+0xb0/0xb0 [ 3119.339538][ T4574] __se_sys_ioctl+0x115/0x190 [ 3119.344196][ T4574] __x64_sys_ioctl+0x7b/0x90 [ 3119.348767][ T4574] do_syscall_64+0x34/0x70 [ 3119.353163][ T4574] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3119.359033][ T4574] RIP: 0033:0x7f42b4f940c9 [ 3119.363436][ T4574] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3119.383046][ T4574] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3119.391446][ T4574] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3119.399489][ T4574] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3119.407439][ T4574] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3119.415390][ T4574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3119.423339][ T4574] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x2000000}}, 0x20}}, 0x0) 01:12:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x40000000}}, 0x20}}, 0x0) 01:12:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000013c0), 0x80, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000015c0)={0xfffffffffffffffe, 0x0, &(0x7f0000001400)={&(0x7f0000001540)={0x78, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x59}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) openat$bsg(0xffffffffffffff9c, &(0x7f0000001480), 0x24000, 0x0) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) r2 = dup(r0) getsockname$packet(r2, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001440)=0x14) 01:12:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xc500}, 0x0) 01:12:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xd000000}, 0x0) 01:12:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000013c0), 0x80, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000015c0)={0xfffffffffffffffe, 0x0, &(0x7f0000001400)={&(0x7f0000001540)={0x78, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x59}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) openat$bsg(0xffffffffffffff9c, &(0x7f0000001480), 0x24000, 0x0) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) r2 = dup(r0) getsockname$packet(r2, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001440)=0x14) [ 3119.692234][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3119.723716][ T4576] device bridge88 entered promiscuous mode [ 3119.734352][ T4580] device bridge445 entered promiscuous mode 01:12:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x8002a0}, 0x0) 01:12:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000013c0), 0x80, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000015c0)={0xfffffffffffffffe, 0x0, &(0x7f0000001400)={&(0x7f0000001540)={0x78, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x59}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000001480), 0x24000, 0x0) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) r2 = dup(r0) getsockname$packet(r2, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001440)=0x14) [ 3119.746169][ T4584] device bridge79 entered promiscuous mode [ 3119.760051][ T4583] device bridge550 entered promiscuous mode 01:12:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) 01:12:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 12) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3119.913504][ T4590] device bridge446 entered promiscuous mode 01:12:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x48000000}}, 0x20}}, 0x0) 01:12:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xe000000}, 0x0) [ 3119.999875][ T4599] device bridge447 entered promiscuous mode [ 3120.012756][ T4603] device bridge88 entered promiscuous mode [ 3120.041825][ T4605] device bridge550 entered promiscuous mode [ 3120.079065][ T4608] FAULT_INJECTION: forcing a failure. [ 3120.079065][ T4608] name failslab, interval 1, probability 0, space 0, times 0 [ 3120.091827][ T4608] CPU: 0 PID: 4608 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3120.102058][ T4608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3120.112110][ T4608] Call Trace: [ 3120.115475][ T4608] dump_stack_lvl+0x1e2/0x24b [ 3120.120133][ T4608] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3120.125570][ T4608] ? __schedule+0x8ff/0xc00 [ 3120.130059][ T4608] dump_stack+0x15/0x17 [ 3120.134193][ T4608] should_fail+0x3c0/0x510 [ 3120.138598][ T4608] ? mempool_init_node+0x12b/0x4b0 [ 3120.143693][ T4608] __should_failslab+0x9f/0xe0 [ 3120.148432][ T4608] should_failslab+0x9/0x20 [ 3120.152913][ T4608] __kmalloc+0x60/0x360 [ 3120.157047][ T4608] ? ida_alloc_range+0xab1/0xb10 [ 3120.161986][ T4608] mempool_init_node+0x12b/0x4b0 [ 3120.166902][ T4608] ? mempool_alloc_slab+0x30/0x30 [ 3120.171914][ T4608] ? mempool_free+0x310/0x310 [ 3120.176594][ T4608] ? mempool_free+0x310/0x310 [ 3120.182554][ T4608] ? mempool_alloc_slab+0x30/0x30 [ 3120.188268][ T4608] mempool_init+0x3c/0x50 [ 3120.192664][ T4608] bioset_init+0x48e/0x640 [ 3120.197151][ T4608] blk_alloc_queue+0xc6/0x640 [ 3120.201982][ T4608] blk_mq_init_queue+0x35/0xc0 [ 3120.207021][ T4608] loop_add+0x270/0x760 [ 3120.211159][ T4608] loop_control_ioctl+0x564/0x740 [ 3120.216250][ T4608] ? loop_remove+0xb0/0xb0 [ 3120.220646][ T4608] ? sysvec_reschedule_ipi+0x84/0x160 [ 3120.226002][ T4608] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3120.231629][ T4608] ? do_vfs_ioctl+0xf6/0x1a90 [ 3120.236281][ T4608] ? do_vfs_ioctl+0x33d/0x1a90 [ 3120.241020][ T4608] ? __sanitizer_cov_trace_const_cmp4+0x1/0xb0 [ 3120.247147][ T4608] ? loop_remove+0xb0/0xb0 [ 3120.251540][ T4608] __se_sys_ioctl+0x115/0x190 [ 3120.256190][ T4608] __x64_sys_ioctl+0x7b/0x90 [ 3120.260757][ T4608] do_syscall_64+0x34/0x70 [ 3120.265149][ T4608] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3120.271016][ T4608] RIP: 0033:0x7f42b4f940c9 [ 3120.275408][ T4608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3120.295266][ T4608] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3120.303658][ T4608] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3120.311604][ T4608] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3120.319611][ T4608] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3120.327555][ T4608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3120.335504][ T4608] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) 01:12:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r1, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r1, &(0x7f0000000000)=""/144, 0x90) recvmmsg(r1, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000001440)=""/116, 0xa3}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x400000000000108, 0x0, 0x0) 01:12:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x4c000000}}, 0x20}}, 0x0) 01:12:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xf000000}, 0x0) 01:12:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x3000000}}, 0x20}}, 0x0) 01:12:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r1, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r1, &(0x7f0000000000)=""/144, 0x90) recvmmsg(r1, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000001440)=""/116, 0xa3}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x400000000000108, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') (async) read$usbfs(r1, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r1, &(0x7f0000000000)=""/144, 0x90) (async) recvmmsg(r1, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000001440)=""/116, 0xa3}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x400000000000108, 0x0, 0x0) (async) 01:12:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 13) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x3000000}, 0x0) [ 3120.791917][ T4612] device bridge448 entered promiscuous mode [ 3120.810952][ T4613] device bridge88 entered promiscuous mode [ 3120.824304][ T4616] device bridge550 entered promiscuous mode 01:12:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r1, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r1, &(0x7f0000000000)=""/144, 0x90) (async) recvmmsg(r1, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000001440)=""/116, 0xa3}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x400000000000108, 0x0, 0x0) [ 3120.837315][ T4618] device bridge79 entered promiscuous mode [ 3120.882551][ T4624] device bridge449 entered promiscuous mode [ 3120.944739][ T4648] FAULT_INJECTION: forcing a failure. [ 3120.944739][ T4648] name failslab, interval 1, probability 0, space 0, times 0 [ 3120.957500][ T4648] CPU: 0 PID: 4648 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3120.967714][ T4648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3120.977744][ T4648] Call Trace: [ 3120.981009][ T4648] dump_stack_lvl+0x1e2/0x24b [ 3120.985658][ T4648] ? panic+0x7d7/0x7d7 [ 3120.989703][ T4648] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3120.995134][ T4648] dump_stack+0x15/0x17 [ 3120.999265][ T4648] should_fail+0x3c0/0x510 [ 3121.003655][ T4648] __should_failslab+0x9f/0xe0 [ 3121.008394][ T4648] should_failslab+0x9/0x20 [ 3121.012873][ T4648] kmem_cache_alloc+0x3f/0x300 [ 3121.017611][ T4648] ? mempool_alloc_slab+0x1d/0x30 [ 3121.022611][ T4648] mempool_alloc_slab+0x1d/0x30 [ 3121.027436][ T4648] ? mempool_free+0x310/0x310 [ 3121.032085][ T4648] mempool_init_node+0x1e6/0x4b0 [ 3121.036998][ T4648] ? mempool_free+0x310/0x310 [ 3121.041647][ T4648] ? mempool_alloc_slab+0x30/0x30 [ 3121.046647][ T4648] mempool_init+0x3c/0x50 [ 3121.050951][ T4648] bioset_init+0x48e/0x640 [ 3121.055347][ T4648] blk_alloc_queue+0xc6/0x640 [ 3121.060001][ T4648] ? loop_add+0x24c/0x760 [ 3121.064307][ T4648] blk_mq_init_queue+0x35/0xc0 [ 3121.069049][ T4648] loop_add+0x270/0x760 [ 3121.073181][ T4648] loop_control_ioctl+0x564/0x740 [ 3121.078180][ T4648] ? loop_remove+0xb0/0xb0 [ 3121.082577][ T4648] ? __fget_files+0x310/0x370 [ 3121.087236][ T4648] ? security_file_ioctl+0xb1/0xd0 [ 3121.092849][ T4648] ? loop_remove+0xb0/0xb0 [ 3121.097243][ T4648] __se_sys_ioctl+0x115/0x190 [ 3121.102935][ T4648] __x64_sys_ioctl+0x7b/0x90 [ 3121.107501][ T4648] do_syscall_64+0x34/0x70 [ 3121.111898][ T4648] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3121.117770][ T4648] RIP: 0033:0x7f42b4f940c9 [ 3121.122159][ T4648] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3121.141736][ T4648] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3121.150128][ T4648] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3121.158072][ T4648] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3121.166019][ T4648] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3121.173967][ T4648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3121.181914][ T4648] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x4000000}, 0x0) 01:12:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000011c0), 0x400843, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000001540)={{'\x00', 0x3}, {0x2}, 0x14e, 0x0, 0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)="88efb5eb5b282fd61fa82bdcc40254f59a6a07080000000000000bf41a293c8013d464d1e62e4dcee6c34af38a59f10000e4246216c70a8435acc7f8d32cf9b4d1ad99", 0x43, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x2e5}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r2, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r2, &(0x7f0000000000)=""/144, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r3, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r3, &(0x7f0000000000)=""/144, 0x90) writev(r3, &(0x7f00000015c0)=[{&(0x7f0000001240)="338859b9e2c42f343b3de92bf87be4c1505042d45820d6780a8683ae", 0x1c}, {&(0x7f0000001280)="2581e00a8f91379365d0bfc1abfe1579521568e9a741ef6be5ca5b5bf4163f12d2b34a15073828fea00d4a7139c5d96571895d5b29d32960e44130d72f9e2056ca86b3f84dd54c96fb7838fdfda32a22326e0af628ad4f79bbf6a23b073b1f8b0013d48470dd7f7a5f9dd2", 0x6b}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000001300)="8530d9ff5ea795", 0x7}, {&(0x7f0000001340)="19aefcaf4024bc076935e27ad766748f657c0812fe41bc78e0b7bf55ddfd6ce68b1b200bfb497b44caf9f46ebb8b76f5561af6aaee", 0x35}, {&(0x7f0000001380)="09cdfc9a61248ff10a1e217b46da9c7c22", 0x11}], 0x6) sendfile(r0, r2, &(0x7f0000001200)=0x7, 0x6) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001880)=""/146, 0x92}, {&(0x7f0000001940)=""/232, 0xe8}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x68000000}}, 0x20}}, 0x0) [ 3121.508609][ T4650] device bridge450 entered promiscuous mode [ 3121.542629][ T4656] device bridge88 entered promiscuous mode 01:12:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x4000000}}, 0x20}}, 0x0) 01:12:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000011c0), 0x400843, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000001540)={{'\x00', 0x3}, {0x2}, 0x14e, 0x0, 0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)="88efb5eb5b282fd61fa82bdcc40254f59a6a07080000000000000bf41a293c8013d464d1e62e4dcee6c34af38a59f10000e4246216c70a8435acc7f8d32cf9b4d1ad99", 0x43, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x2e5}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r2, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r2, &(0x7f0000000000)=""/144, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r3, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r3, &(0x7f0000000000)=""/144, 0x90) writev(r3, &(0x7f00000015c0)=[{&(0x7f0000001240)="338859b9e2c42f343b3de92bf87be4c1505042d45820d6780a8683ae", 0x1c}, {&(0x7f0000001280)="2581e00a8f91379365d0bfc1abfe1579521568e9a741ef6be5ca5b5bf4163f12d2b34a15073828fea00d4a7139c5d96571895d5b29d32960e44130d72f9e2056ca86b3f84dd54c96fb7838fdfda32a22326e0af628ad4f79bbf6a23b073b1f8b0013d48470dd7f7a5f9dd2", 0x6b}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000001300)="8530d9ff5ea795", 0x7}, {&(0x7f0000001340)="19aefcaf4024bc076935e27ad766748f657c0812fe41bc78e0b7bf55ddfd6ce68b1b200bfb497b44caf9f46ebb8b76f5561af6aaee", 0x35}, {&(0x7f0000001380)="09cdfc9a61248ff10a1e217b46da9c7c22", 0x11}], 0x6) sendfile(r0, r2, &(0x7f0000001200)=0x7, 0x6) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001880)=""/146, 0x92}, {&(0x7f0000001940)=""/232, 0xe8}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) openat$null(0xffffffffffffff9c, &(0x7f00000011c0), 0x400843, 0x0) (async) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000001540)={{'\x00', 0x3}, {0x2}, 0x14e, 0x0, 0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)="88efb5eb5b282fd61fa82bdcc40254f59a6a07080000000000000bf41a293c8013d464d1e62e4dcee6c34af38a59f10000e4246216c70a8435acc7f8d32cf9b4d1ad99", 0x43, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x2e5}) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') (async) read$usbfs(r2, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r2, &(0x7f0000000000)=""/144, 0x90) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') (async) read$usbfs(r3, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r3, &(0x7f0000000000)=""/144, 0x90) (async) writev(r3, &(0x7f00000015c0)=[{&(0x7f0000001240)="338859b9e2c42f343b3de92bf87be4c1505042d45820d6780a8683ae", 0x1c}, {&(0x7f0000001280)="2581e00a8f91379365d0bfc1abfe1579521568e9a741ef6be5ca5b5bf4163f12d2b34a15073828fea00d4a7139c5d96571895d5b29d32960e44130d72f9e2056ca86b3f84dd54c96fb7838fdfda32a22326e0af628ad4f79bbf6a23b073b1f8b0013d48470dd7f7a5f9dd2", 0x6b}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000001300)="8530d9ff5ea795", 0x7}, {&(0x7f0000001340)="19aefcaf4024bc076935e27ad766748f657c0812fe41bc78e0b7bf55ddfd6ce68b1b200bfb497b44caf9f46ebb8b76f5561af6aaee", 0x35}, {&(0x7f0000001380)="09cdfc9a61248ff10a1e217b46da9c7c22", 0x11}], 0x6) (async) sendfile(r0, r2, &(0x7f0000001200)=0x7, 0x6) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001880)=""/146, 0x92}, {&(0x7f0000001940)=""/232, 0xe8}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (async) 01:12:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x10000000}, 0x0) 01:12:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x5000000}, 0x0) 01:12:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x6c000000}}, 0x20}}, 0x0) 01:12:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 14) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x6000000}, 0x0) 01:12:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000011c0), 0x400843, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000001540)={{'\x00', 0x3}, {0x2}, 0x14e, 0x0, 0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)="88efb5eb5b282fd61fa82bdcc40254f59a6a07080000000000000bf41a293c8013d464d1e62e4dcee6c34af38a59f10000e4246216c70a8435acc7f8d32cf9b4d1ad99", 0x43, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x2e5}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r2, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r2, &(0x7f0000000000)=""/144, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r3, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r3, &(0x7f0000000000)=""/144, 0x90) writev(r3, &(0x7f00000015c0)=[{&(0x7f0000001240)="338859b9e2c42f343b3de92bf87be4c1505042d45820d6780a8683ae", 0x1c}, {&(0x7f0000001280)="2581e00a8f91379365d0bfc1abfe1579521568e9a741ef6be5ca5b5bf4163f12d2b34a15073828fea00d4a7139c5d96571895d5b29d32960e44130d72f9e2056ca86b3f84dd54c96fb7838fdfda32a22326e0af628ad4f79bbf6a23b073b1f8b0013d48470dd7f7a5f9dd2", 0x6b}, {&(0x7f0000001d40)="837442441a33f42d6b1ab6bf988b8a12348ac70416062ca3bc52a85de758bcc72aa56acd09c5a60aa16de961bdff721201de71f5fdc770bee12d06f2690563cd757e2a037da28e4c7846b9f9ef947af87495292aeacfb527cf18e0b8b2b0b6f5e7c5f1ae4b66acaf1810047f65c1f261d21e2b8f591156ad53d7913b74ae773ba9ef3c110fbae2d92e81aa45683bda021c02b15a102c78d0cd3638b2a6b341c073875b63a86757e6b2ecc0d12ff6f61b71573566343428e2614740037bb081bcd1bbf513ebda1463c366f5db6fa30617431a64a576514f48738a39486bd3515bb7a3e78e501671810a8842a118e68c2f99a5e51aab1dfdedb80e8c536926fe57cddc18d706964ab24c35d054d3dbd5b586f06086458f5fb91a1374349b7f8094032619c079e4b76dc1ac6b98e5ac2d3d7161654af421c3862185692ba470d212faccbe46f91d88c26a8824ce7e4b08657393dbb83e37a7bb9e71a36f4d28ce125dd393124d1b5e9d390310c5522c0fcc648e054a2967cfc3c5d033999cc3442930fb2b6f332e5bcbf2fe1f52e3f1160dc195972573975d067a0d79c3858532f031bfe54529d6db4e6b694a42a38954fc32b82d87b99313d20af1ea5e7cc3464616582254cd553d8607b65850fbfd93bd44eeef7e6ca4bdd992f7a133c49b9b81fb046ab5e84ba9701eeb95bfcc1ad446c6dc25c798e0a7a91570590263c3e4a2a9ebbb4d03535eed589ed8e7ae5d3d3e69a09063ec0dce72b1ec431ac60da1af1bf87abde16e638919ff54a50cca1ea0eaceadcdb8c7ba0303bd24a395e250585fa4d06f411cce12ffdc7b0c67acacf19efbdf92ca69fb073cc926f775953f8cdab6d7f6ec336412d655313bfad73b039d24d8aa187abf1aefe260f71d0ef33972ce5c0e0fcf717131af32f0990fd64508a1f12837a4ec3cf8f9f0895746be8b8bec9815c702e3d64d33076857ff7da7865aead014dffeab674c22fcf2597f3bc2246679ee66432ce30e7150206f25196442e87b662302905e98f2cdfe73393dad81fffe384f7eeb5b3d3d096f9f9eb883ac5e7be1601b76a6569e3b730dda47cd2140ce2ef0c65a95d64288f859df55f9de51ef822c35c03598a15397301a0ff95fb37c3e017092d9a7c7b3becc24e5c97f9df10f31b6d6135247c0795d25d544d15cfde32a49c48c465e3d892211e9fd45be7c8d3f0986208b30e53266047aceb6d2e528141c473d0c1ef9d34b4bc67d3a3c1c854bec7e264b8accbb7b6b3e2ab6e4528ecfe780c65a7b45a44b4c649bd719502fd25592f69bdad7616c21d112c6e7eb45bf6657c51dc76fd460ab321e67a4d74c6fbd8247f0a254912612da7b1a6c38eb727c38ae771175280226e3c9c76e8fe1be2a08fc16a80e14649955158fb11ba9c1eff48e7debd5be1581fad245a673959655f8f9d400c38ea190cf7769f18851bcaf87e0f09941c5c7090d00fba9f96142c3d14c8034be4c3f9ff5ae1b321e44bfb33d768ee89d512bee5efde8dd2021fbda038a7bda8b4e594e1fe93334863cb9a2d5c2a81214da4da4ecb26a99f5de8ad45e35e548c1016ec4bad4b992c2cfeb2c6224f972de426fa46d1a5f1abff2f787ce338127e50775fa66bef7f81e8ae8d5057d7af09697d91c560dd7839d1948d3eb3debfd1028f4a4ab086b475a6dfde4556f72a742830e5ebfccf158b15541c6a221ec143d0514ec86e9f65d910ab08294d7782c9c2ccc2aafff53c485b2aa8d6b1b0f6f2f831c3c98b126d57d5f522f5bb72f07421eeaaaa1f706b8e8bf96fee7ee7f07431b7da10de76b5a6e75796da22b003d58c20c491629613906674f6816d403ed8c9b4402cc3267749860a56ea6e0bdd0542d7259043796979842465011d6685be7118a689bdffde6156f9fe73641c785492bec11d2cc48ae15e65830482c60e48521b595710df338c8e6a5e56934776e411be0c4be9926a815ef04ac61fac64d0a0f5d7e9ecdcedc58c0638a6075fb34e5b22b5ac3e55ce9075041bee958c53b69f4bcaf60286ad567c8620d5f319c28873239dea2f0c7e8d499778405e19f57d9a887882d769fd781c6728804af40e6e88850da69c02512e2ddf72fa8df6145e817980b5466e4a65355992b54c69655137bcf81d770ca76044fb5e526f6920669ae40bbbd67def1fea725eec405b5eedba3c7b0c0748c43a7de33fbb593ce55ce7fd5e7c43095992578e387178de578168ec128cc93a0f755578aad6bbc89cce5b9c6c76e93e9b2415a313bdf8fc13e19fc92853be086707cacc598e10a428a14ebbbbb893bbdd100d295e01039c6a2aa4c2bc3966cb7ec9a0aa97731ea6936ba81bad673d9cc45edd4a24223f0e3649e36febb7c86aaeefd549b6714db5087833f004b44f719e226c0f21781926ad916b798a861cac15fb3f19cc14345795e29f5f7f4b35b8389b7c0c6d9a9fe537e99494cf5a28c915eca794d40bc86d625ed5d83b69961b8449dcbb2fdad23d0f8dcc133ee182bea81bf9b2884693fc4a77d08207b8943b725e402340a54989ed589770c0088aec090463f6ec80fb019f2f3f0904d99b6d21d4d5761c7d32dbf6a819aa984e618f51b4cd0064fa226fc15fb32cb5ad9f2691e56a886e5659ac3cbeacf6467be744cd171d75919295e960459969d9f6da63bf5e6f51967c4e1479b4d2034d1e5eb75c4384f3aabb41327523def4ff7f5fde1504d3f785057efbbbd642ddabe0d0a7164873325b4188c4bca76299e999b7a6dc05e9d3bd1a8dc6099b27051d2178da62ec87ff13b44e176effacc4d0ab65403894658d706f5bbb3bb7909bab58dd9049879bc6c27d4704c5e8ef6c8eac27069e91f2d03aeb6b7babbd718b7479bf54bbf95df8a9b55725f39ed997194168200514a22a988b605684cdab7e6c26b512b8cbe5b873aebf4ef787d11ff397727864157b8c773774f96027b43cbfa0ebfc8b4fa458709a73573a78219a5feebcabe4871e5fb5a16397c1091cbb3a3caa4696e6e0c8eaddcf8a02d7a2a8b21cf9d664a7997c51e1edf4c72a821475d14f9e9e2d319f1cefb9237151a2307f9027b849a3c1cd751399a8b3de1ff171c8b95f437a7d7ede40ce1bba0762af44852f6bcb2bfb96f0444daca64c708afd97a22ebe96c23351cdcea6775856d2bda0ed55ea7015e5f01750a83213c268fe3776e419d93f0cf09f05ff16e3c33df2d8f591ef16d1bfe9017b7d5ea948cb245716c5f663dbb94178a063e3efad863fc3eb5d7718087f60b2dbf4c75f18542d25fd7e2b443e6e3edcd30649142d1ab9a1defdbe34d843430383f7289c2ca07a1c6088650bba5f983f94d75845ffffa645cc6036680ac42342d772d4f69b608bd29d64c7ee49a6a659adae0fa18b1473de682ca4d70a216e3457bcd2aa4862a13cf8f2eac89e85fd5cf38d14062386fe013e616373a35e0c4fcbafcb9b0c4a7ed12f796d16a426c7a7836b08770ac59f10ff4b44be02ebd537ed0ada66fdb92b3bd9ec82d8a19d39963dbdf24fb64a81c80b617d1df868bf9fe2486b495ba3f10c5839997f63b0a14159c5cc1108c1d84e058bf8edc0c4027f8ab1c559b16f2ed3700bea62492d0171c63824b1433264ec0df2cbd03798c3df3eba0f1ae4baa7b89e5e4a0f071c33aeca4af47413e8ff9276261280d1bedd9a881ebdd9bfc8638732187549fbaac08a1859e00808ab5ca122ff2a67ebe53af3bb4084c9c1746955aa78698450a4797a68cb11ae9da4a1f3f2a2796a08d22206b0226bab1ff73b28e120e88a8f7dc02d735f34b3ba3c0a13b56d18565515bd624663a4d832d337d9fdc9b107cc13e87fa6f627fd355c293b8d03f07b6669d82b4f5464153234f2496786222576edb9a4b1efd27d0fbfc625123e942c45038f178af4e874543c2bc156999ebead054868b363aa0d79cb3428b4a1ed6b4ce8d43afa1da3ec027a9a81ad4906666c9f14d09b44b9380905e44e4f4b27e60949715f2e6c84954c30da170abc999e1389669285a60255fda26b951e88ce5ff5073384570c5ec6dd021066869fff519dd24de3899f027107b2915919212f5709e4ac4c07670338c33d026367296306113d6ddb67af203250013854b311807203c157557f301a2a02bada9f721de6b7d837af051cf93688b5d9991a26af55b0ddd2815424abeb515434587aac2a68c2a5fd5552399ea994c7e928f43a3421bbcbef56cff27bfcc35db13ec69044f23a121cc375c94ef5ff39b6136a660c6d3c56e5121151949a2aefb0fccf27fd0722a2425072a4aefb1c0b523d6a32ba1d320cb95514188efea657f8ac63a221b8919204906795f294aea1a18b89dce207095231c6f1eb65abb6e13441be2ad213c97332efaf0d10ac4aefcdf8d57877da81f6c32958dae0ff5e09eebec3cea7f8321096489d4a231d5798a55025f27f8dc015a051c8955ef8b3e026961155039378741b6662742c28466b381900563309aa9ee50cac9576ba14fd07c9c6a2fd20978e3760219073a43e13025d50c584aeb866b5d22713cac2f6512950db329be9515bae6ca9be04a3e40ca0d58b79c68244b7d0f10092ce687b19213ec36ca3b872604569cf8b042a8a77ffa5216919befb1c4423739834ea15e674df048b4e96ecba2702956086485456f9d4a22c30435c486fa4a6d649873dff333c2b23f3b1d955f538fc0a307c34028134297792ad2efb6a2fdfbc0a17d6e393eae31fff177de70bd688e1cdd2bb66a75953fcbefe68dd025a6a93e58500770b9f5f7f073687974f2bdcbc74fe79293e177365ac13352ae4d142baee0f1fd22336fd7ef8e5ea5f2a70ed1d5e8701c9d474d55c8ce9acc1e56a84cf08c16477454f13ccefd11d340577925297ccb7c7689cd85f714d159ec1cbc72dff4a71403378d3e0b4d64c9aa4995bc6164bdaa8f2727a0c61e2f345f7fa6410b13d77210f144ca4eccca37215bc58bfc300c87c4175f1e4fd15cc33b7aad8ffa52e3d45429f174f5fc18732cb49306cdecdafef8f8f05a3e10f64cf4b8b27314be7ac88bf6470dc84f2e9599db1de457fee4f171827765f55af8dc8bcb52b780703d9e53147d47e69dccf4bbedff92eb1f9518cf6fe50ef7d3b6e53091d382d7be8c26c53768140f3e1a0ab2d74ff199ef19052a465c2098c493330ec53446bbb2b5671d5a1b9a52e3da539cb4c77355f9ca0c16dbd13ef7602382c262c6c42b91578360b92afa770566cdfa18467956b43a122701ab79b9771c7d05d6e427341f5c696762c5b7047a35dbbe76f15ea3b56d32690597b437e74fbecec7d3eaaceda2c013f03d77dafda670eac6a7e9038f7a8af3a1f6a8fae876b888eb241cf79e7fdc0361828ef1584a403a3e94b5c93e3413f92a354abfe18383d04f25d0b3fc51ec9406ac1919d326b132be5393be53fe44d5e4aee376ed9baca4aae54acbdfaf77055eb941a17d81fd3328c402fa2917bd99a62b0ee2d54f9037f32782e08c7dfc66c0b899f7669e58565ae7dbe65c04fbc310592b184502a005fd45b4890dce0c38edf99b5cb659f3869e85d74e7ef2dd7a60f195c425d391f699b08715d367044ac40cd12f6f3f94402bf0e2a25648c2f9f5f8f6e95e9236f3a1c285d2a7bbaacb1cf89bec21f09170c3a1ac771cb1f04bdf99207938cde429d2a29f3e95b39065d8dc8743958d4266dc98a8d31c0940076146064574cac5c69312977519d7eedee4ddc5a50cbbb60f01104d99c21af665d0e67aa2c3b2375cf7b074a97152374b8768419824aa2dcc660b873470a6e014bba772", 0x1000}, {&(0x7f0000001300)="8530d9ff5ea795", 0x7}, {&(0x7f0000001340)="19aefcaf4024bc076935e27ad766748f657c0812fe41bc78e0b7bf55ddfd6ce68b1b200bfb497b44caf9f46ebb8b76f5561af6aaee", 0x35}, {&(0x7f0000001380)="09cdfc9a61248ff10a1e217b46da9c7c22", 0x11}], 0x6) (async) sendfile(r0, r2, &(0x7f0000001200)=0x7, 0x6) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001880)=""/146, 0x92}, {&(0x7f0000001940)=""/232, 0xe8}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) [ 3121.807924][ T4658] device bridge451 entered promiscuous mode [ 3121.831162][ T4676] device bridge79 entered promiscuous mode [ 3121.849568][ T4680] device bridge88 entered promiscuous mode [ 3121.872265][ T4660] device bridge550 entered promiscuous mode [ 3121.884456][ T4683] device bridge452 entered promiscuous mode [ 3121.951387][ T4689] FAULT_INJECTION: forcing a failure. [ 3121.951387][ T4689] name failslab, interval 1, probability 0, space 0, times 0 [ 3121.964128][ T4689] CPU: 0 PID: 4689 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3121.974955][ T4689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3121.984983][ T4689] Call Trace: [ 3121.988264][ T4689] dump_stack_lvl+0x1e2/0x24b [ 3121.992913][ T4689] ? panic+0x7d7/0x7d7 [ 3121.996956][ T4689] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3122.002388][ T4689] dump_stack+0x15/0x17 [ 3122.006518][ T4689] should_fail+0x3c0/0x510 [ 3122.010909][ T4689] __should_failslab+0x9f/0xe0 [ 3122.015649][ T4689] should_failslab+0x9/0x20 [ 3122.020125][ T4689] kmem_cache_alloc+0x3f/0x300 [ 3122.024866][ T4689] ? mempool_alloc_slab+0x1d/0x30 [ 3122.029867][ T4689] ? ____kasan_slab_free+0x10a/0x160 [ 3122.035127][ T4689] mempool_alloc_slab+0x1d/0x30 [ 3122.039954][ T4689] ? mempool_free+0x310/0x310 [ 3122.044604][ T4689] mempool_init_node+0x1e6/0x4b0 [ 3122.049518][ T4689] ? mempool_free+0x310/0x310 [ 3122.054169][ T4689] ? mempool_alloc_slab+0x30/0x30 [ 3122.059167][ T4689] mempool_init+0x3c/0x50 [ 3122.063473][ T4689] bioset_init+0x48e/0x640 [ 3122.067865][ T4689] blk_alloc_queue+0xc6/0x640 [ 3122.072513][ T4689] ? __mutex_init+0xa1/0xf0 [ 3122.076996][ T4689] blk_mq_init_queue+0x35/0xc0 [ 3122.081743][ T4689] loop_add+0x270/0x760 [ 3122.085878][ T4689] loop_control_ioctl+0x564/0x740 [ 3122.090877][ T4689] ? loop_remove+0xb0/0xb0 [ 3122.095272][ T4689] ? sysvec_reschedule_ipi+0x84/0x160 [ 3122.100622][ T4689] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3122.106231][ T4689] ? loop_remove+0xb0/0xb0 [ 3122.110622][ T4689] ? do_vfs_ioctl+0xf6/0x1a90 [ 3122.115271][ T4689] ? __se_sys_ioctl+0xa6/0x190 [ 3122.120006][ T4689] ? __se_sys_ioctl+0x109/0x190 [ 3122.124831][ T4689] ? loop_control_ioctl+0x1/0x740 [ 3122.129829][ T4689] ? loop_remove+0xb0/0xb0 [ 3122.134235][ T4689] __se_sys_ioctl+0x115/0x190 [ 3122.138897][ T4689] __x64_sys_ioctl+0x7b/0x90 [ 3122.143492][ T4689] do_syscall_64+0x34/0x70 [ 3122.147894][ T4689] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3122.153764][ T4689] RIP: 0033:0x7f42b4f940c9 [ 3122.158166][ T4689] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3122.177746][ T4689] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3122.186139][ T4689] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3122.194086][ T4689] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3122.202034][ T4689] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3122.209982][ T4689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3122.217930][ T4689] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x8000000}, 0x0) 01:12:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x74000000}}, 0x20}}, 0x0) 01:12:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x9000000}, 0x0) 01:12:43 executing program 3: syz_open_dev$vcsu(&(0x7f00000011c0), 0x80000001, 0x10040) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0xfffffffffffffee2}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/85, 0x57}], 0x7}}], 0x1, 0x0, 0x0) [ 3122.558690][ T4691] device bridge453 entered promiscuous mode [ 3122.579866][ T4693] device bridge88 entered promiscuous mode [ 3122.651730][ T4697] device bridge454 entered promiscuous mode 01:12:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x5000000}}, 0x20}}, 0x0) 01:12:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x11000000}, 0x0) 01:12:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 15) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:44 executing program 3: syz_open_dev$vcsu(&(0x7f00000011c0), 0x80000001, 0x10040) (async) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0xfffffffffffffee2}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/85, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x7a000000}}, 0x20}}, 0x0) 01:12:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xa000000}, 0x0) 01:12:44 executing program 3: syz_open_dev$vcsu(&(0x7f00000011c0), 0x80000001, 0x10040) (async) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0xfffffffffffffee2}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/85, 0x57}], 0x7}}], 0x1, 0x0, 0x0) [ 3122.878086][ T4710] device bridge88 entered promiscuous mode [ 3122.904846][ T4712] device bridge550 entered promiscuous mode [ 3122.915849][ T4714] device bridge79 entered promiscuous mode [ 3122.927549][ T4711] device bridge455 entered promiscuous mode [ 3123.001695][ T4720] FAULT_INJECTION: forcing a failure. [ 3123.001695][ T4720] name failslab, interval 1, probability 0, space 0, times 0 [ 3123.014434][ T4720] CPU: 0 PID: 4720 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3123.024649][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3123.034681][ T4720] Call Trace: [ 3123.037958][ T4720] dump_stack_lvl+0x1e2/0x24b [ 3123.042614][ T4720] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3123.048047][ T4720] dump_stack+0x15/0x17 [ 3123.052178][ T4720] should_fail+0x3c0/0x510 [ 3123.056571][ T4720] ? mempool_init_node+0x12b/0x4b0 [ 3123.061657][ T4720] __should_failslab+0x9f/0xe0 [ 3123.066396][ T4720] should_failslab+0x9/0x20 [ 3123.070884][ T4720] __kmalloc+0x60/0x360 [ 3123.075014][ T4720] ? ____kasan_slab_free+0x10a/0x160 [ 3123.080281][ T4720] mempool_init_node+0x12b/0x4b0 [ 3123.085205][ T4720] ? mempool_alloc_slab+0x30/0x30 [ 3123.090208][ T4720] ? mempool_free+0x310/0x310 [ 3123.094857][ T4720] ? mempool_free+0x310/0x310 [ 3123.099508][ T4720] ? mempool_alloc_slab+0x30/0x30 [ 3123.104509][ T4720] mempool_init+0x3c/0x50 [ 3123.108813][ T4720] bioset_init+0x503/0x640 [ 3123.113204][ T4720] blk_alloc_queue+0xc6/0x640 [ 3123.117852][ T4720] ? __mutex_init+0xa1/0xf0 [ 3123.122330][ T4720] blk_mq_init_queue+0x35/0xc0 [ 3123.127073][ T4720] loop_add+0x270/0x760 [ 3123.131207][ T4720] loop_control_ioctl+0x564/0x740 [ 3123.136209][ T4720] ? loop_remove+0xb0/0xb0 [ 3123.140604][ T4720] ? __fget_files+0x310/0x370 [ 3123.145257][ T4720] ? security_file_ioctl+0xb1/0xd0 [ 3123.150341][ T4720] ? loop_remove+0xb0/0xb0 [ 3123.154732][ T4720] __se_sys_ioctl+0x115/0x190 [ 3123.159401][ T4720] __x64_sys_ioctl+0x7b/0x90 [ 3123.163974][ T4720] do_syscall_64+0x34/0x70 [ 3123.168373][ T4720] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3123.174251][ T4720] RIP: 0033:0x7f42b4f940c9 [ 3123.178655][ T4720] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3123.198238][ T4720] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3123.206640][ T4720] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3123.214690][ T4720] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3123.222642][ T4720] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3123.230594][ T4720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3123.238544][ T4720] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) dup3(r1, 0xffffffffffffffff, 0x80000) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x10000000}, 0x0) 01:12:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) dup3(r1, 0xffffffffffffffff, 0x80000) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x12000000}, 0x0) 01:12:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x7cb92980}}, 0x20}}, 0x0) [ 3123.551925][ T4725] __nla_validate_parse: 26 callbacks suppressed [ 3123.551933][ T4725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3123.572327][ T4725] device bridge456 entered promiscuous mode [ 3123.619726][ T4734] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3123.639570][ T4734] device bridge550 entered promiscuous mode [ 3123.647591][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3123.665666][ T4733] device bridge88 entered promiscuous mode 01:12:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x6000000}}, 0x20}}, 0x0) 01:12:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x1f000000}, 0x0) 01:12:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) dup3(r1, 0xffffffffffffffff, 0x80000) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) dup3(r1, 0xffffffffffffffff, 0x80000) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (async) 01:12:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 16) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x13000000}, 0x0) 01:12:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x8029b97c}}, 0x20}}, 0x0) [ 3123.947966][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3123.961541][ T4744] device bridge88 entered promiscuous mode [ 3123.968873][ T4746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3123.980413][ T4746] device bridge79 entered promiscuous mode [ 3123.987202][ T4745] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3124.037117][ T4745] device bridge550 entered promiscuous mode [ 3124.054621][ T4748] FAULT_INJECTION: forcing a failure. [ 3124.054621][ T4748] name failslab, interval 1, probability 0, space 0, times 0 [ 3124.067365][ T4748] CPU: 0 PID: 4748 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3124.077578][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3124.087606][ T4748] Call Trace: [ 3124.090876][ T4748] dump_stack_lvl+0x1e2/0x24b [ 3124.095530][ T4748] ? panic+0x7d7/0x7d7 [ 3124.099571][ T4748] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3124.105114][ T4748] dump_stack+0x15/0x17 [ 3124.109243][ T4748] should_fail+0x3c0/0x510 [ 3124.113635][ T4748] __should_failslab+0x9f/0xe0 [ 3124.118393][ T4748] should_failslab+0x9/0x20 [ 3124.122888][ T4748] kmem_cache_alloc+0x3f/0x300 [ 3124.127643][ T4748] ? mempool_alloc_slab+0x1d/0x30 [ 3124.132742][ T4748] mempool_alloc_slab+0x1d/0x30 [ 3124.137574][ T4748] ? mempool_free+0x310/0x310 [ 3124.142238][ T4748] mempool_init_node+0x1e6/0x4b0 [ 3124.147332][ T4748] ? mempool_free+0x310/0x310 [ 3124.151991][ T4748] ? mempool_alloc_slab+0x30/0x30 [ 3124.156992][ T4748] mempool_init+0x3c/0x50 [ 3124.161299][ T4748] bioset_init+0x503/0x640 [ 3124.165693][ T4748] blk_alloc_queue+0xc6/0x640 [ 3124.170344][ T4748] ? __mutex_init+0xa1/0xf0 [ 3124.174822][ T4748] blk_mq_init_queue+0x35/0xc0 [ 3124.179560][ T4748] loop_add+0x270/0x760 [ 3124.183694][ T4748] loop_control_ioctl+0x564/0x740 [ 3124.188691][ T4748] ? loop_remove+0xb0/0xb0 [ 3124.193088][ T4748] ? __fget_files+0x310/0x370 [ 3124.197765][ T4748] ? security_file_ioctl+0xb1/0xd0 [ 3124.202856][ T4748] ? loop_remove+0xb0/0xb0 [ 3124.207248][ T4748] __se_sys_ioctl+0x115/0x190 [ 3124.211898][ T4748] __x64_sys_ioctl+0x7b/0x90 [ 3124.216462][ T4748] do_syscall_64+0x34/0x70 [ 3124.220854][ T4748] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3124.226720][ T4748] RIP: 0033:0x7f42b4f940c9 [ 3124.231115][ T4748] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3124.250695][ T4748] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3124.259083][ T4748] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3124.267068][ T4748] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3124.275039][ T4748] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3124.282987][ T4748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3124.290935][ T4748] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3124.338304][ T4737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:12:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x21000000}, 0x0) [ 3124.461746][ T4737] device bridge457 entered promiscuous mode 01:12:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = accept4$inet(r0, &(0x7f00000011c0)={0x2, 0x0, @multicast2}, &(0x7f0000001440)=0x10, 0x80000) accept(r1, &(0x7f0000001480)=@in={0x2, 0x0, @multicast2}, &(0x7f0000001500)=0x80) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001740)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r3 = creat(&(0x7f0000001780)='./file0\x00', 0x185) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000017c0), 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r5, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r5, &(0x7f0000000000)=""/144, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x9, 0xa, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0xc, 0x5, 0x0, 0xa}, @exit, @call={0x85, 0x0, 0x0, 0x57}, @jmp={0x5, 0x1, 0xa, 0x1, 0x4, 0xfffffffffffffff0}, @ldst={0x2, 0x1, 0x0, 0x0, 0x5, 0x6, 0x1}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0xc, 0xfffffffffffffff0}]}, &(0x7f00000015c0)='syzkaller\x00', 0x5, 0x7c, &(0x7f0000001680)=""/124, 0x41100, 0x1a, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001700)={0x4, 0xd, 0x3, 0xffff}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000001800)=[0xffffffffffffffff, r3, r4, r5, 0x1, 0xffffffffffffffff]}, 0x80) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 17) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x81000000}}, 0x20}}, 0x0) 01:12:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x72c247c9}, 0x0) [ 3124.742005][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3124.772556][ T4760] device bridge458 entered promiscuous mode 01:12:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x18000000}, 0x0) [ 3124.835968][ T4770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3124.861921][ T4770] device bridge550 entered promiscuous mode [ 3124.870134][ T4771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3124.895944][ T4771] device bridge459 entered promiscuous mode [ 3124.921250][ T4767] device bridge88 entered promiscuous mode [ 3124.935857][ T4775] FAULT_INJECTION: forcing a failure. [ 3124.935857][ T4775] name failslab, interval 1, probability 0, space 0, times 0 [ 3124.949804][ T4775] CPU: 0 PID: 4775 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3124.960021][ T4775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3124.970051][ T4775] Call Trace: [ 3124.973320][ T4775] dump_stack_lvl+0x1e2/0x24b [ 3124.977969][ T4775] ? panic+0x7d7/0x7d7 [ 3124.982618][ T4775] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3124.988049][ T4775] ? preempt_schedule_irq+0xef/0x140 [ 3124.993306][ T4775] ? preempt_schedule_notrace+0x140/0x140 [ 3124.998997][ T4775] dump_stack+0x15/0x17 [ 3125.003127][ T4775] should_fail+0x3c0/0x510 [ 3125.007518][ T4775] __should_failslab+0x9f/0xe0 [ 3125.012254][ T4775] should_failslab+0x9/0x20 [ 3125.016731][ T4775] kmem_cache_alloc+0x3f/0x300 [ 3125.021471][ T4775] ? mempool_alloc_slab+0x1d/0x30 [ 3125.026469][ T4775] mempool_alloc_slab+0x1d/0x30 [ 3125.031292][ T4775] ? mempool_free+0x310/0x310 [ 3125.035943][ T4775] mempool_init_node+0x1e6/0x4b0 [ 3125.040856][ T4775] ? mempool_free+0x310/0x310 [ 3125.045506][ T4775] ? mempool_alloc_slab+0x30/0x30 [ 3125.050500][ T4775] mempool_init+0x3c/0x50 [ 3125.054805][ T4775] bioset_init+0x503/0x640 [ 3125.059195][ T4775] blk_alloc_queue+0xc6/0x640 [ 3125.063843][ T4775] ? __mutex_init+0xa1/0xf0 [ 3125.068407][ T4775] blk_mq_init_queue+0x35/0xc0 [ 3125.073148][ T4775] loop_add+0x270/0x760 [ 3125.077281][ T4775] loop_control_ioctl+0x564/0x740 [ 3125.082279][ T4775] ? loop_remove+0xb0/0xb0 [ 3125.086670][ T4775] ? irqentry_exit+0x50/0x60 [ 3125.091233][ T4775] ? sysvec_reschedule_ipi+0x84/0x160 [ 3125.096582][ T4775] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3125.102189][ T4775] ? loop_remove+0xb0/0xb0 [ 3125.106580][ T4775] __se_sys_ioctl+0x115/0x190 [ 3125.111230][ T4775] __x64_sys_ioctl+0x7b/0x90 [ 3125.115795][ T4775] do_syscall_64+0x34/0x70 [ 3125.120186][ T4775] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3125.126050][ T4775] RIP: 0033:0x7f42b4f940c9 [ 3125.130445][ T4775] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3125.150033][ T4775] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3125.158434][ T4775] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3125.166388][ T4775] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3125.174341][ T4775] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3125.182285][ T4775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3125.190231][ T4775] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = accept4$inet(r0, &(0x7f00000011c0)={0x2, 0x0, @multicast2}, &(0x7f0000001440)=0x10, 0x80000) accept(r1, &(0x7f0000001480)=@in={0x2, 0x0, @multicast2}, &(0x7f0000001500)=0x80) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001740)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r3 = creat(&(0x7f0000001780)='./file0\x00', 0x185) (async, rerun: 64) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000017c0), 0x8) (rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r5, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r5, &(0x7f0000000000)=""/144, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x9, 0xa, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0xc, 0x5, 0x0, 0xa}, @exit, @call={0x85, 0x0, 0x0, 0x57}, @jmp={0x5, 0x1, 0xa, 0x1, 0x4, 0xfffffffffffffff0}, @ldst={0x2, 0x1, 0x0, 0x0, 0x5, 0x6, 0x1}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0xc, 0xfffffffffffffff0}]}, &(0x7f00000015c0)='syzkaller\x00', 0x5, 0x7c, &(0x7f0000001680)=""/124, 0x41100, 0x1a, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001700)={0x4, 0xd, 0x3, 0xffff}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000001800)=[0xffffffffffffffff, r3, r4, r5, 