ink_get_family_id$mptcp(&(0x7f0000000380), r1) openat$cgroup_pressure(r1, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) openat$cgroup_pressure(r1, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:02:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x1) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 23:02:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2107.558509][ T9255] Unknown ioctl 19585 23:02:48 executing program 1: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:48 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 23:02:48 executing program 4: r0 = socket(0x11, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd59, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000240)}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg1\x00'}) r4 = accept$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000040)=0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000180)=0x75d, 0x4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x2) 23:02:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xb0, 0x80000) getegid() ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) [ 2107.590437][ T9274] Unknown ioctl 19585 23:02:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:48 executing program 1: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:49 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xb0, 0x80000) (async) getegid() ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) 23:02:49 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:49 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:49 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xb0, 0x80000) getegid() ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0xb0, 0x80000) (async) getegid() (async) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) (async) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8094) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) syz_open_dev$hidraw(&(0x7f0000000340), 0x0, 0x400100) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x7fffffffffffffff, 0x22000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x98000, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r8) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r8) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x50, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040d28bd7000fedbdf250b0000002c0006800600010002000000050002000900000008000700", @ANYRES32=0x0, @ANYBLOB="08000300e000000208000700", @ANYRES32=r10, @ANYBLOB="08000300050000002c000680050002000800000008000600080000000800060002000000050002001f000200060005004e2000000800020005000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r11) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r12, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1004}, 0x4840) r13 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x202, 0x0) ioctl$LOOP_CTL_ADD(r14, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r13) 23:02:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x1010, r0, 0xadbae000) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8, 0x7ff}, @timestamp, @window={0x3, 0x37b0, 0x80}, @window={0x3, 0x4, 0x4}, @sack_perm], 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x2, 0x12, r2, 0x0) 23:02:49 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) 23:02:49 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x1010, r0, 0xadbae000) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8, 0x7ff}, @timestamp, @window={0x3, 0x37b0, 0x80}, @window={0x3, 0x4, 0x4}, @sack_perm], 0x5) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x2, 0x12, r2, 0x0) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) 23:02:49 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, 0x15, 0x1, 0x70bd27}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) 23:02:49 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x1010, r0, 0xadbae000) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8, 0x7ff}, @timestamp, @window={0x3, 0x37b0, 0x80}, @window={0x3, 0x4, 0x4}, @sack_perm], 0x5) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x10) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x2, 0x12, r2, 0x0) [ 2107.861343][ T9329] Unknown ioctl 19584 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:sshd_exec_t:s0\x00', 0x21) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xee}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x40}}, 0x8010054) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (fail_nth: 1) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:sshd_exec_t:s0\x00', 0x21) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xee}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x40}}, 0x8010054) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async) 23:02:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044004}, 0x40400d1) r2 = socket(0xa, 0x3, 0xe0) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:sshd_exec_t:s0\x00', 0x21) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xee}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x40}}, 0x8010054) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x2, 0x2) 23:02:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044004}, 0x40400d1) r2 = socket(0xa, 0x3, 0xe0) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044004}, 0x40400d1) (async) socket(0xa, 0x3, 0xe0) (async) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) (async) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (fail_nth: 1) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044004}, 0x40400d1) r2 = socket(0xa, 0x3, 0xe0) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044004}, 0x40400d1) (async) socket(0xa, 0x3, 0xe0) (async) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) (async) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (rerun: 32) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:sshd_exec_t:s0\x00', 0x21) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8001, 0x1) read$hidraw(r1, &(0x7f0000000100)=""/183, 0xb7) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:sshd_exec_t:s0\x00', 0x21) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b49, 0x2) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x2, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080), 0x4) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async, rerun: 32) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8001, 0x1) (rerun: 32) read$hidraw(r1, &(0x7f0000000100)=""/183, 0xb7) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:sshd_exec_t:s0\x00', 0x21) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080), 0x4) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8001, 0x1) read$hidraw(r1, &(0x7f0000000100)=""/183, 0xb7) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:sshd_exec_t:s0\x00', 0x21) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c82, 0x2) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b49, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x168, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x168}, 0x1, 0x0, 0x0, 0x801}, 0x80) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x541b, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 1: sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg0\x00'}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:02:49 executing program 1: sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5421, 0x2) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x168, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x168}, 0x1, 0x0, 0x0, 0x801}, 0x80) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c82, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 1: sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg0\x00'}) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:02:49 executing program 4: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:49 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x168, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x168}, 0x1, 0x0, 0x0, 0x801}, 0x80) 23:02:49 executing program 1: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:49 executing program 4: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x2) 23:02:49 executing program 4: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2108.296692][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory 23:02:49 executing program 1: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x541b, 0x2) 23:02:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg0\x00'}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg0\x00'}) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) (async) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 1: socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5451, 0x2) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5421, 0x2) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5452, 0x2) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:49 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8082400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) r7 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x8082) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r8) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r9) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r7) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x2) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5460, 0x2) 23:02:49 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8082400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) (async) r7 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x8082) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r8) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r9) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r10) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r7) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5451, 0x2) 23:02:49 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setns(r0, 0x80) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x1010, 0xffffffffffffffff, 0xb1fcf000) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) gettid() (async) r6 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8082400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) (async) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8082400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) r7 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x8082) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r8) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r10) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r7) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r7) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x40049409, 0x2) 23:02:49 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setns(r0, 0x80) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) (async) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x1010, 0xffffffffffffffff, 0xb1fcf000) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5452, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x40086602, 0x2) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5460, 0x2) 23:02:49 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setns(r0, 0x80) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) (async, rerun: 32) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) (async, rerun: 32) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x1010, 0xffffffffffffffff, 0xb1fcf000) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101201, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x4004844) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x60f80, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r2, 0x1, r0, 0x8, 0x80000}) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x40087602, 0x2) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, 0x0, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x40049409, 0x2) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4020940d, 0x2) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, 0x0, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101201, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x4004844) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x60f80, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r2, 0x1, r0, 0x8, 0x80000}) 23:02:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 23:02:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 23:02:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x40086602, 0x2) 23:02:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x80086601, 0x2) 23:02:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101201, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x4004844) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x60f80, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r2, 0x1, r0, 0x8, 0x80000}) 23:02:49 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:02:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, 0x0, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x80087601, 0x2) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x7d01, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x210, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c800}, 0x90) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x40087602, 0x2) 23:02:50 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000200), 0x4, &(0x7f0000000340)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x480000) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000050037000100030005002a000000000005002e0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x220040, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r4) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0045878, 0x2) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x7d01, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x210, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c800}, 0x90) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x0, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0045878, 0x2) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4020940d, 0x2) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000200), 0x4, &(0x7f0000000340)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x480000) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000050037000100030005002a000000000005002e0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x220040, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r4) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000200), 0x4, &(0x7f0000000340)) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x480000) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000050037000100030005002a000000000005002e0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x220040, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r4) (async) 23:02:50 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x7d01, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x7d01, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x210, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c800}, 0x90) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x4a00) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x3, 0x4) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x0, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:50 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000200), 0x4, &(0x7f0000000340)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x480000) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000050037000100030005002a000000000005002e0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x220040, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) (async) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r4) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x80086601, 0x2) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0189436, 0x2) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x80087601, 0x2) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x0, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc020660b, 0x2) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x4a00) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x3, 0x4) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0045878, 0x2) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xf1b, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x8, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x11) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 23:02:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0045878, 0x2) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc0189436, 0x2) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0xc020660b, 0x2) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x4a00) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x3, 0x4) 23:02:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xf1b, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x8, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x11) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x1) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 23:02:50 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x88001, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x298, 0x15, 0x1, 0x0, 0x0, {0xa}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "8f7c9d204b540716f3b1657c94ce96367ffb6d17656ed1286bca930f19ec584dd4033fed2f95d7884fd3a6fe48872cd51fe67168d5fd7ca3932ee2dfc6b22435635fcbbd3966147766c46df151e879a870335f261bc6d9bea4e1c2270e93aa66468df0726c8374a6e3154c284fa5015e4e5b5174f2cddb601b501f7bbc9ec76675101b1623"}]}, 0x298}}, 0x0) 23:02:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xf1b, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x8, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x11) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x1) (rerun: 64) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x410401, 0x0) 23:02:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "bb56ce2460d61814bff6fc8b15c1c9ae2fd58cf7788ce933aa18ef8466f03d7dd08072f2f01b325b774ef26360eaa225bc336236a8c650a78e49c9d831cdf38b480d904ff5835bff034ed7c24037c9b1c11a53e0e85a1b3d6f1e24bed3d193906864a02baf8cc2fffdb23de0a528500fa4fdf03f4cf4113b107aaaa89b6e1fef79d762b5d119e82855fb9facb99a164d0f64c1650d41c9ec78f7b9bc674a370f58fc8bb9fb82725501932ee41c615937fab4a17be256da9b5ed85bc7dd1609d88a0b345b310a6853fd0783fb1d709f5314ba7b1a5ad2d065053c7976e3c028f7e15b55b8889ff148acb0aa313f0e"}]}, 0x20c}}, 0x0) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x65623a4bd936446, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x88001, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x8, 0x4) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x88001, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x410401, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x410401, 0x0) (async) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x118, 0x15, 0x1, 0x0, 0x0, {0xa}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "967d5d52c7aa5672443ca7ed0126b916f93dcb1dc508031121c6719fc4578a9ef07efc1bafc2695e5a1c7a1b379b7a87da9ca4170636c465b034d781d3ebaeca1269d9db30b753f6fb398d39244833fc4527ccd0c3703fb5a86d905d2cd1a70c8e56d8d5c84b34632a0bf3c8fae1da3b470f0e30ffb15374d1765d8ab9b9be836f4fd949b4fd2d2bc9777ff2ba118d71efcf579379daf973ae199efc49f91def0e05f1de37cbf09f90776190056ec99ce8fde39c66ac7b7cab33c306c6150a1ec97b962212f3"}]}, 0x118}}, 0x0) [ 2108.858852][ T9730] Unknown ioctl 19585 23:02:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x65623a4bd936446, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x410401, 0x0) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/4087, 0xff7}], 0x1, &(0x7f0000001100)=""/4096, 0x1000}, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x18810) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) getresgid(&(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r3, 0x400, 0x7, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x11) getgroups(0x4, &(0x7f0000002300)=[0xee01, r1, 0x0, 0x0]) 23:02:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x4c}}, 0x0) 23:02:50 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x65623a4bd936446, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x65623a4bd936446, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x88001, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2108.900425][ T9752] Unknown ioctl 19585 [ 2108.910816][ T9760] Unknown ioctl 19585 23:02:50 executing program 3: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:50 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/4087, 0xff7}], 0x1, &(0x7f0000001100)=""/4096, 0x1000}, 