0x1, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x7000000}}, 0x20}}, 0x0) 01:12:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x81000000}, 0x0) 01:12:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 18) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x81ffffff}}, 0x20}}, 0x0) 01:12:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x1f000000}, 0x0) 01:12:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = accept4$inet(r0, &(0x7f00000011c0)={0x2, 0x0, @multicast2}, &(0x7f0000001440)=0x10, 0x80000) accept(r1, &(0x7f0000001480)=@in={0x2, 0x0, @multicast2}, &(0x7f0000001500)=0x80) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001740)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r3 = creat(&(0x7f0000001780)='./file0\x00', 0x185) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000017c0), 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r5, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r5, &(0x7f0000000000)=""/144, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x9, 0xa, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0xc, 0x5, 0x0, 0xa}, @exit, @call={0x85, 0x0, 0x0, 0x57}, @jmp={0x5, 0x1, 0xa, 0x1, 0x4, 0xfffffffffffffff0}, @ldst={0x2, 0x1, 0x0, 0x0, 0x5, 0x6, 0x1}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0xc, 0xfffffffffffffff0}]}, &(0x7f00000015c0)='syzkaller\x00', 0x5, 0x7c, &(0x7f0000001680)=""/124, 0x41100, 0x1a, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001700)={0x4, 0xd, 0x3, 0xffff}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000001800)=[0xffffffffffffffff, r3, r4, r5, 0x1, 0xffffffffffffffff]}, 0x80) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) [ 3125.630574][ T4786] device bridge79 entered promiscuous mode [ 3125.656230][ T4788] device bridge460 entered promiscuous mode 01:12:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x81ffffff}, 0x0) 01:12:47 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000011c0)=0x400, 0x1) r0 = socket(0x10, 0x3, 0x4) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) [ 3125.714218][ T4794] device bridge550 entered promiscuous mode [ 3125.737794][ T4797] device bridge88 entered promiscuous mode [ 3125.754185][ T4803] device bridge461 entered promiscuous mode [ 3125.821186][ T4808] FAULT_INJECTION: forcing a failure. [ 3125.821186][ T4808] name failslab, interval 1, probability 0, space 0, times 0 [ 3125.833950][ T4808] CPU: 0 PID: 4808 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3125.844165][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3125.854196][ T4808] Call Trace: [ 3125.857469][ T4808] dump_stack_lvl+0x1e2/0x24b [ 3125.862123][ T4808] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3125.867558][ T4808] ? kmem_cache_alloc+0x1a4/0x300 [ 3125.872560][ T4808] ? ____kasan_slab_free+0x10a/0x160 [ 3125.877824][ T4808] dump_stack+0x15/0x17 [ 3125.882311][ T4808] should_fail+0x3c0/0x510 [ 3125.886786][ T4808] ? bdi_alloc+0x4e/0x110 [ 3125.891092][ T4808] __should_failslab+0x9f/0xe0 [ 3125.895829][ T4808] should_failslab+0x9/0x20 [ 3125.900314][ T4808] kmem_cache_alloc_trace+0x3a/0x330 [ 3125.905579][ T4808] ? bioset_init+0x54a/0x640 [ 3125.910141][ T4808] bdi_alloc+0x4e/0x110 [ 3125.914274][ T4808] blk_alloc_queue+0x111/0x640 [ 3125.919009][ T4808] ? __mutex_init+0xa1/0xf0 [ 3125.923487][ T4808] blk_mq_init_queue+0x35/0xc0 [ 3125.928228][ T4808] loop_add+0x270/0x760 [ 3125.932364][ T4808] loop_control_ioctl+0x564/0x740 [ 3125.937716][ T4808] ? loop_remove+0xb0/0xb0 [ 3125.942108][ T4808] ? security_file_ioctl+0x74/0xd0 [ 3125.947194][ T4808] ? security_file_ioctl+0xb1/0xd0 [ 3125.952281][ T4808] ? __sanitizer_cov_trace_pc+0x11/0x60 [ 3125.957798][ T4808] ? security_file_ioctl+0xb1/0xd0 [ 3125.962897][ T4808] ? loop_remove+0xb0/0xb0 [ 3125.967290][ T4808] __se_sys_ioctl+0x115/0x190 [ 3125.971945][ T4808] __x64_sys_ioctl+0x7b/0x90 [ 3125.976519][ T4808] do_syscall_64+0x34/0x70 [ 3125.980920][ T4808] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3125.986785][ T4808] RIP: 0033:0x7f42b4f940c9 [ 3125.991186][ T4808] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3126.010764][ T4808] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3126.019245][ T4808] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3126.027193][ T4808] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3126.035145][ T4808] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3126.043104][ T4808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3126.051070][ T4808] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3126.088014][ T4809] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=4809 comm=syz-executor.3 01:12:47 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000011c0)=0x400, 0x1) r0 = socket(0x10, 0x3, 0x4) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x9effffff}, 0x0) 01:12:47 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000011c0)=0x400, 0x1) r0 = socket(0x10, 0x3, 0x4) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:47 executing program 3: r0 = socket(0x10, 0x5, 0xffffffff) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) [ 3126.240375][ T4811] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=4811 comm=syz-executor.3 [ 3126.275387][ T4816] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=4816 comm=syz-executor.3 01:12:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x8000000}}, 0x20}}, 0x0) 01:12:47 executing program 3: r0 = socket(0x10, 0x5, 0xffffffff) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) [ 3126.394323][ T4814] device bridge462 entered promiscuous mode [ 3126.463793][ T4824] device bridge79 entered promiscuous mode 01:12:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 19) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x20000000}, 0x0) 01:12:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xa0028000}, 0x0) 01:12:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x9effffff}}, 0x20}}, 0x0) 01:12:47 executing program 3: r0 = socket(0x10, 0x5, 0xffffffff) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async, rerun: 64) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (rerun: 64) 01:12:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000000140)=@ieee802154, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f00000001c0)=""/34, 0x22}], 0x2, &(0x7f0000000400)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000000240)}, 0x80}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001400)=""/157, 0x9d}, {&(0x7f00000014c0)=""/208, 0xd0}, {&(0x7f0000000280)=""/55, 0x37}, {&(0x7f00000015c0)=""/167, 0xa7}, {&(0x7f0000001680)=""/250, 0xfa}], 0x5, &(0x7f00000002c0)=""/23, 0x17}, 0x6}, {{&(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001880)=""/189, 0xbd}, {&(0x7f0000001940)=""/230, 0xe6}, {&(0x7f0000001a40)=""/86, 0x56}, {&(0x7f0000001ac0)=""/61, 0x3d}], 0x4, &(0x7f0000001b40)=""/55, 0x37}, 0x4}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001bc0)=""/34, 0x22}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000001c00)=""/60, 0x3c}, {&(0x7f0000001c40)=""/199, 0xc7}, {&(0x7f0000001d40)=""/173, 0xad}], 0x5, &(0x7f0000001e80)=""/228, 0xe4}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001f80)=""/164, 0xa4}, {&(0x7f0000002040)=""/159, 0x9f}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/144, 0x97}, {&(0x7f0000002200)}, {&(0x7f0000002240)=""/13, 0xd}, {&(0x7f0000002280)=""/90, 0x5a}, {&(0x7f0000001b80)=""/24, 0x26}, {&(0x7f0000002340)=""/248, 0xf8}], 0x9}, 0x5}], 0x6, 0x40000083, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="240040006400310f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f3ffffff00000000"], 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f40)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002300)=@gettfilter={0x24, 0x2e, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa, 0xe}, {0x1, 0xfff3}, {0x3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x40000) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r7, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r7, &(0x7f0000000000)=""/144, 0x90) write$binfmt_aout(r1, &(0x7f0000002680)={{0x108, 0x3, 0x4, 0x367, 0x2ad, 0xcc2, 0x3d5, 0x2000}, "f1caf3f539e853bbdfe7d08484e68e6184f1bb4fbf696e4d038b908605959a180d0de9ff4f2b851e7e702d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x84b) ftruncate(r7, 0x7e8) 01:12:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xa0030000}, 0x0) [ 3126.572025][ T4830] device bridge88 entered promiscuous mode [ 3126.583765][ T4828] device bridge550 entered promiscuous mode [ 3126.599606][ T4833] device bridge463 entered promiscuous mode [ 3126.687338][ T4842] FAULT_INJECTION: forcing a failure. [ 3126.687338][ T4842] name failslab, interval 1, probability 0, space 0, times 0 [ 3126.700146][ T4842] CPU: 0 PID: 4842 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3126.710376][ T4842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3126.720408][ T4842] Call Trace: [ 3126.723679][ T4842] dump_stack_lvl+0x1e2/0x24b [ 3126.728336][ T4842] ? panic+0x7d7/0x7d7 [ 3126.732385][ T4842] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3126.737819][ T4842] ? kasan_check_range+0x201/0x2e0 [ 3126.742903][ T4842] dump_stack+0x15/0x17 [ 3126.747035][ T4842] should_fail+0x3c0/0x510 [ 3126.751431][ T4842] ? blk_alloc_queue_stats+0x4c/0x100 [ 3126.756798][ T4842] __should_failslab+0x9f/0xe0 [ 3126.761544][ T4842] should_failslab+0x9/0x20 [ 3126.766021][ T4842] kmem_cache_alloc_trace+0x3a/0x330 [ 3126.771280][ T4842] ? bdi_init+0x239/0x370 [ 3126.775584][ T4842] blk_alloc_queue_stats+0x4c/0x100 [ 3126.780762][ T4842] blk_alloc_queue+0x151/0x640 [ 3126.785507][ T4842] ? __mutex_init+0xa1/0xf0 [ 3126.789988][ T4842] blk_mq_init_queue+0x35/0xc0 [ 3126.794734][ T4842] loop_add+0x270/0x760 [ 3126.798888][ T4842] loop_control_ioctl+0x564/0x740 [ 3126.803917][ T4842] ? loop_remove+0xb0/0xb0 [ 3126.808309][ T4842] ? __fget_files+0x310/0x370 [ 3126.812970][ T4842] ? security_file_ioctl+0xb1/0xd0 [ 3126.818054][ T4842] ? loop_remove+0xb0/0xb0 [ 3126.822446][ T4842] __se_sys_ioctl+0x115/0x190 [ 3126.827097][ T4842] __x64_sys_ioctl+0x7b/0x90 [ 3126.831663][ T4842] do_syscall_64+0x34/0x70 [ 3126.836057][ T4842] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3126.841924][ T4842] RIP: 0033:0x7f42b4f940c9 [ 3126.846332][ T4842] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3126.865914][ T4842] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3126.874304][ T4842] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3126.882253][ T4842] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3126.890202][ T4842] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3126.898146][ T4842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3126.906091][ T4842] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xa0000000}}, 0x20}}, 0x0) 01:12:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000000140)=@ieee802154, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f00000001c0)=""/34, 0x22}], 0x2, &(0x7f0000000400)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000000240)}, 0x80}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001400)=""/157, 0x9d}, {&(0x7f00000014c0)=""/208, 0xd0}, {&(0x7f0000000280)=""/55, 0x37}, {&(0x7f00000015c0)=""/167, 0xa7}, {&(0x7f0000001680)=""/250, 0xfa}], 0x5, &(0x7f00000002c0)=""/23, 0x17}, 0x6}, {{&(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001880)=""/189, 0xbd}, {&(0x7f0000001940)=""/230, 0xe6}, {&(0x7f0000001a40)=""/86, 0x56}, {&(0x7f0000001ac0)=""/61, 0x3d}], 0x4, &(0x7f0000001b40)=""/55, 0x37}, 0x4}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001bc0)=""/34, 0x22}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000001c00)=""/60, 0x3c}, {&(0x7f0000001c40)=""/199, 0xc7}, {&(0x7f0000001d40)=""/173, 0xad}], 0x5, &(0x7f0000001e80)=""/228, 0xe4}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001f80)=""/164, 0xa4}, {&(0x7f0000002040)=""/159, 0x9f}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/144, 0x97}, {&(0x7f0000002200)}, {&(0x7f0000002240)=""/13, 0xd}, {&(0x7f0000002280)=""/90, 0x5a}, {&(0x7f0000001b80)=""/24, 0x26}, {&(0x7f0000002340)=""/248, 0xf8}], 0x9}, 0x5}], 0x6, 0x40000083, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="240040006400310f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f3ffffff00000000"], 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002f40)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002300)=@gettfilter={0x24, 0x2e, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa, 0xe}, {0x1, 0xfff3}, {0x3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x40000) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r7, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r7, &(0x7f0000000000)=""/144, 0x90) write$binfmt_aout(r1, &(0x7f0000002680)={{0x108, 0x3, 0x4, 0x367, 0x2ad, 0xcc2, 0x3d5, 0x2000}, "f1caf3f539e853bbdfe7d08484e68e6184f1bb4fbf696e4d038b908605959a180d0de9ff4f2b851e7e702d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x84b) (async) ftruncate(r7, 0x7e8) 01:12:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x21000000}, 0x0) [ 3127.142159][ T4843] device bridge464 entered promiscuous mode [ 3127.197070][ T4849] device bridge88 entered promiscuous mode [ 3127.210221][ T4853] device bridge550 entered promiscuous mode 01:12:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x9000000}}, 0x20}}, 0x0) 01:12:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xa943d1ba}, 0x0) 01:12:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 20) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000000140)=@ieee802154, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f00000001c0)=""/34, 0x22}], 0x2, &(0x7f0000000400)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000000240)}, 0x80}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001400)=""/157, 0x9d}, {&(0x7f00000014c0)=""/208, 0xd0}, {&(0x7f0000000280)=""/55, 0x37}, {&(0x7f00000015c0)=""/167, 0xa7}, {&(0x7f0000001680)=""/250, 0xfa}], 0x5, &(0x7f00000002c0)=""/23, 0x17}, 0x6}, {{&(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001880)=""/189, 0xbd}, {&(0x7f0000001940)=""/230, 0xe6}, {&(0x7f0000001a40)=""/86, 0x56}, {&(0x7f0000001ac0)=""/61, 0x3d}], 0x4, &(0x7f0000001b40)=""/55, 0x37}, 0x4}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001bc0)=""/34, 0x22}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000001c00)=""/60, 0x3c}, {&(0x7f0000001c40)=""/199, 0xc7}, {&(0x7f0000001d40)=""/173, 0xad}], 0x5, &(0x7f0000001e80)=""/228, 0xe4}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001f80)=""/164, 0xa4}, {&(0x7f0000002040)=""/159, 0x9f}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/144, 0x97}, {&(0x7f0000002200)}, {&(0x7f0000002240)=""/13, 0xd}, {&(0x7f0000002280)=""/90, 0x5a}, {&(0x7f0000001b80)=""/24, 0x26}, {&(0x7f0000002340)=""/248, 0xf8}], 0x9}, 0x5}], 0x6, 0x40000083, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3000000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="240040006400310f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f3ffffff00000000"], 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@delchain={0x2c, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f40)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002300)=@gettfilter={0x24, 0x2e, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa, 0xe}, {0x1, 0xfff3}, {0x3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c810}, 0x40000) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r7, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r7, &(0x7f0000000000)=""/144, 0x90) (async, rerun: 64) write$binfmt_aout(r1, &(0x7f0000002680)={{0x108, 0x3, 0x4, 0x367, 0x2ad, 0xcc2, 0x3d5, 0x2000}, "f1caf3f539e853bbdfe7d08484e68e6184f1bb4fbf696e4d038b908605959a180d0de9ff4f2b851e7e702d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x84b) (rerun: 64) ftruncate(r7, 0x7e8) 01:12:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xa0028000}}, 0x20}}, 0x0) 01:12:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x3f000000}, 0x0) [ 3127.433351][ T4861] device bridge79 entered promiscuous mode [ 3127.446116][ T4859] device bridge465 entered promiscuous mode [ 3127.480605][ T4872] device bridge88 entered promiscuous mode [ 3127.539827][ T4878] FAULT_INJECTION: forcing a failure. [ 3127.539827][ T4878] name failslab, interval 1, probability 0, space 0, times 0 [ 3127.552709][ T4878] CPU: 0 PID: 4878 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3127.563018][ T4878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3127.573052][ T4878] Call Trace: [ 3127.576318][ T4878] dump_stack_lvl+0x1e2/0x24b [ 3127.580968][ T4878] ? panic+0x7d7/0x7d7 [ 3127.585008][ T4878] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3127.590442][ T4878] ? find_next_bit+0xd6/0x120 [ 3127.595093][ T4878] ? cpumask_next+0x11/0x30 [ 3127.599572][ T4878] dump_stack+0x15/0x17 [ 3127.603701][ T4878] should_fail+0x3c0/0x510 [ 3127.608093][ T4878] ? percpu_ref_init+0xd0/0x340 [ 3127.612917][ T4878] __should_failslab+0x9f/0xe0 [ 3127.617655][ T4878] should_failslab+0x9/0x20 [ 3127.622134][ T4878] kmem_cache_alloc_trace+0x3a/0x330 [ 3127.627398][ T4878] percpu_ref_init+0xd0/0x340 [ 3127.632051][ T4878] ? blk_timeout_work+0x10/0x10 [ 3127.636876][ T4878] ? __kasan_check_write+0x14/0x20 [ 3127.641960][ T4878] blk_alloc_queue+0x440/0x640 [ 3127.646701][ T4878] blk_mq_init_queue+0x35/0xc0 [ 3127.651440][ T4878] loop_add+0x270/0x760 [ 3127.655571][ T4878] loop_control_ioctl+0x564/0x740 [ 3127.660570][ T4878] ? loop_remove+0xb0/0xb0 [ 3127.664958][ T4878] ? irqentry_exit+0x50/0x60 [ 3127.669525][ T4878] ? sysvec_reschedule_ipi+0x84/0x160 [ 3127.674869][ T4878] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3127.680476][ T4878] ? loop_remove+0xb0/0xb0 [ 3127.684867][ T4878] __se_sys_ioctl+0x115/0x190 [ 3127.689518][ T4878] __x64_sys_ioctl+0x7b/0x90 [ 3127.694080][ T4878] do_syscall_64+0x34/0x70 [ 3127.698473][ T4878] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3127.704338][ T4878] RIP: 0033:0x7f42b4f940c9 [ 3127.708733][ T4878] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3127.728311][ T4878] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:12:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xb93e0000}, 0x0) [ 3127.736695][ T4878] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3127.744640][ T4878] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3127.752589][ T4878] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3127.760532][ T4878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3127.768481][ T4878] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3127.966119][ T4874] device bridge550 entered promiscuous mode 01:12:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xa0030000}}, 0x20}}, 0x0) 01:12:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x40000000}, 0x0) [ 3128.093968][ T4881] device bridge466 entered promiscuous mode [ 3128.131414][ T4884] device bridge88 entered promiscuous mode 01:12:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xbad143a9}, 0x0) [ 3128.155010][ T4886] device bridge550 entered promiscuous mode 01:12:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xc3ffffff}, 0x0) [ 3128.213899][ T4888] device bridge467 entered promiscuous mode 01:12:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 21) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3128.283136][ T4891] device bridge468 entered promiscuous mode [ 3128.405020][ T4896] FAULT_INJECTION: forcing a failure. [ 3128.405020][ T4896] name failslab, interval 1, probability 0, space 0, times 0 [ 3128.417649][ T4896] CPU: 0 PID: 4896 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3128.427870][ T4896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3128.438681][ T4896] Call Trace: [ 3128.441952][ T4896] dump_stack_lvl+0x1e2/0x24b [ 3128.446602][ T4896] ? panic+0x7d7/0x7d7 [ 3128.450667][ T4896] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3128.456121][ T4896] ? preempt_schedule_thunk+0x16/0x18 [ 3128.461481][ T4896] ? find_next_bit+0xd6/0x120 [ 3128.466156][ T4896] ? cpumask_next+0x11/0x30 [ 3128.470641][ T4896] dump_stack+0x15/0x17 [ 3128.474789][ T4896] should_fail+0x3c0/0x510 [ 3128.479186][ T4896] ? percpu_ref_init+0xd0/0x340 [ 3128.484016][ T4896] __should_failslab+0x9f/0xe0 [ 3128.488760][ T4896] should_failslab+0x9/0x20 [ 3128.493240][ T4896] kmem_cache_alloc_trace+0x3a/0x330 [ 3128.498498][ T4896] percpu_ref_init+0xd0/0x340 [ 3128.503153][ T4896] ? blk_timeout_work+0x10/0x10 [ 3128.507976][ T4896] ? __kasan_check_write+0x14/0x20 [ 3128.513062][ T4896] blk_alloc_queue+0x440/0x640 [ 3128.517801][ T4896] blk_mq_init_queue+0x35/0xc0 [ 3128.522545][ T4896] loop_add+0x270/0x760 [ 3128.526682][ T4896] loop_control_ioctl+0x564/0x740 [ 3128.531678][ T4896] ? loop_remove+0xb0/0xb0 [ 3128.536073][ T4896] ? __fget_files+0x310/0x370 [ 3128.540730][ T4896] ? security_file_ioctl+0xb1/0xd0 [ 3128.545814][ T4896] ? loop_remove+0xb0/0xb0 [ 3128.550205][ T4896] __se_sys_ioctl+0x115/0x190 [ 3128.554855][ T4896] __x64_sys_ioctl+0x7b/0x90 [ 3128.559422][ T4896] do_syscall_64+0x34/0x70 [ 3128.563814][ T4896] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3128.569679][ T4896] RIP: 0033:0x7f42b4f940c9 [ 3128.574072][ T4896] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3128.593664][ T4896] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3128.602065][ T4896] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3128.610025][ T4896] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3128.617984][ T4896] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3128.625939][ T4896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3128.633890][ T4896] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xc5000000}, 0x0) 01:12:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xc3ffffff}}, 0x20}}, 0x0) 01:12:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x48000000}, 0x0) 01:12:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xa000000}}, 0x20}}, 0x0) 01:12:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xc947c272}, 0x0) [ 3128.858649][ T4898] __nla_validate_parse: 24 callbacks suppressed [ 3128.858658][ T4898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3128.879064][ T4898] device bridge469 entered promiscuous mode [ 3128.887131][ T4900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3128.906669][ T4900] device bridge550 entered promiscuous mode [ 3128.919896][ T4902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3128.938773][ T4902] device bridge79 entered promiscuous mode [ 3128.949970][ T4904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3128.971002][ T4904] device bridge88 entered promiscuous mode 01:12:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xeaffffff}, 0x0) [ 3129.042942][ T4907] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3129.070645][ T4907] device bridge470 entered promiscuous mode 01:12:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 22) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xc5000000}}, 0x20}}, 0x0) [ 3129.201523][ T4912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3129.271801][ T4918] FAULT_INJECTION: forcing a failure. [ 3129.271801][ T4918] name failslab, interval 1, probability 0, space 0, times 0 [ 3129.284580][ T4918] CPU: 0 PID: 4918 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3129.294791][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3129.304941][ T4918] Call Trace: [ 3129.308217][ T4918] dump_stack_lvl+0x1e2/0x24b [ 3129.312875][ T4918] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3129.318319][ T4918] ? find_next_bit+0xd6/0x120 [ 3129.322976][ T4918] dump_stack+0x15/0x17 [ 3129.327111][ T4918] should_fail+0x3c0/0x510 [ 3129.331503][ T4918] ? percpu_ref_init+0xd0/0x340 [ 3129.336329][ T4918] __should_failslab+0x9f/0xe0 [ 3129.341239][ T4918] should_failslab+0x9/0x20 [ 3129.345713][ T4918] kmem_cache_alloc_trace+0x3a/0x330 [ 3129.350976][ T4918] percpu_ref_init+0xd0/0x340 [ 3129.355631][ T4918] ? blk_cgroup_bio_start+0x310/0x310 [ 3129.360980][ T4918] blkg_alloc+0xa4/0x5a0 [ 3129.365203][ T4918] blkcg_init_queue+0x27/0x1d0 [ 3129.369942][ T4918] blk_alloc_queue+0x49b/0x640 [ 3129.374696][ T4918] blk_mq_init_queue+0x35/0xc0 [ 3129.379436][ T4918] loop_add+0x270/0x760 [ 3129.383571][ T4918] loop_control_ioctl+0x564/0x740 [ 3129.388572][ T4918] ? loop_remove+0xb0/0xb0 [ 3129.392971][ T4918] ? irqentry_exit+0x50/0x60 [ 3129.397536][ T4918] ? sysvec_reschedule_ipi+0x84/0x160 [ 3129.402885][ T4918] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3129.408492][ T4918] ? do_vfs_ioctl+0xf6/0x1a90 [ 3129.413143][ T4918] ? __se_sys_ioctl+0x109/0x190 [ 3129.417966][ T4918] ? loop_remove+0xb0/0xb0 [ 3129.422355][ T4918] __se_sys_ioctl+0x115/0x190 [ 3129.427011][ T4918] __x64_sys_ioctl+0x7b/0x90 [ 3129.431582][ T4918] do_syscall_64+0x34/0x70 [ 3129.435973][ T4918] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3129.441839][ T4918] RIP: 0033:0x7f42b4f940c9 [ 3129.446231][ T4918] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3129.465834][ T4918] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3129.474220][ T4918] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3129.482600][ T4918] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3129.490556][ T4918] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3129.498590][ T4918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3129.506546][ T4918] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3129.590978][ T4912] device bridge471 entered promiscuous mode 01:12:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x4c000000}, 0x0) 01:12:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xefffffff}, 0x0) [ 3129.692107][ T4919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3129.720114][ T4919] device bridge88 entered promiscuous mode [ 3129.799906][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3129.826909][ T4922] device bridge550 entered promiscuous mode [ 3129.844958][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:12:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0) 01:12:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xb000000}}, 0x20}}, 0x0) [ 3129.881999][ T4924] device bridge472 entered promiscuous mode 01:12:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xc6000000}}, 0x20}}, 0x0) [ 3129.939708][ T4928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:12:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 23) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3130.004994][ T4928] device bridge473 entered promiscuous mode [ 3130.054080][ T4930] device bridge79 entered promiscuous mode [ 3130.127213][ T4940] FAULT_INJECTION: forcing a failure. [ 3130.127213][ T4940] name failslab, interval 1, probability 0, space 0, times 0 [ 3130.139981][ T4940] CPU: 0 PID: 4940 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3130.150199][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3130.160230][ T4940] Call Trace: [ 3130.163501][ T4940] dump_stack_lvl+0x1e2/0x24b [ 3130.168155][ T4940] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3130.173591][ T4940] ? preempt_schedule_thunk+0x16/0x18 [ 3130.178938][ T4940] ? find_next_bit+0xd6/0x120 [ 3130.183588][ T4940] dump_stack+0x15/0x17 [ 3130.187718][ T4940] should_fail+0x3c0/0x510 [ 3130.192111][ T4940] ? percpu_ref_init+0xd0/0x340 [ 3130.196937][ T4940] __should_failslab+0x9f/0xe0 [ 3130.201673][ T4940] should_failslab+0x9/0x20 [ 3130.206150][ T4940] kmem_cache_alloc_trace+0x3a/0x330 [ 3130.211411][ T4940] percpu_ref_init+0xd0/0x340 [ 3130.216067][ T4940] ? blk_cgroup_bio_start+0x310/0x310 [ 3130.221412][ T4940] blkg_alloc+0xa4/0x5a0 [ 3130.225633][ T4940] blkcg_init_queue+0x27/0x1d0 [ 3130.230371][ T4940] blk_alloc_queue+0x49b/0x640 [ 3130.235110][ T4940] blk_mq_init_queue+0x35/0xc0 [ 3130.239850][ T4940] loop_add+0x270/0x760 [ 3130.243984][ T4940] loop_control_ioctl+0x564/0x740 [ 3130.248980][ T4940] ? loop_remove+0xb0/0xb0 [ 3130.253367][ T4940] ? __fget_files+0x310/0x370 [ 3130.258017][ T4940] ? security_file_ioctl+0xb1/0xd0 [ 3130.263101][ T4940] ? loop_remove+0xb0/0xb0 [ 3130.267493][ T4940] __se_sys_ioctl+0x115/0x190 [ 3130.272145][ T4940] __x64_sys_ioctl+0x7b/0x90 [ 3130.276717][ T4940] do_syscall_64+0x34/0x70 [ 3130.281108][ T4940] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3130.286972][ T4940] RIP: 0033:0x7f42b4f940c9 [ 3130.291366][ T4940] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3130.310944][ T4940] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3130.319332][ T4940] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 01:12:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xfeffffff}, 0x0) [ 3130.327290][ T4940] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3130.335242][ T4940] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3130.343202][ T4940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3130.351163][ T4940] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3130.432298][ T4932] device bridge88 entered promiscuous mode 01:12:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x56b3a28d}, 0x0) 01:12:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 3130.536859][ T4942] device bridge474 entered promiscuous mode 01:12:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xffffff81}, 0x0) [ 3130.686871][ T4946] device bridge475 entered promiscuous mode [ 3130.705570][ T4945] device bridge550 entered promiscuous mode 01:12:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xeaffffff}}, 0x20}}, 0x0) [ 3130.766718][ T4950] device bridge476 entered promiscuous mode 01:12:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x68000000}, 0x0) 01:12:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 24) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 3130.825623][ T4952] device bridge88 entered promiscuous mode [ 3130.847043][ T4955] device bridge550 entered promiscuous mode 01:12:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xc000000}}, 0x20}}, 0x0) [ 3130.982122][ T4963] FAULT_INJECTION: forcing a failure. [ 3130.982122][ T4963] name failslab, interval 1, probability 0, space 0, times 0 [ 3130.994788][ T4963] CPU: 0 PID: 4963 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3131.005011][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3131.015040][ T4963] Call Trace: [ 3131.018314][ T4963] dump_stack_lvl+0x1e2/0x24b [ 3131.022971][ T4963] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3131.028407][ T4963] dump_stack+0x15/0x17 [ 3131.032547][ T4963] should_fail+0x3c0/0x510 [ 3131.037042][ T4963] ? blk_stat_alloc_callback+0x8e/0x210 [ 3131.042571][ T4963] __should_failslab+0x9f/0xe0 [ 3131.047310][ T4963] should_failslab+0x9/0x20 [ 3131.051784][ T4963] __kmalloc+0x60/0x360 [ 3131.055915][ T4963] ? kmem_cache_alloc_trace+0x1dd/0x330 [ 3131.061436][ T4963] ? blk_stat_alloc_callback+0x60/0x210 [ 3131.066957][ T4963] ? blk_mq_poll_stats_fn+0x130/0x130 [ 3131.072304][ T4963] blk_stat_alloc_callback+0x8e/0x210 [ 3131.077647][ T4963] ? blk_mq_free_tag_set+0x690/0x690 [ 3131.082906][ T4963] ? blk_mq_poll_stats_fn+0x130/0x130 [ 3131.088276][ T4963] blk_mq_init_allocated_queue+0x8f/0x1a30 [ 3131.094062][ T4963] ? blk_set_default_limits+0x17b/0x410 [ 3131.099587][ T4963] ? blk_alloc_queue+0x574/0x640 [ 3131.104498][ T4963] blk_mq_init_queue+0x6c/0xc0 [ 3131.109238][ T4963] loop_add+0x270/0x760 [ 3131.113373][ T4963] loop_control_ioctl+0x564/0x740 [ 3131.118396][ T4963] ? loop_remove+0xb0/0xb0 [ 3131.122786][ T4963] ? irqentry_exit+0x50/0x60 [ 3131.127349][ T4963] ? sysvec_reschedule_ipi+0x84/0x160 [ 3131.132696][ T4963] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3131.138305][ T4963] ? do_vfs_ioctl+0xf6/0x1a90 [ 3131.142955][ T4963] ? loop_remove+0xb0/0xb0 [ 3131.147352][ T4963] __se_sys_ioctl+0x115/0x190 [ 3131.152006][ T4963] __x64_sys_ioctl+0x7b/0x90 [ 3131.156585][ T4963] do_syscall_64+0x34/0x70 [ 3131.160992][ T4963] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3131.166866][ T4963] RIP: 0033:0x7f42b4f940c9 [ 3131.171266][ T4963] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3131.190859][ T4963] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3131.199254][ T4963] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3131.207208][ T4963] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3131.215156][ T4963] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3131.223267][ T4963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3131.231237][ T4963] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3131.372725][ T4960] device bridge477 entered promiscuous mode 01:12:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xffffffc3}, 0x0) 01:12:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xefffffff}}, 0x20}}, 0x0) [ 3131.493987][ T4966] device bridge79 entered promiscuous mode [ 3131.524513][ T4969] device bridge478 entered promiscuous mode 01:12:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xffffffea}, 0x0) 01:12:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x6c000000}, 0x0) [ 3131.612629][ T4973] device bridge88 entered promiscuous mode 01:12:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 25) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xffffffef}, 0x0) [ 3131.705932][ T4976] device bridge479 entered promiscuous mode [ 3131.736587][ T4978] device bridge550 entered promiscuous mode [ 3131.852654][ T4986] FAULT_INJECTION: forcing a failure. [ 3131.852654][ T4986] name failslab, interval 1, probability 0, space 0, times 0 [ 3131.865651][ T4986] CPU: 0 PID: 4986 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3131.875873][ T4986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3131.885904][ T4986] Call Trace: [ 3131.889176][ T4986] dump_stack_lvl+0x1e2/0x24b [ 3131.893826][ T4986] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3131.899260][ T4986] dump_stack+0x15/0x17 [ 3131.903420][ T4986] should_fail+0x3c0/0x510 [ 3131.907815][ T4986] ? blk_stat_alloc_callback+0x8e/0x210 [ 3131.913335][ T4986] __should_failslab+0x9f/0xe0 [ 3131.918072][ T4986] should_failslab+0x9/0x20 [ 3131.922552][ T4986] __kmalloc+0x60/0x360 [ 3131.926679][ T4986] ? kmem_cache_alloc_trace+0x1dd/0x330 [ 3131.932198][ T4986] ? blk_stat_alloc_callback+0x60/0x210 [ 3131.937718][ T4986] ? blk_mq_poll_stats_fn+0x130/0x130 [ 3131.943065][ T4986] blk_stat_alloc_callback+0x8e/0x210 [ 3131.948419][ T4986] ? blk_mq_free_tag_set+0x690/0x690 [ 3131.953677][ T4986] ? blk_mq_poll_stats_fn+0x130/0x130 [ 3131.959024][ T4986] blk_mq_init_allocated_queue+0x8f/0x1a30 [ 3131.964808][ T4986] ? blk_set_default_limits+0x17b/0x410 [ 3131.970348][ T4986] ? blk_alloc_queue+0x574/0x640 [ 3131.975270][ T4986] blk_mq_init_queue+0x6c/0xc0 [ 3131.980025][ T4986] loop_add+0x270/0x760 [ 3131.984172][ T4986] loop_control_ioctl+0x564/0x740 [ 3131.989180][ T4986] ? loop_remove+0xb0/0xb0 [ 3131.993571][ T4986] ? __fget_files+0x310/0x370 [ 3131.998222][ T4986] ? security_file_ioctl+0xb1/0xd0 [ 3132.003312][ T4986] ? loop_remove+0xb0/0xb0 [ 3132.007711][ T4986] __se_sys_ioctl+0x115/0x190 [ 3132.012366][ T4986] __x64_sys_ioctl+0x7b/0x90 [ 3132.016930][ T4986] do_syscall_64+0x34/0x70 [ 3132.021322][ T4986] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3132.027189][ T4986] RIP: 0033:0x7f42b4f940c9 [ 3132.031600][ T4986] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3132.051190][ T4986] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3132.059597][ T4986] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3132.067550][ T4986] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3132.075510][ T4986] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3132.083465][ T4986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3132.091425][ T4986] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xf0ffffff}}, 0x20}}, 0x0) 01:12:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x73020000}, 0x0) [ 3132.240648][ T4984] device bridge480 entered promiscuous mode 01:12:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xfffffff0}, 0x0) 01:12:53 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f00000012c0)=""/20, 0x14}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f0000001440)=""/231, 0xe7}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001a00)=@ipv6_newnexthop={0x18, 0x68, 0x10, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x40004000}, 0x20004000) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r3, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r3, &(0x7f0000000000)=""/144, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') read$usbfs(r4, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r4, &(0x7f0000000000)=""/144, 0x90) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, r5, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'syzkaller1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001800), 0x402, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r8, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x44, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x98}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000084}, 0x1000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001740)=0x100000) sendfile(r3, r4, &(0x7f00000011c0)=0x6, 0x3ff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xe, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000010001000000000000b80300bd51f0ff020000005201080000ff00009500000000000000"], &(0x7f0000001380)='GPL\x00', 0x100, 0x11, &(0x7f0000001540)=""/17, 0x41100, 0x1a, '\x00', 0x0, 0xc, r3, 0x8, &(0x7f0000001580)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000015c0)={0x1, 0x4, 0xfffffffe, 0xffff}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f0000001600)=[r4, r4]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000001300)='cachefiles_trunc\x00', r10}, 0x10) 01:12:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xd000000}}, 0x20}}, 0x0) [ 3132.316888][ T4989] device bridge550 entered promiscuous mode [ 3132.352640][ T4991] device bridge88 entered promiscuous mode 01:12:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xfffffffe}, 0x0) [ 3132.443414][ T4993] device bridge481 entered promiscuous mode 01:12:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xfcffffff}}, 0x20}}, 0x0) 01:12:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x3a0ffffffff}, 0x0) [ 3132.492109][ T4999] device bridge79 entered promiscuous mode [ 3132.503013][ T5004] device bridge482 entered promiscuous mode 01:12:53 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f00000012c0)=""/20, 0x14}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f0000001440)=""/231, 0xe7}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (async) pipe(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001a00)=@ipv6_newnexthop={0x18, 0x68, 0x10, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x40004000}, 0x20004000) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r3, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r3, &(0x7f0000000000)=""/144, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') read$usbfs(r4, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r4, &(0x7f0000000000)=""/144, 0x90) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, r5, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'syzkaller1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001800), 0x402, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r8, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x44, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x98}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000084}, 0x1000) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001740)=0x100000) sendfile(r3, r4, &(0x7f00000011c0)=0x6, 0x3ff) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xe, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000010001000000000000b80300bd51f0ff020000005201080000ff00009500000000000000"], &(0x7f0000001380)='GPL\x00', 0x100, 0x11, &(0x7f0000001540)=""/17, 0x41100, 0x1a, '\x00', 0x0, 0xc, r3, 0x8, &(0x7f0000001580)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000015c0)={0x1, 0x4, 0xfffffffe, 0xffff}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f0000001600)=[r4, r4]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000001300)='cachefiles_trunc\x00', r10}, 0x10) 01:12:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 26) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3132.555990][ T5008] device bridge88 entered promiscuous mode 01:12:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x74000000}, 0x0) [ 3132.625316][ T5010] device bridge483 entered promiscuous mode [ 3132.697611][ T5023] FAULT_INJECTION: forcing a failure. [ 3132.697611][ T5023] name failslab, interval 1, probability 0, space 0, times 0 [ 3132.710410][ T5023] CPU: 0 PID: 5023 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3132.720624][ T5023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3132.730653][ T5023] Call Trace: [ 3132.733921][ T5023] dump_stack_lvl+0x1e2/0x24b [ 3132.738573][ T5023] ? panic+0x7d7/0x7d7 [ 3132.742616][ T5023] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3132.748046][ T5023] ? pcpu_block_refresh_hint+0x20d/0x350 [ 3132.753656][ T5023] dump_stack+0x15/0x17 [ 3132.757784][ T5023] should_fail+0x3c0/0x510 [ 3132.762175][ T5023] ? blk_mq_realloc_hw_ctxs+0xca/0x1840 [ 3132.767691][ T5023] __should_failslab+0x9f/0xe0 [ 3132.772427][ T5023] should_failslab+0x9/0x20 [ 3132.776906][ T5023] __kmalloc+0x60/0x360 [ 3132.781036][ T5023] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 3132.787771][ T5023] ? preempt_schedule_thunk+0x16/0x18 [ 3132.793114][ T5023] blk_mq_realloc_hw_ctxs+0xca/0x1840 [ 3132.798459][ T5023] ? pcpu_alloc+0x13e8/0x1420 [ 3132.803110][ T5023] ? find_next_bit+0xd6/0x120 [ 3132.807757][ T5023] ? cpumask_next+0x11/0x30 [ 3132.812233][ T5023] ? blk_mq_sysfs_init+0x1c1/0x200 [ 3132.817321][ T5023] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 3132.823189][ T5023] ? blk_set_default_limits+0x17b/0x410 [ 3132.828708][ T5023] ? blk_alloc_queue+0x574/0x640 [ 3132.833618][ T5023] blk_mq_init_queue+0x6c/0xc0 [ 3132.838359][ T5023] loop_add+0x270/0x760 [ 3132.842490][ T5023] loop_control_ioctl+0x564/0x740 [ 3132.847500][ T5023] ? loop_remove+0xb0/0xb0 [ 3132.851893][ T5023] ? __fget_files+0x310/0x370 [ 3132.856542][ T5023] ? security_file_ioctl+0xb1/0xd0 [ 3132.861627][ T5023] ? loop_remove+0xb0/0xb0 [ 3132.866018][ T5023] __se_sys_ioctl+0x115/0x190 [ 3132.870667][ T5023] __x64_sys_ioctl+0x7b/0x90 [ 3132.875320][ T5023] do_syscall_64+0x34/0x70 [ 3132.879716][ T5023] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3132.885601][ T5023] RIP: 0033:0x7f42b4f940c9 [ 3132.889992][ T5023] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3132.909566][ T5023] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3132.917955][ T5023] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3132.925909][ T5023] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3132.933855][ T5023] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3132.941800][ T5023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3132.949747][ T5023] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x1000000000000}, 0x0) 01:12:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xfeffffff}}, 0x20}}, 0x0) 01:12:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f00000012c0)=""/20, 0x14}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f0000001440)=""/231, 0xe7}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (async) pipe(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001a00)=@ipv6_newnexthop={0x18, 0x68, 0x10, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x40004000}, 0x20004000) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r3, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r3, &(0x7f0000000000)=""/144, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') read$usbfs(r4, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r4, &(0x7f0000000000)=""/144, 0x90) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, r5, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'syzkaller1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44) (async) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001800), 0x402, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r8, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x44, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x98}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000084}, 0x1000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001740)=0x100000) (async) sendfile(r3, r4, &(0x7f00000011c0)=0x6, 0x3ff) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xe, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000010001000000000000b80300bd51f0ff020000005201080000ff00009500000000000000"], &(0x7f0000001380)='GPL\x00', 0x100, 0x11, &(0x7f0000001540)=""/17, 0x41100, 0x1a, '\x00', 0x0, 0xc, r3, 0x8, &(0x7f0000001580)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000015c0)={0x1, 0x4, 0xfffffffe, 0xffff}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f0000001600)=[r4, r4]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000001300)='cachefiles_trunc\x00', r10}, 0x10) [ 3133.157667][ T5026] device bridge550 entered promiscuous mode 01:12:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x7a000000}, 0x0) 01:12:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x8002a0ffffffff}, 0x0) [ 3133.199546][ T5030] device bridge484 entered promiscuous mode [ 3133.221122][ T5031] device bridge88 entered promiscuous mode [ 3133.245537][ T5035] device bridge551 entered promiscuous mode [ 3133.282834][ T5040] device bridge485 entered promiscuous mode 01:12:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xe000000}}, 0x20}}, 0x0) 01:12:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) socket(0x26, 0x80000, 0x4) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socket(0x1d, 0x803, 0x51c8eb8) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)}, 0x6}], 0x1, 0x0, 0x0) 01:12:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x100000000000000}, 0x0) 01:12:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xffffff7f}}, 0x20}}, 0x0) 01:12:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 27) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x81000000}, 0x0) 01:12:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) (async) socket(0x26, 0x80000, 0x4) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socket(0x1d, 0x803, 0x51c8eb8) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)}, 0x6}], 0x1, 0x0, 0x0) 01:12:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) socket(0x26, 0x80000, 0x4) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socket(0x1d, 0x803, 0x51c8eb8) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)}, 0x6}], 0x1, 0x0, 0x0) [ 3133.467740][ T5044] device bridge486 entered promiscuous mode [ 3133.485537][ T5054] device bridge88 entered promiscuous mode [ 3133.495306][ T5053] device bridge79 entered promiscuous mode [ 3133.507733][ T5056] device bridge551 entered promiscuous mode [ 3133.573876][ T5062] FAULT_INJECTION: forcing a failure. [ 3133.573876][ T5062] name failslab, interval 1, probability 0, space 0, times 0 [ 3133.586536][ T5062] CPU: 0 PID: 5062 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3133.596748][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3133.606776][ T5062] Call Trace: [ 3133.610044][ T5062] dump_stack_lvl+0x1e2/0x24b [ 3133.614693][ T5062] ? panic+0x7d7/0x7d7 [ 3133.618738][ T5062] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3133.624173][ T5062] dump_stack+0x15/0x17 [ 3133.628303][ T5062] should_fail+0x3c0/0x510 [ 3133.632694][ T5062] ? blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 3133.638300][ T5062] __should_failslab+0x9f/0xe0 [ 3133.643038][ T5062] should_failslab+0x9/0x20 [ 3133.647518][ T5062] __kmalloc+0x60/0x360 [ 3133.651649][ T5062] ? blk_mq_hw_queue_to_node+0x101/0x120 [ 3133.657257][ T5062] blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 3133.662693][ T5062] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3133.668301][ T5062] ? cpumask_next+0x11/0x30 [ 3133.672779][ T5062] ? blk_mq_sysfs_init+0x1c1/0x200 [ 3133.677865][ T5062] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 3133.683729][ T5062] ? blk_set_default_limits+0x17b/0x410 [ 3133.689247][ T5062] ? blk_alloc_queue+0x574/0x640 [ 3133.694157][ T5062] blk_mq_init_queue+0x6c/0xc0 [ 3133.698894][ T5062] loop_add+0x270/0x760 [ 3133.703026][ T5062] loop_control_ioctl+0x564/0x740 [ 3133.708022][ T5062] ? loop_remove+0xb0/0xb0 [ 3133.712411][ T5062] ? __fget_files+0x310/0x370 [ 3133.717066][ T5062] ? security_file_ioctl+0xb1/0xd0 [ 3133.722150][ T5062] ? loop_remove+0xb0/0xb0 [ 3133.726542][ T5062] __se_sys_ioctl+0x115/0x190 [ 3133.731192][ T5062] __x64_sys_ioctl+0x7b/0x90 [ 3133.735755][ T5062] do_syscall_64+0x34/0x70 [ 3133.740148][ T5062] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3133.746013][ T5062] RIP: 0033:0x7f42b4f940c9 [ 3133.750403][ T5062] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3133.769981][ T5062] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3133.778369][ T5062] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3133.786315][ T5062] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3133.794268][ T5062] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3133.802219][ T5062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3133.810251][ T5062] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x200000000000000}, 0x0) 01:12:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xffffff81}}, 0x20}}, 0x0) [ 3134.150092][ T5065] __nla_validate_parse: 31 callbacks suppressed [ 3134.150102][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3134.170467][ T5065] device bridge487 entered promiscuous mode 01:12:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001540)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x29, 0x96, 0x7, 0x1f, 0x56, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x10, 0x7800, 0xa6, 0x1ff}}) r2 = dup3(r0, r0, 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x3, 0x8000, 0x7f, 0x1, 0x40, 0x1, 0x7, '\x00', r1, r2, 0x3, 0x5, 0x2}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r4, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r4, &(0x7f0000000000)=""/144, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r5, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r5, &(0x7f0000000000)=""/144, 0x90) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r6, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r6, &(0x7f0000000000)=""/144, 0x90) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r7, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r7, &(0x7f0000000000)=""/144, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x7, &(0x7f0000001580)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @ldst={0x0, 0x3, 0x3, 0x4, 0x8, 0x1, 0x8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000015c0)='GPL\x00', 0x4, 0x0, &(0x7f0000001600), 0x40f00, 0x8, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000001680)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x3, 0x0, 0x1ff, 0x2de}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001700)=[r2, r5, r2, r6, r7, r3, r2]}, 0x80) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x81ffffff}, 0x0) [ 3134.204284][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3134.232005][ T5068] device bridge88 entered promiscuous mode [ 3134.239691][ T5072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3134.254002][ T5072] device bridge551 entered promiscuous mode 01:12:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x10000000}}, 0x20}}, 0x0) 01:12:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x300000000000000}, 0x0) 01:12:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 28) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001540)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x29, 0x96, 0x7, 0x1f, 0x56, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x10, 0x7800, 0xa6, 0x1ff}}) r2 = dup3(r0, r0, 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x3, 0x8000, 0x7f, 0x1, 0x40, 0x1, 0x7, '\x00', r1, r2, 0x3, 0x5, 0x2}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r4, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r4, &(0x7f0000000000)=""/144, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r5, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r5, &(0x7f0000000000)=""/144, 0x90) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r6, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r6, &(0x7f0000000000)=""/144, 0x90) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r7, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r7, &(0x7f0000000000)=""/144, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x7, &(0x7f0000001580)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @ldst={0x0, 0x3, 0x3, 0x4, 0x8, 0x1, 0x8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000015c0)='GPL\x00', 0x4, 0x0, &(0x7f0000001600), 0x40f00, 0x8, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000001680)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x3, 0x0, 0x1ff, 0x2de}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001700)=[r2, r5, r2, r6, r7, r3, r2]}, 0x80) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001540)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x29, 0x96, 0x7, 0x1f, 0x56, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x10, 0x7800, 0xa6, 0x1ff}}) (async) dup3(r0, r0, 0x80000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x3, 0x8000, 0x7f, 0x1, 0x40, 0x1, 0x7, '\x00', r1, r2, 0x3, 0x5, 0x2}, 0x48) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') (async) read$usbfs(r4, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r4, &(0x7f0000000000)=""/144, 0x90) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') (async) read$usbfs(r5, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r5, &(0x7f0000000000)=""/144, 0x90) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') (async) read$usbfs(r6, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r6, &(0x7f0000000000)=""/144, 0x90) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') (async) read$usbfs(r7, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r7, &(0x7f0000000000)=""/144, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x7, &(0x7f0000001580)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @ldst={0x0, 0x3, 0x3, 0x4, 0x8, 0x1, 0x8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000015c0)='GPL\x00', 0x4, 0x0, &(0x7f0000001600), 0x40f00, 0x8, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000001680)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x3, 0x0, 0x1ff, 0x2de}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001700)=[r2, r5, r2, r6, r7, r3, r2]}, 0x80) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (async) [ 3134.437264][ T5084] FAULT_INJECTION: forcing a failure. [ 3134.437264][ T5084] name failslab, interval 1, probability 0, space 0, times 0 [ 3134.450054][ T5084] CPU: 0 PID: 5084 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3134.460268][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3134.470309][ T5084] Call Trace: [ 3134.473578][ T5084] dump_stack_lvl+0x1e2/0x24b [ 3134.478227][ T5084] ? panic+0x7d7/0x7d7 [ 3134.482276][ T5084] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3134.487711][ T5084] dump_stack+0x15/0x17 [ 3134.491844][ T5084] should_fail+0x3c0/0x510 [ 3134.496264][ T5084] ? blk_mq_realloc_hw_ctxs+0x802/0x1840 [ 3134.501870][ T5084] __should_failslab+0x9f/0xe0 [ 3134.506609][ T5084] should_failslab+0x9/0x20 [ 3134.511085][ T5084] __kmalloc+0x60/0x360 [ 3134.515219][ T5084] ? blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 3134.520824][ T5084] blk_mq_realloc_hw_ctxs+0x802/0x1840 [ 3134.526259][ T5084] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 3134.532128][ T5084] ? blk_set_default_limits+0x17b/0x410 [ 3134.537655][ T5084] ? blk_alloc_queue+0x574/0x640 [ 3134.542569][ T5084] blk_mq_init_queue+0x6c/0xc0 [ 3134.547308][ T5084] loop_add+0x270/0x760 [ 3134.551439][ T5084] loop_control_ioctl+0x564/0x740 [ 3134.556438][ T5084] ? loop_remove+0xb0/0xb0 [ 3134.560832][ T5084] ? __fget_files+0x310/0x370 [ 3134.565490][ T5084] ? security_file_ioctl+0xb1/0xd0 [ 3134.570584][ T5084] ? loop_remove+0xb0/0xb0 [ 3134.574976][ T5084] __se_sys_ioctl+0x115/0x190 [ 3134.579623][ T5084] __x64_sys_ioctl+0x7b/0x90 [ 3134.584187][ T5084] do_syscall_64+0x34/0x70 [ 3134.588712][ T5084] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3134.594577][ T5084] RIP: 0033:0x7f42b4f940c9 [ 3134.598966][ T5084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3134.618546][ T5084] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3134.626930][ T5084] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3134.634877][ T5084] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3134.642838][ T5084] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3134.650783][ T5084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3134.658732][ T5084] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x400000000000000}, 0x0) 01:12:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xffffff9e}}, 0x20}}, 0x0) [ 3134.855289][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3134.868163][ T5074] device bridge488 entered promiscuous mode [ 3134.876412][ T5080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3134.893493][ T5080] device bridge79 entered promiscuous mode 01:12:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001540)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x29, 0x96, 0x7, 0x1f, 0x56, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x10, 0x7800, 0xa6, 0x1ff}}) (async) r2 = dup3(r0, r0, 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x3, 0x8000, 0x7f, 0x1, 0x40, 0x1, 0x7, '\x00', r1, r2, 0x3, 0x5, 0x2}, 0x48) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r4, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r4, &(0x7f0000000000)=""/144, 0x90) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r5, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r5, &(0x7f0000000000)=""/144, 0x90) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r6, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r6, &(0x7f0000000000)=""/144, 0x90) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r7, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r7, &(0x7f0000000000)=""/144, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x7, &(0x7f0000001580)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @ldst={0x0, 0x3, 0x3, 0x4, 0x8, 0x1, 0x8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000015c0)='GPL\x00', 0x4, 0x0, &(0x7f0000001600), 0x40f00, 0x8, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000001680)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x3, 0x0, 0x1ff, 0x2de}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001700)=[r2, r5, r2, r6, r7, r3, r2]}, 0x80) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x8da2b356}, 0x0) [ 3134.934864][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3134.952480][ T5109] device bridge489 entered promiscuous mode [ 3134.974449][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 01:12:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x500000000000000}, 0x0) 01:12:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/82, 0x52}], 0x7}}], 0x1, 0x0, 0x0) [ 3134.993140][ T5111] device bridge88 entered promiscuous mode [ 3135.002797][ T5119] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3135.023960][ T5119] device bridge551 entered promiscuous mode 01:12:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 3135.074003][ T5123] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3135.093444][ T5123] device bridge490 entered promiscuous mode 01:12:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 29) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3135.155145][ T5130] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3135.189431][ T5130] device bridge491 entered promiscuous mode [ 3135.307128][ T5135] FAULT_INJECTION: forcing a failure. [ 3135.307128][ T5135] name failslab, interval 1, probability 0, space 0, times 0 [ 3135.319883][ T5135] CPU: 0 PID: 5135 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3135.330180][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3135.340223][ T5135] Call Trace: [ 3135.343506][ T5135] dump_stack_lvl+0x1e2/0x24b [ 3135.348159][ T5135] ? panic+0x7d7/0x7d7 [ 3135.352207][ T5135] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3135.357639][ T5135] dump_stack+0x15/0x17 [ 3135.361774][ T5135] should_fail+0x3c0/0x510 [ 3135.366167][ T5135] ? sbitmap_init_node+0x148/0x3d0 [ 3135.371259][ T5135] __should_failslab+0x9f/0xe0 [ 3135.376002][ T5135] should_failslab+0x9/0x20 [ 3135.380483][ T5135] __kmalloc+0x60/0x360 [ 3135.384614][ T5135] sbitmap_init_node+0x148/0x3d0 [ 3135.389527][ T5135] blk_mq_realloc_hw_ctxs+0x896/0x1840 [ 3135.394963][ T5135] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 3135.400828][ T5135] ? blk_set_default_limits+0x17b/0x410 [ 3135.406350][ T5135] ? blk_alloc_queue+0x574/0x640 [ 3135.411259][ T5135] blk_mq_init_queue+0x6c/0xc0 [ 3135.416000][ T5135] loop_add+0x270/0x760 [ 3135.420129][ T5135] loop_control_ioctl+0x564/0x740 [ 3135.425149][ T5135] ? loop_remove+0xb0/0xb0 [ 3135.429540][ T5135] ? __fget_files+0x310/0x370 [ 3135.434196][ T5135] ? security_file_ioctl+0xb1/0xd0 [ 3135.439290][ T5135] ? loop_remove+0xb0/0xb0 [ 3135.443690][ T5135] __se_sys_ioctl+0x115/0x190 [ 3135.448342][ T5135] __x64_sys_ioctl+0x7b/0x90 [ 3135.452905][ T5135] do_syscall_64+0x34/0x70 [ 3135.457297][ T5135] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3135.463162][ T5135] RIP: 0033:0x7f42b4f940c9 [ 3135.467551][ T5135] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3135.487133][ T5135] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3135.495522][ T5135] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3135.503479][ T5135] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3135.511425][ T5135] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3135.519370][ T5135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3135.527315][ T5135] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x11000000}}, 0x20}}, 0x0) 01:12:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/82, 0x52}], 0x7}}], 0x1, 0x0, 0x0) 01:12:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xffffffc3}}, 0x20}}, 0x0) 01:12:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x9effffff}, 0x0) 01:12:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x800000000000000}, 0x0) 01:12:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/82, 0x52}], 0x7}}], 0x1, 0x0, 0x0) [ 3135.766118][ T5139] device bridge551 entered promiscuous mode [ 3135.789094][ T5142] device bridge492 entered promiscuous mode [ 3135.801896][ T5144] device bridge88 entered promiscuous mode 01:12:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 3135.814773][ T5146] device bridge79 entered promiscuous mode 01:12:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000001440)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f00000011c0)=0x80) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 30) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xa00000000000000}, 0x0) [ 3136.008723][ T5154] device bridge493 entered promiscuous mode 01:12:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xa0000000}, 0x0) 01:12:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xffffffea}}, 0x20}}, 0x0) [ 3136.065260][ T5161] device bridge494 entered promiscuous mode [ 3136.094167][ T5165] device bridge88 entered promiscuous mode [ 3136.104486][ T5164] device bridge551 entered promiscuous mode [ 3136.171367][ T5167] FAULT_INJECTION: forcing a failure. [ 3136.171367][ T5167] name failslab, interval 1, probability 0, space 0, times 0 [ 3136.184224][ T5167] CPU: 0 PID: 5167 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3136.194441][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3136.204471][ T5167] Call Trace: [ 3136.207741][ T5167] dump_stack_lvl+0x1e2/0x24b [ 3136.212399][ T5167] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3136.217832][ T5167] ? preempt_schedule_irq+0xef/0x140 [ 3136.223090][ T5167] ? preempt_schedule_notrace+0x140/0x140 [ 3136.228783][ T5167] dump_stack+0x15/0x17 [ 3136.232913][ T5167] should_fail+0x3c0/0x510 [ 3136.237304][ T5167] ? blk_alloc_flush_queue+0x7a/0x250 [ 3136.242648][ T5167] __should_failslab+0x9f/0xe0 [ 3136.247387][ T5167] should_failslab+0x9/0x20 [ 3136.251861][ T5167] kmem_cache_alloc_trace+0x3a/0x330 [ 3136.257121][ T5167] ? blk_alloc_flush_queue+0x25/0x250 [ 3136.262465][ T5167] blk_alloc_flush_queue+0x7a/0x250 [ 3136.267634][ T5167] blk_mq_realloc_hw_ctxs+0xa81/0x1840 [ 3136.273071][ T5167] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 3136.278934][ T5167] ? blk_set_default_limits+0x17b/0x410 [ 3136.284455][ T5167] ? blk_alloc_queue+0x574/0x640 [ 3136.289366][ T5167] blk_mq_init_queue+0x6c/0xc0 [ 3136.294106][ T5167] loop_add+0x270/0x760 [ 3136.298238][ T5167] loop_control_ioctl+0x564/0x740 [ 3136.303235][ T5167] ? loop_remove+0xb0/0xb0 [ 3136.307625][ T5167] ? __fget_files+0x310/0x370 [ 3136.312278][ T5167] ? security_file_ioctl+0xb1/0xd0 [ 3136.317362][ T5167] ? loop_remove+0xb0/0xb0 [ 3136.321758][ T5167] __se_sys_ioctl+0x115/0x190 [ 3136.326407][ T5167] __x64_sys_ioctl+0x7b/0x90 [ 3136.330969][ T5167] do_syscall_64+0x34/0x70 [ 3136.335359][ T5167] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3136.341240][ T5167] RIP: 0033:0x7f42b4f940c9 [ 3136.345641][ T5167] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3136.365319][ T5167] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3136.373714][ T5167] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3136.381659][ T5167] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3136.389609][ T5167] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3136.397553][ T5167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3136.405499][ T5167] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x12000000}}, 0x20}}, 0x0) 01:12:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000001440)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f00000011c0)=0x80) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) getpeername(r0, &(0x7f0000001440)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f00000011c0)=0x80) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (async) 01:12:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x1000000000000000}, 0x0) 01:12:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xa0028000}, 0x0) 01:12:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000001440)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f00000011c0)=0x80) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:12:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xffffffef}}, 0x20}}, 0x0) [ 3136.838009][ T5175] device bridge79 entered promiscuous mode [ 3136.863119][ T5176] device bridge495 entered promiscuous mode [ 3136.877985][ T5178] device bridge551 entered promiscuous mode 01:12:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 31) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x1f00000000000000}, 0x0) 01:12:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = openat2(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x1, 0xc4, 0x14}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0xb33}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000003180)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003140)={&(0x7f0000001600)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) write$binfmt_elf64(r0, &(0x7f0000001680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x1, 0xfd, 0x5, 0x3, 0x3e, 0x0, 0x3e4, 0x40, 0xc3, 0x4, 0x100, 0x38, 0x2, 0xfff, 0x7fff, 0xffff}, [{0x2, 0x0, 0x2, 0x80000001, 0x6, 0x7f, 0x9, 0x200}], "78faf42d5d907b32732a3f11394d0a561dd5f99999c00294", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa90) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/73, 0x49}], 0x7}}], 0x1, 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002140)={{0x0, 0x3f31, 0x877, 0x100000001, 0x9, 0x0, 0x5, 0x8, 0x606, 0x7, 0x0, 0x0, 0x21, 0x8, 0x358}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000001500)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffff, 0x50}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xc014) [ 3136.891800][ T5183] device bridge88 entered promiscuous mode [ 3137.020743][ T5194] FAULT_INJECTION: forcing a failure. [ 3137.020743][ T5194] name failslab, interval 1, probability 0, space 0, times 0 [ 3137.033565][ T5194] CPU: 0 PID: 5194 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3137.043779][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3137.053803][ T5194] Call Trace: [ 3137.057071][ T5194] dump_stack_lvl+0x1e2/0x24b [ 3137.061721][ T5194] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3137.067152][ T5194] dump_stack+0x15/0x17 [ 3137.071287][ T5194] should_fail+0x3c0/0x510 [ 3137.075677][ T5194] ? blk_alloc_flush_queue+0xe0/0x250 [ 3137.081021][ T5194] __should_failslab+0x9f/0xe0 [ 3137.085765][ T5194] should_failslab+0x9/0x20 [ 3137.090245][ T5194] __kmalloc+0x60/0x360 [ 3137.094374][ T5194] ? kmem_cache_alloc_trace+0x1dd/0x330 [ 3137.099893][ T5194] ? blk_alloc_flush_queue+0x7a/0x250 [ 3137.105243][ T5194] blk_alloc_flush_queue+0xe0/0x250 [ 3137.110417][ T5194] blk_mq_realloc_hw_ctxs+0xa81/0x1840 [ 3137.115850][ T5194] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 3137.121736][ T5194] ? blk_set_default_limits+0x17b/0x410 [ 3137.127258][ T5194] ? blk_alloc_queue+0x574/0x640 [ 3137.132167][ T5194] blk_mq_init_queue+0x6c/0xc0 [ 3137.136907][ T5194] loop_add+0x270/0x760 [ 3137.141038][ T5194] loop_control_ioctl+0x564/0x740 [ 3137.146037][ T5194] ? __fget_files+0x81/0x370 [ 3137.150610][ T5194] ? loop_remove+0xb0/0xb0 [ 3137.155000][ T5194] ? __fget_files+0x310/0x370 [ 3137.159649][ T5194] ? security_file_ioctl+0xb1/0xd0 [ 3137.164733][ T5194] ? loop_remove+0xb0/0xb0 [ 3137.169123][ T5194] __se_sys_ioctl+0x115/0x190 [ 3137.173805][ T5194] __x64_sys_ioctl+0x7b/0x90 [ 3137.178374][ T5194] do_syscall_64+0x34/0x70 [ 3137.183033][ T5194] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3137.188907][ T5194] RIP: 0033:0x7f42b4f940c9 [ 3137.193301][ T5194] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3137.214102][ T5194] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3137.222498][ T5194] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3137.230445][ T5194] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3137.238391][ T5194] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3137.246338][ T5194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3137.254290][ T5194] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3137.408882][ T5197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5197 comm=syz-executor.3 01:12:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) r1 = openat2(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x1, 0xc4, 0x14}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0xb33}, 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000003180)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003140)={&(0x7f0000001600)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) (async) write$binfmt_elf64(r0, &(0x7f0000001680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x1, 0xfd, 0x5, 0x3, 0x3e, 0x0, 0x3e4, 0x40, 0xc3, 0x4, 0x100, 0x38, 0x2, 0xfff, 0x7fff, 0xffff}, [{0x2, 0x0, 0x2, 0x80000001, 0x6, 0x7f, 0x9, 0x200}], "78faf42d5d907b32732a3f11394d0a561dd5f99999c00294", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa90) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/73, 0x49}], 0x7}}], 0x1, 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002140)={{0x0, 0x3f31, 0x877, 0x100000001, 0x9, 0x0, 0x5, 0x8, 0x606, 0x7, 0x0, 0x0, 0x21, 0x8, 0x358}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000001500)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffff, 0x50}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xc014) 01:12:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xfffffff0}}, 0x20}}, 0x0) [ 3137.573405][ T5190] device bridge496 entered promiscuous mode 01:12:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x2100000000000000}, 0x0) [ 3137.613583][ T5201] device bridge88 entered promiscuous mode [ 3137.632550][ T5200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5200 comm=syz-executor.3 [ 3137.690322][ T5206] device bridge497 entered promiscuous mode 01:12:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x13000000}}, 0x20}}, 0x0) 01:12:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xa0030000}, 0x0) 01:12:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = openat2(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x1, 0xc4, 0x14}, 0x18) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0xb33}, 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000003180)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003140)={&(0x7f0000001600)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) (async) write$binfmt_elf64(r0, &(0x7f0000001680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x1, 0xfd, 0x5, 0x3, 0x3e, 0x0, 0x3e4, 0x40, 0xc3, 0x4, 0x100, 0x38, 0x2, 0xfff, 0x7fff, 0xffff}, [{0x2, 0x0, 0x2, 0x80000001, 0x6, 0x7f, 0x9, 0x200}], "78faf42d5d907b32732a3f11394d0a561dd5f99999c00294", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa90) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/73, 0x49}], 0x7}}], 0x1, 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002140)={{0x0, 0x3f31, 0x877, 0x100000001, 0x9, 0x0, 0x5, 0x8, 0x606, 0x7, 0x0, 0x0, 0x21, 0x8, 0x358}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000001500)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffff, 0x50}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xc014) 01:12:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x72c247c900000000}, 0x0) 01:12:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 32) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:12:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xfffffffc}}, 0x20}}, 0x0) [ 3137.881382][ T5212] device bridge551 entered promiscuous mode [ 3137.899199][ T5219] device bridge79 entered promiscuous mode [ 3137.911092][ T5216] device bridge498 entered promiscuous mode [ 3137.921354][ T5217] device bridge88 entered promiscuous mode [ 3137.959695][ T5220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5220 comm=syz-executor.3 [ 3137.984623][ T5224] FAULT_INJECTION: forcing a failure. [ 3137.984623][ T5224] name failslab, interval 1, probability 0, space 0, times 0 [ 3137.997388][ T5224] CPU: 0 PID: 5224 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3138.007601][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3138.017629][ T5224] Call Trace: [ 3138.020897][ T5224] dump_stack_lvl+0x1e2/0x24b [ 3138.025547][ T5224] ? panic+0x7d7/0x7d7 [ 3138.029592][ T5224] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3138.035025][ T5224] dump_stack+0x15/0x17 [ 3138.039157][ T5224] should_fail+0x3c0/0x510 [ 3138.043553][ T5224] ? __alloc_disk_node+0x75/0x330 [ 3138.048548][ T5224] __should_failslab+0x9f/0xe0 [ 3138.053285][ T5224] should_failslab+0x9/0x20 [ 3138.057760][ T5224] kmem_cache_alloc_trace+0x3a/0x330 [ 3138.063017][ T5224] __alloc_disk_node+0x75/0x330 [ 3138.067843][ T5224] loop_add+0x341/0x760 [ 3138.071981][ T5224] loop_control_ioctl+0x564/0x740 [ 3138.076982][ T5224] ? loop_remove+0xb0/0xb0 [ 3138.081374][ T5224] ? __fget_files+0x310/0x370 [ 3138.086028][ T5224] ? security_file_ioctl+0xb1/0xd0 [ 3138.091111][ T5224] ? loop_remove+0xb0/0xb0 [ 3138.095499][ T5224] __se_sys_ioctl+0x115/0x190 [ 3138.100149][ T5224] __x64_sys_ioctl+0x7b/0x90 [ 3138.104715][ T5224] do_syscall_64+0x34/0x70 [ 3138.109106][ T5224] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3138.114970][ T5224] RIP: 0033:0x7f42b4f940c9 [ 3138.119365][ T5224] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3138.138960][ T5224] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3138.147358][ T5224] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3138.155317][ T5224] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3138.163271][ T5224] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3138.171217][ T5224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3138.179164][ T5224] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:12:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x8100000000000000}, 0x0) 01:12:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000011c0)={0x3a, @multicast2, 0x4e20, 0x2, 'rr\x00', 0x1, 0xfff, 0x24}, 0x2c) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:13:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xa8030000}, 0x0) 01:13:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000011c0)={0x3a, @multicast2, 0x4e20, 0x2, 'rr\x00', 0x1, 0xfff, 0x24}, 0x2c) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:13:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xfffffffe}}, 0x20}}, 0x0) 01:13:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 33) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3138.674509][ T5227] device bridge499 entered promiscuous mode [ 3138.742448][ T5236] device bridge551 entered promiscuous mode [ 3138.762732][ T5240] device bridge88 entered promiscuous mode [ 3138.846488][ T5242] FAULT_INJECTION: forcing a failure. [ 3138.846488][ T5242] name failslab, interval 1, probability 0, space 0, times 0 [ 3138.859350][ T5242] CPU: 0 PID: 5242 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3138.869568][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3138.879599][ T5242] Call Trace: [ 3138.882874][ T5242] dump_stack_lvl+0x1e2/0x24b [ 3138.887527][ T5242] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3138.892960][ T5242] dump_stack+0x15/0x17 [ 3138.897186][ T5242] should_fail+0x3c0/0x510 [ 3138.901581][ T5242] ? disk_expand_part_tbl+0x1b9/0x3f0 [ 3138.906929][ T5242] __should_failslab+0x9f/0xe0 [ 3138.911666][ T5242] should_failslab+0x9/0x20 [ 3138.916147][ T5242] __kmalloc+0x60/0x360 [ 3138.920713][ T5242] disk_expand_part_tbl+0x1b9/0x3f0 [ 3138.925885][ T5242] __alloc_disk_node+0x112/0x330 [ 3138.930798][ T5242] loop_add+0x341/0x760 [ 3138.934929][ T5242] loop_control_ioctl+0x564/0x740 [ 3138.939926][ T5242] ? loop_remove+0xb0/0xb0 [ 3138.944319][ T5242] ? __fget_files+0x310/0x370 [ 3138.949060][ T5242] ? security_file_ioctl+0xb1/0xd0 [ 3138.954151][ T5242] ? loop_remove+0xb0/0xb0 [ 3138.958540][ T5242] __se_sys_ioctl+0x115/0x190 [ 3138.963201][ T5242] __x64_sys_ioctl+0x7b/0x90 [ 3138.967764][ T5242] do_syscall_64+0x34/0x70 [ 3138.972155][ T5242] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3138.978018][ T5242] RIP: 0033:0x7f42b4f940c9 [ 3138.982410][ T5242] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3139.001986][ T5242] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3139.010372][ T5242] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3139.018318][ T5242] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3139.026263][ T5242] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3139.034210][ T5242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3139.042158][ T5242] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:13:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x81ffffff00000000}, 0x0) 01:13:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000011c0)={0x3a, @multicast2, 0x4e20, 0x2, 'rr\x00', 0x1, 0xfff, 0x24}, 0x2c) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:13:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x18000000}}, 0x20}}, 0x0) 01:13:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r1, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r1, &(0x7f0000000000)=""/144, 0x90) write(r1, &(0x7f0000000100)="1400000052004f7fb3c4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) [ 3139.336315][ T5246] __nla_validate_parse: 22 callbacks suppressed [ 3139.336323][ T5246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3139.372940][ T5246] device bridge500 entered promiscuous mode 01:13:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 01:13:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xc3ffffff}, 0x0) [ 3139.383016][ T5250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3139.416171][ T5250] device bridge79 entered promiscuous mode 01:13:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xffffffff}}, 0x20}}, 0x0) 01:13:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xb93e000000000000}, 0x0) [ 3139.489503][ T5257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3139.503893][ T5257] device bridge501 entered promiscuous mode [ 3139.514411][ T5259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:13:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 34) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3139.550306][ T5259] device bridge551 entered promiscuous mode 01:13:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}}, 0x0) [ 3139.594221][ T5263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3139.607450][ T5263] device bridge88 entered promiscuous mode [ 3139.614930][ T5265] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3139.633993][ T5265] device bridge502 entered promiscuous mode [ 3139.703430][ T5273] FAULT_INJECTION: forcing a failure. [ 3139.703430][ T5273] name failslab, interval 1, probability 0, space 0, times 0 [ 3139.716191][ T5273] CPU: 0 PID: 5273 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3139.726404][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3139.736432][ T5273] Call Trace: [ 3139.739697][ T5273] dump_stack_lvl+0x1e2/0x24b [ 3139.744349][ T5273] ? panic+0x7d7/0x7d7 [ 3139.748398][ T5273] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3139.753830][ T5273] ? find_next_bit+0xd6/0x120 [ 3139.758480][ T5273] ? cpumask_next+0x11/0x30 [ 3139.762959][ T5273] dump_stack+0x15/0x17 [ 3139.767089][ T5273] should_fail+0x3c0/0x510 [ 3139.771478][ T5273] ? percpu_ref_init+0xd0/0x340 [ 3139.776308][ T5273] __should_failslab+0x9f/0xe0 [ 3139.781135][ T5273] should_failslab+0x9/0x20 [ 3139.785614][ T5273] kmem_cache_alloc_trace+0x3a/0x330 [ 3139.790873][ T5273] percpu_ref_init+0xd0/0x340 [ 3139.795520][ T5273] ? hd_ref_init+0x50/0x50 [ 3139.799910][ T5273] hd_ref_init+0x27/0x50 [ 3139.804131][ T5273] __alloc_disk_node+0x1be/0x330 [ 3139.809043][ T5273] loop_add+0x341/0x760 [ 3139.813173][ T5273] loop_control_ioctl+0x564/0x740 [ 3139.818173][ T5273] ? loop_remove+0xb0/0xb0 [ 3139.822568][ T5273] ? irqentry_exit+0x50/0x60 [ 3139.827132][ T5273] ? sysvec_reschedule_ipi+0x84/0x160 [ 3139.832483][ T5273] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3139.838092][ T5273] ? loop_remove+0xb0/0xb0 [ 3139.842485][ T5273] __se_sys_ioctl+0x115/0x190 [ 3139.847136][ T5273] __x64_sys_ioctl+0x7b/0x90 [ 3139.851698][ T5273] do_syscall_64+0x34/0x70 [ 3139.856094][ T5273] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3139.861963][ T5273] RIP: 0033:0x7f42b4f940c9 [ 3139.866358][ T5273] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3139.885935][ T5273] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3139.894325][ T5273] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3139.902271][ T5273] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3139.910218][ T5273] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3139.918163][ T5273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3139.926107][ T5273] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:13:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xbad143a900000000}, 0x0) 01:13:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x1f000000}}, 0x20}}, 0x0) 01:13:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xc5000000}, 0x0) [ 3140.109184][ T5272] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3140.132850][ T5272] device bridge89 entered promiscuous mode [ 3140.140557][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x2}}, 0x20}}, 0x0) 01:13:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r1, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r1, &(0x7f0000000000)=""/144, 0x90) write(r1, &(0x7f0000000100)="1400000052004f7fb3c4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') (async) read$usbfs(r1, &(0x7f0000000300)=""/211, 0xd3) (async) read$watch_queue(r1, &(0x7f0000000000)=""/144, 0x90) (async) write(r1, &(0x7f0000000100)="1400000052004f7fb3c4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (async) 01:13:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xc3ffffff00000000}, 0x0) [ 3140.165518][ T5276] device bridge79 entered promiscuous mode [ 3140.179127][ T5278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3140.194721][ T5278] device bridge503 entered promiscuous mode [ 3140.204550][ T5280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3140.248164][ T5280] device bridge551 entered promiscuous mode [ 3140.259416][ T5282] device bridge90 entered promiscuous mode 01:13:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 35) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3140.556916][ T5298] FAULT_INJECTION: forcing a failure. [ 3140.556916][ T5298] name failslab, interval 1, probability 0, space 0, times 0 [ 3140.570270][ T5298] CPU: 0 PID: 5298 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3140.580484][ T5298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3140.590515][ T5298] Call Trace: [ 3140.593783][ T5298] dump_stack_lvl+0x1e2/0x24b [ 3140.598436][ T5298] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3140.603869][ T5298] dump_stack+0x15/0x17 [ 3140.607999][ T5298] should_fail+0x3c0/0x510 [ 3140.612387][ T5298] ? rand_initialize_disk+0x4f/0xa8 [ 3140.617567][ T5298] __should_failslab+0x9f/0xe0 [ 3140.622304][ T5298] should_failslab+0x9/0x20 [ 3140.626781][ T5298] kmem_cache_alloc_trace+0x3a/0x330 [ 3140.632039][ T5298] ? __kasan_check_write+0x14/0x20 [ 3140.637126][ T5298] ? percpu_ref_init+0x237/0x340 [ 3140.642035][ T5298] ? hd_ref_init+0x50/0x50 [ 3140.646443][ T5298] rand_initialize_disk+0x4f/0xa8 [ 3140.651444][ T5298] __alloc_disk_node+0x29a/0x330 [ 3140.656358][ T5298] loop_add+0x341/0x760 [ 3140.660490][ T5298] loop_control_ioctl+0x564/0x740 [ 3140.665487][ T5298] ? loop_remove+0xb0/0xb0 [ 3140.669877][ T5298] ? __fget_files+0x310/0x370 [ 3140.674529][ T5298] ? security_file_ioctl+0xb1/0xd0 [ 3140.679615][ T5298] ? loop_remove+0xb0/0xb0 [ 3140.684004][ T5298] __se_sys_ioctl+0x115/0x190 [ 3140.688656][ T5298] __x64_sys_ioctl+0x7b/0x90 [ 3140.693218][ T5298] do_syscall_64+0x34/0x70 [ 3140.697612][ T5298] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3140.703477][ T5298] RIP: 0033:0x7f42b4f940c9 [ 3140.707870][ T5298] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3140.727447][ T5298] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3140.735833][ T5298] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3140.743778][ T5298] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3140.751728][ T5298] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3140.759672][ T5298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3140.767616][ T5298] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:13:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xc6000000}, 0x0) 01:13:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x3}}, 0x20}}, 0x0) 01:13:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xc500000000000000}, 0x0) [ 3140.963661][ T5290] device bridge504 entered promiscuous mode [ 3141.002138][ T5301] device bridge551 entered promiscuous mode 01:13:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xeaffffff00000000}, 0x0) 01:13:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') read$usbfs(r1, &(0x7f0000000300)=""/211, 0xd3) read$watch_queue(r1, &(0x7f0000000000)=""/144, 0x90) (async) write(r1, &(0x7f0000000100)="1400000052004f7fb3c4bf80a000080000000000", 0x14) (async, rerun: 64) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) (rerun: 64) [ 3141.030208][ T5304] device bridge505 entered promiscuous mode [ 3141.041334][ T5305] device bridge90 entered promiscuous mode 01:13:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xeaffffff}, 0x0) [ 3141.155906][ T5307] device bridge506 entered promiscuous mode [ 3141.197249][ T5314] device bridge551 entered promiscuous mode 01:13:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x20000000}}, 0x20}}, 0x0) 01:13:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xefffffff00000000}, 0x0) 01:13:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 36) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x4}}, 0x20}}, 0x0) 01:13:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xefffffff}, 0x0) 01:13:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 3141.299746][ T5317] device bridge79 entered promiscuous mode [ 3141.312434][ T5318] device bridge507 entered promiscuous mode [ 3141.331213][ T5322] device bridge90 entered promiscuous mode [ 3141.418626][ T5330] FAULT_INJECTION: forcing a failure. [ 3141.418626][ T5330] name failslab, interval 1, probability 0, space 0, times 0 [ 3141.431381][ T5330] CPU: 0 PID: 5330 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3141.441593][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3141.451622][ T5330] Call Trace: [ 3141.454892][ T5330] dump_stack_lvl+0x1e2/0x24b [ 3141.459547][ T5330] ? panic+0x7d7/0x7d7 [ 3141.463591][ T5330] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3141.469024][ T5330] dump_stack+0x15/0x17 [ 3141.473154][ T5330] should_fail+0x3c0/0x510 [ 3141.477554][ T5330] ? device_create+0x11d/0x2e0 [ 3141.482292][ T5330] __should_failslab+0x9f/0xe0 [ 3141.487030][ T5330] should_failslab+0x9/0x20 [ 3141.491507][ T5330] kmem_cache_alloc_trace+0x3a/0x330 [ 3141.496765][ T5330] ? vsnprintf+0x1fa/0x1cd0 [ 3141.501245][ T5330] device_create+0x11d/0x2e0 [ 3141.505809][ T5330] ? root_device_unregister+0x80/0x80 [ 3141.511154][ T5330] ? number+0xb55/0x1040 [ 3141.515375][ T5330] ? number+0xd9b/0x1040 [ 3141.519592][ T5330] bdi_register_va+0x94/0x600 [ 3141.524242][ T5330] bdi_register+0xd1/0x120 [ 3141.528647][ T5330] ? irqentry_exit+0x50/0x60 [ 3141.533214][ T5330] ? __device_add_disk+0x536/0x11d0 [ 3141.538383][ T5330] ? bdi_register_va+0x600/0x600 [ 3141.543310][ T5330] __device_add_disk+0x5cb/0x11d0 [ 3141.548316][ T5330] ? device_add_disk+0x40/0x40 [ 3141.553057][ T5330] ? loop_add+0x400/0x760 [ 3141.557366][ T5330] ? vsprintf+0x40/0x40 [ 3141.561496][ T5330] device_add_disk+0x2a/0x40 [ 3141.566060][ T5330] loop_add+0x58f/0x760 [ 3141.570192][ T5330] loop_control_ioctl+0x564/0x740 [ 3141.576002][ T5330] ? loop_remove+0xb0/0xb0 [ 3141.580414][ T5330] ? __fget_files+0x310/0x370 [ 3141.585073][ T5330] ? security_file_ioctl+0xb1/0xd0 [ 3141.590158][ T5330] ? loop_remove+0xb0/0xb0 [ 3141.594546][ T5330] __se_sys_ioctl+0x115/0x190 [ 3141.599196][ T5330] __x64_sys_ioctl+0x7b/0x90 [ 3141.603761][ T5330] do_syscall_64+0x34/0x70 [ 3141.608159][ T5330] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3141.614459][ T5330] RIP: 0033:0x7f42b4f940c9 [ 3141.618849][ T5330] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3141.638428][ T5330] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3141.646814][ T5330] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3141.654762][ T5330] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3141.663401][ T5330] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3141.671346][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3141.679302][ T5330] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3141.688119][ T5330] ------------[ cut here ]------------ [ 3141.693719][ T5330] WARNING: CPU: 0 PID: 5330 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3141.703110][ T5330] Modules linked in: [ 3141.707156][ T5330] CPU: 0 PID: 5330 Comm: syz-executor.4 Not tainted 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3141.717535][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3141.727749][ T5330] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3141.733690][ T5330] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3141.753465][ T5330] RSP: 0018:ffffc900031c7bc0 EFLAGS: 00010287 [ 3141.759812][ T5330] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3141.767912][ T5330] RDX: ffffc90003d81000 RSI: 00000000000252ce RDI: 00000000000252cf [ 3141.776028][ T5330] RBP: ffffc900031c7d08 R08: ffffffff82412a76 R09: fffffbfff0c859bf [ 3141.785577][ T5330] R10: fffffbfff0c859bf R11: 1ffffffff0c859be R12: 0000000000000007 [ 3141.793797][ T5330] R13: ffff88818d65d000 R14: ffff88818d658338 R15: ffff88818d658000 [ 3141.801914][ T5330] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3141.811053][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3141.817759][ T5330] CR2: 00007f42b3cc4ff8 CR3: 000000017c64f000 CR4: 00000000003506b0 [ 3141.825997][ T5330] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3141.834110][ T5330] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3141.842252][ T5330] Call Trace: [ 3141.845686][ T5330] ? device_add_disk+0x40/0x40 [ 3141.850632][ T5330] ? loop_add+0x400/0x760 [ 3141.855086][ T5330] ? vsprintf+0x40/0x40 [ 3141.859422][ T5330] device_add_disk+0x2a/0x40 [ 3141.864135][ T5330] loop_add+0x58f/0x760 [ 3141.868445][ T5330] loop_control_ioctl+0x564/0x740 [ 3141.873766][ T5330] ? loop_remove+0xb0/0xb0 [ 3141.878314][ T5330] ? __fget_files+0x310/0x370 [ 3141.883132][ T5330] ? security_file_ioctl+0xb1/0xd0 [ 3141.888382][ T5330] ? loop_remove+0xb0/0xb0 [ 3141.892931][ T5330] __se_sys_ioctl+0x115/0x190 [ 3141.897728][ T5330] __x64_sys_ioctl+0x7b/0x90 [ 3141.902465][ T5330] do_syscall_64+0x34/0x70 [ 3141.907009][ T5330] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3141.913041][ T5330] RIP: 0033:0x7f42b4f940c9 [ 3141.917583][ T5330] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3141.937517][ T5330] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3141.946324][ T5330] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3141.954440][ T5330] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3141.962557][ T5330] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3141.970658][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3141.978794][ T5330] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3141.987006][ T5330] ---[ end trace 66cfa9b859026db6 ]--- 01:13:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:13:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 37) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xfeffffff00000000}, 0x0) [ 3142.147474][ T5324] device bridge551 entered promiscuous mode [ 3142.163877][ T5326] device bridge508 entered promiscuous mode [ 3142.302650][ T5343] FAULT_INJECTION: forcing a failure. [ 3142.302650][ T5343] name failslab, interval 1, probability 0, space 0, times 0 [ 3142.315305][ T5343] CPU: 0 PID: 5343 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3142.326909][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3142.336940][ T5343] Call Trace: [ 3142.340209][ T5343] dump_stack_lvl+0x1e2/0x24b [ 3142.344862][ T5343] ? panic+0x7d7/0x7d7 [ 3142.348906][ T5343] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3142.354947][ T5343] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3142.360381][ T5343] dump_stack+0x15/0x17 [ 3142.364512][ T5343] should_fail+0x3c0/0x510 [ 3142.368911][ T5343] ? kvasprintf_const+0x139/0x180 [ 3142.373907][ T5343] __should_failslab+0x9f/0xe0 [ 3142.380040][ T5343] should_failslab+0x9/0x20 [ 3142.384527][ T5343] __kmalloc_track_caller+0x5f/0x350 [ 3142.389788][ T5343] ? __hrtimer_init+0x17b/0x260 [ 3142.394615][ T5343] kstrdup_const+0x55/0x90 [ 3142.399005][ T5343] kvasprintf_const+0x139/0x180 [ 3142.403830][ T5343] kobject_set_name_vargs+0x61/0x120 [ 3142.409089][ T5343] device_create+0x222/0x2e0 [ 3142.413655][ T5343] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3142.419272][ T5343] ? root_device_unregister+0x80/0x80 [ 3142.425075][ T5343] ? number+0xd9b/0x1040 [ 3142.429293][ T5343] bdi_register_va+0x94/0x600 [ 3142.433942][ T5343] bdi_register+0xd1/0x120 [ 3142.438332][ T5343] ? irqentry_exit+0x50/0x60 [ 3142.442893][ T5343] ? sysvec_reschedule_ipi+0x84/0x160 [ 3142.448239][ T5343] ? __device_add_disk+0x536/0x11d0 [ 3142.453412][ T5343] ? bdi_register_va+0x600/0x600 [ 3142.458377][ T5343] ? __device_add_disk+0x1a9/0x11d0 [ 3142.463549][ T5343] ? blk_alloc_devt+0xd4/0x320 [ 3142.468291][ T5343] __device_add_disk+0x5cb/0x11d0 [ 3142.473292][ T5343] ? device_add_disk+0x40/0x40 [ 3142.478030][ T5343] ? loop_add+0x400/0x760 [ 3142.482334][ T5343] ? vsprintf+0x40/0x40 [ 3142.486466][ T5343] device_add_disk+0x2a/0x40 [ 3142.491028][ T5343] loop_add+0x58f/0x760 [ 3142.495161][ T5343] loop_control_ioctl+0x564/0x740 [ 3142.500160][ T5343] ? loop_remove+0xb0/0xb0 [ 3142.504551][ T5343] ? irqentry_exit+0x50/0x60 [ 3142.509112][ T5343] ? sysvec_reschedule_ipi+0x84/0x160 [ 3142.514547][ T5343] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3142.520157][ T5343] ? security_file_ioctl+0xb1/0xd0 [ 3142.525242][ T5343] ? loop_remove+0xb0/0xb0 [ 3142.529639][ T5343] __se_sys_ioctl+0x115/0x190 [ 3142.534291][ T5343] __x64_sys_ioctl+0x7b/0x90 [ 3142.538854][ T5343] do_syscall_64+0x34/0x70 [ 3142.543245][ T5343] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3142.549107][ T5343] RIP: 0033:0x7f42b4f940c9 [ 3142.553498][ T5343] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3142.573074][ T5343] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3142.581461][ T5343] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3142.589408][ T5343] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3142.597353][ T5343] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3142.605305][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3142.613253][ T5343] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3142.622680][ T5343] ------------[ cut here ]------------ [ 3142.628196][ T5343] WARNING: CPU: 0 PID: 5343 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3142.637208][ T5343] Modules linked in: [ 3142.641160][ T5343] CPU: 0 PID: 5343 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3142.652802][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3142.662898][ T5343] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3142.668753][ T5343] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3142.688405][ T5343] RSP: 0018:ffffc90003197bc0 EFLAGS: 00010283 [ 3142.694502][ T5343] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3142.702507][ T5343] RDX: ffffc90003d81000 RSI: 000000000002ca61 RDI: 000000000002ca62 [ 3142.710501][ T5343] RBP: ffffc90003197d08 R08: ffffffff82412a76 R09: 0000000000000003 [ 3142.718493][ T5343] R10: fffff52000632e85 R11: 1ffff92000632e84 R12: 0000000000000007 [ 3142.726470][ T5343] R13: ffff88811714f000 R14: ffff88811714b338 R15: ffff88811714b000 [ 3142.734463][ T5343] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3142.743411][ T5343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3142.750070][ T5343] CR2: 00007f42b3cc4ff8 CR3: 0000000192945000 CR4: 00000000003506b0 [ 3142.758064][ T5343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3142.766066][ T5343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3142.774054][ T5343] Call Trace: [ 3142.777376][ T5343] ? device_add_disk+0x40/0x40 [ 3142.782177][ T5343] ? loop_add+0x400/0x760 [ 3142.786514][ T5343] ? vsprintf+0x40/0x40 [ 3142.790688][ T5343] device_add_disk+0x2a/0x40 [ 3142.795288][ T5343] loop_add+0x58f/0x760 [ 3142.799464][ T5343] loop_control_ioctl+0x564/0x740 [ 3142.804497][ T5343] ? loop_remove+0xb0/0xb0 [ 3142.808931][ T5343] ? irqentry_exit+0x50/0x60 [ 3142.813525][ T5343] ? sysvec_reschedule_ipi+0x84/0x160 [ 3142.818936][ T5343] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3142.824663][ T5343] ? security_file_ioctl+0xb1/0xd0 [ 3142.829795][ T5343] ? loop_remove+0xb0/0xb0 [ 3142.834220][ T5343] __se_sys_ioctl+0x115/0x190 [ 3142.838932][ T5343] __x64_sys_ioctl+0x7b/0x90 [ 3142.843533][ T5343] do_syscall_64+0x34/0x70 [ 3142.847965][ T5343] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3142.853875][ T5343] RIP: 0033:0x7f42b4f940c9 [ 3142.858322][ T5343] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3142.877952][ T5343] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3142.886403][ T5343] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3142.894393][ T5343] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3142.902414][ T5343] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3142.910487][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3142.918478][ T5343] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3142.926478][ T5343] ---[ end trace 66cfa9b859026db7 ]--- 01:13:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x5}}, 0x20}}, 0x0) 01:13:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) 01:13:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x21000000}}, 0x20}}, 0x0) 01:13:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 01:13:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xf0ffffff}, 0x0) 01:13:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 38) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3143.132537][ T5339] device bridge509 entered promiscuous mode 01:13:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/217, 0xd9}, {&(0x7f0000000140)=""/87, 0x57}], 0x7}}], 0x1, 0x0, 0x0) [ 3143.198965][ T5351] device bridge90 entered promiscuous mode [ 3143.213117][ T5352] device bridge551 entered promiscuous mode [ 3143.224847][ T5349] device bridge79 entered promiscuous mode [ 3143.309827][ T5362] FAULT_INJECTION: forcing a failure. [ 3143.309827][ T5362] name failslab, interval 1, probability 0, space 0, times 0 [ 3143.322622][ T5362] CPU: 0 PID: 5362 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3143.334231][ T5362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3143.344273][ T5362] Call Trace: [ 3143.347560][ T5362] dump_stack_lvl+0x1e2/0x24b [ 3143.352216][ T5362] ? panic+0x7d7/0x7d7 [ 3143.356258][ T5362] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3143.361691][ T5362] ? number+0xcc7/0x1040 [ 3143.365911][ T5362] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 3143.371339][ T5362] dump_stack+0x15/0x17 [ 3143.375467][ T5362] should_fail+0x3c0/0x510 [ 3143.379862][ T5362] ? device_create+0x11d/0x2e0 [ 3143.384606][ T5362] __should_failslab+0x9f/0xe0 [ 3143.389343][ T5362] should_failslab+0x9/0x20 [ 3143.393817][ T5362] kmem_cache_alloc_trace+0x3a/0x330 [ 3143.399077][ T5362] ? vsnprintf+0x1fa/0x1cd0 [ 3143.403554][ T5362] device_create+0x11d/0x2e0 [ 3143.408122][ T5362] ? root_device_unregister+0x80/0x80 [ 3143.413469][ T5362] ? __kasan_check_read+0x11/0x20 [ 3143.418467][ T5362] ? preempt_schedule_irq+0xef/0x140 [ 3143.423725][ T5362] ? preempt_schedule_notrace+0x140/0x140 [ 3143.429422][ T5362] bdi_register_va+0x94/0x600 [ 3143.434071][ T5362] bdi_register+0xd1/0x120 [ 3143.438464][ T5362] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3143.444074][ T5362] ? __device_add_disk+0x536/0x11d0 [ 3143.449248][ T5362] ? bdi_register_va+0x600/0x600 [ 3143.454164][ T5362] ? __kasan_check_read+0x11/0x20 [ 3143.459161][ T5362] ? blk_alloc_devt+0xd4/0x320 [ 3143.463901][ T5362] __device_add_disk+0x5cb/0x11d0 [ 3143.468899][ T5362] ? device_add_disk+0x40/0x40 [ 3143.473638][ T5362] ? loop_add+0x400/0x760 [ 3143.477944][ T5362] ? vsprintf+0x40/0x40 [ 3143.482073][ T5362] device_add_disk+0x2a/0x40 [ 3143.486637][ T5362] loop_add+0x58f/0x760 [ 3143.490768][ T5362] loop_control_ioctl+0x564/0x740 [ 3143.495763][ T5362] ? loop_remove+0xb0/0xb0 [ 3143.500152][ T5362] ? irqentry_exit+0x50/0x60 [ 3143.504717][ T5362] ? sysvec_reschedule_ipi+0x84/0x160 [ 3143.510059][ T5362] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3143.515673][ T5362] ? security_file_ioctl+0xb1/0xd0 [ 3143.520766][ T5362] ? loop_remove+0xb0/0xb0 [ 3143.525159][ T5362] __se_sys_ioctl+0x115/0x190 [ 3143.529820][ T5362] __x64_sys_ioctl+0x7b/0x90 [ 3143.534384][ T5362] do_syscall_64+0x34/0x70 [ 3143.538779][ T5362] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3143.544650][ T5362] RIP: 0033:0x7f42b4f940c9 [ 3143.549048][ T5362] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3143.568625][ T5362] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3143.577453][ T5362] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3143.585396][ T5362] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3143.593340][ T5362] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3143.601286][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3143.609418][ T5362] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3143.618436][ T5362] ------------[ cut here ]------------ [ 3143.624055][ T5362] WARNING: CPU: 0 PID: 5362 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3143.633334][ T5362] Modules linked in: [ 3143.637386][ T5362] CPU: 0 PID: 5362 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3143.649306][ T5362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3143.659518][ T5362] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3143.665446][ T5362] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3143.685255][ T5362] RSP: 0018:ffffc900032b7bc0 EFLAGS: 00010287 [ 3143.691475][ T5362] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3143.699622][ T5362] RDX: ffffc90003d81000 RSI: 000000000002b1c8 RDI: 000000000002b1c9 [ 3143.707718][ T5362] RBP: ffffc900032b7d08 R08: ffffffff82412a76 R09: fffffbfff0c859bf [ 3143.715860][ T5362] R10: fffffbfff0c859bf R11: 1ffffffff0c859be R12: 0000000000000007 [ 3143.723980][ T5362] R13: ffff888189274000 R14: ffff888189275338 R15: ffff888189275000 [ 3143.732089][ T5362] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3143.741147][ T5362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3143.747853][ T5362] CR2: 00007f42b3cc4ff8 CR3: 0000000185eac000 CR4: 00000000003506b0 [ 3143.755968][ T5362] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3143.764074][ T5362] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3143.772220][ T5362] Call Trace: [ 3143.775648][ T5362] ? device_add_disk+0x40/0x40 [ 3143.780980][ T5362] ? loop_add+0x400/0x760 [ 3143.785439][ T5362] ? vsprintf+0x40/0x40 [ 3143.789732][ T5362] device_add_disk+0x2a/0x40 [ 3143.794443][ T5362] loop_add+0x58f/0x760 [ 3143.798766][ T5362] loop_control_ioctl+0x564/0x740 [ 3143.803924][ T5362] ? loop_remove+0xb0/0xb0 [ 3143.808482][ T5362] ? irqentry_exit+0x50/0x60 [ 3143.813206][ T5362] ? sysvec_reschedule_ipi+0x84/0x160 [ 3143.818735][ T5362] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3143.824491][ T5362] ? security_file_ioctl+0xb1/0xd0 [ 3143.829760][ T5362] ? loop_remove+0xb0/0xb0 [ 3143.834304][ T5362] __se_sys_ioctl+0x115/0x190 [ 3143.839264][ T5362] __x64_sys_ioctl+0x7b/0x90 [ 3143.843979][ T5362] do_syscall_64+0x34/0x70 [ 3143.848534][ T5362] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3143.854544][ T5362] RIP: 0033:0x7f42b4f940c9 [ 3143.859277][ T5362] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3143.879127][ T5362] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3143.887734][ T5362] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3143.896028][ T5362] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3143.904140][ T5362] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3143.912257][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3143.920361][ T5362] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3143.928492][ T5362] ---[ end trace 66cfa9b859026db8 ]--- 01:13:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 39) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3144.171488][ T5356] device bridge510 entered promiscuous mode [ 3144.236819][ T5369] FAULT_INJECTION: forcing a failure. [ 3144.236819][ T5369] name failslab, interval 1, probability 0, space 0, times 0 [ 3144.249489][ T5369] CPU: 0 PID: 5369 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3144.261095][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3144.271124][ T5369] Call Trace: [ 3144.274395][ T5369] dump_stack_lvl+0x1e2/0x24b [ 3144.279076][ T5369] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3144.284520][ T5369] ? switch_mm_irqs_off+0x2ca/0x990 [ 3144.289700][ T5369] dump_stack+0x15/0x17 [ 3144.293840][ T5369] should_fail+0x3c0/0x510 [ 3144.298239][ T5369] ? __kernfs_new_node+0x99/0x6e0 [ 3144.303244][ T5369] __should_failslab+0x9f/0xe0 [ 3144.307985][ T5369] should_failslab+0x9/0x20 [ 3144.312464][ T5369] __kmalloc_track_caller+0x5f/0x350 [ 3144.317728][ T5369] kstrdup_const+0x55/0x90 [ 3144.322119][ T5369] __kernfs_new_node+0x99/0x6e0 [ 3144.326947][ T5369] ? preempt_schedule_irq+0xef/0x140 [ 3144.332208][ T5369] ? preempt_schedule_notrace+0x140/0x140 [ 3144.337898][ T5369] ? switch_mm_irqs_off+0x2ca/0x990 [ 3144.343188][ T5369] ? kernfs_new_node+0x170/0x170 [ 3144.348111][ T5369] ? irqentry_exit+0x50/0x60 [ 3144.352678][ T5369] ? sysvec_reschedule_ipi+0x84/0x160 [ 3144.358037][ T5369] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3144.363651][ T5369] kernfs_create_dir_ns+0x9b/0x230 [ 3144.368746][ T5369] sysfs_create_dir_ns+0x181/0x390 [ 3144.373836][ T5369] ? sysfs_warn_dup+0xa0/0xa0 [ 3144.378490][ T5369] ? __kasan_check_read+0x11/0x20 [ 3144.383489][ T5369] ? preempt_schedule_irq+0xef/0x140 [ 3144.388747][ T5369] kobject_add_internal+0x766/0xda0 [ 3144.393920][ T5369] kobject_add+0x14c/0x210 [ 3144.398312][ T5369] ? _raw_spin_lock+0xa3/0x1b0 [ 3144.403052][ T5369] ? kobject_init+0x1e0/0x1e0 [ 3144.407708][ T5369] ? mutex_unlock+0x29/0xf0 [ 3144.412188][ T5369] ? get_device_parent+0x2c5/0x430 [ 3144.417271][ T5369] device_add+0x3ca/0xbd0 [ 3144.421575][ T5369] device_create+0x258/0x2e0 [ 3144.426138][ T5369] ? __do_softirq+0x596/0x596 [ 3144.430788][ T5369] ? root_device_unregister+0x80/0x80 [ 3144.436134][ T5369] ? number+0xd9b/0x1040 [ 3144.440353][ T5369] bdi_register_va+0x94/0x600 [ 3144.445003][ T5369] bdi_register+0xd1/0x120 [ 3144.449404][ T5369] ? irqentry_exit+0x50/0x60 [ 3144.453970][ T5369] ? __device_add_disk+0x536/0x11d0 [ 3144.459171][ T5369] ? bdi_register_va+0x600/0x600 [ 3144.464083][ T5369] ? __kasan_check_read+0x11/0x20 [ 3144.469083][ T5369] ? blk_alloc_devt+0xd4/0x320 [ 3144.473828][ T5369] __device_add_disk+0x5cb/0x11d0 [ 3144.478830][ T5369] ? device_add_disk+0x40/0x40 [ 3144.483573][ T5369] ? loop_add+0x400/0x760 [ 3144.487876][ T5369] ? vsprintf+0x40/0x40 [ 3144.492006][ T5369] device_add_disk+0x2a/0x40 [ 3144.496575][ T5369] loop_add+0x58f/0x760 [ 3144.500708][ T5369] loop_control_ioctl+0x564/0x740 [ 3144.505711][ T5369] ? loop_remove+0xb0/0xb0 [ 3144.510105][ T5369] ? __fget_files+0x310/0x370 [ 3144.514759][ T5369] ? security_file_ioctl+0xb1/0xd0 [ 3144.519850][ T5369] ? loop_remove+0xb0/0xb0 [ 3144.524264][ T5369] __se_sys_ioctl+0x115/0x190 [ 3144.528914][ T5369] __x64_sys_ioctl+0x7b/0x90 [ 3144.533480][ T5369] do_syscall_64+0x34/0x70 [ 3144.537872][ T5369] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3144.543735][ T5369] RIP: 0033:0x7f42b4f940c9 [ 3144.548127][ T5369] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3144.567703][ T5369] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3144.576091][ T5369] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3144.584035][ T5369] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3144.591979][ T5369] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3144.600017][ T5369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3144.607968][ T5369] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3144.616380][ T5369] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 3144.624381][ T5369] ------------[ cut here ]------------ [ 3144.629879][ T5369] WARNING: CPU: 0 PID: 5369 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3144.638914][ T5369] Modules linked in: [ 3144.642929][ T5369] CPU: 0 PID: 5369 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3144.654570][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3144.664668][ T5369] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3144.670554][ T5369] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3144.690185][ T5369] RSP: 0018:ffffc9000022fbc0 EFLAGS: 00010287 [ 3144.696279][ T5369] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3144.704286][ T5369] RDX: ffffc90003d81000 RSI: 0000000000035fec RDI: 0000000000035fed [ 3144.712274][ T5369] RBP: ffffc9000022fd08 R08: ffffffff82412a76 R09: 0000000000000003 [ 3144.720261][ T5369] R10: fffff52000045e8d R11: 1ffff92000045e8c R12: 0000000000000007 [ 3144.728249][ T5369] R13: ffff888189270000 R14: ffff888163b80338 R15: ffff888163b80000 [ 3144.736228][ T5369] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3144.745175][ T5369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3144.751776][ T5369] CR2: 00007f42b3cc4ff8 CR3: 000000011b681000 CR4: 00000000003506b0 [ 3144.759788][ T5369] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3144.767762][ T5369] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3144.775747][ T5369] Call Trace: [ 3144.779065][ T5369] ? device_add_disk+0x40/0x40 [ 3144.783839][ T5369] ? loop_add+0x400/0x760 [ 3144.788189][ T5369] ? vsprintf+0x40/0x40 [ 3144.792351][ T5369] device_add_disk+0x2a/0x40 [ 3144.796945][ T5369] loop_add+0x58f/0x760 [ 3144.801123][ T5369] loop_control_ioctl+0x564/0x740 [ 3144.806159][ T5369] ? loop_remove+0xb0/0xb0 [ 3144.810595][ T5369] ? __fget_files+0x310/0x370 [ 3144.815292][ T5369] ? security_file_ioctl+0xb1/0xd0 [ 3144.820450][ T5369] ? loop_remove+0xb0/0xb0 [ 3144.824877][ T5369] __se_sys_ioctl+0x115/0x190 [ 3144.829582][ T5369] __x64_sys_ioctl+0x7b/0x90 [ 3144.834263][ T5369] do_syscall_64+0x34/0x70 [ 3144.838707][ T5369] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3144.844615][ T5369] RIP: 0033:0x7f42b4f940c9 [ 3144.849066][ T5369] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3144.869555][ T5369] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3144.877986][ T5369] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3144.886003][ T5369] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3144.894006][ T5369] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3144.902331][ T5369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3144.911372][ T5369] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3144.919387][ T5369] ---[ end trace 66cfa9b859026db9 ]--- 01:13:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 01:13:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x6}}, 0x20}}, 0x0) 01:13:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 40) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x3f000000}}, 0x20}}, 0x0) 01:13:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xfcffffff}, 0x0) [ 3145.164975][ T5377] __nla_validate_parse: 17 callbacks suppressed [ 3145.164986][ T5377] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3145.215097][ T5377] device bridge79 entered promiscuous mode [ 3145.223858][ T5374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3145.294670][ T5386] FAULT_INJECTION: forcing a failure. [ 3145.294670][ T5386] name failslab, interval 1, probability 0, space 0, times 0 [ 3145.307461][ T5386] CPU: 0 PID: 5386 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3145.319067][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3145.329103][ T5386] Call Trace: [ 3145.332377][ T5386] dump_stack_lvl+0x1e2/0x24b [ 3145.337035][ T5386] ? panic+0x7d7/0x7d7 [ 3145.341083][ T5386] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3145.346519][ T5386] ? irqentry_exit+0x50/0x60 [ 3145.351084][ T5386] ? sysvec_reschedule_ipi+0x84/0x160 [ 3145.356427][ T5386] dump_stack+0x15/0x17 [ 3145.360558][ T5386] should_fail+0x3c0/0x510 [ 3145.364968][ T5386] __should_failslab+0x9f/0xe0 [ 3145.369719][ T5386] should_failslab+0x9/0x20 [ 3145.374212][ T5386] kmem_cache_alloc+0x3f/0x300 [ 3145.378964][ T5386] ? __kernfs_new_node+0xdb/0x6e0 [ 3145.383967][ T5386] __kernfs_new_node+0xdb/0x6e0 [ 3145.388794][ T5386] ? preempt_schedule_notrace+0x140/0x140 [ 3145.394489][ T5386] ? compat_start_thread+0x80/0x80 [ 3145.399578][ T5386] ? kernfs_new_node+0x170/0x170 [ 3145.404490][ T5386] ? irqentry_exit+0x50/0x60 [ 3145.409052][ T5386] ? sysvec_reschedule_ipi+0x84/0x160 [ 3145.414398][ T5386] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3145.420035][ T5386] kernfs_create_dir_ns+0x9b/0x230 [ 3145.425119][ T5386] sysfs_create_dir_ns+0x181/0x390 [ 3145.430201][ T5386] ? sysfs_warn_dup+0xa0/0xa0 [ 3145.434851][ T5386] ? preempt_schedule+0xd9/0xe0 [ 3145.439673][ T5386] kobject_add_internal+0x766/0xda0 [ 3145.444842][ T5386] kobject_add+0x14c/0x210 [ 3145.449231][ T5386] ? kobject_init+0x1e0/0x1e0 [ 3145.453881][ T5386] ? mutex_unlock+0x29/0xf0 [ 3145.458357][ T5386] ? get_device_parent+0x2c5/0x430 [ 3145.463444][ T5386] device_add+0x3ca/0xbd0 [ 3145.467746][ T5386] device_create+0x258/0x2e0 [ 3145.472309][ T5386] ? sysvec_reschedule_ipi+0x84/0x160 [ 3145.477655][ T5386] ? root_device_unregister+0x80/0x80 [ 3145.483003][ T5386] bdi_register_va+0x94/0x600 [ 3145.487654][ T5386] bdi_register+0xd1/0x120 [ 3145.492050][ T5386] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3145.497659][ T5386] ? __device_add_disk+0x536/0x11d0 [ 3145.502836][ T5386] ? bdi_register_va+0x600/0x600 [ 3145.507747][ T5386] ? blk_alloc_devt+0xeb/0x320 [ 3145.512483][ T5386] __device_add_disk+0x5cb/0x11d0 [ 3145.517481][ T5386] ? device_add_disk+0x40/0x40 [ 3145.522225][ T5386] ? loop_add+0x400/0x760 [ 3145.526528][ T5386] ? vsprintf+0x40/0x40 [ 3145.530660][ T5386] device_add_disk+0x2a/0x40 [ 3145.535226][ T5386] loop_add+0x58f/0x760 [ 3145.539359][ T5386] loop_control_ioctl+0x564/0x740 [ 3145.544360][ T5386] ? loop_remove+0xb0/0xb0 [ 3145.548751][ T5386] ? __fget_files+0x310/0x370 [ 3145.553401][ T5386] ? security_file_ioctl+0xb1/0xd0 [ 3145.558485][ T5386] ? loop_remove+0xb0/0xb0 [ 3145.562875][ T5386] __se_sys_ioctl+0x115/0x190 [ 3145.567528][ T5386] __x64_sys_ioctl+0x7b/0x90 [ 3145.572094][ T5386] do_syscall_64+0x34/0x70 [ 3145.576487][ T5386] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3145.582350][ T5386] RIP: 0033:0x7f42b4f940c9 [ 3145.586741][ T5386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3145.606316][ T5386] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3145.614705][ T5386] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3145.622658][ T5386] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3145.630603][ T5386] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3145.638554][ T5386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3145.646498][ T5386] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3145.655206][ T5386] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 3145.663517][ T5386] ------------[ cut here ]------------ [ 3145.669145][ T5386] WARNING: CPU: 0 PID: 5386 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3145.678294][ T5386] Modules linked in: [ 3145.682802][ T5386] CPU: 0 PID: 5386 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3145.694562][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3145.704820][ T5386] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3145.710812][ T5386] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3145.730591][ T5386] RSP: 0018:ffffc9000022fbc0 EFLAGS: 00010287 [ 3145.736814][ T5386] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3145.744930][ T5386] RDX: ffffc90003d81000 RSI: 00000000000339bf RDI: 00000000000339c0 [ 3145.753054][ T5386] RBP: ffffc9000022fd08 R08: ffffffff82412a76 R09: ffffc9000022f610 [ 3145.761169][ T5386] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3145.769295][ T5386] R13: ffff888119cf3000 R14: ffff888119cf0338 R15: ffff888119cf0000 [ 3145.777394][ T5386] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3145.786467][ T5386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3145.793191][ T5386] CR2: 00007f42b3cc4ff8 CR3: 0000000191716000 CR4: 00000000003506b0 [ 3145.801357][ T5386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3145.809511][ T5386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3145.817620][ T5386] Call Trace: [ 3145.821079][ T5386] ? device_add_disk+0x40/0x40 [ 3145.825979][ T5386] ? loop_add+0x400/0x760 [ 3145.830493][ T5386] ? vsprintf+0x40/0x40 [ 3145.834781][ T5386] device_add_disk+0x2a/0x40 [ 3145.839546][ T5386] loop_add+0x58f/0x760 [ 3145.843829][ T5386] loop_control_ioctl+0x564/0x740 [ 3145.849005][ T5386] ? loop_remove+0xb0/0xb0 [ 3145.853584][ T5386] ? __fget_files+0x310/0x370 [ 3145.858609][ T5386] ? security_file_ioctl+0xb1/0xd0 [ 3145.863874][ T5386] ? loop_remove+0xb0/0xb0 [ 3145.868434][ T5386] __se_sys_ioctl+0x115/0x190 [ 3145.873251][ T5386] __x64_sys_ioctl+0x7b/0x90 [ 3145.877977][ T5386] do_syscall_64+0x34/0x70 [ 3145.882543][ T5386] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3145.888590][ T5386] RIP: 0033:0x7f42b4f940c9 [ 3145.893129][ T5386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3145.912877][ T5386] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3145.921443][ T5386] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3145.929555][ T5386] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3145.937644][ T5386] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3145.945883][ T5386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3145.954028][ T5386] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3145.962158][ T5386] ---[ end trace 66cfa9b859026dba ]--- 01:13:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 41) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3146.132898][ T5374] device bridge551 entered promiscuous mode [ 3146.140850][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3146.159977][ T5378] device bridge90 entered promiscuous mode 01:13:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xffffffffa0028000}, 0x0) [ 3146.174360][ T5380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3146.189135][ T5380] device bridge511 entered promiscuous mode [ 3146.284386][ T5394] FAULT_INJECTION: forcing a failure. [ 3146.284386][ T5394] name failslab, interval 1, probability 0, space 0, times 0 [ 3146.297106][ T5394] CPU: 0 PID: 5394 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3146.308707][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3146.318732][ T5394] Call Trace: [ 3146.322000][ T5394] dump_stack_lvl+0x1e2/0x24b [ 3146.326670][ T5394] ? panic+0x7d7/0x7d7 [ 3146.330724][ T5394] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3146.336172][ T5394] ? irqentry_exit+0x50/0x60 [ 3146.340749][ T5394] ? sysvec_reschedule_ipi+0x84/0x160 [ 3146.346098][ T5394] dump_stack+0x15/0x17 [ 3146.350318][ T5394] should_fail+0x3c0/0x510 [ 3146.354708][ T5394] __should_failslab+0x9f/0xe0 [ 3146.359445][ T5394] should_failslab+0x9/0x20 [ 3146.363922][ T5394] kmem_cache_alloc+0x3f/0x300 [ 3146.368660][ T5394] ? __kernfs_new_node+0xdb/0x6e0 [ 3146.373685][ T5394] __kernfs_new_node+0xdb/0x6e0 [ 3146.378514][ T5394] ? sched_clock_cpu+0x1b/0x3b0 [ 3146.383336][ T5394] ? kernfs_new_node+0x170/0x170 [ 3146.388250][ T5394] ? debug_smp_processor_id+0x17/0x20 [ 3146.393597][ T5394] ? __irq_exit_rcu+0x41/0x150 [ 3146.398335][ T5394] kernfs_new_node+0x97/0x170 [ 3146.402996][ T5394] __kernfs_create_file+0x4a/0x270 [ 3146.408080][ T5394] sysfs_add_file_mode_ns+0x273/0x320 [ 3146.413428][ T5394] sysfs_create_file_ns+0x191/0x2a0 [ 3146.418599][ T5394] ? sysfs_add_file_mode_ns+0x320/0x320 [ 3146.424119][ T5394] ? __kasan_check_write+0x14/0x20 [ 3146.429215][ T5394] ? __up_read+0x29/0x1c0 [ 3146.433523][ T5394] device_create_file+0x110/0x1d0 [ 3146.438531][ T5394] device_add+0x496/0xbd0 [ 3146.442840][ T5394] device_create+0x258/0x2e0 [ 3146.447411][ T5394] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3146.453017][ T5394] ? root_device_unregister+0x80/0x80 [ 3146.458366][ T5394] ? number+0xd9b/0x1040 [ 3146.462583][ T5394] bdi_register_va+0x94/0x600 [ 3146.467236][ T5394] bdi_register+0xd1/0x120 [ 3146.471626][ T5394] ? irqentry_exit+0x50/0x60 [ 3146.476192][ T5394] ? __device_add_disk+0x536/0x11d0 [ 3146.481362][ T5394] ? bdi_register_va+0x600/0x600 [ 3146.486285][ T5394] __device_add_disk+0x5cb/0x11d0 [ 3146.491284][ T5394] ? device_add_disk+0x40/0x40 [ 3146.496021][ T5394] ? loop_add+0x400/0x760 [ 3146.500325][ T5394] ? vsprintf+0x40/0x40 [ 3146.504457][ T5394] device_add_disk+0x2a/0x40 [ 3146.509021][ T5394] loop_add+0x58f/0x760 [ 3146.513154][ T5394] loop_control_ioctl+0x564/0x740 [ 3146.518151][ T5394] ? loop_remove+0xb0/0xb0 [ 3146.522539][ T5394] ? irqentry_exit+0x50/0x60 [ 3146.527190][ T5394] ? sysvec_reschedule_ipi+0x84/0x160 [ 3146.532536][ T5394] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3146.538149][ T5394] ? loop_remove+0xb0/0xb0 [ 3146.542539][ T5394] __se_sys_ioctl+0x115/0x190 [ 3146.547191][ T5394] __x64_sys_ioctl+0x7b/0x90 [ 3146.551756][ T5394] do_syscall_64+0x34/0x70 [ 3146.556148][ T5394] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3146.562011][ T5394] RIP: 0033:0x7f42b4f940c9 [ 3146.566401][ T5394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3146.585977][ T5394] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3146.594362][ T5394] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3146.602308][ T5394] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3146.610621][ T5394] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3146.618566][ T5394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3146.626512][ T5394] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3146.635736][ T5394] ------------[ cut here ]------------ [ 3146.641244][ T5394] WARNING: CPU: 0 PID: 5394 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3146.650370][ T5394] Modules linked in: [ 3146.654309][ T5394] CPU: 0 PID: 5394 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3146.665961][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3146.676162][ T5394] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3146.682098][ T5394] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3146.701903][ T5394] RSP: 0018:ffffc90000c27bc0 EFLAGS: 00010283 [ 3146.707968][ T5394] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3146.715973][ T5394] RDX: ffffc90003d81000 RSI: 00000000000320a7 RDI: 00000000000320a8 [ 3146.724058][ T5394] RBP: ffffc90000c27d08 R08: ffffffff82412a76 R09: ffffc90000c27610 [ 3146.732155][ T5394] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3146.740172][ T5394] R13: ffff888163b86000 R14: ffff888163b87338 R15: ffff888163b87000 [ 3146.748180][ T5394] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3146.757137][ T5394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3146.763772][ T5394] CR2: 00007f42b3cc4ff8 CR3: 0000000183a5b000 CR4: 00000000003506b0 [ 3146.771774][ T5394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3146.779768][ T5394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3146.787745][ T5394] Call Trace: [ 3146.791061][ T5394] ? device_add_disk+0x40/0x40 [ 3146.795833][ T5394] ? loop_add+0x400/0x760 [ 3146.800176][ T5394] ? vsprintf+0x40/0x40 [ 3146.804344][ T5394] device_add_disk+0x2a/0x40 [ 3146.808951][ T5394] loop_add+0x58f/0x760 [ 3146.813113][ T5394] loop_control_ioctl+0x564/0x740 [ 3146.818649][ T5394] ? loop_remove+0xb0/0xb0 [ 3146.823103][ T5394] ? irqentry_exit+0x50/0x60 [ 3146.827716][ T5394] ? sysvec_reschedule_ipi+0x84/0x160 [ 3146.833133][ T5394] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3146.838819][ T5394] ? loop_remove+0xb0/0xb0 [ 3146.843257][ T5394] __se_sys_ioctl+0x115/0x190 [ 3146.847956][ T5394] __x64_sys_ioctl+0x7b/0x90 [ 3146.852577][ T5394] do_syscall_64+0x34/0x70 [ 3146.857007][ T5394] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3146.862922][ T5394] RIP: 0033:0x7f42b4f940c9 [ 3146.867370][ T5394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3146.887046][ T5394] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3146.895515][ T5394] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3146.903514][ T5394] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3146.911507][ T5394] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3146.919503][ T5394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3146.927492][ T5394] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3146.935517][ T5394] ---[ end trace 66cfa9b859026dbb ]--- 01:13:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 42) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3147.328829][ T5400] FAULT_INJECTION: forcing a failure. [ 3147.328829][ T5400] name failslab, interval 1, probability 0, space 0, times 0 [ 3147.341490][ T5400] CPU: 0 PID: 5400 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3147.353109][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3147.363251][ T5400] Call Trace: [ 3147.366535][ T5400] dump_stack_lvl+0x1e2/0x24b [ 3147.371186][ T5400] ? panic+0x7d7/0x7d7 [ 3147.375242][ T5400] ? switch_mm_irqs_off+0x2ca/0x990 [ 3147.380436][ T5400] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3147.385876][ T5400] dump_stack+0x15/0x17 [ 3147.390020][ T5400] should_fail+0x3c0/0x510 [ 3147.394424][ T5400] __should_failslab+0x9f/0xe0 [ 3147.399172][ T5400] should_failslab+0x9/0x20 [ 3147.403655][ T5400] kmem_cache_alloc+0x3f/0x300 [ 3147.408398][ T5400] ? __kernfs_new_node+0xdb/0x6e0 [ 3147.413409][ T5400] __kernfs_new_node+0xdb/0x6e0 [ 3147.418245][ T5400] ? __kasan_check_read+0x11/0x20 [ 3147.423244][ T5400] ? switch_mm_irqs_off+0x2ca/0x990 [ 3147.428416][ T5400] ? kernfs_new_node+0x170/0x170 [ 3147.433328][ T5400] ? _raw_spin_unlock_irq+0x4e/0x70 [ 3147.438505][ T5400] ? finish_task_switch+0x130/0x580 [ 3147.443678][ T5400] ? __switch_to_asm+0x34/0x60 [ 3147.448415][ T5400] ? __schedule+0x86e/0xc00 [ 3147.452898][ T5400] kernfs_new_node+0x97/0x170 [ 3147.457551][ T5400] __kernfs_create_file+0x4a/0x270 [ 3147.462635][ T5400] sysfs_add_file_mode_ns+0x273/0x320 [ 3147.467984][ T5400] sysfs_create_file_ns+0x191/0x2a0 [ 3147.473154][ T5400] ? sysfs_add_file_mode_ns+0x320/0x320 [ 3147.478679][ T5400] device_create_file+0x110/0x1d0 [ 3147.483676][ T5400] device_add+0x496/0xbd0 [ 3147.487982][ T5400] device_create+0x258/0x2e0 [ 3147.492547][ T5400] ? root_device_unregister+0x80/0x80 [ 3147.497900][ T5400] ? switch_mm_irqs_off+0x2ca/0x990 [ 3147.503072][ T5400] bdi_register_va+0x94/0x600 [ 3147.507728][ T5400] bdi_register+0xd1/0x120 [ 3147.512125][ T5400] ? irqentry_exit+0x50/0x60 [ 3147.516689][ T5400] ? __device_add_disk+0x536/0x11d0 [ 3147.521861][ T5400] ? bdi_register_va+0x600/0x600 [ 3147.526774][ T5400] __device_add_disk+0x5cb/0x11d0 [ 3147.531801][ T5400] ? device_add_disk+0x40/0x40 [ 3147.536536][ T5400] ? sysvec_reschedule_ipi+0x84/0x160 [ 3147.541882][ T5400] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3147.547489][ T5400] ? vsnprintf+0x1bf3/0x1cd0 [ 3147.552051][ T5400] device_add_disk+0x2a/0x40 [ 3147.556624][ T5400] loop_add+0x58f/0x760 [ 3147.560757][ T5400] loop_control_ioctl+0x564/0x740 [ 3147.565753][ T5400] ? __fget_files+0x81/0x370 [ 3147.570492][ T5400] ? loop_remove+0xb0/0xb0 [ 3147.574882][ T5400] ? __fget_files+0x310/0x370 [ 3147.579537][ T5400] ? security_file_ioctl+0xb1/0xd0 [ 3147.584622][ T5400] ? loop_remove+0xb0/0xb0 [ 3147.589015][ T5400] __se_sys_ioctl+0x115/0x190 [ 3147.593669][ T5400] __x64_sys_ioctl+0x7b/0x90 [ 3147.598236][ T5400] do_syscall_64+0x34/0x70 [ 3147.602627][ T5400] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3147.608578][ T5400] RIP: 0033:0x7f42b4f940c9 [ 3147.612978][ T5400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3147.632555][ T5400] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3147.640952][ T5400] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3147.648900][ T5400] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3147.656845][ T5400] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3147.664793][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3147.672742][ T5400] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3147.682138][ T5400] ------------[ cut here ]------------ [ 3147.687624][ T5400] WARNING: CPU: 0 PID: 5400 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3147.696672][ T5400] Modules linked in: [ 3147.700608][ T5400] CPU: 0 PID: 5400 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3147.712341][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3147.722519][ T5400] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3147.728345][ T5400] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3147.747990][ T5400] RSP: 0018:ffffc90003187bc0 EFLAGS: 00010283 [ 3147.754185][ T5400] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3147.762441][ T5400] RDX: ffffc90003d81000 RSI: 0000000000031a51 RDI: 0000000000031a52 [ 3147.770434][ T5400] RBP: ffffc90003187d08 R08: ffffffff82412a76 R09: ffffc90003187610 [ 3147.778428][ T5400] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3147.786410][ T5400] R13: ffff88816c5d5000 R14: ffff88816c5d0338 R15: ffff88816c5d0000 [ 3147.794412][ T5400] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3147.803411][ T5400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3147.810013][ T5400] CR2: 00007f42b3cc4ff8 CR3: 0000000119932000 CR4: 00000000003506b0 [ 3147.818001][ T5400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3147.825993][ T5400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3147.833992][ T5400] Call Trace: [ 3147.837303][ T5400] ? device_add_disk+0x40/0x40 [ 3147.842088][ T5400] ? sysvec_reschedule_ipi+0x84/0x160 [ 3147.847467][ T5400] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3147.853119][ T5400] ? vsnprintf+0x1bf3/0x1cd0 [ 3147.857713][ T5400] device_add_disk+0x2a/0x40 [ 3147.862369][ T5400] loop_add+0x58f/0x760 [ 3147.866530][ T5400] loop_control_ioctl+0x564/0x740 [ 3147.871576][ T5400] ? __fget_files+0x81/0x370 [ 3147.876196][ T5400] ? loop_remove+0xb0/0xb0 [ 3147.880633][ T5400] ? __fget_files+0x310/0x370 [ 3147.885325][ T5400] ? security_file_ioctl+0xb1/0xd0 [ 3147.890463][ T5400] ? loop_remove+0xb0/0xb0 [ 3147.894883][ T5400] __se_sys_ioctl+0x115/0x190 [ 3147.899575][ T5400] __x64_sys_ioctl+0x7b/0x90 [ 3147.904168][ T5400] do_syscall_64+0x34/0x70 [ 3147.908603][ T5400] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3147.914497][ T5400] RIP: 0033:0x7f42b4f940c9 [ 3147.918934][ T5400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3147.938736][ T5400] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3147.947169][ T5400] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3147.955174][ T5400] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3147.963164][ T5400] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3147.971142][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3147.979129][ T5400] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3147.987122][ T5400] ---[ end trace 66cfa9b859026dbc ]--- [ 3148.089740][ T5391] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:13:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 43) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x7}}, 0x20}}, 0x0) 01:13:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xfeffffff}, 0x0) 01:13:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0xffffffffa0030000}, 0x0) 01:13:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x40000000}}, 0x20}}, 0x0) [ 3148.169109][ T5391] device bridge512 entered promiscuous mode [ 3148.220003][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3148.240398][ T5404] device bridge551 entered promiscuous mode [ 3148.260134][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3148.339098][ T5416] FAULT_INJECTION: forcing a failure. [ 3148.339098][ T5416] name failslab, interval 1, probability 0, space 0, times 0 [ 3148.351986][ T5416] CPU: 0 PID: 5416 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3148.363595][ T5416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3148.373629][ T5416] Call Trace: [ 3148.376907][ T5416] dump_stack_lvl+0x1e2/0x24b [ 3148.381566][ T5416] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3148.387266][ T5416] ? selinux_kernfs_init_security+0x1a8/0x760 [ 3148.393308][ T5416] dump_stack+0x15/0x17 [ 3148.397439][ T5416] should_fail+0x3c0/0x510 [ 3148.401830][ T5416] ? __kernfs_new_node+0x99/0x6e0 [ 3148.406828][ T5416] __should_failslab+0x9f/0xe0 [ 3148.411565][ T5416] should_failslab+0x9/0x20 [ 3148.416040][ T5416] __kmalloc_track_caller+0x5f/0x350 [ 3148.421299][ T5416] ? __radix_tree_preload+0x361/0x3e0 [ 3148.426643][ T5416] kstrdup_const+0x55/0x90 [ 3148.431033][ T5416] __kernfs_new_node+0x99/0x6e0 [ 3148.435859][ T5416] ? mutex_lock+0xb2/0x1e0 [ 3148.440247][ T5416] ? kernfs_new_node+0x170/0x170 [ 3148.445157][ T5416] ? __kasan_check_write+0x14/0x20 [ 3148.450256][ T5416] ? __kasan_check_write+0x14/0x20 [ 3148.455363][ T5416] ? mutex_unlock+0x29/0xf0 [ 3148.459841][ T5416] ? kernfs_activate+0x409/0x420 [ 3148.464756][ T5416] kernfs_new_node+0x97/0x170 [ 3148.469410][ T5416] kernfs_create_link+0xb8/0x210 [ 3148.474330][ T5416] sysfs_do_create_link_sd+0x89/0x110 [ 3148.479682][ T5416] sysfs_create_link+0x68/0x80 [ 3148.484421][ T5416] device_add_class_symlinks+0x222/0x2a0 [ 3148.490025][ T5416] device_add+0x4c3/0xbd0 [ 3148.494330][ T5416] device_create+0x258/0x2e0 [ 3148.498894][ T5416] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3148.504500][ T5416] ? root_device_unregister+0x80/0x80 [ 3148.509849][ T5416] ? number+0xd9b/0x1040 [ 3148.514066][ T5416] bdi_register_va+0x94/0x600 [ 3148.518716][ T5416] bdi_register+0xd1/0x120 [ 3148.523106][ T5416] ? irqentry_exit+0x50/0x60 [ 3148.527675][ T5416] ? __device_add_disk+0x536/0x11d0 [ 3148.532878][ T5416] ? bdi_register_va+0x600/0x600 [ 3148.537790][ T5416] __device_add_disk+0x5cb/0x11d0 [ 3148.542794][ T5416] ? device_add_disk+0x40/0x40 [ 3148.547531][ T5416] ? loop_add+0x400/0x760 [ 3148.551834][ T5416] ? vsprintf+0x40/0x40 [ 3148.555963][ T5416] ? device_initialize+0x2c5/0x3a0 [ 3148.561050][ T5416] device_add_disk+0x2a/0x40 [ 3148.565613][ T5416] loop_add+0x58f/0x760 [ 3148.569755][ T5416] loop_control_ioctl+0x564/0x740 [ 3148.574756][ T5416] ? loop_remove+0xb0/0xb0 [ 3148.579149][ T5416] ? __fget_files+0x310/0x370 [ 3148.583803][ T5416] ? security_file_ioctl+0xb1/0xd0 [ 3148.588888][ T5416] ? loop_remove+0xb0/0xb0 [ 3148.593279][ T5416] __se_sys_ioctl+0x115/0x190 [ 3148.597928][ T5416] __x64_sys_ioctl+0x7b/0x90 [ 3148.602491][ T5416] do_syscall_64+0x34/0x70 [ 3148.606887][ T5416] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3148.612836][ T5416] RIP: 0033:0x7f42b4f940c9 [ 3148.617227][ T5416] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3148.636889][ T5416] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3148.645276][ T5416] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3148.653221][ T5416] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3148.661254][ T5416] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3148.669199][ T5416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3148.677144][ T5416] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3148.687415][ T5416] ------------[ cut here ]------------ [ 3148.693096][ T5416] WARNING: CPU: 0 PID: 5416 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3148.702309][ T5416] Modules linked in: [ 3148.706409][ T5416] CPU: 0 PID: 5416 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3148.718234][ T5416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3148.728501][ T5416] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3148.734505][ T5416] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3148.754430][ T5416] RSP: 0018:ffffc90003207bc0 EFLAGS: 00010287 [ 3148.761260][ T5416] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3148.769432][ T5416] RDX: ffffc90003d81000 RSI: 0000000000031be0 RDI: 0000000000031be1 [ 3148.777586][ T5416] RBP: ffffc90003207d08 R08: ffffffff82412a76 R09: ffffc90003207610 [ 3148.785771][ T5416] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3148.793956][ T5416] R13: ffff888185f30000 R14: ffff888185f32338 R15: ffff888185f32000 [ 3148.802117][ T5416] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3148.811183][ T5416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3148.817895][ T5416] CR2: 00007f42b3cc4ff8 CR3: 000000011d187000 CR4: 00000000003506b0 [ 3148.826039][ T5416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3148.834151][ T5416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3148.842261][ T5416] Call Trace: [ 3148.845682][ T5416] ? device_add_disk+0x40/0x40 [ 3148.850594][ T5416] ? loop_add+0x400/0x760 [ 3148.855064][ T5416] ? vsprintf+0x40/0x40 [ 3148.859358][ T5416] ? device_initialize+0x2c5/0x3a0 [ 3148.864588][ T5416] device_add_disk+0x2a/0x40 [ 3148.869313][ T5416] loop_add+0x58f/0x760 [ 3148.873596][ T5416] loop_control_ioctl+0x564/0x740 [ 3148.878777][ T5416] ? loop_remove+0xb0/0xb0 [ 3148.883318][ T5416] ? __fget_files+0x310/0x370 [ 3148.888133][ T5416] ? security_file_ioctl+0xb1/0xd0 [ 3148.893409][ T5416] ? loop_remove+0xb0/0xb0 [ 3148.897954][ T5416] __se_sys_ioctl+0x115/0x190 [ 3148.902772][ T5416] __x64_sys_ioctl+0x7b/0x90 [ 3148.907486][ T5416] do_syscall_64+0x34/0x70 [ 3148.912059][ T5416] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3148.918077][ T5416] RIP: 0033:0x7f42b4f940c9 [ 3148.922638][ T5416] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3148.942381][ T5416] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3148.950953][ T5416] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3148.959069][ T5416] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3148.967168][ T5416] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3148.975310][ T5416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3148.983415][ T5416] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3148.991548][ T5416] ---[ end trace 66cfa9b859026dbd ]--- [ 3149.024542][ T5407] device bridge513 entered promiscuous mode 01:13:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}}, 0x0) 01:13:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 44) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3149.151950][ T5411] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3149.168351][ T5411] device bridge79 entered promiscuous mode [ 3149.189745][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3149.209690][ T5409] device bridge90 entered promiscuous mode [ 3149.314506][ T5426] FAULT_INJECTION: forcing a failure. [ 3149.314506][ T5426] name failslab, interval 1, probability 0, space 0, times 0 [ 3149.327206][ T5426] CPU: 0 PID: 5426 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3149.338816][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3149.348945][ T5426] Call Trace: [ 3149.352228][ T5426] dump_stack_lvl+0x1e2/0x24b [ 3149.356884][ T5426] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3149.362318][ T5426] dump_stack+0x15/0x17 [ 3149.366449][ T5426] should_fail+0x3c0/0x510 [ 3149.370844][ T5426] ? __kernfs_new_node+0x99/0x6e0 [ 3149.375841][ T5426] __should_failslab+0x9f/0xe0 [ 3149.380581][ T5426] should_failslab+0x9/0x20 [ 3149.385060][ T5426] __kmalloc_track_caller+0x5f/0x350 [ 3149.390317][ T5426] ? debug_smp_processor_id+0x17/0x20 [ 3149.395661][ T5426] kstrdup_const+0x55/0x90 [ 3149.400053][ T5426] __kernfs_new_node+0x99/0x6e0 [ 3149.404881][ T5426] ? irq_exit_rcu+0x9/0x10 [ 3149.409272][ T5426] ? sysvec_call_function_single+0xcb/0xe0 [ 3149.415052][ T5426] ? asm_sysvec_call_function_single+0x12/0x20 [ 3149.421275][ T5426] ? kernfs_new_node+0x170/0x170 [ 3149.426184][ T5426] ? __kasan_check_write+0x14/0x20 [ 3149.431274][ T5426] ? mutex_unlock+0x29/0xf0 [ 3149.435756][ T5426] ? kernfs_activate+0x409/0x420 [ 3149.440729][ T5426] kernfs_new_node+0x97/0x170 [ 3149.445385][ T5426] kernfs_create_link+0xb8/0x210 [ 3149.450301][ T5426] sysfs_do_create_link_sd+0x89/0x110 [ 3149.455654][ T5426] sysfs_create_link+0x68/0x80 [ 3149.460400][ T5426] device_add_class_symlinks+0x222/0x2a0 [ 3149.466006][ T5426] device_add+0x4c3/0xbd0 [ 3149.470309][ T5426] device_create+0x258/0x2e0 [ 3149.474875][ T5426] ? sysvec_reschedule_ipi+0x84/0x160 [ 3149.480226][ T5426] ? root_device_unregister+0x80/0x80 [ 3149.485574][ T5426] ? number+0xd9b/0x1040 [ 3149.489789][ T5426] bdi_register_va+0x94/0x600 [ 3149.494437][ T5426] bdi_register+0xd1/0x120 [ 3149.498827][ T5426] ? irqentry_exit+0x50/0x60 [ 3149.503391][ T5426] ? __device_add_disk+0x536/0x11d0 [ 3149.508564][ T5426] ? bdi_register_va+0x600/0x600 [ 3149.513482][ T5426] ? __kasan_check_read+0x11/0x20 [ 3149.518483][ T5426] ? blk_alloc_devt+0xd4/0x320 [ 3149.523219][ T5426] __device_add_disk+0x5cb/0x11d0 [ 3149.528220][ T5426] ? device_add_disk+0x40/0x40 [ 3149.533050][ T5426] ? loop_add+0x400/0x760 [ 3149.537353][ T5426] ? vsprintf+0x40/0x40 [ 3149.541483][ T5426] device_add_disk+0x2a/0x40 [ 3149.546047][ T5426] loop_add+0x58f/0x760 [ 3149.550188][ T5426] loop_control_ioctl+0x564/0x740 [ 3149.555190][ T5426] ? __kasan_check_read+0x11/0x20 [ 3149.560188][ T5426] ? loop_remove+0xb0/0xb0 [ 3149.564578][ T5426] ? __fget_files+0x310/0x370 [ 3149.569242][ T5426] ? security_file_ioctl+0xb1/0xd0 [ 3149.574414][ T5426] ? loop_remove+0xb0/0xb0 [ 3149.578804][ T5426] __se_sys_ioctl+0x115/0x190 [ 3149.583456][ T5426] __x64_sys_ioctl+0x7b/0x90 [ 3149.588019][ T5426] do_syscall_64+0x34/0x70 [ 3149.592407][ T5426] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3149.598270][ T5426] RIP: 0033:0x7f42b4f940c9 [ 3149.602660][ T5426] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3149.622236][ T5426] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3149.630622][ T5426] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3149.638567][ T5426] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3149.646512][ T5426] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3149.654456][ T5426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3149.662401][ T5426] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3149.671731][ T5426] ------------[ cut here ]------------ [ 3149.677216][ T5426] WARNING: CPU: 0 PID: 5426 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3149.686264][ T5426] Modules linked in: [ 3149.690213][ T5426] CPU: 0 PID: 5426 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3149.701853][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3149.711942][ T5426] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3149.717760][ T5426] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3149.737447][ T5426] RSP: 0018:ffffc900031e7bc0 EFLAGS: 00010287 [ 3149.743552][ T5426] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3149.751545][ T5426] RDX: ffffc90003d81000 RSI: 00000000000331d3 RDI: 00000000000331d4 [ 3149.759553][ T5426] RBP: ffffc900031e7d08 R08: ffffffff82412a76 R09: ffffc900031e7610 [ 3149.767538][ T5426] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3149.775536][ T5426] R13: ffff88811634c000 R14: ffff88811cd6b338 R15: ffff88811cd6b000 [ 3149.783556][ T5426] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3149.792504][ T5426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3149.799106][ T5426] CR2: 00007f42b3cc4ff8 CR3: 0000000110d7e000 CR4: 00000000003506b0 [ 3149.807095][ T5426] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3149.815095][ T5426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3149.823351][ T5426] Call Trace: [ 3149.826669][ T5426] ? device_add_disk+0x40/0x40 [ 3149.831449][ T5426] ? loop_add+0x400/0x760 [ 3149.835788][ T5426] ? vsprintf+0x40/0x40 [ 3149.839965][ T5426] device_add_disk+0x2a/0x40 [ 3149.844585][ T5426] loop_add+0x58f/0x760 [ 3149.848775][ T5426] loop_control_ioctl+0x564/0x740 [ 3149.853806][ T5426] ? __kasan_check_read+0x11/0x20 [ 3149.858865][ T5426] ? loop_remove+0xb0/0xb0 [ 3149.863291][ T5426] ? __fget_files+0x310/0x370 [ 3149.867976][ T5426] ? security_file_ioctl+0xb1/0xd0 [ 3149.873101][ T5426] ? loop_remove+0xb0/0xb0 [ 3149.877614][ T5426] __se_sys_ioctl+0x115/0x190 [ 3149.882322][ T5426] __x64_sys_ioctl+0x7b/0x90 [ 3149.886927][ T5426] do_syscall_64+0x34/0x70 [ 3149.891361][ T5426] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3149.897258][ T5426] RIP: 0033:0x7f42b4f940c9 [ 3149.901693][ T5426] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3149.921315][ T5426] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3149.929764][ T5426] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3149.938650][ T5426] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3149.946633][ T5426] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3149.954623][ T5426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3149.962613][ T5426] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3149.970648][ T5426] ---[ end trace 66cfa9b859026dbe ]--- 01:13:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 45) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3150.343603][ T5431] FAULT_INJECTION: forcing a failure. [ 3150.343603][ T5431] name failslab, interval 1, probability 0, space 0, times 0 [ 3150.356262][ T5431] CPU: 0 PID: 5431 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3150.367895][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3150.377924][ T5431] Call Trace: [ 3150.381188][ T5431] dump_stack_lvl+0x1e2/0x24b [ 3150.385841][ T5431] ? panic+0x7d7/0x7d7 [ 3150.389881][ T5431] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3150.395318][ T5431] ? compat_start_thread+0x80/0x80 [ 3150.400407][ T5431] dump_stack+0x15/0x17 [ 3150.404540][ T5431] should_fail+0x3c0/0x510 [ 3150.408930][ T5431] __should_failslab+0x9f/0xe0 [ 3150.413668][ T5431] should_failslab+0x9/0x20 [ 3150.418145][ T5431] kmem_cache_alloc+0x3f/0x300 [ 3150.422882][ T5431] ? __kernfs_new_node+0xdb/0x6e0 [ 3150.427878][ T5431] __kernfs_new_node+0xdb/0x6e0 [ 3150.432702][ T5431] ? kernfs_new_node+0x170/0x170 [ 3150.437613][ T5431] ? __kasan_check_read+0x11/0x20 [ 3150.442611][ T5431] ? preempt_schedule_irq+0xef/0x140 [ 3150.447869][ T5431] ? preempt_schedule_notrace+0x140/0x140 [ 3150.453558][ T5431] ? kernfs_activate+0x409/0x420 [ 3150.458482][ T5431] kernfs_new_node+0x97/0x170 [ 3150.463131][ T5431] kernfs_create_link+0xb8/0x210 [ 3150.468044][ T5431] sysfs_do_create_link_sd+0x89/0x110 [ 3150.473389][ T5431] sysfs_create_link+0x68/0x80 [ 3150.478127][ T5431] device_add_class_symlinks+0x222/0x2a0 [ 3150.483730][ T5431] device_add+0x4c3/0xbd0 [ 3150.488084][ T5431] device_create+0x258/0x2e0 [ 3150.492650][ T5431] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3150.498257][ T5431] ? root_device_unregister+0x80/0x80 [ 3150.503604][ T5431] ? number+0xd9b/0x1040 [ 3150.507823][ T5431] bdi_register_va+0x94/0x600 [ 3150.512475][ T5431] bdi_register+0xd1/0x120 [ 3150.516953][ T5431] ? __device_add_disk+0x536/0x11d0 [ 3150.522128][ T5431] ? bdi_register_va+0x600/0x600 [ 3150.527125][ T5431] ? vsnprintf+0x1bfd/0x1cd0 [ 3150.531692][ T5431] ? __kasan_check_read+0x11/0x20 [ 3150.536688][ T5431] ? blk_alloc_devt+0xd4/0x320 [ 3150.541432][ T5431] __device_add_disk+0x5cb/0x11d0 [ 3150.546434][ T5431] ? device_add_disk+0x40/0x40 [ 3150.551171][ T5431] ? loop_add+0x400/0x760 [ 3150.555476][ T5431] ? vsprintf+0x40/0x40 [ 3150.559607][ T5431] device_add_disk+0x2a/0x40 [ 3150.564171][ T5431] loop_add+0x58f/0x760 [ 3150.568301][ T5431] loop_control_ioctl+0x564/0x740 [ 3150.573304][ T5431] ? loop_remove+0xb0/0xb0 [ 3150.577696][ T5431] ? irqentry_exit+0x50/0x60 [ 3150.582258][ T5431] ? sysvec_reschedule_ipi+0x84/0x160 [ 3150.587603][ T5431] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3150.593208][ T5431] ? do_vfs_ioctl+0xf6/0x1a90 [ 3150.597859][ T5431] ? loop_remove+0xb0/0xb0 [ 3150.602249][ T5431] __se_sys_ioctl+0x115/0x190 [ 3150.606900][ T5431] __x64_sys_ioctl+0x7b/0x90 [ 3150.611463][ T5431] do_syscall_64+0x34/0x70 [ 3150.615860][ T5431] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3150.621726][ T5431] RIP: 0033:0x7f42b4f940c9 [ 3150.626116][ T5431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3150.645692][ T5431] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3150.654079][ T5431] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3150.662025][ T5431] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3150.669974][ T5431] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3150.677919][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3150.685866][ T5431] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3150.695353][ T5431] ------------[ cut here ]------------ [ 3150.700857][ T5431] WARNING: CPU: 0 PID: 5431 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3150.709888][ T5431] Modules linked in: [ 3150.713816][ T5431] CPU: 0 PID: 5431 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3150.725453][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3150.735536][ T5431] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3150.741359][ T5431] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3150.761054][ T5431] RSP: 0018:ffffc90000d47bc0 EFLAGS: 00010287 [ 3150.767148][ T5431] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3150.775141][ T5431] RDX: ffffc90003d81000 RSI: 0000000000031ecb RDI: 0000000000031ecc [ 3150.783135][ T5431] RBP: ffffc90000d47d08 R08: ffffffff82412a76 R09: ffffc90000d47610 [ 3150.791143][ T5431] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3150.799138][ T5431] R13: ffff888163b87000 R14: ffff888163b86338 R15: ffff888163b86000 [ 3150.807119][ T5431] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3150.816411][ T5431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3150.823042][ T5431] CR2: 00007f42b3cc4ff8 CR3: 0000000190593000 CR4: 00000000003506b0 [ 3150.831043][ T5431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3150.839033][ T5431] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3150.847006][ T5431] Call Trace: [ 3150.850329][ T5431] ? device_add_disk+0x40/0x40 [ 3150.855098][ T5431] ? loop_add+0x400/0x760 [ 3150.859879][ T5431] ? vsprintf+0x40/0x40 [ 3150.864042][ T5431] device_add_disk+0x2a/0x40 [ 3150.868651][ T5431] loop_add+0x58f/0x760 [ 3150.872814][ T5431] loop_control_ioctl+0x564/0x740 [ 3150.877845][ T5431] ? loop_remove+0xb0/0xb0 [ 3150.882289][ T5431] ? irqentry_exit+0x50/0x60 [ 3150.886885][ T5431] ? sysvec_reschedule_ipi+0x84/0x160 [ 3150.892287][ T5431] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3150.897926][ T5431] ? do_vfs_ioctl+0xf6/0x1a90 [ 3150.902637][ T5431] ? loop_remove+0xb0/0xb0 [ 3150.907061][ T5431] __se_sys_ioctl+0x115/0x190 [ 3150.911754][ T5431] __x64_sys_ioctl+0x7b/0x90 [ 3150.916349][ T5431] do_syscall_64+0x34/0x70 [ 3150.920783][ T5431] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3150.926680][ T5431] RIP: 0033:0x7f42b4f940c9 [ 3150.931118][ T5431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3150.950748][ T5431] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3150.959197][ T5431] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3150.967172][ T5431] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3150.975165][ T5431] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3150.983152][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3150.991141][ T5431] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3150.999161][ T5431] ---[ end trace 66cfa9b859026dbf ]--- [ 3151.034845][ T5421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:13:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 46) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x8}}, 0x20}}, 0x0) [ 3151.193922][ T5421] device bridge514 entered promiscuous mode [ 3151.322505][ T5438] FAULT_INJECTION: forcing a failure. [ 3151.322505][ T5438] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3151.335762][ T5438] CPU: 0 PID: 5438 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3151.347370][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3151.357400][ T5438] Call Trace: [ 3151.360667][ T5438] dump_stack_lvl+0x1e2/0x24b [ 3151.365317][ T5438] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3151.370758][ T5438] ? is_bpf_text_address+0x1a2/0x1c0 [ 3151.376016][ T5438] dump_stack+0x15/0x17 [ 3151.380148][ T5438] should_fail+0x3c0/0x510 [ 3151.384542][ T5438] should_fail_alloc_page+0x50/0x60 [ 3151.390073][ T5438] __alloc_pages_nodemask+0x1c0/0x890 [ 3151.395418][ T5438] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 3151.401130][ T5438] ? finish_task_switch+0x130/0x580 [ 3151.406304][ T5438] allocate_slab+0x78/0x540 [ 3151.410781][ T5438] ___slab_alloc+0x131/0x2e0 [ 3151.415347][ T5438] ? __kernfs_new_node+0xdb/0x6e0 [ 3151.420345][ T5438] __slab_alloc+0x63/0xa0 [ 3151.424678][ T5438] ? __kernfs_new_node+0xdb/0x6e0 [ 3151.429679][ T5438] kmem_cache_alloc+0x1ef/0x300 [ 3151.434503][ T5438] ? __kernfs_new_node+0xdb/0x6e0 [ 3151.439500][ T5438] __kernfs_new_node+0xdb/0x6e0 [ 3151.444324][ T5438] ? kernfs_new_node+0x170/0x170 [ 3151.449237][ T5438] ? sched_clock+0x3a/0x40 [ 3151.453627][ T5438] ? sched_clock_cpu+0x1b/0x3b0 [ 3151.458451][ T5438] ? sched_clock+0x3a/0x40 [ 3151.462846][ T5438] ? debug_smp_processor_id+0x17/0x20 [ 3151.468192][ T5438] kernfs_new_node+0x97/0x170 [ 3151.472845][ T5438] __kernfs_create_file+0x4a/0x270 [ 3151.477931][ T5438] sysfs_add_file_mode_ns+0x273/0x320 [ 3151.483280][ T5438] internal_create_group+0x55e/0xf50 [ 3151.488542][ T5438] ? sysfs_create_group+0x30/0x30 [ 3151.493540][ T5438] ? kernfs_put+0x48/0x540 [ 3151.497934][ T5438] ? kernfs_create_link+0x1a0/0x210 [ 3151.503107][ T5438] sysfs_create_groups+0x5d/0x130 [ 3151.508107][ T5438] device_add_attrs+0x8b/0x3e0 [ 3151.512845][ T5438] ? device_add_class_symlinks+0x27c/0x2a0 [ 3151.518624][ T5438] device_add+0x4e6/0xbd0 [ 3151.522929][ T5438] device_create+0x258/0x2e0 [ 3151.527495][ T5438] ? irqentry_exit+0x50/0x60 [ 3151.532057][ T5438] ? sysvec_reschedule_ipi+0x84/0x160 [ 3151.537409][ T5438] ? root_device_unregister+0x80/0x80 [ 3151.542765][ T5438] bdi_register_va+0x94/0x600 [ 3151.547423][ T5438] bdi_register+0xd1/0x120 [ 3151.551823][ T5438] ? number+0xce3/0x1040 [ 3151.556040][ T5438] ? __device_add_disk+0x536/0x11d0 [ 3151.561211][ T5438] ? bdi_register_va+0x600/0x600 [ 3151.566122][ T5438] ? vsnprintf+0x1bfd/0x1cd0 [ 3151.570687][ T5438] ? __kasan_check_read+0x11/0x20 [ 3151.575685][ T5438] ? blk_alloc_devt+0xd4/0x320 [ 3151.580429][ T5438] __device_add_disk+0x5cb/0x11d0 [ 3151.585433][ T5438] ? device_add_disk+0x40/0x40 [ 3151.590172][ T5438] ? loop_add+0x400/0x760 [ 3151.594477][ T5438] ? vsprintf+0x40/0x40 [ 3151.598613][ T5438] device_add_disk+0x2a/0x40 [ 3151.603180][ T5438] loop_add+0x58f/0x760 [ 3151.607311][ T5438] loop_control_ioctl+0x564/0x740 [ 3151.612308][ T5438] ? loop_remove+0xb0/0xb0 [ 3151.616703][ T5438] ? __fget_files+0x310/0x370 [ 3151.621358][ T5438] ? security_file_ioctl+0xb1/0xd0 [ 3151.626445][ T5438] ? loop_remove+0xb0/0xb0 [ 3151.630839][ T5438] __se_sys_ioctl+0x115/0x190 [ 3151.635501][ T5438] __x64_sys_ioctl+0x7b/0x90 [ 3151.640067][ T5438] do_syscall_64+0x34/0x70 [ 3151.644461][ T5438] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3151.650326][ T5438] RIP: 0033:0x7f42b4f940c9 [ 3151.654719][ T5438] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3151.674297][ T5438] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3151.682685][ T5438] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3151.690631][ T5438] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3151.698580][ T5438] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3151.706527][ T5438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3151.714478][ T5438] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:13:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x48000000}}, 0x20}}, 0x0) 01:13:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xffffff7f}, 0x0) [ 3151.793286][ T5436] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3151.935929][ T5436] device bridge90 entered promiscuous mode 01:13:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 3152.011050][ T5444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 47) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3152.055395][ T5444] device bridge79 entered promiscuous mode [ 3152.078433][ T5443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3152.103162][ T5443] device bridge551 entered promiscuous mode [ 3152.195989][ T5454] FAULT_INJECTION: forcing a failure. [ 3152.195989][ T5454] name failslab, interval 1, probability 0, space 0, times 0 [ 3152.208738][ T5454] CPU: 0 PID: 5454 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3152.220345][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3152.230379][ T5454] Call Trace: [ 3152.233653][ T5454] dump_stack_lvl+0x1e2/0x24b [ 3152.238315][ T5454] ? panic+0x7d7/0x7d7 [ 3152.242364][ T5454] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3152.247798][ T5454] ? release_firmware_map_entry+0x194/0x194 [ 3152.253667][ T5454] dump_stack+0x15/0x17 [ 3152.257802][ T5454] should_fail+0x3c0/0x510 [ 3152.262196][ T5454] __should_failslab+0x9f/0xe0 [ 3152.266940][ T5454] should_failslab+0x9/0x20 [ 3152.271510][ T5454] kmem_cache_alloc+0x3f/0x300 [ 3152.276267][ T5454] ? __kernfs_new_node+0xdb/0x6e0 [ 3152.281295][ T5454] __kernfs_new_node+0xdb/0x6e0 [ 3152.286140][ T5454] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3152.291757][ T5454] ? kernfs_new_node+0x170/0x170 [ 3152.296677][ T5454] ? __kasan_check_write+0x14/0x20 [ 3152.301762][ T5454] ? mutex_unlock+0x29/0xf0 [ 3152.306243][ T5454] ? kernfs_activate+0x409/0x420 [ 3152.311156][ T5454] kernfs_new_node+0x97/0x170 [ 3152.315807][ T5454] __kernfs_create_file+0x4a/0x270 [ 3152.320899][ T5454] sysfs_add_file_mode_ns+0x273/0x320 [ 3152.326247][ T5454] internal_create_group+0x55e/0xf50 [ 3152.331513][ T5454] ? sysfs_create_group+0x30/0x30 [ 3152.336516][ T5454] ? kernfs_put+0x48/0x540 [ 3152.340928][ T5454] ? kernfs_create_link+0x1a0/0x210 [ 3152.346130][ T5454] sysfs_create_groups+0x5d/0x130 [ 3152.351145][ T5454] device_add_attrs+0x8b/0x3e0 [ 3152.355892][ T5454] ? device_add_class_symlinks+0x27c/0x2a0 [ 3152.361684][ T5454] device_add+0x4e6/0xbd0 [ 3152.365993][ T5454] device_create+0x258/0x2e0 [ 3152.370561][ T5454] ? sysvec_reschedule_ipi+0x84/0x160 [ 3152.375908][ T5454] ? root_device_unregister+0x80/0x80 [ 3152.381257][ T5454] ? number+0xd9b/0x1040 [ 3152.385474][ T5454] bdi_register_va+0x94/0x600 [ 3152.390128][ T5454] bdi_register+0xd1/0x120 [ 3152.394521][ T5454] ? irqentry_exit+0x50/0x60 [ 3152.399084][ T5454] ? sysvec_reschedule_ipi+0x84/0x160 [ 3152.404435][ T5454] ? __device_add_disk+0x536/0x11d0 [ 3152.409607][ T5454] ? bdi_register_va+0x600/0x600 [ 3152.414540][ T5454] ? __kasan_check_read+0x11/0x20 [ 3152.419537][ T5454] ? blk_alloc_devt+0xd4/0x320 [ 3152.424277][ T5454] __device_add_disk+0x5cb/0x11d0 [ 3152.429281][ T5454] ? device_add_disk+0x40/0x40 [ 3152.434018][ T5454] ? loop_add+0x400/0x760 [ 3152.438326][ T5454] ? vsprintf+0x40/0x40 [ 3152.442455][ T5454] device_add_disk+0x2a/0x40 [ 3152.447021][ T5454] loop_add+0x58f/0x760 [ 3152.451165][ T5454] loop_control_ioctl+0x564/0x740 [ 3152.456167][ T5454] ? loop_remove+0xb0/0xb0 [ 3152.460561][ T5454] ? __fget_files+0x310/0x370 [ 3152.465214][ T5454] ? security_file_ioctl+0xb1/0xd0 [ 3152.470300][ T5454] ? loop_remove+0xb0/0xb0 [ 3152.474691][ T5454] __se_sys_ioctl+0x115/0x190 [ 3152.479345][ T5454] __x64_sys_ioctl+0x7b/0x90 [ 3152.483911][ T5454] do_syscall_64+0x34/0x70 [ 3152.488306][ T5454] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3152.494174][ T5454] RIP: 0033:0x7f42b4f940c9 [ 3152.498567][ T5454] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3152.518146][ T5454] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3152.526536][ T5454] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3152.534485][ T5454] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3152.542432][ T5454] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3152.550378][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3152.558325][ T5454] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3152.568356][ T5454] ------------[ cut here ]------------ [ 3152.574221][ T5454] WARNING: CPU: 0 PID: 5454 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3152.584399][ T5454] Modules linked in: [ 3152.588464][ T5454] CPU: 0 PID: 5454 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3152.600487][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3152.610970][ T5454] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3152.617195][ T5454] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3152.637224][ T5454] RSP: 0018:ffffc900031f7bc0 EFLAGS: 00010283 [ 3152.644017][ T5454] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3152.652422][ T5454] RDX: ffffc90003d81000 RSI: 00000000000349f3 RDI: 00000000000349f4 [ 3152.660834][ T5454] RBP: ffffc900031f7d08 R08: ffffffff82412a76 R09: ffffc900031f7610 [ 3152.669237][ T5454] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3152.677633][ T5454] R13: ffff8881147e1000 R14: ffff888167a04338 R15: ffff888167a04000 [ 3152.686236][ T5454] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3152.695587][ T5454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3152.702316][ T5454] CR2: 00007f42b3cc4ff8 CR3: 0000000118143000 CR4: 00000000003506b0 [ 3152.710930][ T5454] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3152.719308][ T5454] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3152.727718][ T5454] Call Trace: [ 3152.731436][ T5454] ? device_add_disk+0x40/0x40 [ 3152.736654][ T5454] ? loop_add+0x400/0x760 [ 3152.741705][ T5454] ? vsprintf+0x40/0x40 [ 3152.746308][ T5454] device_add_disk+0x2a/0x40 [ 3152.751374][ T5454] loop_add+0x58f/0x760 [ 3152.755938][ T5454] loop_control_ioctl+0x564/0x740 [ 3152.761347][ T5454] ? loop_remove+0xb0/0xb0 [ 3152.766228][ T5454] ? __fget_files+0x310/0x370 [ 3152.771275][ T5454] ? security_file_ioctl+0xb1/0xd0 [ 3152.776828][ T5454] ? loop_remove+0xb0/0xb0 [ 3152.781684][ T5454] __se_sys_ioctl+0x115/0x190 [ 3152.787192][ T5454] __x64_sys_ioctl+0x7b/0x90 [ 3152.792205][ T5454] do_syscall_64+0x34/0x70 [ 3152.797158][ T5454] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3152.803497][ T5454] RIP: 0033:0x7f42b4f940c9 [ 3152.808649][ T5454] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3152.828881][ T5454] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3152.837737][ T5454] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3152.846246][ T5454] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3152.854633][ T5454] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3152.863232][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3152.871943][ T5454] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3152.880351][ T5454] ---[ end trace 66cfa9b859026dc0 ]--- 01:13:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 48) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3153.208849][ T5459] FAULT_INJECTION: forcing a failure. [ 3153.208849][ T5459] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.221715][ T5459] CPU: 0 PID: 5459 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3153.233326][ T5459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3153.243389][ T5459] Call Trace: [ 3153.246682][ T5459] dump_stack_lvl+0x1e2/0x24b [ 3153.251412][ T5459] ? panic+0x7d7/0x7d7 [ 3153.255465][ T5459] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3153.260905][ T5459] ? selinux_kernfs_init_security+0x1a8/0x760 [ 3153.266949][ T5459] dump_stack+0x15/0x17 [ 3153.271083][ T5459] should_fail+0x3c0/0x510 [ 3153.275476][ T5459] __should_failslab+0x9f/0xe0 [ 3153.280216][ T5459] should_failslab+0x9/0x20 [ 3153.284696][ T5459] kmem_cache_alloc+0x3f/0x300 [ 3153.289438][ T5459] ? __kernfs_new_node+0xdb/0x6e0 [ 3153.294435][ T5459] __kernfs_new_node+0xdb/0x6e0 [ 3153.299382][ T5459] ? __kasan_check_write+0x14/0x20 [ 3153.304476][ T5459] ? mutex_lock+0xb2/0x1e0 [ 3153.308870][ T5459] ? mutex_trylock+0x180/0x180 [ 3153.313616][ T5459] ? kernfs_new_node+0x170/0x170 [ 3153.318539][ T5459] ? __kasan_check_write+0x14/0x20 [ 3153.323655][ T5459] ? mutex_unlock+0x29/0xf0 [ 3153.328140][ T5459] ? kernfs_activate+0x409/0x420 [ 3153.333052][ T5459] kernfs_new_node+0x97/0x170 [ 3153.337705][ T5459] __kernfs_create_file+0x4a/0x270 [ 3153.342800][ T5459] sysfs_add_file_mode_ns+0x273/0x320 [ 3153.348147][ T5459] internal_create_group+0x55e/0xf50 [ 3153.353406][ T5459] ? sysfs_create_group+0x30/0x30 [ 3153.358406][ T5459] ? kernfs_put+0x48/0x540 [ 3153.362801][ T5459] ? kernfs_create_link+0x1a0/0x210 [ 3153.368149][ T5459] sysfs_create_groups+0x5d/0x130 [ 3153.373150][ T5459] device_add_attrs+0x8b/0x3e0 [ 3153.377892][ T5459] ? device_add_class_symlinks+0x27c/0x2a0 [ 3153.383674][ T5459] device_add+0x4e6/0xbd0 [ 3153.387981][ T5459] device_create+0x258/0x2e0 [ 3153.392549][ T5459] ? root_device_unregister+0x80/0x80 [ 3153.397897][ T5459] ? debug_smp_processor_id+0x17/0x20 [ 3153.403245][ T5459] bdi_register_va+0x94/0x600 [ 3153.407912][ T5459] bdi_register+0xd1/0x120 [ 3153.412315][ T5459] ? asm_sysvec_call_function_single+0x12/0x20 [ 3153.418446][ T5459] ? __device_add_disk+0x536/0x11d0 [ 3153.423620][ T5459] ? bdi_register_va+0x600/0x600 [ 3153.428619][ T5459] ? blk_alloc_devt+0x2c7/0x320 [ 3153.433446][ T5459] __device_add_disk+0x5cb/0x11d0 [ 3153.438447][ T5459] ? device_add_disk+0x40/0x40 [ 3153.443188][ T5459] ? loop_add+0x400/0x760 [ 3153.447496][ T5459] ? vsprintf+0x40/0x40 [ 3153.451630][ T5459] device_add_disk+0x2a/0x40 [ 3153.456194][ T5459] loop_add+0x58f/0x760 [ 3153.460332][ T5459] loop_control_ioctl+0x564/0x740 [ 3153.465329][ T5459] ? loop_remove+0xb0/0xb0 [ 3153.469727][ T5459] ? __fget_files+0x310/0x370 [ 3153.474383][ T5459] ? security_file_ioctl+0xb1/0xd0 [ 3153.479470][ T5459] ? loop_remove+0xb0/0xb0 [ 3153.483862][ T5459] __se_sys_ioctl+0x115/0x190 [ 3153.488515][ T5459] __x64_sys_ioctl+0x7b/0x90 [ 3153.493080][ T5459] do_syscall_64+0x34/0x70 [ 3153.497472][ T5459] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3153.503339][ T5459] RIP: 0033:0x7f42b4f940c9 [ 3153.507732][ T5459] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3153.527661][ T5459] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3153.536053][ T5459] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3153.544002][ T5459] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3153.551949][ T5459] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3153.559897][ T5459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3153.567844][ T5459] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3153.576872][ T5459] ------------[ cut here ]------------ [ 3153.582388][ T5459] WARNING: CPU: 0 PID: 5459 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3153.591419][ T5459] Modules linked in: [ 3153.595349][ T5459] CPU: 0 PID: 5459 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3153.606988][ T5459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3153.617078][ T5459] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3153.623070][ T5459] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3153.642774][ T5459] RSP: 0018:ffffc90003257bc0 EFLAGS: 00010287 [ 3153.648852][ T5459] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3153.656828][ T5459] RDX: ffffc90003d81000 RSI: 000000000003414f RDI: 0000000000034150 [ 3153.664829][ T5459] RBP: ffffc90003257d08 R08: ffffffff82412a76 R09: ffffc90003257610 [ 3153.672858][ T5459] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3153.680853][ T5459] R13: ffff888119f72000 R14: ffff88811cd6b338 R15: ffff88811cd6b000 [ 3153.688850][ T5459] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3153.697786][ T5459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3153.704413][ T5459] CR2: 00007f42b3cc4ff8 CR3: 0000000187702000 CR4: 00000000003506b0 [ 3153.712416][ T5459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3153.720405][ T5459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3153.728408][ T5459] Call Trace: [ 3153.731723][ T5459] ? device_add_disk+0x40/0x40 [ 3153.736494][ T5459] ? loop_add+0x400/0x760 [ 3153.740856][ T5459] ? vsprintf+0x40/0x40 [ 3153.745022][ T5459] device_add_disk+0x2a/0x40 [ 3153.749635][ T5459] loop_add+0x58f/0x760 [ 3153.753806][ T5459] loop_control_ioctl+0x564/0x740 [ 3153.758871][ T5459] ? loop_remove+0xb0/0xb0 [ 3153.763297][ T5459] ? __fget_files+0x310/0x370 [ 3153.767982][ T5459] ? security_file_ioctl+0xb1/0xd0 [ 3153.773111][ T5459] ? loop_remove+0xb0/0xb0 [ 3153.777542][ T5459] __se_sys_ioctl+0x115/0x190 [ 3153.782243][ T5459] __x64_sys_ioctl+0x7b/0x90 [ 3153.786840][ T5459] do_syscall_64+0x34/0x70 [ 3153.791291][ T5459] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3153.797189][ T5459] RIP: 0033:0x7f42b4f940c9 [ 3153.801628][ T5459] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3153.821256][ T5459] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3153.829709][ T5459] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3153.837691][ T5459] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3153.845697][ T5459] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3153.853704][ T5459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3153.861876][ T5459] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3153.869905][ T5459] ---[ end trace 66cfa9b859026dc1 ]--- [ 3153.880069][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:13:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 49) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3154.053036][ T5449] device bridge514 entered promiscuous mode 01:13:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x4c000000}}, 0x20}}, 0x0) [ 3154.184529][ T5464] FAULT_INJECTION: forcing a failure. [ 3154.184529][ T5464] name failslab, interval 1, probability 0, space 0, times 0 [ 3154.197195][ T5464] CPU: 0 PID: 5464 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3154.208804][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3154.218835][ T5464] Call Trace: [ 3154.222107][ T5464] dump_stack_lvl+0x1e2/0x24b [ 3154.226759][ T5464] ? panic+0x7d7/0x7d7 [ 3154.230805][ T5464] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3154.236239][ T5464] ? release_firmware_map_entry+0x194/0x194 [ 3154.242109][ T5464] dump_stack+0x15/0x17 [ 3154.246241][ T5464] should_fail+0x3c0/0x510 [ 3154.250633][ T5464] __should_failslab+0x9f/0xe0 [ 3154.255371][ T5464] should_failslab+0x9/0x20 [ 3154.259866][ T5464] kmem_cache_alloc+0x3f/0x300 [ 3154.264618][ T5464] ? __kernfs_new_node+0xdb/0x6e0 [ 3154.269630][ T5464] ? irqentry_exit+0x50/0x60 [ 3154.274214][ T5464] __kernfs_new_node+0xdb/0x6e0 [ 3154.279045][ T5464] ? __kasan_check_write+0x14/0x20 [ 3154.284137][ T5464] ? mutex_lock+0xb2/0x1e0 [ 3154.288533][ T5464] ? mutex_trylock+0x180/0x180 [ 3154.293291][ T5464] ? kernfs_new_node+0x170/0x170 [ 3154.298215][ T5464] ? __kasan_check_write+0x14/0x20 [ 3154.303306][ T5464] ? mutex_unlock+0x29/0xf0 [ 3154.307784][ T5464] ? kernfs_activate+0x409/0x420 [ 3154.312699][ T5464] kernfs_new_node+0x97/0x170 [ 3154.317353][ T5464] __kernfs_create_file+0x4a/0x270 [ 3154.322442][ T5464] sysfs_add_file_mode_ns+0x273/0x320 [ 3154.327926][ T5464] internal_create_group+0x55e/0xf50 [ 3154.333200][ T5464] ? sysfs_create_group+0x30/0x30 [ 3154.338214][ T5464] sysfs_create_groups+0x5d/0x130 [ 3154.343221][ T5464] device_add_attrs+0x8b/0x3e0 [ 3154.347972][ T5464] ? device_add_class_symlinks+0x27c/0x2a0 [ 3154.353758][ T5464] device_add+0x4e6/0xbd0 [ 3154.358079][ T5464] device_create+0x258/0x2e0 [ 3154.362648][ T5464] ? root_device_unregister+0x80/0x80 [ 3154.368012][ T5464] ? number+0xd9b/0x1040 [ 3154.372230][ T5464] bdi_register_va+0x94/0x600 [ 3154.376883][ T5464] bdi_register+0xd1/0x120 [ 3154.381274][ T5464] ? irqentry_exit+0x50/0x60 [ 3154.385840][ T5464] ? sysvec_reschedule_ipi+0x84/0x160 [ 3154.391187][ T5464] ? __device_add_disk+0x536/0x11d0 [ 3154.396378][ T5464] ? bdi_register_va+0x600/0x600 [ 3154.401293][ T5464] ? __device_add_disk+0x1a9/0x11d0 [ 3154.406465][ T5464] ? blk_alloc_devt+0xd4/0x320 [ 3154.411205][ T5464] __device_add_disk+0x5cb/0x11d0 [ 3154.416207][ T5464] ? device_add_disk+0x40/0x40 [ 3154.420946][ T5464] ? loop_add+0x400/0x760 [ 3154.425251][ T5464] ? vsprintf+0x40/0x40 [ 3154.429583][ T5464] device_add_disk+0x2a/0x40 [ 3154.434162][ T5464] loop_add+0x58f/0x760 [ 3154.438303][ T5464] loop_control_ioctl+0x564/0x740 [ 3154.443312][ T5464] ? loop_remove+0xb0/0xb0 [ 3154.447717][ T5464] ? irqentry_exit+0x50/0x60 [ 3154.452288][ T5464] ? sysvec_reschedule_ipi+0x84/0x160 [ 3154.457637][ T5464] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3154.463247][ T5464] ? loop_remove+0xb0/0xb0 [ 3154.467640][ T5464] __se_sys_ioctl+0x115/0x190 [ 3154.472292][ T5464] __x64_sys_ioctl+0x7b/0x90 [ 3154.476855][ T5464] do_syscall_64+0x34/0x70 [ 3154.481251][ T5464] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3154.487122][ T5464] RIP: 0033:0x7f42b4f940c9 [ 3154.491516][ T5464] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3154.511095][ T5464] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3154.519484][ T5464] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3154.527433][ T5464] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3154.535379][ T5464] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3154.543327][ T5464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3154.551290][ T5464] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3154.560653][ T5464] ------------[ cut here ]------------ [ 3154.566171][ T5464] WARNING: CPU: 0 PID: 5464 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3154.575234][ T5464] Modules linked in: [ 3154.579187][ T5464] CPU: 0 PID: 5464 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3154.590834][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3154.600931][ T5464] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3154.606762][ T5464] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3154.626395][ T5464] RSP: 0018:ffffc90003277bc0 EFLAGS: 00010283 [ 3154.632507][ T5464] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3154.640499][ T5464] RDX: ffffc90003d81000 RSI: 00000000000354db RDI: 00000000000354dc [ 3154.648492][ T5464] RBP: ffffc90003277d08 R08: ffffffff82412a76 R09: ffffc90003277610 [ 3154.656558][ T5464] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3154.665856][ T5464] R13: ffff888117d8f000 R14: ffff888117d8e338 R15: ffff888117d8e000 [ 3154.673868][ T5464] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3154.682882][ T5464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3154.689483][ T5464] CR2: 00007f42b3cc4ff8 CR3: 0000000190552000 CR4: 00000000003506b0 [ 3154.697476][ T5464] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3154.705563][ T5464] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3154.713563][ T5464] Call Trace: [ 3154.716864][ T5464] ? device_add_disk+0x40/0x40 [ 3154.721653][ T5464] ? loop_add+0x400/0x760 [ 3154.725989][ T5464] ? vsprintf+0x40/0x40 [ 3154.730173][ T5464] device_add_disk+0x2a/0x40 [ 3154.734769][ T5464] loop_add+0x58f/0x760 [ 3154.738950][ T5464] loop_control_ioctl+0x564/0x740 [ 3154.743981][ T5464] ? loop_remove+0xb0/0xb0 [ 3154.748421][ T5464] ? irqentry_exit+0x50/0x60 [ 3154.753017][ T5464] ? sysvec_reschedule_ipi+0x84/0x160 [ 3154.758409][ T5464] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3154.764075][ T5464] ? loop_remove+0xb0/0xb0 [ 3154.768525][ T5464] __se_sys_ioctl+0x115/0x190 [ 3154.773211][ T5464] __x64_sys_ioctl+0x7b/0x90 [ 3154.777808][ T5464] do_syscall_64+0x34/0x70 [ 3154.782248][ T5464] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3154.788163][ T5464] RIP: 0033:0x7f42b4f940c9 [ 3154.792588][ T5464] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3154.812240][ T5464] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3154.820707][ T5464] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3154.828709][ T5464] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3154.836691][ T5464] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3154.844685][ T5464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3154.852677][ T5464] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3154.860698][ T5464] ---[ end trace 66cfa9b859026dc2 ]--- 01:13:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xffffff81}, 0x0) 01:13:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x9}}, 0x20}}, 0x0) 01:13:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x0) 01:13:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 50) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3155.075106][ T5470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3155.090672][ T5470] device bridge79 entered promiscuous mode [ 3155.103386][ T5472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3155.124265][ T5472] device bridge551 entered promiscuous mode [ 3155.197353][ T5481] FAULT_INJECTION: forcing a failure. [ 3155.197353][ T5481] name failslab, interval 1, probability 0, space 0, times 0 [ 3155.210270][ T5481] CPU: 0 PID: 5481 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3155.221885][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3155.231921][ T5481] Call Trace: [ 3155.235195][ T5481] dump_stack_lvl+0x1e2/0x24b [ 3155.239858][ T5481] ? panic+0x7d7/0x7d7 [ 3155.243908][ T5481] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3155.249346][ T5481] ? bpf_trace_run3+0x126/0x2c0 [ 3155.254179][ T5481] ? compat_start_thread+0x80/0x80 [ 3155.259266][ T5481] dump_stack+0x15/0x17 [ 3155.263398][ T5481] should_fail+0x3c0/0x510 [ 3155.267791][ T5481] __should_failslab+0x9f/0xe0 [ 3155.272528][ T5481] should_failslab+0x9/0x20 [ 3155.277014][ T5481] kmem_cache_alloc+0x3f/0x300 [ 3155.281786][ T5481] ? __switch_to_asm+0x34/0x60 [ 3155.286548][ T5481] ? __kernfs_new_node+0xdb/0x6e0 [ 3155.291558][ T5481] __kernfs_new_node+0xdb/0x6e0 [ 3155.296391][ T5481] ? release_firmware_map_entry+0x194/0x194 [ 3155.302262][ T5481] ? kernfs_new_node+0x170/0x170 [ 3155.307180][ T5481] ? mutex_lock+0xb2/0x1e0 [ 3155.311582][ T5481] ? __kasan_check_read+0x11/0x20 [ 3155.316604][ T5481] ? preempt_schedule_irq+0xef/0x140 [ 3155.321886][ T5481] ? preempt_schedule_notrace+0x140/0x140 [ 3155.327595][ T5481] kernfs_new_node+0x97/0x170 [ 3155.332258][ T5481] __kernfs_create_file+0x4a/0x270 [ 3155.337350][ T5481] sysfs_add_file_mode_ns+0x273/0x320 [ 3155.342717][ T5481] sysfs_merge_group+0x207/0x460 [ 3155.347652][ T5481] ? sysfs_remove_groups+0xb0/0xb0 [ 3155.352749][ T5481] dpm_sysfs_add+0xcf/0x290 [ 3155.357236][ T5481] device_add+0x52c/0xbd0 [ 3155.361551][ T5481] device_create+0x258/0x2e0 [ 3155.366149][ T5481] ? __kasan_check_read+0x11/0x20 [ 3155.371153][ T5481] ? root_device_unregister+0x80/0x80 [ 3155.376504][ T5481] ? number+0xd9b/0x1040 [ 3155.380722][ T5481] bdi_register_va+0x94/0x600 [ 3155.385373][ T5481] bdi_register+0xd1/0x120 [ 3155.389766][ T5481] ? __device_add_disk+0x536/0x11d0 [ 3155.394941][ T5481] ? bdi_register_va+0x600/0x600 [ 3155.399851][ T5481] ? vsnprintf+0x1bfd/0x1cd0 [ 3155.404438][ T5481] ? __kasan_check_read+0x11/0x20 [ 3155.409442][ T5481] ? blk_alloc_devt+0xd4/0x320 [ 3155.414180][ T5481] __device_add_disk+0x5cb/0x11d0 [ 3155.419179][ T5481] ? device_add_disk+0x40/0x40 [ 3155.423919][ T5481] ? loop_add+0x400/0x760 [ 3155.428223][ T5481] ? vsprintf+0x40/0x40 [ 3155.432355][ T5481] device_add_disk+0x2a/0x40 [ 3155.436919][ T5481] loop_add+0x58f/0x760 [ 3155.441052][ T5481] loop_control_ioctl+0x564/0x740 [ 3155.446054][ T5481] ? loop_remove+0xb0/0xb0 [ 3155.450447][ T5481] ? irqentry_exit+0x50/0x60 [ 3155.455010][ T5481] ? sysvec_reschedule_ipi+0x84/0x160 [ 3155.460358][ T5481] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3155.465965][ T5481] ? loop_remove+0xb0/0xb0 [ 3155.470361][ T5481] __se_sys_ioctl+0x115/0x190 [ 3155.475012][ T5481] __x64_sys_ioctl+0x7b/0x90 [ 3155.479576][ T5481] do_syscall_64+0x34/0x70 [ 3155.483971][ T5481] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3155.489839][ T5481] RIP: 0033:0x7f42b4f940c9 [ 3155.494229][ T5481] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3155.513806][ T5481] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3155.522193][ T5481] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3155.530142][ T5481] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3155.538093][ T5481] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3155.546139][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3155.554088][ T5481] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3155.563523][ T5481] ------------[ cut here ]------------ [ 3155.569195][ T5481] WARNING: CPU: 0 PID: 5481 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3155.578358][ T5481] Modules linked in: [ 3155.582405][ T5481] CPU: 0 PID: 5481 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3155.594158][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3155.604367][ T5481] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3155.610308][ T5481] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3155.630128][ T5481] RSP: 0018:ffffc90000c27bc0 EFLAGS: 00010287 [ 3155.636332][ T5481] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3155.644469][ T5481] RDX: ffffc90003d81000 RSI: 00000000000348b7 RDI: 00000000000348b8 [ 3155.652584][ T5481] RBP: ffffc90000c27d08 R08: ffffffff82412a76 R09: ffffc90000c27610 [ 3155.660722][ T5481] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3155.668834][ T5481] R13: ffff88818d658000 R14: ffff888191661338 R15: ffff888191661000 [ 3155.676937][ T5481] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3155.686017][ T5481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3155.692747][ T5481] CR2: 00007f42b3cc4ff8 CR3: 0000000188bb3000 CR4: 00000000003506b0 [ 3155.700863][ T5481] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3155.708985][ T5481] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3155.717085][ T5481] Call Trace: [ 3155.720551][ T5481] ? device_add_disk+0x40/0x40 [ 3155.725447][ T5481] ? loop_add+0x400/0x760 [ 3155.729915][ T5481] ? vsprintf+0x40/0x40 [ 3155.734226][ T5481] device_add_disk+0x2a/0x40 [ 3155.738952][ T5481] loop_add+0x58f/0x760 [ 3155.743243][ T5481] loop_control_ioctl+0x564/0x740 [ 3155.748413][ T5481] ? loop_remove+0xb0/0xb0 [ 3155.752961][ T5481] ? irqentry_exit+0x50/0x60 [ 3155.757785][ T5481] ? sysvec_reschedule_ipi+0x84/0x160 [ 3155.763298][ T5481] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3155.769068][ T5481] ? loop_remove+0xb0/0xb0 [ 3155.773631][ T5481] __se_sys_ioctl+0x115/0x190 [ 3155.778468][ T5481] __x64_sys_ioctl+0x7b/0x90 [ 3155.783181][ T5481] do_syscall_64+0x34/0x70 [ 3155.787724][ T5481] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3155.793758][ T5481] RIP: 0033:0x7f42b4f940c9 [ 3155.798321][ T5481] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3155.818122][ T5481] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3155.826768][ T5481] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3155.834883][ T5481] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3155.842993][ T5481] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3155.851183][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3155.859311][ T5481] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3155.867429][ T5481] ---[ end trace 66cfa9b859026dc3 ]--- [ 3155.916995][ T5475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:13:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 51) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3156.025430][ T5475] device bridge514 entered promiscuous mode [ 3156.034058][ T5476] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3156.055149][ T5476] device bridge90 entered promiscuous mode [ 3156.180110][ T5487] FAULT_INJECTION: forcing a failure. [ 3156.180110][ T5487] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.192754][ T5487] CPU: 0 PID: 5487 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3156.204358][ T5487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3156.214387][ T5487] Call Trace: [ 3156.217654][ T5487] dump_stack_lvl+0x1e2/0x24b [ 3156.222304][ T5487] ? panic+0x7d7/0x7d7 [ 3156.226345][ T5487] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3156.231776][ T5487] dump_stack+0x15/0x17 [ 3156.235926][ T5487] should_fail+0x3c0/0x510 [ 3156.240317][ T5487] __should_failslab+0x9f/0xe0 [ 3156.245111][ T5487] should_failslab+0x9/0x20 [ 3156.249589][ T5487] kmem_cache_alloc+0x3f/0x300 [ 3156.254332][ T5487] ? __kernfs_new_node+0xdb/0x6e0 [ 3156.259331][ T5487] ? preempt_schedule_notrace+0x140/0x140 [ 3156.265979][ T5487] __kernfs_new_node+0xdb/0x6e0 [ 3156.270806][ T5487] ? __kasan_check_write+0x14/0x20 [ 3156.275899][ T5487] ? mutex_lock+0xb2/0x1e0 [ 3156.280288][ T5487] ? mutex_trylock+0x180/0x180 [ 3156.285030][ T5487] ? kernfs_new_node+0x170/0x170 [ 3156.289942][ T5487] ? __kasan_check_write+0x14/0x20 [ 3156.295025][ T5487] ? mutex_unlock+0x29/0xf0 [ 3156.299509][ T5487] ? kernfs_activate+0x409/0x420 [ 3156.304422][ T5487] kernfs_new_node+0x97/0x170 [ 3156.309090][ T5487] __kernfs_create_file+0x4a/0x270 [ 3156.314184][ T5487] sysfs_add_file_mode_ns+0x273/0x320 [ 3156.319539][ T5487] sysfs_merge_group+0x207/0x460 [ 3156.324470][ T5487] ? sysfs_remove_groups+0xb0/0xb0 [ 3156.329563][ T5487] dpm_sysfs_add+0xcf/0x290 [ 3156.334045][ T5487] device_add+0x52c/0xbd0 [ 3156.338350][ T5487] device_create+0x258/0x2e0 [ 3156.342915][ T5487] ? root_device_unregister+0x80/0x80 [ 3156.348262][ T5487] ? __kasan_check_read+0x11/0x20 [ 3156.353261][ T5487] ? preempt_schedule_irq+0xef/0x140 [ 3156.358521][ T5487] ? preempt_schedule_notrace+0x140/0x140 [ 3156.364213][ T5487] bdi_register_va+0x94/0x600 [ 3156.368865][ T5487] bdi_register+0xd1/0x120 [ 3156.373258][ T5487] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3156.378861][ T5487] ? __device_add_disk+0x536/0x11d0 [ 3156.384035][ T5487] ? bdi_register_va+0x600/0x600 [ 3156.388949][ T5487] ? blk_alloc_devt+0x86/0x320 [ 3156.393695][ T5487] ? __sanitizer_cov_trace_pc+0x46/0x60 [ 3156.399215][ T5487] ? blk_alloc_devt+0xd4/0x320 [ 3156.403953][ T5487] __device_add_disk+0x5cb/0x11d0 [ 3156.408954][ T5487] ? device_add_disk+0x40/0x40 [ 3156.413696][ T5487] ? loop_add+0x400/0x760 [ 3156.418003][ T5487] ? vsprintf+0x40/0x40 [ 3156.422134][ T5487] device_add_disk+0x2a/0x40 [ 3156.426695][ T5487] loop_add+0x58f/0x760 [ 3156.430829][ T5487] loop_control_ioctl+0x564/0x740 [ 3156.435829][ T5487] ? loop_remove+0xb0/0xb0 [ 3156.440223][ T5487] ? __fget_files+0x310/0x370 [ 3156.444876][ T5487] ? security_file_ioctl+0xb1/0xd0 [ 3156.449961][ T5487] ? loop_remove+0xb0/0xb0 [ 3156.454350][ T5487] __se_sys_ioctl+0x115/0x190 [ 3156.458999][ T5487] __x64_sys_ioctl+0x7b/0x90 [ 3156.463570][ T5487] do_syscall_64+0x34/0x70 [ 3156.467961][ T5487] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3156.473828][ T5487] RIP: 0033:0x7f42b4f940c9 [ 3156.478222][ T5487] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3156.497801][ T5487] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3156.506193][ T5487] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3156.514142][ T5487] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3156.522086][ T5487] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3156.530030][ T5487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3156.537979][ T5487] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3156.547959][ T5487] ------------[ cut here ]------------ [ 3156.553496][ T5487] WARNING: CPU: 0 PID: 5487 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3156.562530][ T5487] Modules linked in: [ 3156.566469][ T5487] CPU: 0 PID: 5487 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3156.578254][ T5487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3156.588345][ T5487] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3156.594157][ T5487] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3156.613840][ T5487] RSP: 0018:ffffc90003207bc0 EFLAGS: 00010283 [ 3156.619948][ T5487] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3156.627935][ T5487] RDX: ffffc90003d81000 RSI: 00000000000350fd RDI: 00000000000350fe [ 3156.635931][ T5487] RBP: ffffc90003207d08 R08: ffffffff82412a76 R09: ffffc90003207610 [ 3156.643962][ T5487] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3156.651955][ T5487] R13: ffff888116279000 R14: ffff888188017338 R15: ffff888188017000 [ 3156.659950][ T5487] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3156.668895][ T5487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3156.675482][ T5487] CR2: 00007f42b3cc4ff8 CR3: 000000018d40b000 CR4: 00000000003506b0 [ 3156.683481][ T5487] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3156.691474][ T5487] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3156.699509][ T5487] Call Trace: [ 3156.702840][ T5487] ? device_add_disk+0x40/0x40 [ 3156.707625][ T5487] ? loop_add+0x400/0x760 [ 3156.711998][ T5487] ? vsprintf+0x40/0x40 [ 3156.716197][ T5487] device_add_disk+0x2a/0x40 [ 3156.720820][ T5487] loop_add+0x58f/0x760 [ 3156.724992][ T5487] loop_control_ioctl+0x564/0x740 [ 3156.730052][ T5487] ? loop_remove+0xb0/0xb0 [ 3156.734487][ T5487] ? __fget_files+0x310/0x370 [ 3156.739196][ T5487] ? security_file_ioctl+0xb1/0xd0 [ 3156.744316][ T5487] ? loop_remove+0xb0/0xb0 [ 3156.748755][ T5487] __se_sys_ioctl+0x115/0x190 [ 3156.753439][ T5487] __x64_sys_ioctl+0x7b/0x90 [ 3156.758037][ T5487] do_syscall_64+0x34/0x70 [ 3156.762500][ T5487] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3156.768411][ T5487] RIP: 0033:0x7f42b4f940c9 [ 3156.772838][ T5487] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3156.792500][ T5487] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3156.800948][ T5487] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3156.808939][ T5487] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3156.816916][ T5487] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3156.825070][ T5487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3156.833150][ T5487] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3156.841253][ T5487] ---[ end trace 66cfa9b859026dc4 ]--- 01:13:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 52) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3157.236395][ T5492] FAULT_INJECTION: forcing a failure. [ 3157.236395][ T5492] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.249071][ T5492] CPU: 0 PID: 5492 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3157.260677][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3157.270710][ T5492] Call Trace: [ 3157.273984][ T5492] dump_stack_lvl+0x1e2/0x24b [ 3157.278637][ T5492] ? panic+0x7d7/0x7d7 [ 3157.282678][ T5492] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3157.288118][ T5492] ? irqentry_exit+0x50/0x60 [ 3157.292685][ T5492] dump_stack+0x15/0x17 [ 3157.296813][ T5492] should_fail+0x3c0/0x510 [ 3157.301205][ T5492] __should_failslab+0x9f/0xe0 [ 3157.305952][ T5492] should_failslab+0x9/0x20 [ 3157.310438][ T5492] kmem_cache_alloc+0x3f/0x300 [ 3157.315175][ T5492] ? __kernfs_new_node+0xdb/0x6e0 [ 3157.320173][ T5492] __kernfs_new_node+0xdb/0x6e0 [ 3157.325002][ T5492] ? release_firmware_map_entry+0x194/0x194 [ 3157.330885][ T5492] ? kernfs_new_node+0x170/0x170 [ 3157.335823][ T5492] ? __kasan_check_read+0x11/0x20 [ 3157.340834][ T5492] ? preempt_schedule_irq+0xef/0x140 [ 3157.346193][ T5492] ? preempt_schedule_notrace+0x140/0x140 [ 3157.351892][ T5492] kernfs_new_node+0x97/0x170 [ 3157.356544][ T5492] __kernfs_create_file+0x4a/0x270 [ 3157.361631][ T5492] sysfs_add_file_mode_ns+0x273/0x320 [ 3157.366980][ T5492] sysfs_merge_group+0x207/0x460 [ 3157.371897][ T5492] ? sysfs_remove_groups+0xb0/0xb0 [ 3157.376983][ T5492] ? device_add_attrs+0x293/0x3e0 [ 3157.381983][ T5492] dpm_sysfs_add+0xcf/0x290 [ 3157.386461][ T5492] device_add+0x52c/0xbd0 [ 3157.390773][ T5492] device_create+0x258/0x2e0 [ 3157.395349][ T5492] ? sysvec_call_function_single+0xcb/0xe0 [ 3157.401128][ T5492] ? root_device_unregister+0x80/0x80 [ 3157.406477][ T5492] ? number+0xd9b/0x1040 [ 3157.410693][ T5492] bdi_register_va+0x94/0x600 [ 3157.415346][ T5492] bdi_register+0xd1/0x120 [ 3157.419751][ T5492] ? __device_add_disk+0x536/0x11d0 [ 3157.424922][ T5492] ? bdi_register_va+0x600/0x600 [ 3157.429831][ T5492] ? vsnprintf+0x1bfd/0x1cd0 [ 3157.434395][ T5492] ? __kasan_check_read+0x11/0x20 [ 3157.439393][ T5492] ? blk_alloc_devt+0xd4/0x320 [ 3157.444130][ T5492] __device_add_disk+0x5cb/0x11d0 [ 3157.449147][ T5492] ? device_add_disk+0x40/0x40 [ 3157.453885][ T5492] ? loop_add+0x400/0x760 [ 3157.458187][ T5492] ? vsprintf+0x40/0x40 [ 3157.462341][ T5492] device_add_disk+0x2a/0x40 [ 3157.466909][ T5492] loop_add+0x58f/0x760 [ 3157.471040][ T5492] loop_control_ioctl+0x564/0x740 [ 3157.476044][ T5492] ? loop_remove+0xb0/0xb0 [ 3157.480436][ T5492] ? __fget_files+0x310/0x370 [ 3157.485089][ T5492] ? security_file_ioctl+0xb1/0xd0 [ 3157.490176][ T5492] ? loop_remove+0xb0/0xb0 [ 3157.494570][ T5492] __se_sys_ioctl+0x115/0x190 [ 3157.499238][ T5492] __x64_sys_ioctl+0x7b/0x90 [ 3157.503805][ T5492] do_syscall_64+0x34/0x70 [ 3157.508197][ T5492] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3157.514060][ T5492] RIP: 0033:0x7f42b4f940c9 [ 3157.518451][ T5492] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3157.538029][ T5492] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3157.546415][ T5492] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3157.554362][ T5492] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3157.562307][ T5492] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.570254][ T5492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3157.578201][ T5492] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3157.587323][ T5492] ------------[ cut here ]------------ [ 3157.592834][ T5492] WARNING: CPU: 0 PID: 5492 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3157.601872][ T5492] Modules linked in: [ 3157.605972][ T5492] CPU: 0 PID: 5492 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3157.617704][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3157.627808][ T5492] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3157.633632][ T5492] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3157.653326][ T5492] RSP: 0018:ffffc90003197bc0 EFLAGS: 00010283 [ 3157.659419][ T5492] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3157.667397][ T5492] RDX: ffffc90003d81000 RSI: 0000000000033049 RDI: 000000000003304a [ 3157.675390][ T5492] RBP: ffffc90003197d08 R08: ffffffff82412a76 R09: ffffc90003197610 [ 3157.683389][ T5492] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3157.691381][ T5492] R13: ffff88811894c000 R14: ffff888118948338 R15: ffff888118948000 [ 3157.700075][ T5492] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3157.709034][ T5492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3157.715635][ T5492] CR2: 00007f42b3cc4ff8 CR3: 0000000113203000 CR4: 00000000003506b0 [ 3157.723639][ T5492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3157.731631][ T5492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3157.739620][ T5492] Call Trace: [ 3157.742929][ T5492] ? device_add_disk+0x40/0x40 [ 3157.747697][ T5492] ? loop_add+0x400/0x760 [ 3157.752039][ T5492] ? vsprintf+0x40/0x40 [ 3157.756204][ T5492] device_add_disk+0x2a/0x40 [ 3157.761005][ T5492] loop_add+0x58f/0x760 [ 3157.765341][ T5492] loop_control_ioctl+0x564/0x740 [ 3157.770385][ T5492] ? loop_remove+0xb0/0xb0 [ 3157.774839][ T5492] ? __fget_files+0x310/0x370 [ 3157.779548][ T5492] ? security_file_ioctl+0xb1/0xd0 [ 3157.784667][ T5492] ? loop_remove+0xb0/0xb0 [ 3157.789099][ T5492] __se_sys_ioctl+0x115/0x190 [ 3157.793784][ T5492] __x64_sys_ioctl+0x7b/0x90 [ 3157.798408][ T5492] do_syscall_64+0x34/0x70 [ 3157.802834][ T5492] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3157.808747][ T5492] RIP: 0033:0x7f42b4f940c9 [ 3157.813169][ T5492] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3157.832842][ T5492] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3157.841376][ T5492] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3157.849365][ T5492] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3157.857342][ T5492] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.865348][ T5492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3157.873340][ T5492] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3157.881346][ T5492] ---[ end trace 66cfa9b859026dc5 ]--- 01:13:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x68000000}}, 0x20}}, 0x0) 01:13:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xffffff9e}, 0x0) 01:13:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 53) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 01:13:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0xa}}, 0x20}}, 0x0) [ 3158.108939][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3158.144671][ T5495] device bridge551 entered promiscuous mode [ 3158.160555][ T5499] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3158.240926][ T5508] FAULT_INJECTION: forcing a failure. [ 3158.240926][ T5508] name failslab, interval 1, probability 0, space 0, times 0 [ 3158.253551][ T5508] CPU: 0 PID: 5508 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3158.265155][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3158.275187][ T5508] Call Trace: [ 3158.278457][ T5508] dump_stack_lvl+0x1e2/0x24b [ 3158.283107][ T5508] ? panic+0x7d7/0x7d7 [ 3158.287152][ T5508] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3158.292601][ T5508] ? ___ratelimit+0x4a9/0x600 [ 3158.297365][ T5508] dump_stack+0x15/0x17 [ 3158.301505][ T5508] should_fail+0x3c0/0x510 [ 3158.305899][ T5508] __should_failslab+0x9f/0xe0 [ 3158.310640][ T5508] should_failslab+0x9/0x20 [ 3158.315117][ T5508] kmem_cache_alloc+0x3f/0x300 [ 3158.319857][ T5508] ? __kernfs_new_node+0xdb/0x6e0 [ 3158.324859][ T5508] ? preempt_schedule_notrace+0x140/0x140 [ 3158.330556][ T5508] __kernfs_new_node+0xdb/0x6e0 [ 3158.335383][ T5508] ? __kasan_check_write+0x14/0x20 [ 3158.340554][ T5508] ? mutex_lock+0xb2/0x1e0 [ 3158.344944][ T5508] ? mutex_trylock+0x180/0x180 [ 3158.349686][ T5508] ? kernfs_new_node+0x170/0x170 [ 3158.354600][ T5508] ? __kasan_check_write+0x14/0x20 [ 3158.359684][ T5508] ? mutex_unlock+0x29/0xf0 [ 3158.364161][ T5508] ? kernfs_activate+0x409/0x420 [ 3158.369077][ T5508] kernfs_new_node+0x97/0x170 [ 3158.373729][ T5508] __kernfs_create_file+0x4a/0x270 [ 3158.378815][ T5508] sysfs_add_file_mode_ns+0x273/0x320 [ 3158.384164][ T5508] sysfs_merge_group+0x207/0x460 [ 3158.389075][ T5508] ? sysfs_remove_groups+0xb0/0xb0 [ 3158.394160][ T5508] ? device_add_attrs+0x2ce/0x3e0 [ 3158.399157][ T5508] ? device_add_attrs+0x35b/0x3e0 [ 3158.404153][ T5508] dpm_sysfs_add+0xcf/0x290 [ 3158.408627][ T5508] device_add+0x52c/0xbd0 [ 3158.412932][ T5508] device_create+0x258/0x2e0 [ 3158.417499][ T5508] ? root_device_unregister+0x80/0x80 [ 3158.422844][ T5508] ? number+0x2d7/0x1040 [ 3158.427058][ T5508] ? number+0xd9b/0x1040 [ 3158.431275][ T5508] bdi_register_va+0x94/0x600 [ 3158.435923][ T5508] bdi_register+0xd1/0x120 [ 3158.440316][ T5508] ? irqentry_exit+0x50/0x60 [ 3158.444882][ T5508] ? __device_add_disk+0x536/0x11d0 [ 3158.450165][ T5508] ? bdi_register_va+0x600/0x600 [ 3158.455102][ T5508] __device_add_disk+0x5cb/0x11d0 [ 3158.460113][ T5508] ? device_add_disk+0x40/0x40 [ 3158.464867][ T5508] ? loop_add+0x400/0x760 [ 3158.469174][ T5508] ? vsprintf+0x40/0x40 [ 3158.473306][ T5508] ? device_initialize+0x2cc/0x3a0 [ 3158.478400][ T5508] device_add_disk+0x2a/0x40 [ 3158.482971][ T5508] loop_add+0x58f/0x760 [ 3158.487107][ T5508] loop_control_ioctl+0x564/0x740 [ 3158.492112][ T5508] ? loop_remove+0xb0/0xb0 [ 3158.496515][ T5508] ? __fget_files+0x310/0x370 [ 3158.501173][ T5508] ? security_file_ioctl+0xb1/0xd0 [ 3158.506259][ T5508] ? loop_remove+0xb0/0xb0 [ 3158.510648][ T5508] __se_sys_ioctl+0x115/0x190 [ 3158.515299][ T5508] __x64_sys_ioctl+0x7b/0x90 [ 3158.519866][ T5508] do_syscall_64+0x34/0x70 [ 3158.524256][ T5508] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3158.530119][ T5508] RIP: 0033:0x7f42b4f940c9 [ 3158.534510][ T5508] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3158.554090][ T5508] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3158.562480][ T5508] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3158.570429][ T5508] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3158.578385][ T5508] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3158.586431][ T5508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3158.594376][ T5508] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3158.603625][ T5508] ------------[ cut here ]------------ [ 3158.609128][ T5508] WARNING: CPU: 0 PID: 5508 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3158.618160][ T5508] Modules linked in: [ 3158.622091][ T5508] CPU: 0 PID: 5508 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3158.633729][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3158.643825][ T5508] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3158.649649][ T5508] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3158.669321][ T5508] RSP: 0018:ffffc90003267bc0 EFLAGS: 00010287 [ 3158.675420][ T5508] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3158.683421][ T5508] RDX: ffffc90003d81000 RSI: 00000000000341f9 RDI: 00000000000341fa [ 3158.691412][ T5508] RBP: ffffc90003267d08 R08: ffffffff82412a76 R09: ffffc90003267610 [ 3158.699410][ T5508] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3158.707386][ T5508] R13: ffff888119f74000 R14: ffff888119f72338 R15: ffff888119f72000 [ 3158.715386][ T5508] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3158.724334][ T5508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3158.730932][ T5508] CR2: 00007f42b3cc4ff8 CR3: 0000000111b8b000 CR4: 00000000003506b0 [ 3158.738937][ T5508] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3158.746915][ T5508] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3158.754901][ T5508] Call Trace: [ 3158.758236][ T5508] ? device_add_disk+0x40/0x40 [ 3158.763031][ T5508] ? loop_add+0x400/0x760 [ 3158.767370][ T5508] ? vsprintf+0x40/0x40 [ 3158.771548][ T5508] ? device_initialize+0x2cc/0x3a0 [ 3158.776665][ T5508] device_add_disk+0x2a/0x40 [ 3158.781281][ T5508] loop_add+0x58f/0x760 [ 3158.785446][ T5508] loop_control_ioctl+0x564/0x740 [ 3158.790507][ T5508] ? loop_remove+0xb0/0xb0 [ 3158.795032][ T5508] ? __fget_files+0x310/0x370 [ 3158.799733][ T5508] ? security_file_ioctl+0xb1/0xd0 [ 3158.804853][ T5508] ? loop_remove+0xb0/0xb0 [ 3158.809300][ T5508] __se_sys_ioctl+0x115/0x190 [ 3158.813982][ T5508] __x64_sys_ioctl+0x7b/0x90 [ 3158.818644][ T5508] do_syscall_64+0x34/0x70 [ 3158.823067][ T5508] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3158.828977][ T5508] RIP: 0033:0x7f42b4f940c9 [ 3158.833398][ T5508] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3158.853148][ T5508] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3158.861609][ T5508] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3158.869600][ T5508] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3158.877578][ T5508] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3158.885859][ T5508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3158.893848][ T5508] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3158.902116][ T5508] ---[ end trace 66cfa9b859026dc6 ]--- [ 3158.932966][ T5499] device bridge79 entered promiscuous mode 01:13:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 54) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3159.077463][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3159.105823][ T5501] device bridge90 entered promiscuous mode [ 3159.113467][ T5504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3159.140390][ T5504] device bridge514 entered promiscuous mode [ 3159.221452][ T5516] FAULT_INJECTION: forcing a failure. [ 3159.221452][ T5516] name failslab, interval 1, probability 0, space 0, times 0 [ 3159.234891][ T5516] CPU: 0 PID: 5516 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3159.246513][ T5516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3159.256555][ T5516] Call Trace: [ 3159.259830][ T5516] dump_stack_lvl+0x1e2/0x24b [ 3159.264490][ T5516] ? panic+0x7d7/0x7d7 [ 3159.268539][ T5516] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3159.273991][ T5516] ? compat_start_thread+0x80/0x80 [ 3159.279090][ T5516] dump_stack+0x15/0x17 [ 3159.283229][ T5516] should_fail+0x3c0/0x510 [ 3159.287626][ T5516] __should_failslab+0x9f/0xe0 [ 3159.292369][ T5516] should_failslab+0x9/0x20 [ 3159.296847][ T5516] kmem_cache_alloc+0x3f/0x300 [ 3159.301698][ T5516] ? __switch_to_asm+0x34/0x60 [ 3159.306455][ T5516] ? __kernfs_new_node+0xdb/0x6e0 [ 3159.311467][ T5516] __kernfs_new_node+0xdb/0x6e0 [ 3159.316315][ T5516] ? release_firmware_map_entry+0x194/0x194 [ 3159.322192][ T5516] ? kernfs_new_node+0x170/0x170 [ 3159.327115][ T5516] ? __kasan_check_read+0x11/0x20 [ 3159.332127][ T5516] ? preempt_schedule_irq+0xef/0x140 [ 3159.337393][ T5516] ? preempt_schedule_notrace+0x140/0x140 [ 3159.343096][ T5516] kernfs_new_node+0x97/0x170 [ 3159.347760][ T5516] __kernfs_create_file+0x4a/0x270 [ 3159.352847][ T5516] sysfs_add_file_mode_ns+0x273/0x320 [ 3159.358197][ T5516] sysfs_merge_group+0x207/0x460 [ 3159.363112][ T5516] ? sysfs_remove_groups+0xb0/0xb0 [ 3159.368197][ T5516] dpm_sysfs_add+0xcf/0x290 [ 3159.372684][ T5516] device_add+0x52c/0xbd0 [ 3159.376986][ T5516] device_create+0x258/0x2e0 [ 3159.381559][ T5516] ? root_device_unregister+0x80/0x80 [ 3159.386905][ T5516] bdi_register_va+0x94/0x600 [ 3159.391556][ T5516] bdi_register+0xd1/0x120 [ 3159.395945][ T5516] ? irqentry_exit+0x50/0x60 [ 3159.400510][ T5516] ? sysvec_reschedule_ipi+0x84/0x160 [ 3159.405857][ T5516] ? __device_add_disk+0x536/0x11d0 [ 3159.411030][ T5516] ? bdi_register_va+0x600/0x600 [ 3159.415943][ T5516] ? __device_add_disk+0x536/0x11d0 [ 3159.421121][ T5516] __device_add_disk+0x5cb/0x11d0 [ 3159.426123][ T5516] ? device_add_disk+0x40/0x40 [ 3159.430861][ T5516] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3159.436468][ T5516] device_add_disk+0x2a/0x40 [ 3159.441034][ T5516] loop_add+0x58f/0x760 [ 3159.445164][ T5516] loop_control_ioctl+0x564/0x740 [ 3159.450159][ T5516] ? loop_remove+0xb0/0xb0 [ 3159.454547][ T5516] ? __fget_files+0x310/0x370 [ 3159.459198][ T5516] ? security_file_ioctl+0xb1/0xd0 [ 3159.464283][ T5516] ? loop_remove+0xb0/0xb0 [ 3159.468672][ T5516] __se_sys_ioctl+0x115/0x190 [ 3159.473325][ T5516] __x64_sys_ioctl+0x7b/0x90 [ 3159.477886][ T5516] do_syscall_64+0x34/0x70 [ 3159.482398][ T5516] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3159.488279][ T5516] RIP: 0033:0x7f42b4f940c9 [ 3159.492678][ T5516] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3159.512275][ T5516] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3159.520673][ T5516] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3159.528635][ T5516] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3159.536593][ T5516] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3159.544551][ T5516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3159.552499][ T5516] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3159.561785][ T5516] ------------[ cut here ]------------ [ 3159.567306][ T5516] WARNING: CPU: 0 PID: 5516 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3159.576365][ T5516] Modules linked in: [ 3159.580320][ T5516] CPU: 0 PID: 5516 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3159.591974][ T5516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3159.602084][ T5516] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3159.607901][ T5516] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3159.627757][ T5516] RSP: 0018:ffffc900031d7bc0 EFLAGS: 00010287 [ 3159.633872][ T5516] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3159.641881][ T5516] RDX: ffffc90003d81000 RSI: 0000000000030ac2 RDI: 0000000000030ac3 [ 3159.649934][ T5516] RBP: ffffc900031d7d08 R08: ffffffff82412a76 R09: ffffc900031d7610 [ 3159.657935][ T5516] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3159.666130][ T5516] R13: ffff88810adb9000 R14: ffff88810adb8338 R15: ffff88810adb8000 [ 3159.674179][ T5516] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3159.683147][ T5516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3159.689768][ T5516] CR2: 00007f42b3cc4ff8 CR3: 000000011b680000 CR4: 00000000003506b0 [ 3159.697773][ T5516] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3159.705777][ T5516] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3159.713782][ T5516] Call Trace: [ 3159.717085][ T5516] ? device_add_disk+0x40/0x40 [ 3159.721886][ T5516] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3159.727536][ T5516] device_add_disk+0x2a/0x40 [ 3159.732154][ T5516] loop_add+0x58f/0x760 [ 3159.736319][ T5516] loop_control_ioctl+0x564/0x740 [ 3159.741363][ T5516] ? loop_remove+0xb0/0xb0 [ 3159.745789][ T5516] ? __fget_files+0x310/0x370 [ 3159.750491][ T5516] ? security_file_ioctl+0xb1/0xd0 [ 3159.755608][ T5516] ? loop_remove+0xb0/0xb0 [ 3159.760044][ T5516] __se_sys_ioctl+0x115/0x190 [ 3159.764728][ T5516] __x64_sys_ioctl+0x7b/0x90 [ 3159.769361][ T5516] do_syscall_64+0x34/0x70 [ 3159.773786][ T5516] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3159.779695][ T5516] RIP: 0033:0x7f42b4f940c9 [ 3159.784122][ T5516] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3159.803784][ T5516] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3159.812248][ T5516] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3159.820241][ T5516] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3159.828251][ T5516] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3159.836232][ T5516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3159.844230][ T5516] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3159.852243][ T5516] ---[ end trace 66cfa9b859026dc7 ]--- 01:13:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 55) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3160.229402][ T5521] FAULT_INJECTION: forcing a failure. [ 3160.229402][ T5521] name failslab, interval 1, probability 0, space 0, times 0 [ 3160.242064][ T5521] CPU: 0 PID: 5521 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3160.253668][ T5521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3160.263699][ T5521] Call Trace: [ 3160.266968][ T5521] dump_stack_lvl+0x1e2/0x24b [ 3160.271621][ T5521] ? panic+0x7d7/0x7d7 [ 3160.275771][ T5521] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3160.281213][ T5521] ? finish_task_switch+0x130/0x580 [ 3160.286397][ T5521] dump_stack+0x15/0x17 [ 3160.290551][ T5521] should_fail+0x3c0/0x510 [ 3160.294980][ T5521] __should_failslab+0x9f/0xe0 [ 3160.299727][ T5521] should_failslab+0x9/0x20 [ 3160.304211][ T5521] kmem_cache_alloc+0x3f/0x300 [ 3160.308955][ T5521] ? __kernfs_new_node+0xdb/0x6e0 [ 3160.313961][ T5521] __kernfs_new_node+0xdb/0x6e0 [ 3160.318797][ T5521] ? __kasan_check_write+0x14/0x20 [ 3160.323885][ T5521] ? mutex_lock+0xb2/0x1e0 [ 3160.328288][ T5521] ? mutex_trylock+0x180/0x180 [ 3160.333030][ T5521] ? kernfs_new_node+0x170/0x170 [ 3160.337995][ T5521] ? __kasan_check_write+0x14/0x20 [ 3160.343089][ T5521] ? mutex_unlock+0x29/0xf0 [ 3160.347587][ T5521] ? kernfs_activate+0x409/0x420 [ 3160.352517][ T5521] kernfs_new_node+0x97/0x170 [ 3160.357179][ T5521] __kernfs_create_file+0x4a/0x270 [ 3160.362302][ T5521] sysfs_add_file_mode_ns+0x273/0x320 [ 3160.367657][ T5521] sysfs_merge_group+0x207/0x460 [ 3160.372577][ T5521] ? sysfs_remove_groups+0xb0/0xb0 [ 3160.377669][ T5521] dpm_sysfs_add+0xcf/0x290 [ 3160.382150][ T5521] device_add+0x52c/0xbd0 [ 3160.386456][ T5521] device_create+0x258/0x2e0 [ 3160.391026][ T5521] ? root_device_unregister+0x80/0x80 [ 3160.396373][ T5521] ? irqentry_exit+0x50/0x60 [ 3160.400939][ T5521] ? sysvec_reschedule_ipi+0x84/0x160 [ 3160.406293][ T5521] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3160.411903][ T5521] bdi_register_va+0x94/0x600 [ 3160.416568][ T5521] bdi_register+0xd1/0x120 [ 3160.420964][ T5521] ? __device_add_disk+0x536/0x11d0 [ 3160.426139][ T5521] ? bdi_register_va+0x600/0x600 [ 3160.431054][ T5521] ? vsnprintf+0x1bfd/0x1cd0 [ 3160.435623][ T5521] ? __kasan_check_read+0x11/0x20 [ 3160.440626][ T5521] ? blk_alloc_devt+0xd4/0x320 [ 3160.445375][ T5521] __device_add_disk+0x5cb/0x11d0 [ 3160.450379][ T5521] ? device_add_disk+0x40/0x40 [ 3160.455126][ T5521] ? loop_add+0x400/0x760 [ 3160.459433][ T5521] ? vsprintf+0x40/0x40 [ 3160.463571][ T5521] device_add_disk+0x2a/0x40 [ 3160.468228][ T5521] loop_add+0x58f/0x760 [ 3160.472365][ T5521] loop_control_ioctl+0x564/0x740 [ 3160.477364][ T5521] ? loop_remove+0xb0/0xb0 [ 3160.481761][ T5521] ? __fget_files+0x310/0x370 [ 3160.486418][ T5521] ? security_file_ioctl+0xb1/0xd0 [ 3160.491511][ T5521] ? loop_remove+0xb0/0xb0 [ 3160.495908][ T5521] __se_sys_ioctl+0x115/0x190 [ 3160.500561][ T5521] __x64_sys_ioctl+0x7b/0x90 [ 3160.505126][ T5521] do_syscall_64+0x34/0x70 [ 3160.509522][ T5521] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3160.515389][ T5521] RIP: 0033:0x7f42b4f940c9 [ 3160.519793][ T5521] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3160.539375][ T5521] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3160.547764][ T5521] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3160.555711][ T5521] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3160.563660][ T5521] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3160.571609][ T5521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3160.579560][ T5521] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3160.588387][ T5521] ------------[ cut here ]------------ [ 3160.593881][ T5521] WARNING: CPU: 0 PID: 5521 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 3160.602920][ T5521] Modules linked in: [ 3160.606859][ T5521] CPU: 0 PID: 5521 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3160.618505][ T5521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3160.628598][ T5521] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 3160.634415][ T5521] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 3160.654190][ T5521] RSP: 0018:ffffc900031b7bc0 EFLAGS: 00010287 [ 3160.660289][ T5521] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 3160.668286][ T5521] RDX: ffffc90003d81000 RSI: 000000000003306b RDI: 000000000003306c [ 3160.676269][ T5521] RBP: ffffc900031b7d08 R08: ffffffff82412a76 R09: ffffc900031b7610 [ 3160.684303][ T5521] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 3160.692304][ T5521] R13: ffff88816c5d6000 R14: ffff888185f30338 R15: ffff888185f30000 [ 3160.700302][ T5521] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3160.709272][ T5521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3160.715865][ T5521] CR2: 00007f42b3cc4ff8 CR3: 000000018af7f000 CR4: 00000000003506b0 [ 3160.723887][ T5521] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3160.731881][ T5521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3160.739901][ T5521] Call Trace: [ 3160.743218][ T5521] ? device_add_disk+0x40/0x40 [ 3160.747998][ T5521] ? loop_add+0x400/0x760 [ 3160.752356][ T5521] ? vsprintf+0x40/0x40 [ 3160.756527][ T5521] device_add_disk+0x2a/0x40 [ 3160.761141][ T5521] loop_add+0x58f/0x760 [ 3160.765307][ T5521] loop_control_ioctl+0x564/0x740 [ 3160.770368][ T5521] ? loop_remove+0xb0/0xb0 [ 3160.774794][ T5521] ? __fget_files+0x310/0x370 [ 3160.779494][ T5521] ? security_file_ioctl+0xb1/0xd0 [ 3160.784621][ T5521] ? loop_remove+0xb0/0xb0 [ 3160.789063][ T5521] __se_sys_ioctl+0x115/0x190 [ 3160.793783][ T5521] __x64_sys_ioctl+0x7b/0x90 [ 3160.798393][ T5521] do_syscall_64+0x34/0x70 [ 3160.802830][ T5521] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3160.808743][ T5521] RIP: 0033:0x7f42b4f940c9 [ 3160.813167][ T5521] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3160.832830][ T5521] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3160.841283][ T5521] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3160.849278][ T5521] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3160.857259][ T5521] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3160.865252][ T5521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3160.873250][ T5521] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3160.881260][ T5521] ---[ end trace 66cfa9b859026dc8 ]--- 01:13:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 56) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x6c000000}}, 0x20}}, 0x0) 01:13:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0xb}}, 0x20}}, 0x0) [ 3161.121915][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3161.209496][ T5533] FAULT_INJECTION: forcing a failure. [ 3161.209496][ T5533] name failslab, interval 1, probability 0, space 0, times 0 [ 3161.222174][ T5533] CPU: 0 PID: 5533 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3161.233782][ T5533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3161.243825][ T5533] Call Trace: [ 3161.247110][ T5533] dump_stack_lvl+0x1e2/0x24b [ 3161.251769][ T5533] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3161.257215][ T5533] dump_stack+0x15/0x17 [ 3161.261355][ T5533] should_fail+0x3c0/0x510 [ 3161.265754][ T5533] ? kobject_uevent_env+0x26c/0x730 [ 3161.270931][ T5533] __should_failslab+0x9f/0xe0 [ 3161.275674][ T5533] should_failslab+0x9/0x20 [ 3161.280156][ T5533] kmem_cache_alloc_trace+0x3a/0x330 [ 3161.285448][ T5533] ? irqentry_exit+0x50/0x60 [ 3161.290031][ T5533] ? sysvec_reschedule_ipi+0x84/0x160 [ 3161.295392][ T5533] ? dev_uevent_filter+0xb0/0xb0 [ 3161.300323][ T5533] kobject_uevent_env+0x26c/0x730 [ 3161.305339][ T5533] kobject_uevent+0x1f/0x30 [ 3161.309824][ T5533] device_add+0x79c/0xbd0 [ 3161.314136][ T5533] device_create+0x258/0x2e0 [ 3161.318733][ T5533] ? root_device_unregister+0x80/0x80 [ 3161.324091][ T5533] ? __kasan_check_read+0x11/0x20 [ 3161.329097][ T5533] ? preempt_schedule_irq+0xef/0x140 [ 3161.334363][ T5533] ? preempt_schedule_notrace+0x140/0x140 [ 3161.340060][ T5533] bdi_register_va+0x94/0x600 [ 3161.344715][ T5533] bdi_register+0xd1/0x120 [ 3161.349110][ T5533] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3161.354723][ T5533] ? __device_add_disk+0x536/0x11d0 [ 3161.359896][ T5533] ? bdi_register_va+0x600/0x600 [ 3161.364817][ T5533] ? blk_alloc_devt+0x123/0x320 [ 3161.369643][ T5533] __device_add_disk+0x5cb/0x11d0 [ 3161.374739][ T5533] ? device_add_disk+0x40/0x40 [ 3161.379487][ T5533] ? loop_add+0x400/0x760 [ 3161.383793][ T5533] ? vsprintf+0x40/0x40 [ 3161.387942][ T5533] device_add_disk+0x2a/0x40 [ 3161.392515][ T5533] loop_add+0x58f/0x760 [ 3161.396654][ T5533] loop_control_ioctl+0x564/0x740 [ 3161.401654][ T5533] ? loop_remove+0xb0/0xb0 [ 3161.406045][ T5533] ? irqentry_exit+0x50/0x60 [ 3161.410618][ T5533] ? sysvec_reschedule_ipi+0x84/0x160 [ 3161.415973][ T5533] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3161.421668][ T5533] ? loop_remove+0xb0/0xb0 [ 3161.426060][ T5533] __se_sys_ioctl+0x115/0x190 [ 3161.430715][ T5533] __x64_sys_ioctl+0x7b/0x90 [ 3161.435283][ T5533] do_syscall_64+0x34/0x70 [ 3161.439767][ T5533] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3161.445637][ T5533] RIP: 0033:0x7f42b4f940c9 [ 3161.450036][ T5533] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3161.469615][ T5533] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3161.478018][ T5533] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3161.485967][ T5533] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3161.493918][ T5533] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3161.501864][ T5533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3161.509811][ T5533] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3161.535126][ T5527] device bridge79 entered promiscuous mode [ 3161.590273][ T5529] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 01:13:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 3161.720167][ T5529] device bridge90 entered promiscuous mode [ 3161.809911][ T5538] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3161.846487][ T5538] device bridge514 entered promiscuous mode 01:13:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 57) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3162.071079][ T5543] FAULT_INJECTION: forcing a failure. [ 3162.071079][ T5543] name failslab, interval 1, probability 0, space 0, times 0 [ 3162.083736][ T5543] CPU: 0 PID: 5543 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3162.095343][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3162.105378][ T5543] Call Trace: [ 3162.108649][ T5543] dump_stack_lvl+0x1e2/0x24b [ 3162.113306][ T5543] ? panic+0x7d7/0x7d7 [ 3162.117354][ T5543] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3162.122787][ T5543] dump_stack+0x15/0x17 [ 3162.126929][ T5543] should_fail+0x3c0/0x510 [ 3162.131324][ T5543] ? kobject_get_path+0xb8/0x1a0 [ 3162.136237][ T5543] __should_failslab+0x9f/0xe0 [ 3162.141848][ T5543] should_failslab+0x9/0x20 [ 3162.146328][ T5543] __kmalloc+0x60/0x360 [ 3162.150467][ T5543] kobject_get_path+0xb8/0x1a0 [ 3162.155209][ T5543] kobject_uevent_env+0x282/0x730 [ 3162.160230][ T5543] ? __kasan_check_write+0x14/0x20 [ 3162.165320][ T5543] kobject_uevent+0x1f/0x30 [ 3162.169804][ T5543] device_add+0x79c/0xbd0 [ 3162.174113][ T5543] device_create+0x258/0x2e0 [ 3162.178684][ T5543] ? root_device_unregister+0x80/0x80 [ 3162.184035][ T5543] ? sysvec_reschedule_ipi+0x84/0x160 [ 3162.189409][ T5543] bdi_register_va+0x94/0x600 [ 3162.194063][ T5543] bdi_register+0xd1/0x120 [ 3162.198459][ T5543] ? __device_add_disk+0x536/0x11d0 [ 3162.203636][ T5543] ? bdi_register_va+0x600/0x600 [ 3162.208554][ T5543] ? __kasan_check_read+0x11/0x20 [ 3162.213560][ T5543] ? blk_alloc_devt+0xd4/0x320 [ 3162.218392][ T5543] __device_add_disk+0x5cb/0x11d0 [ 3162.223396][ T5543] ? device_add_disk+0x40/0x40 [ 3162.228141][ T5543] ? sysvec_reschedule_ipi+0x84/0x160 [ 3162.233489][ T5543] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3162.239100][ T5543] ? vsnprintf+0x1bf3/0x1cd0 [ 3162.243665][ T5543] device_add_disk+0x2a/0x40 [ 3162.248235][ T5543] loop_add+0x58f/0x760 [ 3162.252388][ T5543] loop_control_ioctl+0x564/0x740 [ 3162.257392][ T5543] ? loop_remove+0xb0/0xb0 [ 3162.261788][ T5543] ? irqentry_exit+0x50/0x60 [ 3162.266356][ T5543] ? sysvec_reschedule_ipi+0x84/0x160 [ 3162.271705][ T5543] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3162.277320][ T5543] ? do_vfs_ioctl+0xf6/0x1a90 [ 3162.282062][ T5543] ? __se_sys_ioctl+0x109/0x190 [ 3162.286888][ T5543] ? loop_remove+0xb0/0xb0 [ 3162.291288][ T5543] __se_sys_ioctl+0x115/0x190 [ 3162.296026][ T5543] __x64_sys_ioctl+0x7b/0x90 [ 3162.300594][ T5543] do_syscall_64+0x34/0x70 [ 3162.304988][ T5543] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3162.310857][ T5543] RIP: 0033:0x7f42b4f940c9 [ 3162.315252][ T5543] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3162.334849][ T5543] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3162.343336][ T5543] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3162.351300][ T5543] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3162.359258][ T5543] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3162.367214][ T5543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3162.375202][ T5543] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:13:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xffffffc3}, 0x0) 01:13:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x74000000}}, 0x20}}, 0x0) 01:13:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0xc}}, 0x20}}, 0x0) 01:13:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x0) [ 3162.603966][ T5546] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3162.661539][ T5546] device bridge551 entered promiscuous mode [ 3162.678966][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3162.743561][ T5548] device bridge90 entered promiscuous mode [ 3162.759544][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 58) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3162.792339][ T5550] device bridge79 entered promiscuous mode [ 3162.824107][ T5552] device bridge514 entered promiscuous mode [ 3162.945753][ T5561] FAULT_INJECTION: forcing a failure. [ 3162.945753][ T5561] name failslab, interval 1, probability 0, space 0, times 0 [ 3162.958541][ T5561] CPU: 0 PID: 5561 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3162.970146][ T5561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3162.980179][ T5561] Call Trace: [ 3162.983452][ T5561] dump_stack_lvl+0x1e2/0x24b [ 3162.988108][ T5561] ? panic+0x7d7/0x7d7 [ 3162.992152][ T5561] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3162.997589][ T5561] dump_stack+0x15/0x17 [ 3163.001722][ T5561] should_fail+0x3c0/0x510 [ 3163.006117][ T5561] ? alloc_uevent_skb+0x7f/0x230 [ 3163.011032][ T5561] __should_failslab+0x9f/0xe0 [ 3163.015779][ T5561] should_failslab+0x9/0x20 [ 3163.020271][ T5561] __kmalloc_track_caller+0x5f/0x350 [ 3163.025538][ T5561] ? kmem_cache_alloc+0x1a4/0x300 [ 3163.030548][ T5561] ? __alloc_skb+0x7e/0x580 [ 3163.035026][ T5561] ? alloc_uevent_skb+0x7f/0x230 [ 3163.039940][ T5561] __alloc_skb+0xbe/0x580 [ 3163.044247][ T5561] alloc_uevent_skb+0x7f/0x230 [ 3163.048990][ T5561] kobject_uevent_net_broadcast+0x321/0x5a0 [ 3163.054858][ T5561] kobject_uevent_env+0x540/0x730 [ 3163.059860][ T5561] kobject_uevent+0x1f/0x30 [ 3163.064342][ T5561] device_add+0x79c/0xbd0 [ 3163.068651][ T5561] device_create+0x258/0x2e0 [ 3163.073220][ T5561] ? root_device_unregister+0x80/0x80 [ 3163.078571][ T5561] ? number+0xd9b/0x1040 [ 3163.082793][ T5561] bdi_register_va+0x94/0x600 [ 3163.087446][ T5561] bdi_register+0xd1/0x120 [ 3163.091843][ T5561] ? __device_add_disk+0x536/0x11d0 [ 3163.097021][ T5561] ? bdi_register_va+0x600/0x600 [ 3163.101938][ T5561] ? vsnprintf+0x1bfd/0x1cd0 [ 3163.106509][ T5561] ? __kasan_check_read+0x11/0x20 [ 3163.111508][ T5561] ? blk_alloc_devt+0xd4/0x320 [ 3163.116252][ T5561] __device_add_disk+0x5cb/0x11d0 [ 3163.121273][ T5561] ? device_add_disk+0x40/0x40 [ 3163.126013][ T5561] ? loop_add+0x400/0x760 [ 3163.130321][ T5561] ? vsprintf+0x40/0x40 [ 3163.134457][ T5561] device_add_disk+0x2a/0x40 [ 3163.139026][ T5561] loop_add+0x58f/0x760 [ 3163.143162][ T5561] loop_control_ioctl+0x564/0x740 [ 3163.148166][ T5561] ? loop_remove+0xb0/0xb0 [ 3163.152566][ T5561] ? __fget_files+0x310/0x370 [ 3163.157250][ T5561] ? security_file_ioctl+0xb1/0xd0 [ 3163.162360][ T5561] ? loop_remove+0xb0/0xb0 [ 3163.166763][ T5561] __se_sys_ioctl+0x115/0x190 [ 3163.171424][ T5561] __x64_sys_ioctl+0x7b/0x90 [ 3163.176016][ T5561] do_syscall_64+0x34/0x70 [ 3163.180419][ T5561] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3163.186295][ T5561] RIP: 0033:0x7f42b4f940c9 [ 3163.190695][ T5561] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3163.210278][ T5561] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3163.218674][ T5561] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3163.226621][ T5561] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3163.234577][ T5561] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3163.242528][ T5561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3163.250478][ T5561] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:13:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 59) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xffffffea}, 0x0) 01:13:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0xd}}, 0x20}}, 0x0) [ 3163.687444][ T5567] __nla_validate_parse: 1 callbacks suppressed [ 3163.687453][ T5567] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3163.743329][ T5567] device bridge551 entered promiscuous mode [ 3163.814657][ T5573] FAULT_INJECTION: forcing a failure. [ 3163.814657][ T5573] name failslab, interval 1, probability 0, space 0, times 0 [ 3163.827327][ T5573] CPU: 0 PID: 5573 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3163.838932][ T5573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3163.848963][ T5573] Call Trace: [ 3163.852235][ T5573] dump_stack_lvl+0x1e2/0x24b [ 3163.856895][ T5573] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3163.862329][ T5573] ? do_syscall_64+0x34/0x70 [ 3163.866901][ T5573] ? __kasan_check_read+0x11/0x20 [ 3163.871900][ T5573] dump_stack+0x15/0x17 [ 3163.876033][ T5573] should_fail+0x3c0/0x510 [ 3163.880429][ T5573] __should_failslab+0x9f/0xe0 [ 3163.885172][ T5573] should_failslab+0x9/0x20 [ 3163.889930][ T5573] kmem_cache_alloc+0x3f/0x300 [ 3163.894673][ T5573] ? skb_ext_add+0x13d/0x7e0 [ 3163.899243][ T5573] skb_ext_add+0x13d/0x7e0 [ 3163.903636][ T5573] ? kasan_unpoison+0x61/0x80 [ 3163.908294][ T5573] __alloc_skb+0x3c7/0x580 [ 3163.912692][ T5573] alloc_uevent_skb+0x7f/0x230 [ 3163.917435][ T5573] kobject_uevent_net_broadcast+0x321/0x5a0 [ 3163.923305][ T5573] kobject_uevent_env+0x540/0x730 [ 3163.928309][ T5573] kobject_uevent+0x1f/0x30 [ 3163.932796][ T5573] device_add+0x79c/0xbd0 [ 3163.937118][ T5573] device_create+0x258/0x2e0 [ 3163.941711][ T5573] ? root_device_unregister+0x80/0x80 [ 3163.947099][ T5573] ? __kasan_check_read+0x11/0x20 [ 3163.952112][ T5573] ? preempt_schedule_irq+0xef/0x140 [ 3163.957385][ T5573] ? preempt_schedule_notrace+0x140/0x140 [ 3163.963082][ T5573] bdi_register_va+0x94/0x600 [ 3163.967828][ T5573] bdi_register+0xd1/0x120 [ 3163.972224][ T5573] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3163.977836][ T5573] ? __device_add_disk+0x536/0x11d0 [ 3163.983009][ T5573] ? bdi_register_va+0x600/0x600 [ 3163.987924][ T5573] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 3163.993393][ T5573] ? blk_alloc_devt+0xd4/0x320 [ 3163.998147][ T5573] __device_add_disk+0x5cb/0x11d0 [ 3164.003163][ T5573] ? device_add_disk+0x40/0x40 [ 3164.007918][ T5573] ? loop_add+0x400/0x760 [ 3164.012234][ T5573] ? vsprintf+0x40/0x40 [ 3164.016373][ T5573] device_add_disk+0x2a/0x40 [ 3164.020941][ T5573] loop_add+0x58f/0x760 [ 3164.025082][ T5573] loop_control_ioctl+0x564/0x740 [ 3164.030086][ T5573] ? loop_remove+0xb0/0xb0 [ 3164.034482][ T5573] ? irqentry_exit+0x50/0x60 [ 3164.039051][ T5573] ? sysvec_reschedule_ipi+0x84/0x160 [ 3164.044401][ T5573] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3164.050013][ T5573] ? loop_remove+0xb0/0xb0 [ 3164.054409][ T5573] __se_sys_ioctl+0x115/0x190 [ 3164.059063][ T5573] __x64_sys_ioctl+0x7b/0x90 [ 3164.063979][ T5573] do_syscall_64+0x34/0x70 [ 3164.068374][ T5573] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3164.074260][ T5573] RIP: 0033:0x7f42b4f940c9 [ 3164.078662][ T5573] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3164.098261][ T5573] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3164.106661][ T5573] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3164.114611][ T5573] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3164.122564][ T5573] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3164.130511][ T5573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3164.138462][ T5573] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3164.231786][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 01:13:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) 01:13:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x7a000000}}, 0x20}}, 0x0) [ 3164.334614][ T5569] device bridge90 entered promiscuous mode 01:13:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 60) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3164.497015][ T5577] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3164.538506][ T5577] device bridge514 entered promiscuous mode [ 3164.557565][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3164.570799][ T5579] device bridge79 entered promiscuous mode [ 3164.661080][ T5586] FAULT_INJECTION: forcing a failure. [ 3164.661080][ T5586] name failslab, interval 1, probability 0, space 0, times 0 [ 3164.674402][ T5586] CPU: 0 PID: 5586 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3164.686024][ T5586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3164.696065][ T5586] Call Trace: [ 3164.699346][ T5586] dump_stack_lvl+0x1e2/0x24b [ 3164.704005][ T5586] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3164.709454][ T5586] dump_stack+0x15/0x17 [ 3164.713593][ T5586] should_fail+0x3c0/0x510 [ 3164.717987][ T5586] __should_failslab+0x9f/0xe0 [ 3164.722732][ T5586] should_failslab+0x9/0x20 [ 3164.727210][ T5586] kmem_cache_alloc+0x3f/0x300 [ 3164.731953][ T5586] ? skb_clone+0x1d6/0x3b0 [ 3164.736345][ T5586] skb_clone+0x1d6/0x3b0 [ 3164.740570][ T5586] netlink_broadcast_filtered+0x654/0x1200 [ 3164.746360][ T5586] netlink_broadcast+0x3a/0x50 [ 3164.751113][ T5586] kobject_uevent_net_broadcast+0x3b1/0x5a0 [ 3164.756982][ T5586] kobject_uevent_env+0x540/0x730 [ 3164.761983][ T5586] kobject_uevent+0x1f/0x30 [ 3164.766464][ T5586] device_add+0x79c/0xbd0 [ 3164.770812][ T5586] device_create+0x258/0x2e0 [ 3164.775381][ T5586] ? root_device_unregister+0x80/0x80 [ 3164.780731][ T5586] ? number+0x2e1/0x1040 [ 3164.784978][ T5586] ? number+0xd9b/0x1040 [ 3164.789994][ T5586] bdi_register_va+0x94/0x600 [ 3164.794646][ T5586] bdi_register+0xd1/0x120 [ 3164.799040][ T5586] ? irqentry_exit+0x50/0x60 [ 3164.803612][ T5586] ? __device_add_disk+0x536/0x11d0 [ 3164.808785][ T5586] ? bdi_register_va+0x600/0x600 [ 3164.813701][ T5586] __device_add_disk+0x5cb/0x11d0 [ 3164.818712][ T5586] ? device_add_disk+0x40/0x40 [ 3164.823454][ T5586] ? loop_add+0x400/0x760 [ 3164.828808][ T5586] ? vsprintf+0x40/0x40 [ 3164.832941][ T5586] device_add_disk+0x2a/0x40 [ 3164.837511][ T5586] loop_add+0x58f/0x760 [ 3164.841647][ T5586] loop_control_ioctl+0x564/0x740 [ 3164.846652][ T5586] ? loop_remove+0xb0/0xb0 [ 3164.851052][ T5586] ? __fget_files+0x310/0x370 [ 3164.855716][ T5586] ? security_file_ioctl+0xb1/0xd0 [ 3164.860891][ T5586] ? loop_remove+0xb0/0xb0 [ 3164.865284][ T5586] __se_sys_ioctl+0x115/0x190 [ 3164.870024][ T5586] __x64_sys_ioctl+0x7b/0x90 [ 3164.874590][ T5586] do_syscall_64+0x34/0x70 [ 3164.878985][ T5586] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3164.884850][ T5586] RIP: 0033:0x7f42b4f940c9 [ 3164.889244][ T5586] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3164.908824][ T5586] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3164.917216][ T5586] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3164.925167][ T5586] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3164.933114][ T5586] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3164.941064][ T5586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3164.949013][ T5586] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:13:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xffffffef}, 0x0) 01:13:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0xe}}, 0x20}}, 0x0) [ 3165.163473][ T5589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3165.182220][ T5589] device bridge551 entered promiscuous mode [ 3165.196707][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 01:13:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 3165.215715][ T5591] device bridge90 entered promiscuous mode 01:13:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 61) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3165.352416][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:13:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xfffffff0}, 0x0) [ 3165.402120][ T5594] device bridge514 entered promiscuous mode 01:13:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x81000000}}, 0x20}}, 0x0) [ 3165.502074][ T5599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3165.526089][ T5602] FAULT_INJECTION: forcing a failure. [ 3165.526089][ T5602] name failslab, interval 1, probability 0, space 0, times 0 [ 3165.540424][ T5602] CPU: 0 PID: 5602 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3165.552128][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3165.562165][ T5602] Call Trace: [ 3165.565436][ T5602] dump_stack_lvl+0x1e2/0x24b [ 3165.570089][ T5602] ? panic+0x7d7/0x7d7 [ 3165.574144][ T5602] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3165.579583][ T5602] ? irqentry_exit+0x50/0x60 [ 3165.584152][ T5602] dump_stack+0x15/0x17 [ 3165.588284][ T5602] should_fail+0x3c0/0x510 [ 3165.592675][ T5602] ? alloc_uevent_skb+0x7f/0x230 [ 3165.597586][ T5602] __should_failslab+0x9f/0xe0 [ 3165.602325][ T5602] should_failslab+0x9/0x20 [ 3165.606826][ T5602] __kmalloc_track_caller+0x5f/0x350 [ 3165.612085][ T5602] ? kmem_cache_alloc+0x1a4/0x300 [ 3165.617096][ T5602] ? __alloc_skb+0x7e/0x580 [ 3165.621575][ T5602] ? alloc_uevent_skb+0x7f/0x230 [ 3165.626486][ T5602] __alloc_skb+0xbe/0x580 [ 3165.630794][ T5602] alloc_uevent_skb+0x7f/0x230 [ 3165.635535][ T5602] kobject_uevent_net_broadcast+0x321/0x5a0 [ 3165.641406][ T5602] kobject_uevent_env+0x540/0x730 [ 3165.646407][ T5602] kobject_uevent+0x1f/0x30 [ 3165.650955][ T5602] device_add+0x79c/0xbd0 [ 3165.655289][ T5602] device_create+0x258/0x2e0 [ 3165.659857][ T5602] ? root_device_unregister+0x80/0x80 [ 3165.665214][ T5602] ? __kasan_check_read+0x11/0x20 [ 3165.670216][ T5602] ? preempt_schedule_irq+0xef/0x140 [ 3165.675496][ T5602] ? preempt_schedule_notrace+0x140/0x140 [ 3165.681199][ T5602] bdi_register_va+0x94/0x600 [ 3165.685860][ T5602] bdi_register+0xd1/0x120 [ 3165.690353][ T5602] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3165.695974][ T5602] ? __device_add_disk+0x536/0x11d0 [ 3165.701163][ T5602] ? bdi_register_va+0x600/0x600 [ 3165.706085][ T5602] ? blk_alloc_devt+0xe7/0x320 [ 3165.710951][ T5602] __device_add_disk+0x5cb/0x11d0 [ 3165.716144][ T5602] ? device_add_disk+0x40/0x40 [ 3165.720901][ T5602] ? loop_add+0x400/0x760 [ 3165.725233][ T5602] ? vsprintf+0x40/0x40 [ 3165.729387][ T5602] device_add_disk+0x2a/0x40 [ 3165.733966][ T5602] loop_add+0x58f/0x760 [ 3165.738113][ T5602] loop_control_ioctl+0x564/0x740 [ 3165.743124][ T5602] ? __irq_exit_rcu+0x41/0x150 [ 3165.748049][ T5602] ? loop_remove+0xb0/0xb0 [ 3165.752448][ T5602] ? irq_exit_rcu+0x9/0x10 [ 3165.756848][ T5602] ? sysvec_call_function_single+0xcb/0xe0 [ 3165.762633][ T5602] ? asm_sysvec_call_function_single+0x12/0x20 [ 3165.768765][ T5602] ? do_vfs_ioctl+0xf6/0x1a90 [ 3165.773430][ T5602] ? __se_sys_ioctl+0x109/0x190 [ 3165.778261][ T5602] ? loop_remove+0xb0/0xb0 [ 3165.782655][ T5602] __se_sys_ioctl+0x115/0x190 [ 3165.787311][ T5602] __x64_sys_ioctl+0x7b/0x90 [ 3165.791879][ T5602] do_syscall_64+0x34/0x70 [ 3165.796273][ T5602] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3165.802145][ T5602] RIP: 0033:0x7f42b4f940c9 [ 3165.806540][ T5602] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3165.826117][ T5602] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3165.834514][ T5602] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3165.842464][ T5602] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3165.850412][ T5602] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3165.858362][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3165.866309][ T5602] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3165.925347][ T5599] device bridge551 entered promiscuous mode 01:13:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x10}}, 0x20}}, 0x0) 01:13:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 3166.119904][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3166.140574][ T5605] device bridge79 entered promiscuous mode [ 3166.159107][ T5607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 01:13:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 62) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 3166.183986][ T5607] device bridge90 entered promiscuous mode [ 3166.211337][ T5610] device bridge514 entered promiscuous mode 01:13:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xfffffffc}, 0x0) [ 3166.372807][ T5620] FAULT_INJECTION: forcing a failure. [ 3166.372807][ T5620] name failslab, interval 1, probability 0, space 0, times 0 [ 3166.385571][ T5620] CPU: 0 PID: 5620 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3166.397177][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3166.407210][ T5620] Call Trace: [ 3166.410504][ T5620] dump_stack_lvl+0x1e2/0x24b [ 3166.415231][ T5620] ? panic+0x7d7/0x7d7 [ 3166.419279][ T5620] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3166.424812][ T5620] ? kasan_check_range+0x8d/0x2e0 [ 3166.429824][ T5620] dump_stack+0x15/0x17 [ 3166.433966][ T5620] should_fail+0x3c0/0x510 [ 3166.438362][ T5620] ? alloc_uevent_skb+0x7f/0x230 [ 3166.443277][ T5620] __should_failslab+0x9f/0xe0 [ 3166.448015][ T5620] should_failslab+0x9/0x20 [ 3166.452515][ T5620] __kmalloc_track_caller+0x5f/0x350 [ 3166.457786][ T5620] ? kmem_cache_alloc+0x1a4/0x300 [ 3166.462791][ T5620] ? __alloc_skb+0x7e/0x580 [ 3166.467280][ T5620] ? alloc_uevent_skb+0x7f/0x230 [ 3166.472201][ T5620] __alloc_skb+0xbe/0x580 [ 3166.476512][ T5620] alloc_uevent_skb+0x7f/0x230 [ 3166.481253][ T5620] kobject_uevent_net_broadcast+0x321/0x5a0 [ 3166.487124][ T5620] kobject_uevent_env+0x540/0x730 [ 3166.492129][ T5620] kobject_uevent+0x1f/0x30 [ 3166.496613][ T5620] device_add+0x79c/0xbd0 [ 3166.500923][ T5620] device_create+0x258/0x2e0 [ 3166.505488][ T5620] ? sysvec_reschedule_ipi+0x84/0x160 [ 3166.510842][ T5620] ? root_device_unregister+0x80/0x80 [ 3166.516206][ T5620] ? number+0xd9b/0x1040 [ 3166.520434][ T5620] bdi_register_va+0x94/0x600 [ 3166.525135][ T5620] bdi_register+0xd1/0x120 [ 3166.529535][ T5620] ? irqentry_exit+0x50/0x60 [ 3166.534109][ T5620] ? sysvec_reschedule_ipi+0x84/0x160 [ 3166.539551][ T5620] ? __device_add_disk+0x536/0x11d0 [ 3166.544729][ T5620] ? bdi_register_va+0x600/0x600 [ 3166.549648][ T5620] ? __device_add_disk+0x536/0x11d0 [ 3166.554822][ T5620] __device_add_disk+0x5cb/0x11d0 [ 3166.559825][ T5620] ? device_add_disk+0x40/0x40 [ 3166.564564][ T5620] ? loop_add+0x400/0x760 [ 3166.568871][ T5620] ? vsprintf+0x40/0x40 [ 3166.573007][ T5620] device_add_disk+0x2a/0x40 [ 3166.577571][ T5620] loop_add+0x58f/0x760 [ 3166.581701][ T5620] loop_control_ioctl+0x564/0x740 [ 3166.586702][ T5620] ? loop_remove+0xb0/0xb0 [ 3166.591104][ T5620] ? __fget_files+0x310/0x370 [ 3166.595763][ T5620] ? security_file_ioctl+0xb1/0xd0 [ 3166.600857][ T5620] ? loop_remove+0xb0/0xb0 [ 3166.605262][ T5620] __se_sys_ioctl+0x115/0x190 [ 3166.609914][ T5620] __x64_sys_ioctl+0x7b/0x90 [ 3166.614491][ T5620] do_syscall_64+0x34/0x70 [ 3166.618888][ T5620] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3166.624757][ T5620] RIP: 0033:0x7f42b4f940c9 [ 3166.629185][ T5620] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3166.648783][ T5620] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3166.657199][ T5620] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3166.665162][ T5620] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3166.673121][ T5620] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3166.681085][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3166.689038][ T5620] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:13:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x11}}, 0x20}}, 0x0) [ 3166.876751][ T5616] device bridge515 entered promiscuous mode [ 3166.909047][ T5618] device bridge551 entered promiscuous mode 01:13:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 63) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3167.062126][ T5625] device bridge90 entered promiscuous mode 01:13:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0xfffffffe}, 0x0) 01:13:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x21}, 0x0) [ 3167.226211][ T5633] FAULT_INJECTION: forcing a failure. [ 3167.226211][ T5633] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.238894][ T5633] CPU: 0 PID: 5633 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3167.250589][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3167.260625][ T5633] Call Trace: [ 3167.263899][ T5633] dump_stack_lvl+0x1e2/0x24b [ 3167.268557][ T5633] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3167.273994][ T5633] dump_stack+0x15/0x17 [ 3167.278128][ T5633] should_fail+0x3c0/0x510 [ 3167.282557][ T5633] __should_failslab+0x9f/0xe0 [ 3167.287298][ T5633] should_failslab+0x9/0x20 [ 3167.291778][ T5633] kmem_cache_alloc+0x3f/0x300 [ 3167.296518][ T5633] ? __d_alloc+0x2d/0x6b0 [ 3167.300822][ T5633] __d_alloc+0x2d/0x6b0 [ 3167.304977][ T5633] ? avc_has_perm_noaudit+0x358/0x4c0 [ 3167.310340][ T5633] d_alloc_parallel+0xe6/0x1330 [ 3167.315190][ T5633] ? avc_has_perm_noaudit+0x2ed/0x4c0 [ 3167.320559][ T5633] ? avc_denied+0x1b0/0x1b0 [ 3167.325053][ T5633] ? kfree+0xc3/0x290 [ 3167.329040][ T5633] ? d_hash_and_lookup+0x200/0x200 [ 3167.334151][ T5633] ? selinux_inode_permission+0x439/0x670 [ 3167.339861][ T5633] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 3167.345656][ T5633] ? kobject_uevent_env+0x348/0x730 [ 3167.350840][ T5633] __lookup_slow+0x14e/0x400 [ 3167.355420][ T5633] ? __d_lookup+0x4da/0x530 [ 3167.359902][ T5633] ? lookup_one_len+0x6a0/0x6a0 [ 3167.364730][ T5633] lookup_one_len+0x43d/0x6a0 [ 3167.369383][ T5633] ? try_lookup_one_len+0x660/0x660 [ 3167.374556][ T5633] ? device_create+0x2bc/0x2e0 [ 3167.379296][ T5633] ? mntput+0x63/0xc0 [ 3167.383260][ T5633] start_creating+0x166/0x320 [ 3167.387915][ T5633] debugfs_create_dir+0x27/0x450 [ 3167.392844][ T5633] bdi_register_va+0x260/0x600 [ 3167.397583][ T5633] bdi_register+0xd1/0x120 [ 3167.401979][ T5633] ? __device_add_disk+0x536/0x11d0 [ 3167.407155][ T5633] ? bdi_register_va+0x600/0x600 [ 3167.412154][ T5633] ? vsnprintf+0x1bfd/0x1cd0 [ 3167.416720][ T5633] ? __kasan_check_read+0x11/0x20 [ 3167.421747][ T5633] ? blk_alloc_devt+0xd4/0x320 [ 3167.426485][ T5633] __device_add_disk+0x5cb/0x11d0 [ 3167.431496][ T5633] ? device_add_disk+0x40/0x40 [ 3167.436239][ T5633] ? loop_add+0x400/0x760 [ 3167.440546][ T5633] ? vsprintf+0x40/0x40 [ 3167.444682][ T5633] device_add_disk+0x2a/0x40 [ 3167.449249][ T5633] loop_add+0x58f/0x760 [ 3167.453386][ T5633] loop_control_ioctl+0x564/0x740 [ 3167.459480][ T5633] ? loop_remove+0xb0/0xb0 [ 3167.463904][ T5633] ? __fget_files+0x310/0x370 [ 3167.468557][ T5633] ? security_file_ioctl+0xb1/0xd0 [ 3167.473643][ T5633] ? loop_remove+0xb0/0xb0 [ 3167.478035][ T5633] __se_sys_ioctl+0x115/0x190 [ 3167.482697][ T5633] __x64_sys_ioctl+0x7b/0x90 [ 3167.487267][ T5633] do_syscall_64+0x34/0x70 [ 3167.491660][ T5633] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3167.497527][ T5633] RIP: 0033:0x7f42b4f940c9 [ 3167.501950][ T5633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3167.521656][ T5633] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3167.530052][ T5633] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3167.538018][ T5633] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3167.545990][ T5633] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3167.553957][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3167.561913][ T5633] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:13:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x81ffffff}}, 0x20}}, 0x0) 01:13:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x12}}, 0x20}}, 0x0) [ 3167.770039][ T5632] device bridge551 entered promiscuous mode [ 3167.782274][ T5635] device bridge515 entered promiscuous mode 01:13:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 64) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3167.932296][ T5639] device bridge79 entered promiscuous mode [ 3167.965208][ T5641] device bridge90 entered promiscuous mode [ 3168.100779][ T5648] FAULT_INJECTION: forcing a failure. [ 3168.100779][ T5648] name failslab, interval 1, probability 0, space 0, times 0 [ 3168.113640][ T5648] CPU: 0 PID: 5648 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3168.125245][ T5648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3168.135276][ T5648] Call Trace: [ 3168.138549][ T5648] dump_stack_lvl+0x1e2/0x24b [ 3168.143206][ T5648] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3168.148643][ T5648] ? preempt_schedule_irq+0xef/0x140 [ 3168.153903][ T5648] ? preempt_schedule_notrace+0x140/0x140 [ 3168.159597][ T5648] dump_stack+0x15/0x17 [ 3168.165473][ T5648] should_fail+0x3c0/0x510 [ 3168.169870][ T5648] __should_failslab+0x9f/0xe0 [ 3168.174630][ T5648] should_failslab+0x9/0x20 [ 3168.179116][ T5648] kmem_cache_alloc+0x3f/0x300 [ 3168.183862][ T5648] ? security_inode_alloc+0x29/0x140 [ 3168.189122][ T5648] ? __init_rwsem+0xa6/0x1c0 [ 3168.193810][ T5648] security_inode_alloc+0x29/0x140 [ 3168.198899][ T5648] inode_init_always+0x710/0x970 [ 3168.203814][ T5648] new_inode_pseudo+0x93/0x220 [ 3168.208557][ T5648] new_inode+0x28/0x1c0 [ 3168.212691][ T5648] ? start_creating+0x206/0x320 [ 3168.217520][ T5648] debugfs_create_dir+0xf3/0x450 [ 3168.222436][ T5648] bdi_register_va+0x260/0x600 [ 3168.227176][ T5648] bdi_register+0xd1/0x120 [ 3168.231569][ T5648] ? vsnprintf+0x1bf3/0x1cd0 [ 3168.236226][ T5648] ? __device_add_disk+0x536/0x11d0 [ 3168.241410][ T5648] ? bdi_register_va+0x600/0x600 [ 3168.246327][ T5648] ? __kasan_check_read+0x11/0x20 [ 3168.251326][ T5648] ? blk_alloc_devt+0xd4/0x320 [ 3168.256066][ T5648] __device_add_disk+0x5cb/0x11d0 [ 3168.261156][ T5648] ? device_add_disk+0x40/0x40 [ 3168.265903][ T5648] ? loop_add+0x400/0x760 [ 3168.270217][ T5648] ? vsprintf+0x40/0x40 [ 3168.274372][ T5648] device_add_disk+0x2a/0x40 [ 3168.278958][ T5648] loop_add+0x58f/0x760 [ 3168.283115][ T5648] loop_control_ioctl+0x564/0x740 [ 3168.288122][ T5648] ? loop_remove+0xb0/0xb0 [ 3168.292518][ T5648] ? __fget_files+0x310/0x370 [ 3168.297180][ T5648] ? security_file_ioctl+0xb1/0xd0 [ 3168.302271][ T5648] ? loop_remove+0xb0/0xb0 [ 3168.306667][ T5648] __se_sys_ioctl+0x115/0x190 [ 3168.311324][ T5648] __x64_sys_ioctl+0x7b/0x90 [ 3168.315889][ T5648] do_syscall_64+0x34/0x70 [ 3168.320286][ T5648] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3168.326156][ T5648] RIP: 0033:0x7f42b4f940c9 [ 3168.330559][ T5648] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3168.350156][ T5648] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3168.358639][ T5648] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3168.366590][ T5648] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3168.374542][ T5648] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3168.382498][ T5648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3168.390458][ T5648] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3168.399129][ T5648] debugfs: out of free dentries, can not create directory '7:0' 01:13:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x3a0ffffffff}, 0x0) 01:13:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0xc5}, 0x0) 01:13:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x13}}, 0x20}}, 0x0) [ 3168.619078][ T5651] device bridge551 entered promiscuous mode [ 3168.635834][ T5653] device bridge515 entered promiscuous mode [ 3168.652798][ T5655] device bridge90 entered promiscuous mode 01:13:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 65) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x9effffff}}, 0x20}}, 0x0) [ 3168.937128][ T5661] FAULT_INJECTION: forcing a failure. [ 3168.937128][ T5661] name failslab, interval 1, probability 0, space 0, times 0 [ 3168.949806][ T5661] CPU: 0 PID: 5661 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3168.961413][ T5661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3168.971444][ T5661] Call Trace: [ 3168.974714][ T5661] dump_stack_lvl+0x1e2/0x24b [ 3168.979375][ T5661] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3168.984811][ T5661] ? preempt_schedule_irq+0xef/0x140 [ 3168.990072][ T5661] dump_stack+0x15/0x17 [ 3168.994211][ T5661] should_fail+0x3c0/0x510 [ 3168.998609][ T5661] __should_failslab+0x9f/0xe0 [ 3169.003356][ T5661] should_failslab+0x9/0x20 [ 3169.007833][ T5661] kmem_cache_alloc+0x3f/0x300 [ 3169.012574][ T5661] ? security_inode_alloc+0x29/0x140 [ 3169.017842][ T5661] security_inode_alloc+0x29/0x140 [ 3169.022954][ T5661] inode_init_always+0x710/0x970 [ 3169.027868][ T5661] new_inode_pseudo+0x93/0x220 [ 3169.032607][ T5661] new_inode+0x28/0x1c0 [ 3169.036776][ T5661] ? start_creating+0x206/0x320 [ 3169.041605][ T5661] debugfs_create_dir+0xf3/0x450 [ 3169.046657][ T5661] bdi_register_va+0x260/0x600 [ 3169.051410][ T5661] bdi_register+0xd1/0x120 [ 3169.055821][ T5661] ? number+0xf7d/0x1040 [ 3169.060056][ T5661] ? __device_add_disk+0x536/0x11d0 [ 3169.065237][ T5661] ? bdi_register_va+0x600/0x600 [ 3169.070163][ T5661] ? vsnprintf+0x1bfd/0x1cd0 [ 3169.074737][ T5661] ? __kasan_check_read+0x11/0x20 [ 3169.079743][ T5661] ? blk_alloc_devt+0xd4/0x320 [ 3169.084486][ T5661] __device_add_disk+0x5cb/0x11d0 [ 3169.089491][ T5661] ? device_add_disk+0x40/0x40 [ 3169.094232][ T5661] ? loop_add+0x400/0x760 [ 3169.098543][ T5661] ? vsprintf+0x40/0x40 [ 3169.102675][ T5661] ? device_initialize+0x217/0x3a0 [ 3169.107850][ T5661] device_add_disk+0x2a/0x40 [ 3169.112416][ T5661] loop_add+0x58f/0x760 [ 3169.116549][ T5661] loop_control_ioctl+0x564/0x740 [ 3169.121555][ T5661] ? __kasan_check_read+0x11/0x20 [ 3169.126557][ T5661] ? loop_remove+0xb0/0xb0 [ 3169.130949][ T5661] ? __fget_files+0x310/0x370 [ 3169.135635][ T5661] ? security_file_ioctl+0xb1/0xd0 [ 3169.140730][ T5661] ? loop_remove+0xb0/0xb0 [ 3169.145123][ T5661] __se_sys_ioctl+0x115/0x190 [ 3169.149779][ T5661] __x64_sys_ioctl+0x7b/0x90 [ 3169.154345][ T5661] do_syscall_64+0x34/0x70 [ 3169.158742][ T5661] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3169.164611][ T5661] RIP: 0033:0x7f42b4f940c9 [ 3169.169025][ T5661] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3169.188628][ T5661] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3169.197040][ T5661] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3169.204997][ T5661] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3169.212954][ T5661] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3169.220910][ T5661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3169.228861][ T5661] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3169.237216][ T5661] debugfs: out of free dentries, can not create directory '7:0' [ 3169.343884][ T5660] __nla_validate_parse: 11 callbacks suppressed [ 3169.343944][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x18}}, 0x20}}, 0x0) 01:13:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x100000000000}, 0x0) 01:13:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 3169.418943][ T5660] device bridge79 entered promiscuous mode [ 3169.451926][ T5664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3169.477155][ T5664] device bridge551 entered promiscuous mode [ 3169.493328][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3169.517164][ T5667] device bridge90 entered promiscuous mode [ 3169.542200][ T5668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3169.572967][ T5668] device bridge515 entered promiscuous mode 01:13:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 66) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3169.796184][ T5675] FAULT_INJECTION: forcing a failure. [ 3169.796184][ T5675] name failslab, interval 1, probability 0, space 0, times 0 [ 3169.808934][ T5675] CPU: 0 PID: 5675 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3169.820543][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3169.830582][ T5675] Call Trace: [ 3169.833854][ T5675] dump_stack_lvl+0x1e2/0x24b [ 3169.838515][ T5675] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3169.843952][ T5675] ? bpf_trace_run3+0x126/0x2c0 [ 3169.848785][ T5675] ? compat_start_thread+0x80/0x80 [ 3169.853889][ T5675] dump_stack+0x15/0x17 [ 3169.858030][ T5675] should_fail+0x3c0/0x510 [ 3169.862447][ T5675] __should_failslab+0x9f/0xe0 [ 3169.867195][ T5675] should_failslab+0x9/0x20 [ 3169.871685][ T5675] kmem_cache_alloc+0x3f/0x300 [ 3169.876431][ T5675] ? __d_alloc+0x2d/0x6b0 [ 3169.880739][ T5675] __d_alloc+0x2d/0x6b0 [ 3169.884877][ T5675] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 3169.890238][ T5675] d_alloc_parallel+0xe6/0x1330 [ 3169.895072][ T5675] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 3169.900865][ T5675] ? rcu_preempt_deferred_qs_irqrestore+0x644/0x950 [ 3169.907453][ T5675] ? d_hash_and_lookup+0x200/0x200 [ 3169.912543][ T5675] ? rcu_read_unlock_special+0xdb/0x4c0 [ 3169.918066][ T5675] ? irqentry_exit+0x50/0x60 [ 3169.922653][ T5675] ? sysvec_reschedule_ipi+0x84/0x160 [ 3169.928007][ T5675] ? __rcu_read_unlock+0x90/0x90 [ 3169.932928][ T5675] __lookup_slow+0x14e/0x400 [ 3169.937500][ T5675] ? __d_lookup+0x4da/0x530 [ 3169.941986][ T5675] ? lookup_one_len+0x6a0/0x6a0 [ 3169.946822][ T5675] lookup_one_len+0x43d/0x6a0 [ 3169.951478][ T5675] ? try_lookup_one_len+0x660/0x660 [ 3169.956668][ T5675] ? strlen+0x51/0x80 [ 3169.960638][ T5675] start_creating+0x166/0x320 [ 3169.965315][ T5675] __debugfs_create_file+0x75/0x4a0 [ 3169.970857][ T5675] ? up_write+0x19/0xd0 [ 3169.975012][ T5675] debugfs_create_file+0x4a/0x60 [ 3169.979935][ T5675] bdi_register_va+0x2ab/0x600 [ 3169.984686][ T5675] bdi_register+0xd1/0x120 [ 3169.989099][ T5675] ? __device_add_disk+0x536/0x11d0 [ 3169.994282][ T5675] ? bdi_register_va+0x600/0x600 [ 3169.999210][ T5675] ? vsnprintf+0x1bfd/0x1cd0 [ 3170.003790][ T5675] ? __kasan_check_read+0x11/0x20 [ 3170.008801][ T5675] ? blk_alloc_devt+0xd4/0x320 [ 3170.013551][ T5675] __device_add_disk+0x5cb/0x11d0 [ 3170.018562][ T5675] ? device_add_disk+0x40/0x40 [ 3170.023311][ T5675] ? loop_add+0x400/0x760 [ 3170.027620][ T5675] ? vsprintf+0x40/0x40 [ 3170.031755][ T5675] device_add_disk+0x2a/0x40 [ 3170.036325][ T5675] loop_add+0x58f/0x760 [ 3170.040461][ T5675] loop_control_ioctl+0x564/0x740 [ 3170.045461][ T5675] ? loop_remove+0xb0/0xb0 [ 3170.049857][ T5675] ? __fget_files+0x310/0x370 [ 3170.054515][ T5675] ? security_file_ioctl+0xb1/0xd0 [ 3170.059600][ T5675] ? loop_remove+0xb0/0xb0 [ 3170.063998][ T5675] __se_sys_ioctl+0x115/0x190 [ 3170.068657][ T5675] __x64_sys_ioctl+0x7b/0x90 [ 3170.073223][ T5675] do_syscall_64+0x34/0x70 [ 3170.077616][ T5675] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3170.083576][ T5675] RIP: 0033:0x7f42b4f940c9 [ 3170.087974][ T5675] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3170.107558][ T5675] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3170.115949][ T5675] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3170.123900][ T5675] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3170.131885][ T5675] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3170.139850][ T5675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3170.147814][ T5675] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 01:13:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xa0000000}}, 0x20}}, 0x0) 01:13:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x1000000000000}, 0x0) [ 3170.456900][ T5679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3170.481358][ T5679] device bridge551 entered promiscuous mode 01:13:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x21}}, 0x20}}, 0x0) 01:13:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 67) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3170.501386][ T5680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x3a0}, 0x0) [ 3170.529795][ T5680] device bridge79 entered promiscuous mode [ 3170.649880][ T5690] FAULT_INJECTION: forcing a failure. [ 3170.649880][ T5690] name failslab, interval 1, probability 0, space 0, times 0 [ 3170.662756][ T5690] CPU: 0 PID: 5690 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3170.674453][ T5690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3170.684483][ T5690] Call Trace: [ 3170.687758][ T5690] dump_stack_lvl+0x1e2/0x24b [ 3170.692412][ T5690] ? panic+0x7d7/0x7d7 [ 3170.696579][ T5690] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3170.702019][ T5690] ? kasan_check_range+0x84/0x2e0 [ 3170.707020][ T5690] dump_stack+0x15/0x17 [ 3170.711158][ T5690] should_fail+0x3c0/0x510 [ 3170.715561][ T5690] __should_failslab+0x9f/0xe0 [ 3170.720301][ T5690] should_failslab+0x9/0x20 [ 3170.724788][ T5690] kmem_cache_alloc+0x3f/0x300 [ 3170.729536][ T5690] ? security_inode_alloc+0x29/0x140 [ 3170.734801][ T5690] security_inode_alloc+0x29/0x140 [ 3170.739887][ T5690] inode_init_always+0x710/0x970 [ 3170.744806][ T5690] new_inode_pseudo+0x93/0x220 [ 3170.749550][ T5690] new_inode+0x28/0x1c0 [ 3170.753689][ T5690] ? start_creating+0x206/0x320 [ 3170.758520][ T5690] __debugfs_create_file+0x143/0x4a0 [ 3170.763780][ T5690] ? up_write+0x19/0xd0 [ 3170.767916][ T5690] debugfs_create_file+0x4a/0x60 [ 3170.772832][ T5690] bdi_register_va+0x2ab/0x600 [ 3170.777573][ T5690] bdi_register+0xd1/0x120 [ 3170.781968][ T5690] ? irqentry_exit+0x50/0x60 [ 3170.786534][ T5690] ? sysvec_reschedule_ipi+0x84/0x160 [ 3170.792551][ T5690] ? __device_add_disk+0x536/0x11d0 [ 3170.797724][ T5690] ? bdi_register_va+0x600/0x600 [ 3170.802642][ T5690] ? __kasan_check_read+0x11/0x20 [ 3170.807642][ T5690] ? blk_alloc_devt+0xd4/0x320 [ 3170.812384][ T5690] __device_add_disk+0x5cb/0x11d0 [ 3170.817387][ T5690] ? device_add_disk+0x40/0x40 [ 3170.822129][ T5690] ? loop_add+0x400/0x760 [ 3170.826434][ T5690] ? vsprintf+0x40/0x40 [ 3170.830567][ T5690] device_add_disk+0x2a/0x40 [ 3170.835139][ T5690] loop_add+0x58f/0x760 [ 3170.839708][ T5690] loop_control_ioctl+0x564/0x740 [ 3170.844710][ T5690] ? loop_remove+0xb0/0xb0 [ 3170.849103][ T5690] ? __fget_files+0x310/0x370 [ 3170.853759][ T5690] ? security_file_ioctl+0xb1/0xd0 [ 3170.858848][ T5690] ? loop_remove+0xb0/0xb0 [ 3170.863241][ T5690] __se_sys_ioctl+0x115/0x190 [ 3170.867894][ T5690] __x64_sys_ioctl+0x7b/0x90 [ 3170.872461][ T5690] do_syscall_64+0x34/0x70 [ 3170.876881][ T5690] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3170.882925][ T5690] RIP: 0033:0x7f42b4f940c9 [ 3170.887320][ T5690] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3170.906992][ T5690] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3170.915422][ T5690] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3170.923371][ T5690] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3170.931318][ T5690] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3170.939266][ T5690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3170.947215][ T5690] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3170.955491][ T5690] debugfs: out of free dentries, can not create file 'stats' [ 3171.146599][ T5686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3171.170267][ T5686] device bridge515 entered promiscuous mode [ 3171.189329][ T5685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3171.210215][ T5685] device bridge90 entered promiscuous mode 01:13:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 68) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x4000000000000}, 0x0) 01:13:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 3171.425646][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3171.508317][ T5700] FAULT_INJECTION: forcing a failure. [ 3171.508317][ T5700] name failslab, interval 1, probability 0, space 0, times 0 [ 3171.521070][ T5700] CPU: 0 PID: 5700 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3171.532674][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3171.542710][ T5700] Call Trace: [ 3171.545982][ T5700] dump_stack_lvl+0x1e2/0x24b [ 3171.550638][ T5700] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3171.556072][ T5700] ? __lookup_slow+0x2f7/0x400 [ 3171.560812][ T5700] ? lookup_one_len+0x6a0/0x6a0 [ 3171.565636][ T5700] dump_stack+0x15/0x17 [ 3171.569768][ T5700] should_fail+0x3c0/0x510 [ 3171.574160][ T5700] __should_failslab+0x9f/0xe0 [ 3171.578901][ T5700] should_failslab+0x9/0x20 [ 3171.583379][ T5700] kmem_cache_alloc+0x3f/0x300 [ 3171.588121][ T5700] ? new_inode_pseudo+0x7c/0x220 [ 3171.593123][ T5700] new_inode_pseudo+0x7c/0x220 [ 3171.597865][ T5700] new_inode+0x28/0x1c0 [ 3171.602004][ T5700] ? start_creating+0x206/0x320 [ 3171.606833][ T5700] __debugfs_create_file+0x143/0x4a0 [ 3171.612092][ T5700] ? up_write+0x19/0xd0 [ 3171.616228][ T5700] debugfs_create_file+0x4a/0x60 [ 3171.621144][ T5700] bdi_register_va+0x2ab/0x600 [ 3171.625882][ T5700] bdi_register+0xd1/0x120 [ 3171.630273][ T5700] ? vsnprintf+0x1bf3/0x1cd0 [ 3171.634842][ T5700] ? vsnprintf+0x1bfd/0x1cd0 [ 3171.639413][ T5700] ? __device_add_disk+0x536/0x11d0 [ 3171.644588][ T5700] ? bdi_register_va+0x600/0x600 [ 3171.649504][ T5700] ? __kasan_check_read+0x11/0x20 [ 3171.654509][ T5700] ? blk_alloc_devt+0xd4/0x320 [ 3171.659343][ T5700] __device_add_disk+0x5cb/0x11d0 [ 3171.664343][ T5700] ? device_add_disk+0x40/0x40 [ 3171.669082][ T5700] ? loop_add+0x400/0x760 [ 3171.673390][ T5700] ? vsprintf+0x40/0x40 [ 3171.677523][ T5700] device_add_disk+0x2a/0x40 [ 3171.682089][ T5700] loop_add+0x58f/0x760 [ 3171.686221][ T5700] loop_control_ioctl+0x564/0x740 [ 3171.691222][ T5700] ? loop_remove+0xb0/0xb0 [ 3171.695616][ T5700] ? __fget_files+0x310/0x370 [ 3171.700286][ T5700] ? security_file_ioctl+0xb1/0xd0 [ 3171.705372][ T5700] ? loop_remove+0xb0/0xb0 [ 3171.709769][ T5700] __se_sys_ioctl+0x115/0x190 [ 3171.714423][ T5700] __x64_sys_ioctl+0x7b/0x90 [ 3171.718992][ T5700] do_syscall_64+0x34/0x70 [ 3171.723472][ T5700] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3171.729341][ T5700] RIP: 0033:0x7f42b4f940c9 [ 3171.733733][ T5700] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3171.753312][ T5700] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3171.761703][ T5700] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3171.769653][ T5700] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3171.777602][ T5700] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3171.785553][ T5700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3171.793503][ T5700] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3171.801708][ T5700] debugfs: out of free dentries, can not create file 'stats' [ 3171.934176][ T5696] device bridge551 entered promiscuous mode 01:13:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x48}}, 0x20}}, 0x0) 01:13:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xa0028000}}, 0x20}}, 0x0) [ 3171.995495][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3172.012281][ T5698] device bridge515 entered promiscuous mode [ 3172.159942][ T5706] device bridge79 entered promiscuous mode [ 3172.175450][ T5707] device bridge90 entered promiscuous mode 01:13:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 69) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) [ 3172.369270][ T5714] FAULT_INJECTION: forcing a failure. [ 3172.369270][ T5714] name failslab, interval 1, probability 0, space 0, times 0 [ 3172.382187][ T5714] CPU: 0 PID: 5714 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3172.393802][ T5714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3172.403855][ T5714] Call Trace: [ 3172.407137][ T5714] dump_stack_lvl+0x1e2/0x24b [ 3172.411790][ T5714] ? panic+0x7d7/0x7d7 [ 3172.415856][ T5714] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3172.421910][ T5714] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3172.427364][ T5714] dump_stack+0x15/0x17 [ 3172.431519][ T5714] should_fail+0x3c0/0x510 [ 3172.435923][ T5714] __should_failslab+0x9f/0xe0 [ 3172.440671][ T5714] should_failslab+0x9/0x20 [ 3172.445168][ T5714] kmem_cache_alloc+0x3f/0x300 [ 3172.449919][ T5714] ? security_inode_alloc+0x29/0x140 [ 3172.455185][ T5714] security_inode_alloc+0x29/0x140 [ 3172.460275][ T5714] inode_init_always+0x710/0x970 [ 3172.465191][ T5714] new_inode_pseudo+0x93/0x220 [ 3172.469931][ T5714] new_inode+0x28/0x1c0 [ 3172.474062][ T5714] ? start_creating+0x206/0x320 [ 3172.478890][ T5714] __debugfs_create_file+0x143/0x4a0 [ 3172.484151][ T5714] ? up_write+0x19/0xd0 [ 3172.488285][ T5714] debugfs_create_file+0x4a/0x60 [ 3172.493199][ T5714] bdi_register_va+0x2ab/0x600 [ 3172.497937][ T5714] bdi_register+0xd1/0x120 [ 3172.502331][ T5714] ? sysvec_reschedule_ipi+0x84/0x160 [ 3172.507679][ T5714] ? __device_add_disk+0x536/0x11d0 [ 3172.512851][ T5714] ? bdi_register_va+0x600/0x600 [ 3172.517856][ T5714] ? __kasan_check_read+0x11/0x20 [ 3172.522878][ T5714] ? blk_alloc_devt+0xd4/0x320 [ 3172.527625][ T5714] __device_add_disk+0x5cb/0x11d0 [ 3172.532633][ T5714] ? device_add_disk+0x40/0x40 [ 3172.537382][ T5714] ? irqentry_exit+0x50/0x60 [ 3172.541962][ T5714] ? loop_add+0x400/0x760 [ 3172.546281][ T5714] ? vsprintf+0x40/0x40 [ 3172.550420][ T5714] device_add_disk+0x2a/0x40 [ 3172.554987][ T5714] loop_add+0x58f/0x760 [ 3172.559124][ T5714] loop_control_ioctl+0x564/0x740 [ 3172.564126][ T5714] ? loop_remove+0xb0/0xb0 [ 3172.568521][ T5714] ? __fget_files+0x310/0x370 [ 3172.573175][ T5714] ? security_file_ioctl+0xb1/0xd0 [ 3172.580691][ T5714] ? loop_remove+0xb0/0xb0 [ 3172.585086][ T5714] __se_sys_ioctl+0x115/0x190 [ 3172.589755][ T5714] __x64_sys_ioctl+0x7b/0x90 [ 3172.594411][ T5714] do_syscall_64+0x34/0x70 [ 3172.598824][ T5714] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3172.604723][ T5714] RIP: 0033:0x7f42b4f940c9 [ 3172.609125][ T5714] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3172.628716][ T5714] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3172.637112][ T5714] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3172.645067][ T5714] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3172.653017][ T5714] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3172.661055][ T5714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3172.669007][ T5714] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3172.677559][ T5714] debugfs: out of free dentries, can not create file 'stats' 01:13:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x8002a0ffffffff}, 0x0) 01:13:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) 01:13:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0x0, 0x4c}}, 0x20}}, 0x0) [ 3172.892574][ T5717] device bridge551 entered promiscuous mode [ 3172.913461][ T5719] device bridge515 entered promiscuous mode [ 3172.939668][ T5721] device bridge90 entered promiscuous mode 01:13:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x157) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x800402, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f6a646576ddf362cc178d2fe9705a306dab9efd272f5c646c6c6230166a22679e8d696c0112c2619c5c4d001e01eef01e0ec1a4bba26f837f3f693814a0d9af482d8d1264e1e8bf8cb1855a00bfdb1d6600f7e2d80eea6700f1524a7ec4032d2a39ac6276beda57281f7ee022a4e251215be82dad3764c6544768f7542dbdf408975508003cce43f84983c9a9d7deef4862513160bcf4aabce05158c58d23f4e175f2259aa68741cd0af31a4583c3834d2d9a519fc7143141cfb02cb8f657f0cb9ee3eb46311521167884dc1848a38ebd3c6e9c", @ANYRES64=r0], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='f2fs\x00', 0x2030010, &(0x7f0000000340)='.@/\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r0}) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000005) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x4c81, 0xfdfdffff) gettid() recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b80)=""/178, 0xb2}, {0x0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000940)=""/4110, 0x100e}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000000480)}, {&(0x7f0000000840)=""/239, 0xef}], 0x8, &(0x7f0000000500)=""/93, 0x5d}, 0x9}, {{&(0x7f00000052c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000057c0)=""/120, 0x78}}, {{&(0x7f0000005840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000008cc0)=""/189, 0xbd}, 0x5}, {{&(0x7f0000008d80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008e00)=""/141, 0x8d}, {&(0x7f0000009f40)=""/146, 0x92}, {&(0x7f000000a000)=""/198, 0xc6}, {0x0}], 0x4, &(0x7f000000a1c0)=""/4096, 0x1000}, 0x2}], 0x4, 0x60, &(0x7f000000b300)={0x77359400}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (fail_nth: 70) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 01:13:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3, 0xa0030000}}, 0x20}}, 0x0) 01:13:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000702cf087f0000005dee00", @ANYRES32=r3, @ANYBLOB="f7ff00e4ffffff001c0012000b000100627269646765"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c4c, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r3}}, 0x20}, 0x1, 0x80030000000000}, 0x0) [ 3173.164201][ T5726] device bridge79 entered promiscuous mode [ 3173.230044][ T5729] FAULT_INJECTION: forcing a failure. [ 3173.230044][ T5729] name failslab, interval 1, probability 0, space 0, times 0 [ 3173.242687][ T5729] CPU: 0 PID: 5729 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3173.254294][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3173.264331][ T5729] Call Trace: [ 3173.267607][ T5729] dump_stack_lvl+0x1e2/0x24b [ 3173.272266][ T5729] ? panic+0x7d7/0x7d7 [ 3173.276338][ T5729] ? bfq_pos_tree_add_move+0x43e/0x43e [ 3173.281776][ T5729] ? __schedule+0x86e/0xc00 [ 3173.286262][ T5729] ? kobj_map+0x72/0x6f0 [ 3173.290482][ T5729] ? __device_add_disk+0x663/0x11d0 [ 3173.295657][ T5729] dump_stack+0x15/0x17 [ 3173.299796][ T5729] should_fail+0x3c0/0x510 [ 3173.304195][ T5729] ? kvasprintf_const+0x139/0x180 [ 3173.309197][ T5729] __should_failslab+0x9f/0xe0 [ 3173.313938][ T5729] should_failslab+0x9/0x20 [ 3173.318418][ T5729] __kmalloc_track_caller+0x5f/0x350 [ 3173.323747][ T5729] kstrdup_const+0x55/0x90 [ 3173.328189][ T5729] kvasprintf_const+0x139/0x180 [ 3173.333032][ T5729] kobject_set_name_vargs+0x61/0x120 [ 3173.338309][ T5729] dev_set_name+0xd1/0x120 [ 3173.342716][ T5729] ? get_device+0x30/0x30 [ 3173.347031][ T5729] ? kobj_map+0x6ad/0x6f0 [ 3173.351350][ T5729] __device_add_disk+0x6e5/0x11d0 [ 3173.358094][ T5729] ? device_add_disk+0x40/0x40 [ 3173.362860][ T5729] ? irqentry_exit+0x50/0x60 [ 3173.367429][ T5729] ? vsprintf+0x40/0x40 [ 3173.371575][ T5729] device_add_disk+0x2a/0x40 [ 3173.376140][ T5729] loop_add+0x58f/0x760 [ 3173.380306][ T5729] loop_control_ioctl+0x564/0x740 [ 3173.385305][ T5729] ? loop_remove+0xb0/0xb0 [ 3173.389699][ T5729] ? __fget_files+0x310/0x370 [ 3173.394357][ T5729] ? security_file_ioctl+0xb1/0xd0 [ 3173.399454][ T5729] ? loop_remove+0xb0/0xb0 [ 3173.403861][ T5729] __se_sys_ioctl+0x115/0x190 [ 3173.408517][ T5729] __x64_sys_ioctl+0x7b/0x90 [ 3173.413083][ T5729] do_syscall_64+0x34/0x70 [ 3173.417483][ T5729] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3173.423351][ T5729] RIP: 0033:0x7f42b4f940c9 [ 3173.427746][ T5729] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3173.447343][ T5729] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3173.455734][ T5729] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3173.463683][ T5729] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3173.471636][ T5729] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3173.479594][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3173.487543][ T5729] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3173.497523][ T5729] kobject_add_internal failed for queue (error: -2 parent: (null)) [ 3173.505673][ T5729] ------------[ cut here ]------------ [ 3173.511168][ T5729] WARNING: CPU: 0 PID: 5729 at fs/sysfs/file.c:328 sysfs_create_files+0x215/0x4a0 [ 3173.520375][ T5729] Modules linked in: [ 3173.524393][ T5729] CPU: 0 PID: 5729 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3173.536036][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3173.546124][ T5729] RIP: 0010:sysfs_create_files+0x215/0x4a0 [ 3173.551968][ T5729] Code: 24 04 48 b9 00 00 00 00 00 fc ff df 48 8b 54 24 08 4c 8b 74 24 20 eb 2b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 5b a2 9a ff <0f> 0b c7 44 24 04 ea ff ff ff 48 b9 00 00 00 00 00 fc ff df 48 8b [ 3173.571616][ T5729] RSP: 0018:ffffc9000022fae0 EFLAGS: 00010283 [ 3173.577713][ T5729] RAX: ffffffff81d27fd1 RBX: ffff888191661098 RCX: 0000000000040000 [ 3173.585709][ T5729] RDX: ffffc90003d81000 RSI: 00000000000273ee RDI: 00000000000273ef [ 3173.593709][ T5729] RBP: ffffc9000022fbb0 R08: ffffffff826c6018 R09: ffffed102150a470 [ 3173.601708][ T5729] R10: ffffed102150a470 R11: 1ffff1102150a46f R12: 0000000000000000 [ 3173.609769][ T5729] R13: ffffffff854334a0 R14: ffff888191661068 R15: ffffffff8653acc0 [ 3173.617842][ T5729] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3173.626794][ T5729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3173.633405][ T5729] CR2: 00007f42b3cc4ff8 CR3: 0000000113ba0000 CR4: 00000000003506b0 [ 3173.641443][ T5729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3173.649442][ T5729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3173.657421][ T5729] Call Trace: [ 3173.660747][ T5729] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 3173.666130][ T5729] ? __kasan_check_write+0x14/0x20 [ 3173.671276][ T5729] ? kobject_get+0xd2/0x120 [ 3173.675792][ T5729] __device_add_disk+0x9cb/0x11d0 [ 3173.680862][ T5729] ? device_add_disk+0x40/0x40 [ 3173.685637][ T5729] ? irqentry_exit+0x50/0x60 [ 3173.690249][ T5729] ? vsprintf+0x40/0x40 [ 3173.694420][ T5729] device_add_disk+0x2a/0x40 [ 3173.699204][ T5729] loop_add+0x58f/0x760 [ 3173.703376][ T5729] loop_control_ioctl+0x564/0x740 [ 3173.708424][ T5729] ? loop_remove+0xb0/0xb0 [ 3173.712857][ T5729] ? __fget_files+0x310/0x370 [ 3173.717549][ T5729] ? security_file_ioctl+0xb1/0xd0 [ 3173.722682][ T5729] ? loop_remove+0xb0/0xb0 [ 3173.727115][ T5729] __se_sys_ioctl+0x115/0x190 [ 3173.731849][ T5729] __x64_sys_ioctl+0x7b/0x90 [ 3173.736537][ T5729] do_syscall_64+0x34/0x70 [ 3173.740976][ T5729] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3173.747655][ T5729] RIP: 0033:0x7f42b4f940c9 [ 3173.752102][ T5729] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3173.771829][ T5729] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3173.780282][ T5729] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3173.788288][ T5729] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3173.796274][ T5729] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3173.804267][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3173.812276][ T5729] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3173.820284][ T5729] ---[ end trace 66cfa9b859026dc9 ]--- [ 3173.825831][ T5729] ------------[ cut here ]------------ [ 3173.831309][ T5729] kernfs: can not remove 'events', no directory [ 3173.837854][ T5729] WARNING: CPU: 0 PID: 5729 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 3173.847749][ T5729] Modules linked in: [ 3173.851720][ T5729] CPU: 0 PID: 5729 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3173.863370][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3173.873456][ T5729] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 3173.879721][ T5729] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 c1 00 9b ff 48 c7 c7 c0 32 2d 85 4c 89 fe 31 c0 e8 70 17 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 a2 00 9b ff bb fe ff ff ff 48 c7 c7 [ 3173.899348][ T5729] RSP: 0018:ffffc9000022fab8 EFLAGS: 00010246 [ 3173.905439][ T5729] RAX: 472e348802324800 RBX: 0000000000000000 RCX: 0000000000040000 [ 3173.913444][ T5729] RDX: ffffc90003d81000 RSI: 000000000003ffff RDI: 0000000000040000 [ 3173.921438][ T5729] RBP: ffffc9000022fad0 R08: ffffffff81540db8 R09: fffff52000045e7d [ 3173.929431][ T5729] R10: fffff52000045e7d R11: 1ffff92000045e7c R12: ffffffff8653acc0 [ 3173.937412][ T5729] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff85433480 [ 3173.945417][ T5729] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3173.954370][ T5729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3173.960968][ T5729] CR2: 00007f42b3cc4ff8 CR3: 0000000113ba0000 CR4: 00000000003506b0 [ 3173.968977][ T5729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3173.976955][ T5729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3173.984944][ T5729] Call Trace: [ 3173.988252][ T5729] sysfs_create_files+0x40a/0x4a0 [ 3173.993288][ T5729] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 3173.998681][ T5729] ? __kasan_check_write+0x14/0x20 [ 3174.003804][ T5729] ? kobject_get+0xd2/0x120 [ 3174.008329][ T5729] __device_add_disk+0x9cb/0x11d0 [ 3174.013371][ T5729] ? device_add_disk+0x40/0x40 [ 3174.018157][ T5729] ? irqentry_exit+0x50/0x60 [ 3174.022755][ T5729] ? vsprintf+0x40/0x40 [ 3174.026922][ T5729] device_add_disk+0x2a/0x40 [ 3174.031544][ T5729] loop_add+0x58f/0x760 [ 3174.035719][ T5729] loop_control_ioctl+0x564/0x740 [ 3174.040763][ T5729] ? loop_remove+0xb0/0xb0 [ 3174.045197][ T5729] ? __fget_files+0x310/0x370 [ 3174.049892][ T5729] ? security_file_ioctl+0xb1/0xd0 [ 3174.055012][ T5729] ? loop_remove+0xb0/0xb0 [ 3174.059449][ T5729] __se_sys_ioctl+0x115/0x190 [ 3174.064139][ T5729] __x64_sys_ioctl+0x7b/0x90 [ 3174.068754][ T5729] do_syscall_64+0x34/0x70 [ 3174.073185][ T5729] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3174.079097][ T5729] RIP: 0033:0x7f42b4f940c9 [ 3174.083533][ T5729] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3174.103185][ T5729] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3174.111641][ T5729] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3174.119651][ T5729] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000007 [ 3174.127631][ T5729] RBP: 00007f42b3cc51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3174.135622][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3174.143615][ T5729] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3174.151619][ T5729] ---[ end trace 66cfa9b859026dca ]--- [ 3174.157083][ T5729] loop0: failed to create sysfs files for events [ 3174.182333][ T5729] ------------[ cut here ]------------ [ 3174.187913][ T5729] kernfs: can not remove 'events', no directory [ 3174.194402][ T5729] WARNING: CPU: 0 PID: 5729 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 3174.204128][ T5729] Modules linked in: [ 3174.208056][ T5729] CPU: 0 PID: 5729 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3174.219712][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3174.229805][ T5729] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 3174.236061][ T5729] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 c1 00 9b ff 48 c7 c7 c0 32 2d 85 4c 89 fe 31 c0 e8 70 17 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 a2 00 9b ff bb fe ff ff ff 48 c7 c7 [ 3174.255702][ T5729] RSP: 0018:ffffc9000022fbf8 EFLAGS: 00010246 [ 3174.261814][ T5729] RAX: 472e348802324800 RBX: 0000000000000000 RCX: 0000000000040000 [ 3174.269804][ T5729] RDX: ffffc90003d81000 RSI: 000000000000179a RDI: 000000000000179b [ 3174.278588][ T5729] RBP: ffffc9000022fc10 R08: ffffffff81540db8 R09: fffff52000045ea5 [ 3174.286568][ T5729] R10: fffff52000045ea5 R11: 1ffff92000045ea4 R12: 0000000000000000 [ 3174.294595][ T5729] R13: ffffffff8653acc0 R14: 0000000000000000 R15: ffffffff85433480 [ 3174.302625][ T5729] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3174.311616][ T5729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3174.318247][ T5729] CR2: 0000001b2cf24000 CR3: 0000000113ba0000 CR4: 00000000003506b0 [ 3174.326249][ T5729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3174.334264][ T5729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3174.342424][ T5729] Call Trace: [ 3174.345733][ T5729] sysfs_remove_files+0xab/0x110 [ 3174.350700][ T5729] del_gendisk+0x278/0xe20 [ 3174.355140][ T5729] ? device_add_disk_no_queue_reg+0x30/0x30 [ 3174.361060][ T5729] ? sysvec_reschedule_ipi+0x84/0x160 [ 3174.366445][ T5729] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3174.372108][ T5729] ? delete_node+0x759/0x7b0 [ 3174.376709][ T5729] loop_remove+0x46/0xb0 [ 3174.380976][ T5729] loop_control_ioctl+0x67f/0x740 [ 3174.386023][ T5729] ? loop_remove+0xb0/0xb0 [ 3174.390471][ T5729] ? __fget_files+0x310/0x370 [ 3174.395161][ T5729] ? security_file_ioctl+0xb1/0xd0 [ 3174.400319][ T5729] ? loop_remove+0xb0/0xb0 [ 3174.404747][ T5729] __se_sys_ioctl+0x115/0x190 [ 3174.409446][ T5729] __x64_sys_ioctl+0x7b/0x90 [ 3174.414046][ T5729] do_syscall_64+0x34/0x70 [ 3174.418488][ T5729] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3174.424388][ T5729] RIP: 0033:0x7f42b4f940c9 [ 3174.428826][ T5729] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3174.448460][ T5729] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3174.456906][ T5729] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3174.464911][ T5729] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000007 [ 3174.472905][ T5729] RBP: 00007f42b4fefae9 R08: 0000000000000000 R09: 0000000000000000 [ 3174.480899][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3174.488896][ T5729] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3174.496901][ T5729] ---[ end trace 66cfa9b859026dcb ]--- [ 3174.502377][ T5729] ------------[ cut here ]------------ [ 3174.507840][ T5729] kernfs: can not remove 'events_async', no directory [ 3174.514839][ T5729] WARNING: CPU: 0 PID: 5729 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 3174.524573][ T5729] Modules linked in: [ 3174.528514][ T5729] CPU: 0 PID: 5729 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3174.540156][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3174.550269][ T5729] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 3174.556520][ T5729] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 c1 00 9b ff 48 c7 c7 c0 32 2d 85 4c 89 fe 31 c0 e8 70 17 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 a2 00 9b ff bb fe ff ff ff 48 c7 c7 [ 3174.576668][ T5729] RSP: 0018:ffffc9000022fbf8 EFLAGS: 00010246 [ 3174.582877][ T5729] RAX: 472e348802324800 RBX: 0000000000000000 RCX: 0000000000040000 [ 3174.590873][ T5729] RDX: ffffc90003d81000 RSI: 000000000002bd44 RDI: 000000000002bd45 [ 3174.598871][ T5729] RBP: ffffc9000022fc10 R08: ffffffff81540db8 R09: fffff52000045ea5 [ 3174.606855][ T5729] R10: fffff52000045ea5 R11: 1ffff92000045ea4 R12: 0000000000000000 [ 3174.614852][ T5729] R13: ffffffff8653acc0 R14: 0000000000000000 R15: ffffffff85433560 [ 3174.622851][ T5729] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3174.631802][ T5729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3174.638422][ T5729] CR2: 0000001b2cf24000 CR3: 0000000113ba0000 CR4: 00000000003506b0 [ 3174.646420][ T5729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3174.654427][ T5729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3174.662422][ T5729] Call Trace: [ 3174.665723][ T5729] sysfs_remove_files+0xab/0x110 [ 3174.670679][ T5729] del_gendisk+0x278/0xe20 [ 3174.675123][ T5729] ? device_add_disk_no_queue_reg+0x30/0x30 [ 3174.681045][ T5729] ? sysvec_reschedule_ipi+0x84/0x160 [ 3174.686433][ T5729] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3174.692087][ T5729] ? delete_node+0x759/0x7b0 [ 3174.696783][ T5729] loop_remove+0x46/0xb0 [ 3174.701053][ T5729] loop_control_ioctl+0x67f/0x740 [ 3174.706087][ T5729] ? loop_remove+0xb0/0xb0 [ 3174.710525][ T5729] ? __fget_files+0x310/0x370 [ 3174.715213][ T5729] ? security_file_ioctl+0xb1/0xd0 [ 3174.720343][ T5729] ? loop_remove+0xb0/0xb0 [ 3174.724770][ T5729] __se_sys_ioctl+0x115/0x190 [ 3174.729467][ T5729] __x64_sys_ioctl+0x7b/0x90 [ 3174.734066][ T5729] do_syscall_64+0x34/0x70 [ 3174.738515][ T5729] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3174.744418][ T5729] RIP: 0033:0x7f42b4f940c9 [ 3174.748856][ T5729] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3174.768921][ T5729] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3174.777361][ T5729] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3174.785359][ T5729] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000007 [ 3174.793353][ T5729] RBP: 00007f42b4fefae9 R08: 0000000000000000 R09: 0000000000000000 [ 3174.801341][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3174.809334][ T5729] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3174.817332][ T5729] ---[ end trace 66cfa9b859026dcc ]--- [ 3174.822820][ T5729] ------------[ cut here ]------------ [ 3174.829082][ T5729] kernfs: can not remove 'events_poll_msecs', no directory [ 3174.837002][ T5729] WARNING: CPU: 0 PID: 5729 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 3174.846813][ T5729] Modules linked in: [ 3174.851969][ T5729] CPU: 0 PID: 5729 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3174.863605][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3174.873695][ T5729] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 3174.879950][ T5729] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 c1 00 9b ff 48 c7 c7 c0 32 2d 85 4c 89 fe 31 c0 e8 70 17 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 a2 00 9b ff bb fe ff ff ff 48 c7 c7 [ 3174.899592][ T5729] RSP: 0018:ffffc9000022fbf8 EFLAGS: 00010246 [ 3174.905781][ T5729] RAX: 472e348802324800 RBX: 0000000000000000 RCX: 0000000000040000 [ 3174.913774][ T5729] RDX: ffffc90003d81000 RSI: 000000000003ffff RDI: 0000000000040000 [ 3174.921771][ T5729] RBP: ffffc9000022fc10 R08: ffffffff81540db8 R09: fffff52000045ea5 [ 3174.929878][ T5729] R10: fffff52000045ea5 R11: 1ffff92000045ea4 R12: 0000000000000000 [ 3174.937860][ T5729] R13: ffffffff8653acc0 R14: 0000000000000000 R15: ffffffff854335c0 [ 3174.945858][ T5729] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3174.954811][ T5729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3174.961471][ T5729] CR2: 0000001b2cf24000 CR3: 0000000113ba0000 CR4: 00000000003506b0 [ 3174.969541][ T5729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3174.977581][ T5729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3174.985767][ T5729] Call Trace: [ 3174.989911][ T5729] sysfs_remove_files+0xab/0x110 [ 3174.994868][ T5729] del_gendisk+0x278/0xe20 [ 3174.999333][ T5729] ? device_add_disk_no_queue_reg+0x30/0x30 [ 3175.005247][ T5729] ? sysvec_reschedule_ipi+0x84/0x160 [ 3175.010691][ T5729] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3175.016342][ T5729] ? delete_node+0x759/0x7b0 [ 3175.020985][ T5729] loop_remove+0x46/0xb0 [ 3175.025267][ T5729] loop_control_ioctl+0x67f/0x740 [ 3175.030325][ T5729] ? loop_remove+0xb0/0xb0 [ 3175.034777][ T5729] ? __fget_files+0x310/0x370 [ 3175.039492][ T5729] ? security_file_ioctl+0xb1/0xd0 [ 3175.044633][ T5729] ? loop_remove+0xb0/0xb0 [ 3175.049100][ T5729] __se_sys_ioctl+0x115/0x190 [ 3175.053798][ T5729] __x64_sys_ioctl+0x7b/0x90 [ 3175.058430][ T5729] do_syscall_64+0x34/0x70 [ 3175.063977][ T5729] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3175.069923][ T5729] RIP: 0033:0x7f42b4f940c9 [ 3175.074355][ T5729] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3175.094035][ T5729] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3175.102527][ T5729] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3175.110527][ T5729] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000007 [ 3175.118567][ T5729] RBP: 00007f42b4fefae9 R08: 0000000000000000 R09: 0000000000000000 [ 3175.126582][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3175.134590][ T5729] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3175.142614][ T5729] ---[ end trace 66cfa9b859026dcd ]--- [ 3175.148308][ T5729] ------------[ cut here ]------------ [ 3175.153771][ T5729] kernfs: can not remove 'bdi', no directory [ 3175.160022][ T5729] WARNING: CPU: 0 PID: 5729 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 3175.169751][ T5729] Modules linked in: [ 3175.173667][ T5729] CPU: 0 PID: 5729 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3175.185316][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3175.195446][ T5729] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 3175.201710][ T5729] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 c1 00 9b ff 48 c7 c7 c0 32 2d 85 4c 89 fe 31 c0 e8 70 17 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 a2 00 9b ff bb fe ff ff ff 48 c7 c7 [ 3175.221371][ T5729] RSP: 0018:ffffc9000022fc18 EFLAGS: 00010246 [ 3175.227461][ T5729] RAX: 472e348802324800 RBX: 0000000000000000 RCX: 0000000000040000 [ 3175.235584][ T5729] RDX: ffffc90003d81000 RSI: 000000000003ffff RDI: 0000000000040000 [ 3175.243605][ T5729] RBP: ffffc9000022fc30 R08: ffffffff81540db8 R09: fffff52000045ea9 [ 3175.251651][ T5729] R10: fffff52000045ea9 R11: 1ffff92000045ea8 R12: 0000000000000240 [ 3175.259689][ T5729] R13: ffff888191661030 R14: 0000000000000000 R15: ffffffff85432e60 [ 3175.267779][ T5729] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3175.276746][ T5729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3175.283370][ T5729] CR2: 0000001b2cf24000 CR3: 0000000113ba0000 CR4: 00000000003506b0 [ 3175.291370][ T5729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3175.299362][ T5729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3175.307335][ T5729] Call Trace: [ 3175.310651][ T5729] sysfs_remove_link+0x50/0x60 [ 3175.315455][ T5729] del_gendisk+0x7cd/0xe20 [ 3175.319950][ T5729] ? device_add_disk_no_queue_reg+0x30/0x30 [ 3175.339373][ T5732] __nla_validate_parse: 6 callbacks suppressed [ 3175.339382][ T5732] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3175.369197][ T5729] ? sysvec_reschedule_ipi+0x84/0x160 [ 3175.374724][ T5729] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3175.380521][ T5729] ? delete_node+0x759/0x7b0 [ 3175.385241][ T5729] loop_remove+0x46/0xb0 [ 3175.389619][ T5729] loop_control_ioctl+0x67f/0x740 [ 3175.394775][ T5729] ? loop_remove+0xb0/0xb0 [ 3175.399327][ T5729] ? __fget_files+0x310/0x370 [ 3175.404139][ T5729] ? security_file_ioctl+0xb1/0xd0 [ 3175.409416][ T5729] ? loop_remove+0xb0/0xb0 [ 3175.413979][ T5729] __se_sys_ioctl+0x115/0x190 [ 3175.418815][ T5729] __x64_sys_ioctl+0x7b/0x90 [ 3175.423542][ T5729] do_syscall_64+0x34/0x70 [ 3175.428087][ T5729] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3175.434130][ T5729] RIP: 0033:0x7f42b4f940c9 [ 3175.438779][ T5729] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3175.458527][ T5729] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3175.467074][ T5729] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3175.475193][ T5729] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000007 [ 3175.483300][ T5729] RBP: 00007f42b4fefae9 R08: 0000000000000000 R09: 0000000000000000 [ 3175.491412][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3175.499518][ T5729] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3175.507645][ T5729] ---[ end trace 66cfa9b859026dce ]--- [ 3175.520471][ T5729] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 3175.532162][ T5729] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 3175.540556][ T5729] CPU: 0 PID: 5729 Comm: syz-executor.4 Tainted: G W 5.10.160-syzkaller-01321-g003c389455eb #0 [ 3175.552146][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3175.562181][ T5729] RIP: 0010:strlen+0x3a/0x80 [ 3175.566745][ T5729] Code: c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 3175.586320][ T5729] RSP: 0018:ffffc9000022fb68 EFLAGS: 00010246 [ 3175.592385][ T5729] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 3175.600346][ T5729] RDX: ffffc90003d81000 RSI: 000000000003ffff RDI: 0000000000000000 [ 3175.608305][ T5729] RBP: ffffc9000022fb88 R08: ffffffff81d1f63c R09: fffff52000045f75 [ 3175.616256][ T5729] R10: fffff52000045f75 R11: 1ffff92000045f74 R12: ffffffffffffffff [ 3175.624206][ T5729] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 3175.632153][ T5729] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3175.641060][ T5729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3175.647616][ T5729] CR2: 0000001b2c323000 CR3: 0000000113ba0000 CR4: 00000000003506b0 [ 3175.655564][ T5729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3175.663507][ T5729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3175.671546][ T5729] Call Trace: [ 3175.674814][ T5729] kernfs_name_hash+0x21/0x240 [ 3175.679559][ T5729] kernfs_find_ns+0x72/0x280 [ 3175.684125][ T5729] kernfs_remove_by_name_ns+0x3a/0x110 [ 3175.689560][ T5729] sysfs_remove_link+0x50/0x60 [ 3175.694297][ T5729] del_gendisk+0xbe0/0xe20 [ 3175.698692][ T5729] ? device_add_disk_no_queue_reg+0x30/0x30 [ 3175.704568][ T5729] ? sysvec_reschedule_ipi+0x84/0x160 [ 3175.710090][ T5729] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 3175.715695][ T5729] ? delete_node+0x759/0x7b0 [ 3175.720262][ T5729] loop_remove+0x46/0xb0 [ 3175.724481][ T5729] loop_control_ioctl+0x67f/0x740 [ 3175.729479][ T5729] ? loop_remove+0xb0/0xb0 [ 3175.733958][ T5729] ? __fget_files+0x310/0x370 [ 3175.738616][ T5729] ? security_file_ioctl+0xb1/0xd0 [ 3175.743702][ T5729] ? loop_remove+0xb0/0xb0 [ 3175.748103][ T5729] __se_sys_ioctl+0x115/0x190 [ 3175.752761][ T5729] __x64_sys_ioctl+0x7b/0x90 [ 3175.757325][ T5729] do_syscall_64+0x34/0x70 [ 3175.761718][ T5729] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3175.767595][ T5729] RIP: 0033:0x7f42b4f940c9 [ 3175.771986][ T5729] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3175.791564][ T5729] RSP: 002b:00007f42b3cc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3175.799949][ T5729] RAX: ffffffffffffffda RBX: 00007f42b50b4120 RCX: 00007f42b4f940c9 [ 3175.807892][ T5729] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000007 [ 3175.815839][ T5729] RBP: 00007f42b4fefae9 R08: 0000000000000000 R09: 0000000000000000 [ 3175.823783][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3175.831740][ T5729] R13: 00007ffdd09223af R14: 00007f42b3cc5300 R15: 0000000000022000 [ 3175.839686][ T5729] Modules linked in: [ 3175.844059][ T5729] ---[ end trace 66cfa9b859026dcf ]--- [ 3175.849680][ T5729] RIP: 0010:strlen+0x3a/0x80 [ 3175.854400][ T5729] Code: c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 3175.874168][ T5729] RSP: 0018:ffffc9000022fb68 EFLAGS: 00010246 [ 3175.880388][ T5729] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 3175.888495][ T5729] RDX: ffffc90003d81000 RSI: 000000000003ffff RDI: 0000000000000000 [ 3175.897373][ T5729] RBP: ffffc9000022fb88 R08: ffffffff81d1f63c R09: fffff52000045f75 [ 3175.905533][ T5729] R10: fffff52000045f75 R11: 1ffff92000045f74 R12: ffffffffffffffff [ 3175.913640][ T5729] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 3175.921746][ T5729] FS: 00007f42b3cc5700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3175.930816][ T5729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3175.937524][ T5729] CR2: 0000001b2c323000 CR3: 0000000113ba0000 CR4: 00000000003506b0 [ 3175.945643][ T5729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3175.953752][ T5729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3175.961852][ T5729] Kernel panic - not syncing: Fatal exception [ 3175.968040][ T5729] Kernel Offset: disabled [ 3175.972341][ T5729] Rebooting in 86400 seconds..