0x1) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x18810) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) getresgid(&(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r3, 0x400, 0x7, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x11) (async, rerun: 32) getgroups(0x4, &(0x7f0000002300)=[0xee01, r1, 0x0, 0x0]) (rerun: 32) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 1: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/4087, 0xff7}], 0x1, &(0x7f0000001100)=""/4096, 0x1000}, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x18810) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) getresgid(&(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r3, 0x400, 0x7, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x11) getgroups(0x4, &(0x7f0000002300)=[0xee01, r1, 0x0, 0x0]) 23:02:50 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:50 executing program 3: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) 23:02:50 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000600), 0x7fff, 0x141400) mmap$IORING_OFF_SQES(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x2000006, 0x810, r0, 0x10000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x2, 0x6, 0x8, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0xfff, 0x22, &(0x7f0000000300)=""/34, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r2], &(0x7f0000000400)=[{0x4, 0x4, 0x3, 0xb}, {0x1, 0x3, 0x5, 0x2}]}, 0x90) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xc4a}, [@ldst={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffe0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x4, 0x3, 0xc9e}, 0x10, 0x2553c, r4, 0x0, &(0x7f0000000500)=[r5]}, 0x90) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x7) 23:02:50 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) [ 2108.946277][ T9771] Unknown ioctl 19585 23:02:50 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8681, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xf1b, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x8, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x11) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 23:02:50 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/4087, 0xff7}], 0x1, &(0x7f0000001100)=""/4096, 0x1000}, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x18810) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) getresgid(&(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r3, 0x400, 0x7, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x11) getgroups(0x4, &(0x7f0000002300)=[0xee01, r1, 0x0, 0x0]) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/4087, 0xff7}], 0x1, &(0x7f0000001100)=""/4096, 0x1000}, 0x1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x18810) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (async) getresgid(&(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000002380), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r3, 0x400, 0x7, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x11) (async) getgroups(0x4, &(0x7f0000002300)=[0xee01, r1, 0x0, 0x0]) (async) 23:02:50 executing program 3: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:50 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000600), 0x7fff, 0x141400) mmap$IORING_OFF_SQES(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x2000006, 0x810, r0, 0x10000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x2, 0x6, 0x8, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0xfff, 0x22, &(0x7f0000000300)=""/34, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r2], &(0x7f0000000400)=[{0x4, 0x4, 0x3, 0xb}, {0x1, 0x3, 0x5, 0x2}]}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xc4a}, [@ldst={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffe0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x4, 0x3, 0xc9e}, 0x10, 0x2553c, r4, 0x0, &(0x7f0000000500)=[r5]}, 0x90) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) (async) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x7) (async) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x7) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8681, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8681, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:02:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xf1b, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x8, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x11) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 23:02:50 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000600), 0x7fff, 0x141400) mmap$IORING_OFF_SQES(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x2000006, 0x810, r0, 0x10000000) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async, rerun: 32) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x2, 0x6, 0x8, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0xfff, 0x22, &(0x7f0000000300)=""/34, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r2], &(0x7f0000000400)=[{0x4, 0x4, 0x3, 0xb}, {0x1, 0x3, 0x5, 0x2}]}, 0x90) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xc4a}, [@ldst={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffe0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x4, 0x3, 0xc9e}, 0x10, 0x2553c, r4, 0x0, &(0x7f0000000500)=[r5]}, 0x90) (async, rerun: 64) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 64) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x7) (rerun: 64) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x4000010, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) openat$cgroup_pressure(r1, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) 23:02:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8681, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x86000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x161340, 0x0) [ 2109.022137][ T9788] debugfs: Directory 'loop2' with parent 'block' already present! [ 2109.051542][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x86000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x161340, 0x0) 23:02:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0xf1b, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x8, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x11) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) [ 2109.094496][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2109.106751][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory 23:02:50 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="00020000", @ANYRES16=r0, @ANYBLOB="000229bd7000fddbdf250b0000000800030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="086f21bd7000fedbdf25f9cd0000050005000400000008000300030000000803090300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x4000010, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) openat$cgroup_pressure(r1, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x800) 23:02:50 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="00020000", @ANYRES16=r0, @ANYBLOB="000229bd7000fddbdf250b0000000800030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="086f21bd7000fedbdf25f9cd0000050005000400000008000300030000000803090300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) 23:02:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="00020000", @ANYRES16=r0, @ANYBLOB="000229bd7000fddbdf250b0000000800030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="086f21bd7000fedbdf25f9cd0000050005000400000008000300030000000803090300000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) 23:02:50 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r1, 0xfffffff9, 0x80000}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r5 = socket(0xb, 0x4, 0x8) r6 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x20, 0x8}, @window={0x3, 0xe95b, 0x4423}, @sack_perm, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x7) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 23:02:50 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r1, 0xfffffff9, 0x80000}) (async, rerun: 64) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (rerun: 64) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r5 = socket(0xb, 0x4, 0x8) (async) r6 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x20, 0x8}, @window={0x3, 0xe95b, 0x4423}, @sack_perm, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x7) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 23:02:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x800) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x800) (async) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x86000, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x161340, 0x0) 23:02:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x4000010, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async, rerun: 32) openat$cgroup_pressure(r1, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) (rerun: 32) 23:02:50 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r1, 0xfffffff9, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r1, 0xfffffff9, 0x80000}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) socket(0xb, 0x4, 0x8) (async) r5 = socket(0xb, 0x4, 0x8) r6 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x20, 0x8}, @window={0x3, 0xe95b, 0x4423}, @sack_perm, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x7) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 23:02:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0xb) 23:02:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}}, 0x800) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0xb) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async) 23:02:50 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r1, 0xfffffff9, 0x80000}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r5 = socket(0xb, 0x4, 0x8) r6 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x20, 0x8}, @window={0x3, 0xe95b, 0x4423}, @sack_perm, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x7) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 23:02:50 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="ace0000001000000207ad353c483ed1433da0000000000000000000000e0000001000000000000000000180000ac1414aa0000000000000000000000007f000000000000ac00000000ac1e00000000000000000000000000007f0000010000000000000000000000ffffffff000000000100"/133]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'rose0\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2c000004) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c81, 0x2) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}]}, 0x1c}}, 0x90) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r1, 0xfffffff9, 0x80000}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r5 = socket(0xb, 0x4, 0x8) r6 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x20, 0x8}, @window={0x3, 0xe95b, 0x4423}, @sack_perm, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x7) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 23:02:50 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0xb) 23:02:50 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="ace0000001000000207ad353c483ed1433da0000000000000000000000e0000001000000000000000000180000ac1414aa0000000000000000000000007f000000000000ac00000000ac1e00000000000000000000000000007f0000010000000000000000000000ffffffff000000000100"/133]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'rose0\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2c000004) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c81, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="ace0000001000000207ad353c483ed1433da0000000000000000000000e0000001000000000000000000180000ac1414aa0000000000000000000000007f000000000000ac00000000ac1e00000000000000000000000000007f0000010000000000000000000000ffffffff000000000100"/133]}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'rose0\x00'}) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2c000004) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c81, 0x2) (async) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r1, 0xfffffff9, 0x80000}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r5 = socket(0xb, 0x4, 0x8) r6 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x20, 0x8}, @window={0x3, 0xe95b, 0x4423}, @sack_perm, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x7) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x13900) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}]}, 0x1c}}, 0x90) 23:02:50 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="ace0000001000000207ad353c483ed1433da0000000000000000000000e0000001000000000000000000180000ac1414aa0000000000000000000000007f000000000000ac00000000ac1e00000000000000000000000000007f0000010000000000000000000000ffffffff000000000100"/133]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'rose0\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2c000004) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c81, 0x2) [ 2109.329818][ T9921] Unknown ioctl 19586 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x204282, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r3, 0x25, 0x2, @void}, 0x10) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async, rerun: 64) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x13900) (rerun: 64) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}]}, 0x1c}}, 0x90) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x204282, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r3, 0x25, 0x2, @void}, 0x10) [ 2109.376579][ T9956] Unknown ioctl 19586 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x13900) 23:02:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xfa041, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200883, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x204282, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r3, 0x25, 0x2, @void}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x204282, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000100)}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r3, 0x25, 0x2, @void}, 0x10) (async) [ 2109.412317][ T9972] Unknown ioctl 19586 23:02:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101201, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x4004844) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x60f80, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r2, 0x1, r0, 0x8, 0x80000}) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r0, 0x800, 0x80000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x3}, {0x6}]}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200883, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xfa041, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xfa041, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) 23:02:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200883, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) 23:02:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xfa041, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) [ 2109.539683][ T23] audit: type=1326 audit(1699743770.879:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57a4cf5ae9 code=0x0 23:02:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 23:02:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r0, 0x800, 0x80000}) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x3}, {0x6}]}) (async, rerun: 32) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) 23:02:51 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x24c200, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200901, 0x0) accept$nfc_llcp(r1, 0x0, &(0x7f0000000040)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:51 executing program 5: recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000380)=""/234, 0xea}], 0x5, &(0x7f0000000480)=""/85, 0x55}, 0x120) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) recvmsg$can_raw(r0, &(0x7f00000009c0)={&(0x7f0000000580)=@nl=@unspec, 0x80, &(0x7f0000000880)=[{&(0x7f00000000c0)}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/187, 0xbb}, {&(0x7f0000000780)=""/230, 0xe6}], 0x4, &(0x7f00000008c0)=""/245, 0xf5}, 0x8140) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:51 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x24c200, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200901, 0x0) accept$nfc_llcp(r1, 0x0, &(0x7f0000000040)) (async) accept$nfc_llcp(r1, 0x0, &(0x7f0000000040)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:51 executing program 5: recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000380)=""/234, 0xea}], 0x5, &(0x7f0000000480)=""/85, 0x55}, 0x120) (async) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000380)=""/234, 0xea}], 0x5, &(0x7f0000000480)=""/85, 0x55}, 0x120) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) recvmsg$can_raw(r0, &(0x7f00000009c0)={&(0x7f0000000580)=@nl=@unspec, 0x80, &(0x7f0000000880)=[{&(0x7f00000000c0)}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/187, 0xbb}, {&(0x7f0000000780)=""/230, 0xe6}], 0x4, &(0x7f00000008c0)=""/245, 0xf5}, 0x8140) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async, rerun: 32) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) (async, rerun: 32) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) (async, rerun: 64) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) (rerun: 64) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 23:02:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 23:02:51 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x24c200, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200901, 0x0) accept$nfc_llcp(r1, 0x0, &(0x7f0000000040)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x24c200, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200901, 0x0) (async) accept$nfc_llcp(r1, 0x0, &(0x7f0000000040)) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:02:51 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x791501, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, r1, 0x5, 0x2, 0x2}, 0x48) [ 2110.403790][ T23] audit: type=1326 audit(1699743771.749:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f57a4cf5ae9 code=0x0 23:02:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r0, 0x800, 0x80000}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x3}, {0x6}]}) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) 23:02:52 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x791501, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, r1, 0x5, 0x2, 0x2}, 0x48) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x791501, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, r1, 0x5, 0x2, 0x2}, 0x48) (async) 23:02:52 executing program 5: recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000380)=""/234, 0xea}], 0x5, &(0x7f0000000480)=""/85, 0x55}, 0x120) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) recvmsg$can_raw(r0, &(0x7f00000009c0)={&(0x7f0000000580)=@nl=@unspec, 0x80, &(0x7f0000000880)=[{&(0x7f00000000c0)}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/187, 0xbb}, {&(0x7f0000000780)=""/230, 0xe6}], 0x4, &(0x7f00000008c0)=""/245, 0xf5}, 0x8140) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 23:02:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) (async) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 23:02:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 23:02:52 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x791501, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, r1, 0x5, 0x2, 0x2}, 0x48) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x791501, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, r1, 0x5, 0x2, 0x2}, 0x48) (async) 23:02:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x321, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4841}, 0x4080) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 23:02:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/loop-control\x00') 23:02:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x30240, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0101, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r2) prctl$PR_CAPBSET_READ(0x17, 0x16) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) [ 2111.255081][ T23] audit: type=1326 audit(1699743772.599:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57a4cf5ae9 code=0x0 23:02:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/loop-control\x00') (rerun: 32) 23:02:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x321, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4841}, 0x4080) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 23:02:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c82, 0x2) 23:02:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x30240, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0101, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) (async) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r2) prctl$PR_CAPBSET_READ(0x17, 0x16) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) (async) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 23:02:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x30240, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0101, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r2) (async) prctl$PR_CAPBSET_READ(0x17, 0x16) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) (async) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 23:02:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x321, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4841}, 0x4080) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 23:02:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) [ 2111.366486][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory 23:02:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x80, 0x2002) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/loop-control\x00') 23:02:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xa) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f0000000140)='%p \x00'}, 0x20) 23:02:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0) (async, rerun: 32) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x80, 0x2002) (rerun: 32) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:52 executing program 3: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@caif=@util, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1, &(0x7f0000000240)=""/53, 0x35}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 23:02:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004001}, 0x4080) 23:02:52 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x80, 0x2002) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004001}, 0x4080) 23:02:52 executing program 3: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@caif=@util, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1, &(0x7f0000000240)=""/53, 0x35}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 23:02:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xa) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f0000000140)='%p \x00'}, 0x20) 23:02:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 3: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@caif=@util, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1, &(0x7f0000000240)=""/53, 0x35}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 23:02:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xa) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f0000000140)='%p \x00'}, 0x20) 23:02:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x0, 0x400002) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0xfffffff7}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) r3 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x0, 0x0) r4 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) syz_clone3(&(0x7f0000000680)={0x1640fcf9a50d67db, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x3e}, &(0x7f0000000440)=""/212, 0xd4, &(0x7f0000000540)=""/210, &(0x7f0000000640)=[r3, r4, 0xffffffffffffffff], 0x3, {r5}}, 0x58) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000932b4591004496dbe4d763382231494d7d5be39ff032e6a145a4f9671a4f149537f2014c99dfaae10c7c78806950f4860dae08d2a71650748971a6259e7c3973c9f5592e80efbad32a8b938e5649fc7f8142c5460336aff803bc30addae74654949fa1935416966389862894d71e9aea7b0c1a57ddb7924f68cf01dab4bcbb84829fa424317fa149fc58c85db5f7c61c1a40e9961357311287407cdedd25fbdcd4", @ANYRES16=r6, @ANYBLOB="10002abd7000ffdbdf25000000002400030000000000000000000000000000000000000000000000000000000000000000000800050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 23:02:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004001}, 0x4080) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004001}, 0x4080) (async) 23:02:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x55f003, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x55f003, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x55f003, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) 23:02:52 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x0, 0x400002) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0xfffffff7}, 0x8) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) r3 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x0, 0x0) (async) r4 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) (async) syz_clone3(&(0x7f0000000680)={0x1640fcf9a50d67db, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x3e}, &(0x7f0000000440)=""/212, 0xd4, &(0x7f0000000540)=""/210, &(0x7f0000000640)=[r3, r4, 0xffffffffffffffff], 0x3, {r5}}, 0x58) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000932b4591004496dbe4d763382231494d7d5be39ff032e6a145a4f9671a4f149537f2014c99dfaae10c7c78806950f4860dae08d2a71650748971a6259e7c3973c9f5592e80efbad32a8b938e5649fc7f8142c5460336aff803bc30addae74654949fa1935416966389862894d71e9aea7b0c1a57ddb7924f68cf01dab4bcbb84829fa424317fa149fc58c85db5f7c61c1a40e9961357311287407cdedd25fbdcd4", @ANYRES16=r6, @ANYBLOB="10002abd7000ffdbdf25000000002400030000000000000000000000000000000000000000000000000000000000000000000800050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 23:02:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:52 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080)) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x55f003, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x0, 0x400002) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0xfffffff7}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) r3 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x0, 0x0) r4 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) syz_clone3(&(0x7f0000000680)={0x1640fcf9a50d67db, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x3e}, &(0x7f0000000440)=""/212, 0xd4, &(0x7f0000000540)=""/210, &(0x7f0000000640)=[r3, r4, 0xffffffffffffffff], 0x3, {r5}}, 0x58) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000932b4591004496dbe4d763382231494d7d5be39ff032e6a145a4f9671a4f149537f2014c99dfaae10c7c78806950f4860dae08d2a71650748971a6259e7c3973c9f5592e80efbad32a8b938e5649fc7f8142c5460336aff803bc30addae74654949fa1935416966389862894d71e9aea7b0c1a57ddb7924f68cf01dab4bcbb84829fa424317fa149fc58c85db5f7c61c1a40e9961357311287407cdedd25fbdcd4", @ANYRES16=r6, @ANYBLOB="10002abd7000ffdbdf25000000002400030000000000000000000000000000000000000000000000000000000000000000000800050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) syz_open_dev$vcsa(&(0x7f0000000200), 0x0, 0x400002) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0xfffffff7}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async) gettid() (async) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x0, 0x0) (async) gettid() (async) ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) (async) syz_clone3(&(0x7f0000000680)={0x1640fcf9a50d67db, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x3e}, &(0x7f0000000440)=""/212, 0xd4, &(0x7f0000000540)=""/210, &(0x7f0000000640)=[r3, r4, 0xffffffffffffffff], 0x3, {r5}}, 0x58) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000932b4591004496dbe4d763382231494d7d5be39ff032e6a145a4f9671a4f149537f2014c99dfaae10c7c78806950f4860dae08d2a71650748971a6259e7c3973c9f5592e80efbad32a8b938e5649fc7f8142c5460336aff803bc30addae74654949fa1935416966389862894d71e9aea7b0c1a57ddb7924f68cf01dab4bcbb84829fa424317fa149fc58c85db5f7c61c1a40e9961357311287407cdedd25fbdcd4", @ANYRES16=r6, @ANYBLOB="10002abd7000ffdbdf25000000002400030000000000000000000000000000000000000000000000000000000000000000000800050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) 23:02:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x292442, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="a841757c067693ccb0664bfd98cd59a6ac0335f3bd424f4165bfbe3f76f243d21a2e1f6411c0da0cc779da2f4967561050284d5e280b25543c1c289ddb7a54d6d401904549e27a2f6c26edd9f6891c0a75ad2f5443006226e7a9b745ad650ef728c3a326c7c51f2324cb59bdf1697731d9a608e6bf779e022e4997430a06891aac53aa11757ba0a702968b906e85e8c6e6845a16872195c36ac18137f6e9010a4ff2362f0afa1a086586fadc5276cd64e8eefd", @ANYBLOB="01002cbd7000ffdbdf2503000000060028000200000005002f000100000096e2838551f831f2574db82206520a0009000000"], 0x38}}, 0x20008010) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x800, 0x70bd29, 0x1, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7489}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x1) 23:02:53 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async, rerun: 32) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') syz_clone3(&(0x7f00000002c0)={0x20000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x41}, &(0x7f0000000200)=""/6, 0x6, &(0x7f0000000240)=""/6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0xa, {r0}}, 0x58) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xa) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48010000", @ANYRES16=r2, @ANYBLOB="00022abd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r3, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r6, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0002000000"], 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c800) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c81, 0x2) 23:02:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x292442, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="a841757c067693ccb0664bfd98cd59a6ac0335f3bd424f4165bfbe3f76f243d21a2e1f6411c0da0cc779da2f4967561050284d5e280b25543c1c289ddb7a54d6d401904549e27a2f6c26edd9f6891c0a75ad2f5443006226e7a9b745ad650ef728c3a326c7c51f2324cb59bdf1697731d9a608e6bf779e022e4997430a06891aac53aa11757ba0a702968b906e85e8c6e6845a16872195c36ac18137f6e9010a4ff2362f0afa1a086586fadc5276cd64e8eefd", @ANYBLOB="01002cbd7000ffdbdf2503000000060028000200000005002f000100000096e2838551f831f2574db82206520a0009000000"], 0x38}}, 0x20008010) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x800, 0x70bd29, 0x1, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7489}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x292442, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="a841757c067693ccb0664bfd98cd59a6ac0335f3bd424f4165bfbe3f76f243d21a2e1f6411c0da0cc779da2f4967561050284d5e280b25543c1c289ddb7a54d6d401904549e27a2f6c26edd9f6891c0a75ad2f5443006226e7a9b745ad650ef728c3a326c7c51f2324cb59bdf1697731d9a608e6bf779e022e4997430a06891aac53aa11757ba0a702968b906e85e8c6e6845a16872195c36ac18137f6e9010a4ff2362f0afa1a086586fadc5276cd64e8eefd", @ANYBLOB="01002cbd7000ffdbdf2503000000060028000200000005002f000100000096e2838551f831f2574db82206520a0009000000"], 0x38}}, 0x20008010) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x800, 0x70bd29, 0x1, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7489}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) 23:02:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:02:53 executing program 1: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:53 executing program 1: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) 23:02:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000000)="caca7a0b9c81c1450d9b255cc89b28916ad46ca26205048b9d7c3921be91c21d22f1c269f69f62a0afd54b527828d571bea32f6d52e1ee149ce2169f160cbb5ef8a6509bc2745f5bb80e5619c85814f3") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80050}, 0x80000) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:53 executing program 1: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) 23:02:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') syz_clone3(&(0x7f00000002c0)={0x20000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x41}, &(0x7f0000000200)=""/6, 0x6, &(0x7f0000000240)=""/6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0xa, {r0}}, 0x58) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) (async) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xa) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48010000", @ANYRES16=r2, @ANYBLOB="00022abd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r3, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r6, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0002000000"], 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c800) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c81, 0x2) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) (async) 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') (async) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') syz_clone3(&(0x7f00000002c0)={0x20000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x41}, &(0x7f0000000200)=""/6, 0x6, &(0x7f0000000240)=""/6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0xa, {r0}}, 0x58) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xa) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48010000", @ANYRES16=r2, @ANYBLOB="00022abd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r3, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r6, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0002000000"], 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c800) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c81, 0x2) 23:02:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x292442, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) (rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="a841757c067693ccb0664bfd98cd59a6ac0335f3bd424f4165bfbe3f76f243d21a2e1f6411c0da0cc779da2f4967561050284d5e280b25543c1c289ddb7a54d6d401904549e27a2f6c26edd9f6891c0a75ad2f5443006226e7a9b745ad650ef728c3a326c7c51f2324cb59bdf1697731d9a608e6bf779e022e4997430a06891aac53aa11757ba0a702968b906e85e8c6e6845a16872195c36ac18137f6e9010a4ff2362f0afa1a086586fadc5276cd64e8eefd", @ANYBLOB="01002cbd7000ffdbdf2503000000060028000200000005002f000100000096e2838551f831f2574db82206520a0009000000"], 0x38}}, 0x20008010) (async, rerun: 32) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x800, 0x70bd29, 0x1, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7489}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x1) 23:02:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000000)="caca7a0b9c81c1450d9b255cc89b28916ad46ca26205048b9d7c3921be91c21d22f1c269f69f62a0afd54b527828d571bea32f6d52e1ee149ce2169f160cbb5ef8a6509bc2745f5bb80e5619c85814f3") (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80050}, 0x80000) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, 0x2) 23:02:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10010, r0, 0xc25cc000) 23:02:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000000)="caca7a0b9c81c1450d9b255cc89b28916ad46ca26205048b9d7c3921be91c21d22f1c269f69f62a0afd54b527828d571bea32f6d52e1ee149ce2169f160cbb5ef8a6509bc2745f5bb80e5619c85814f3") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80050}, 0x80000) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000000)="caca7a0b9c81c1450d9b255cc89b28916ad46ca26205048b9d7c3921be91c21d22f1c269f69f62a0afd54b527828d571bea32f6d52e1ee149ce2169f160cbb5ef8a6509bc2745f5bb80e5619c85814f3") (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80050}, 0x80000) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) 23:02:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10010, r0, 0xc25cc000) 23:02:53 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) 23:02:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r3, 0x1, r1, 0x3}) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), 0x4) 23:02:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10010, r0, 0xc25cc000) 23:02:53 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) 23:02:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r3, 0x1, r1, 0x3}) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), 0x4) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (fail_nth: 1) 23:02:53 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) 23:02:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="7000fbdb9f2504000000050005000300000034007f1c07000200040000000600050000070000060001000200004fc0570008000700e1eda228a9c50a9af0bb41b36e5d40b057324d95a48076b00324988ba199f1c8d6a541483dca7809445bf371f80eb18eb16e4ebe3832d3914a5d8284600c85d951c58035fa341756cf3c9002d0001242ee786384f0c9a4ee9017597efdc3dd807bc682b900000000009a752cd5444071e158ab782e8656b1bd7a6985cc6b49e16cb89eb5eae1dca82a3a1ff29fd60faac84ec5aa3c6c18f7dea67a111a0d5581e4041b06bf6ff5fe3d62e3e8f1c4bfd6584eb42cab382251bcbeda7f7b", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa08000300ffffffff080002000200000005000500070000000800030000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000000)="29f3126f757784257d055f5708aba79b92674b21663c05d5d22ca526f67697b28045100ce31ff3") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r10, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0x2c}}, 0x4044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="2028ca2fe6cf8e1b5b003900a4c20136bf9d84e1a0fa1e0e8a000700000008002b0007230000080034e1ffff000082f3a131998e23b216fa460c89b1644d16bb0d33581ae15e49817cf80ab937b4f362"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xfc, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7d}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008805}, 0x84) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r15, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000b40), 0x5090c0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r15, 0x1, 0x80000}) ioctl$LOOP_CTL_ADD(r14, 0x4c81, 0x2) 23:02:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x44ce, '\x00', 0x0, r1, 0x3, 0x0, 0x2}, 0x48) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 23:02:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x44ce, '\x00', 0x0, r1, 0x3, 0x0, 0x2}, 0x48) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x44ce, '\x00', 0x0, r1, 0x3, 0x0, 0x2}, 0x48) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:02:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 1) [ 2111.916468][T10383] Unknown ioctl 35123 23:02:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r3, 0x1, r1, 0x3}) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), 0x4) 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) 23:02:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="7000fbdb9f2504000000050005000300000034007f1c07000200040000000600050000070000060001000200004fc0570008000700e1eda228a9c50a9af0bb41b36e5d40b057324d95a48076b00324988ba199f1c8d6a541483dca7809445bf371f80eb18eb16e4ebe3832d3914a5d8284600c85d951c58035fa341756cf3c9002d0001242ee786384f0c9a4ee9017597efdc3dd807bc682b900000000009a752cd5444071e158ab782e8656b1bd7a6985cc6b49e16cb89eb5eae1dca82a3a1ff29fd60faac84ec5aa3c6c18f7dea67a111a0d5581e4041b06bf6ff5fe3d62e3e8f1c4bfd6584eb42cab382251bcbeda7f7b", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa08000300ffffffff080002000200000005000500070000000800030000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000000)="29f3126f757784257d055f5708aba79b92674b21663c05d5d22ca526f67697b28045100ce31ff3") (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r10, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0x2c}}, 0x4044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="2028ca2fe6cf8e1b5b003900a4c20136bf9d84e1a0fa1e0e8a000700000008002b0007230000080034e1ffff000082f3a131998e23b216fa460c89b1644d16bb0d33581ae15e49817cf80ab937b4f362"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xfc, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7d}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008805}, 0x84) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r15, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000b40), 0x5090c0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r15, 0x1, 0x80000}) (async) ioctl$LOOP_CTL_ADD(r14, 0x4c81, 0x2) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x2, 0x2) 23:02:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x44ce, '\x00', 0x0, r1, 0x3, 0x0, 0x2}, 0x48) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2111.962185][T10399] FAULT_INJECTION: forcing a failure. [ 2111.962185][T10399] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.982153][T10399] CPU: 0 PID: 10399 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2111.985203][T10410] Unknown ioctl 35123 [ 2111.992193][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2111.992196][T10399] Call Trace: [ 2111.992213][T10399] dump_stack+0x1d8/0x241 [ 2111.992222][T10399] ? panic+0x896/0x896 [ 2111.992231][T10399] ? try_charge+0x1001/0x1510 [ 2111.992245][T10399] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2111.992258][T10399] should_fail+0x71f/0x880 [ 2111.992267][T10399] ? setup_fault_attr+0x3d0/0x3d0 [ 2111.992282][T10399] ? avc_flush+0x1f0/0x1f0 [ 2112.040635][T10399] ? check_preemption_disabled+0x9f/0x320 [ 2112.046180][T10399] ? loop_add+0x56/0x740 [ 2112.050256][T10399] should_failslab+0x5/0x20 [ 2112.054601][T10399] kmem_cache_alloc_trace+0x28/0x260 [ 2112.059721][T10399] loop_add+0x56/0x740 [ 2112.063622][T10399] ? get_pid_task+0xde/0x130 [ 2112.068055][T10399] ? radix_tree_lookup+0x16f/0x1c0 [ 2112.072998][T10399] loop_control_ioctl+0x448/0x620 [ 2112.077858][T10399] ? loop_remove+0xa0/0xa0 [ 2112.082113][T10399] ? memset+0x1f/0x40 [ 2112.085926][T10399] ? fsnotify+0x1280/0x1340 [ 2112.090266][T10399] ? loop_remove+0xa0/0xa0 [ 2112.094519][T10399] do_vfs_ioctl+0x742/0x1720 [ 2112.098946][T10399] ? ioctl_preallocate+0x250/0x250 [ 2112.103893][T10399] ? __fget+0x407/0x490 [ 2112.107885][T10399] ? fget_many+0x20/0x20 23:02:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="7000fbdb9f2504000000050005000300000034007f1c07000200040000000600050000070000060001000200004fc0570008000700e1eda228a9c50a9af0bb41b36e5d40b057324d95a48076b00324988ba199f1c8d6a541483dca7809445bf371f80eb18eb16e4ebe3832d3914a5d8284600c85d951c58035fa341756cf3c9002d0001242ee786384f0c9a4ee9017597efdc3dd807bc682b900000000009a752cd5444071e158ab782e8656b1bd7a6985cc6b49e16cb89eb5eae1dca82a3a1ff29fd60faac84ec5aa3c6c18f7dea67a111a0d5581e4041b06bf6ff5fe3d62e3e8f1c4bfd6584eb42cab382251bcbeda7f7b", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa08000300ffffffff080002000200000005000500070000000800030000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000000)="29f3126f757784257d055f5708aba79b92674b21663c05d5d22ca526f67697b28045100ce31ff3") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r10, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0x2c}}, 0x4044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="2028ca2fe6cf8e1b5b003900a4c20136bf9d84e1a0fa1e0e8a000700000008002b0007230000080034e1ffff000082f3a131998e23b216fa460c89b1644d16bb0d33581ae15e49817cf80ab937b4f362"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="2028ca2fe6cf8e1b5b003900a4c20136bf9d84e1a0fa1e0e8a000700000008002b0007230000080034e1ffff000082f3a131998e23b216fa460c89b1644d16bb0d33581ae15e49817cf80ab937b4f362"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xfc, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7d}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008805}, 0x84) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r15, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r15, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000b40), 0x5090c0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r15, 0x1, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r15, 0x1, 0x80000}) ioctl$LOOP_CTL_ADD(r14, 0x4c81, 0x2) 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 23:02:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:02:53 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, 0x0, @void}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x480883, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x8, 0x4) 23:02:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 2) [ 2112.111965][T10399] ? debug_smp_processor_id+0x20/0x20 [ 2112.117172][T10399] ? security_file_ioctl+0x7d/0xa0 [ 2112.122120][T10399] __x64_sys_ioctl+0xd4/0x110 [ 2112.126634][T10399] do_syscall_64+0xca/0x1c0 [ 2112.130974][T10399] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2112.150344][T10420] Unknown ioctl 35123 [ 2112.154183][T10421] Unknown ioctl 35123 23:02:53 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, 0x0, @void}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x480883, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x8, 0x4) 23:02:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r2, 0x22, 0x0, 0x10001, &(0x7f0000000000), 0x2, 0x0, &(0x7f0000000240), &(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) 23:02:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b49, 0x2) [ 2112.176034][T10432] FAULT_INJECTION: forcing a failure. [ 2112.176034][T10432] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.191471][T10432] CPU: 0 PID: 10432 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2112.201504][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2112.211391][T10432] Call Trace: [ 2112.214525][T10432] dump_stack+0x1d8/0x241 [ 2112.218686][T10432] ? panic+0x896/0x896 [ 2112.222593][T10432] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2112.228233][T10432] ? do_vfs_ioctl+0x742/0x1720 [ 2112.232833][T10432] ? do_syscall_64+0xca/0x1c0 [ 2112.237346][T10432] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2112.243248][T10432] should_fail+0x71f/0x880 [ 2112.247516][T10432] ? setup_fault_attr+0x3d0/0x3d0 [ 2112.252365][T10432] ? idr_alloc+0x205/0x2f0 [ 2112.256617][T10432] ? blk_mq_alloc_tag_set+0x307/0xb40 [ 2112.261821][T10432] should_failslab+0x5/0x20 [ 2112.266161][T10432] __kmalloc+0x51/0x2e0 [ 2112.270153][T10432] ? idr_alloc_u32+0x320/0x320 [ 2112.274759][T10432] blk_mq_alloc_tag_set+0x307/0xb40 [ 2112.279789][T10432] ? loop_add+0x56/0x740 [ 2112.283866][T10432] loop_add+0x231/0x740 [ 2112.287859][T10432] ? get_pid_task+0xde/0x130 [ 2112.292286][T10432] ? radix_tree_lookup+0x16f/0x1c0 [ 2112.297234][T10432] loop_control_ioctl+0x448/0x620 [ 2112.302105][T10432] ? loop_remove+0xa0/0xa0 [ 2112.306347][T10432] ? memset+0x1f/0x40 [ 2112.310163][T10432] ? fsnotify+0x1280/0x1340 [ 2112.314503][T10432] ? loop_remove+0xa0/0xa0 [ 2112.318755][T10432] do_vfs_ioctl+0x742/0x1720 23:02:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r2, 0x22, 0x0, 0x10001, &(0x7f0000000000), 0x2, 0x0, &(0x7f0000000240), &(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) 23:02:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 3) 23:02:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x108, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000860}, 0x20004851) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) 23:02:53 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, 0x0, @void}, 0x10) (async, rerun: 64) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x480883, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x8, 0x4) 23:02:53 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) [ 2112.323189][T10432] ? ioctl_preallocate+0x250/0x250 [ 2112.328136][T10432] ? __fget+0x407/0x490 [ 2112.332122][T10432] ? fget_many+0x20/0x20 [ 2112.336203][T10432] ? debug_smp_processor_id+0x20/0x20 [ 2112.341408][T10432] ? security_file_ioctl+0x7d/0xa0 [ 2112.346356][T10432] __x64_sys_ioctl+0xd4/0x110 [ 2112.350870][T10432] do_syscall_64+0xca/0x1c0 [ 2112.355210][T10432] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:53 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xa0, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x96}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8805) 23:02:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r2, 0x22, 0x0, 0x10001, &(0x7f0000000000), 0x2, 0x0, &(0x7f0000000240), &(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) [ 2112.406587][T10460] FAULT_INJECTION: forcing a failure. [ 2112.406587][T10460] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.423276][T10460] CPU: 1 PID: 10460 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2112.433304][T10460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2112.443196][T10460] Call Trace: [ 2112.446332][T10460] dump_stack+0x1d8/0x241 [ 2112.450490][T10460] ? panic+0x896/0x896 [ 2112.454396][T10460] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2112.460041][T10460] should_fail+0x71f/0x880 [ 2112.464296][T10460] ? setup_fault_attr+0x3d0/0x3d0 [ 2112.469151][T10460] ? blk_mq_alloc_tag_set+0x39f/0xb40 [ 2112.474357][T10460] should_failslab+0x5/0x20 [ 2112.478697][T10460] __kmalloc+0x51/0x2e0 [ 2112.482697][T10460] blk_mq_alloc_tag_set+0x39f/0xb40 [ 2112.487729][T10460] loop_add+0x231/0x740 [ 2112.491715][T10460] ? get_pid_task+0xde/0x130 [ 2112.496143][T10460] ? radix_tree_lookup+0x16f/0x1c0 [ 2112.501091][T10460] loop_control_ioctl+0x448/0x620 [ 2112.505952][T10460] ? loop_remove+0xa0/0xa0 [ 2112.510207][T10460] ? memset+0x1f/0x40 [ 2112.514020][T10460] ? fsnotify+0x1280/0x1340 [ 2112.518360][T10460] ? loop_remove+0xa0/0xa0 [ 2112.522615][T10460] do_vfs_ioctl+0x742/0x1720 [ 2112.527040][T10460] ? ioctl_preallocate+0x250/0x250 [ 2112.531988][T10460] ? __fget+0x407/0x490 [ 2112.535978][T10460] ? fget_many+0x20/0x20 [ 2112.540060][T10460] ? debug_smp_processor_id+0x20/0x20 [ 2112.545266][T10460] ? security_file_ioctl+0x7d/0xa0 [ 2112.550220][T10460] __x64_sys_ioctl+0xd4/0x110 23:02:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 4) 23:02:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x108, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000860}, 0x20004851) (async, rerun: 32) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) 23:02:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c82, 0x2) [ 2112.554729][T10460] do_syscall_64+0xca/0x1c0 [ 2112.559067][T10460] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 23:02:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) 23:02:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x108, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000860}, 0x20004851) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) [ 2112.622090][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2112.631567][T10476] FAULT_INJECTION: forcing a failure. [ 2112.631567][T10476] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.644457][T10476] CPU: 1 PID: 10476 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2112.654486][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2112.664374][T10476] Call Trace: [ 2112.667507][T10476] dump_stack+0x1d8/0x241 [ 2112.671668][T10476] ? panic+0x896/0x896 [ 2112.675582][T10476] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2112.681219][T10476] ? __kasan_kmalloc+0x1d9/0x210 [ 2112.685991][T10476] should_fail+0x71f/0x880 [ 2112.690241][T10476] ? __kasan_kmalloc+0x1d9/0x210 [ 2112.695022][T10476] ? setup_fault_attr+0x3d0/0x3d0 [ 2112.699878][T10476] ? __x64_sys_ioctl+0xd4/0x110 [ 2112.704565][T10476] ? do_syscall_64+0xca/0x1c0 [ 2112.709073][T10476] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2112.714977][T10476] ? blk_mq_init_tags+0x76/0x2d0 [ 2112.719755][T10476] should_failslab+0x5/0x20 [ 2112.724089][T10476] kmem_cache_alloc_trace+0x28/0x260 [ 2112.729212][T10476] blk_mq_init_tags+0x76/0x2d0 [ 2112.733810][T10476] ? blk_mq_hw_queue_to_node+0xe3/0x100 [ 2112.739193][T10476] blk_mq_alloc_rq_map+0x95/0x1a0 [ 2112.744052][T10476] __blk_mq_alloc_rq_map+0x70/0x2a0 [ 2112.749087][T10476] blk_mq_alloc_rq_maps+0xac/0x410 [ 2112.754034][T10476] blk_mq_alloc_tag_set+0x5c2/0xb40 [ 2112.759066][T10476] loop_add+0x231/0x740 [ 2112.763060][T10476] ? get_pid_task+0xde/0x130 [ 2112.767485][T10476] ? radix_tree_lookup+0x16f/0x1c0 [ 2112.772439][T10476] loop_control_ioctl+0x448/0x620 [ 2112.777305][T10476] ? loop_remove+0xa0/0xa0 [ 2112.781547][T10476] ? memset+0x1f/0x40 [ 2112.785362][T10476] ? fsnotify+0x1280/0x1340 [ 2112.789703][T10476] ? loop_remove+0xa0/0xa0 [ 2112.793954][T10476] do_vfs_ioctl+0x742/0x1720 [ 2112.798383][T10476] ? ioctl_preallocate+0x250/0x250 [ 2112.803330][T10476] ? __fget+0x407/0x490 [ 2112.807322][T10476] ? fget_many+0x20/0x20 [ 2112.811401][T10476] ? debug_smp_processor_id+0x20/0x20 [ 2112.816610][T10476] ? security_file_ioctl+0x7d/0xa0 23:02:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 5) 23:02:54 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xa0, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x96}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8805) 23:02:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a201, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x515, 0x4) [ 2112.821559][T10476] __x64_sys_ioctl+0xd4/0x110 [ 2112.826070][T10476] do_syscall_64+0xca/0x1c0 [ 2112.830409][T10476] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2112.836831][T10476] blk-mq: reduced tag depth (128 -> 64) 23:02:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) 23:02:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x541b, 0x2) 23:02:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a201, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x515, 0x4) 23:02:54 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xa0, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x96}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8805) [ 2112.866343][T10494] FAULT_INJECTION: forcing a failure. [ 2112.866343][T10494] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.877827][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2112.892452][T10494] CPU: 0 PID: 10494 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2112.902488][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2112.912386][T10494] Call Trace: 23:02:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a201, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x515, 0x4) 23:02:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f00000002c0), 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="687dd4268dc6c12e7bb9b09adf3b45afa2d90cffd0e9d4a93b4d28a1c8512da3f35edc94a7b6ef3dff19b3cfff067ce0beb75fa3040ff86792d7367940e65a1e027c5b1e2e14f9534117f08335636ebb2c00953992fbcbd26ac2af6a2d6f8291bafc36a1c08bc88fd26c13731cbb038ff0d5a55c9b1a227cb7e15d434b5585aad4a43b5329ef8da39661527432197169", @ANYRES16=r6, @ANYBLOB="02002bbd7000ffdbdf250b00000008000b008e00000008000600", @ANYRES32=0x0, @ANYBLOB="08002c000300000005002e000100000008002b003f0000000600280002000000050035001d00000008003c0003000000050033000100000008003b0002000000"], 0x64}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000080) write$cgroup_pressure(r2, &(0x7f0000000040)={'some', 0x20, 0x3ff, 0x20, 0xfffffffffffffbff}, 0x2f) [ 2112.915525][T10494] dump_stack+0x1d8/0x241 [ 2112.919685][T10494] ? panic+0x896/0x896 [ 2112.923592][T10494] ? __kasan_kmalloc+0x1d9/0x210 [ 2112.928366][T10494] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2112.934005][T10494] ? blk_mq_init_tags+0x76/0x2d0 [ 2112.938772][T10494] ? blk_mq_alloc_rq_map+0x95/0x1a0 [ 2112.943800][T10494] ? __blk_mq_alloc_rq_map+0x70/0x2a0 [ 2112.949012][T10494] ? blk_mq_alloc_tag_set+0x5c2/0xb40 [ 2112.954217][T10494] ? loop_add+0x231/0x740 [ 2112.958381][T10494] ? loop_control_ioctl+0x448/0x620 [ 2112.963415][T10494] ? do_vfs_ioctl+0x742/0x1720 [ 2112.968017][T10494] should_fail+0x71f/0x880 [ 2112.972276][T10494] ? setup_fault_attr+0x3d0/0x3d0 [ 2112.977129][T10494] ? sbitmap_queue_init_node+0x164/0xf40 [ 2112.982597][T10494] should_failslab+0x5/0x20 [ 2112.986935][T10494] __kmalloc+0x51/0x2e0 [ 2112.990943][T10494] sbitmap_queue_init_node+0x164/0xf40 [ 2112.996225][T10494] ? blk_mq_init_tags+0x76/0x2d0 [ 2113.000998][T10494] blk_mq_init_tags+0x11d/0x2d0 [ 2113.005685][T10494] blk_mq_alloc_rq_map+0x95/0x1a0 [ 2113.010545][T10494] __blk_mq_alloc_rq_map+0x70/0x2a0 [ 2113.015579][T10494] blk_mq_alloc_rq_maps+0xac/0x410 [ 2113.020526][T10494] blk_mq_alloc_tag_set+0x5c2/0xb40 [ 2113.025574][T10494] loop_add+0x231/0x740 [ 2113.029553][T10494] ? get_pid_task+0xde/0x130 [ 2113.033976][T10494] ? radix_tree_lookup+0x16f/0x1c0 [ 2113.038928][T10494] loop_control_ioctl+0x448/0x620 [ 2113.043785][T10494] ? loop_remove+0xa0/0xa0 [ 2113.048038][T10494] ? memset+0x1f/0x40 [ 2113.051860][T10494] ? fsnotify+0x1280/0x1340 [ 2113.056199][T10494] ? loop_remove+0xa0/0xa0 [ 2113.060449][T10494] do_vfs_ioctl+0x742/0x1720 23:02:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 6) 23:02:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) [ 2113.064873][T10494] ? ioctl_preallocate+0x250/0x250 [ 2113.069822][T10494] ? __fget+0x407/0x490 [ 2113.073819][T10494] ? fget_many+0x20/0x20 [ 2113.077896][T10494] ? debug_smp_processor_id+0x20/0x20 [ 2113.083106][T10494] ? security_file_ioctl+0x7d/0xa0 [ 2113.088049][T10494] __x64_sys_ioctl+0xd4/0x110 [ 2113.092572][T10494] do_syscall_64+0xca/0x1c0 [ 2113.096903][T10494] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2113.103014][T10494] blk-mq: reduced tag depth (128 -> 64) 23:02:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) 23:02:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:02:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f00000002c0), 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="687dd4268dc6c12e7bb9b09adf3b45afa2d90cffd0e9d4a93b4d28a1c8512da3f35edc94a7b6ef3dff19b3cfff067ce0beb75fa3040ff86792d7367940e65a1e027c5b1e2e14f9534117f08335636ebb2c00953992fbcbd26ac2af6a2d6f8291bafc36a1c08bc88fd26c13731cbb038ff0d5a55c9b1a227cb7e15d434b5585aad4a43b5329ef8da39661527432197169", @ANYRES16=r6, @ANYBLOB="02002bbd7000ffdbdf250b00000008000b008e00000008000600", @ANYRES32=0x0, @ANYBLOB="08002c000300000005002e000100000008002b003f0000000600280002000000050035001d00000008003c0003000000050033000100000008003b0002000000"], 0x64}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000080) (async) write$cgroup_pressure(r2, &(0x7f0000000040)={'some', 0x20, 0x3ff, 0x20, 0xfffffffffffffbff}, 0x2f) [ 2113.142229][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2113.149456][T10516] FAULT_INJECTION: forcing a failure. [ 2113.149456][T10516] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.168995][T10516] CPU: 0 PID: 10516 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2113.179028][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2113.188926][T10516] Call Trace: [ 2113.192056][T10516] dump_stack+0x1d8/0x241 [ 2113.196220][T10516] ? panic+0x896/0x896 [ 2113.200125][T10516] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2113.205763][T10516] should_fail+0x71f/0x880 [ 2113.210020][T10516] ? setup_fault_attr+0x3d0/0x3d0 [ 2113.214874][T10516] ? pcpu_alloc+0xb57/0x1050 [ 2113.219313][T10516] ? sbitmap_queue_init_node+0x67d/0xf40 [ 2113.224774][T10516] should_failslab+0x5/0x20 [ 2113.229112][T10516] kmem_cache_alloc_trace+0x28/0x260 [ 2113.234234][T10516] sbitmap_queue_init_node+0x67d/0xf40 [ 2113.239531][T10516] blk_mq_init_tags+0x11d/0x2d0 [ 2113.244210][T10516] blk_mq_alloc_rq_map+0x95/0x1a0 [ 2113.249074][T10516] __blk_mq_alloc_rq_map+0x70/0x2a0 [ 2113.254108][T10516] blk_mq_alloc_rq_maps+0xac/0x410 [ 2113.259054][T10516] blk_mq_alloc_tag_set+0x5c2/0xb40 [ 2113.264092][T10516] loop_add+0x231/0x740 [ 2113.268078][T10516] ? get_pid_task+0xde/0x130 [ 2113.272504][T10516] ? radix_tree_lookup+0x16f/0x1c0 [ 2113.277451][T10516] loop_control_ioctl+0x448/0x620 [ 2113.282312][T10516] ? loop_remove+0xa0/0xa0 [ 2113.286565][T10516] ? memset+0x1f/0x40 [ 2113.290381][T10516] ? fsnotify+0x1280/0x1340 [ 2113.294722][T10516] ? loop_remove+0xa0/0xa0 [ 2113.298975][T10516] do_vfs_ioctl+0x742/0x1720 [ 2113.303409][T10516] ? ioctl_preallocate+0x250/0x250 [ 2113.308347][T10516] ? __fget+0x407/0x490 [ 2113.312340][T10516] ? fget_many+0x20/0x20 [ 2113.316420][T10516] ? debug_smp_processor_id+0x20/0x20 [ 2113.321627][T10516] ? security_file_ioctl+0x7d/0xa0 [ 2113.326576][T10516] __x64_sys_ioctl+0xd4/0x110 [ 2113.331088][T10516] do_syscall_64+0xca/0x1c0 [ 2113.335433][T10516] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 7) 23:02:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5421, 0x2) 23:02:54 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) [ 2113.341819][T10516] blk-mq: reduced tag depth (128 -> 64) 23:02:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r1) 23:02:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:02:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f00000002c0), 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="687dd4268dc6c12e7bb9b09adf3b45afa2d90cffd0e9d4a93b4d28a1c8512da3f35edc94a7b6ef3dff19b3cfff067ce0beb75fa3040ff86792d7367940e65a1e027c5b1e2e14f9534117f08335636ebb2c00953992fbcbd26ac2af6a2d6f8291bafc36a1c08bc88fd26c13731cbb038ff0d5a55c9b1a227cb7e15d434b5585aad4a43b5329ef8da39661527432197169", @ANYRES16=r6, @ANYBLOB="02002bbd7000ffdbdf250b00000008000b008e00000008000600", @ANYRES32=0x0, @ANYBLOB="08002c000300000005002e000100000008002b003f0000000600280002000000050035001d00000008003c0003000000050033000100000008003b0002000000"], 0x64}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000080) write$cgroup_pressure(r2, &(0x7f0000000040)={'some', 0x20, 0x3ff, 0x20, 0xfffffffffffffbff}, 0x2f) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) waitid$P_PIDFD(0x3, r4, &(0x7f00000002c0), 0x1, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="687dd4268dc6c12e7bb9b09adf3b45afa2d90cffd0e9d4a93b4d28a1c8512da3f35edc94a7b6ef3dff19b3cfff067ce0beb75fa3040ff86792d7367940e65a1e027c5b1e2e14f9534117f08335636ebb2c00953992fbcbd26ac2af6a2d6f8291bafc36a1c08bc88fd26c13731cbb038ff0d5a55c9b1a227cb7e15d434b5585aad4a43b5329ef8da39661527432197169", @ANYRES16=r6, @ANYBLOB="02002bbd7000ffdbdf250b00000008000b008e00000008000600", @ANYRES32=0x0, @ANYBLOB="08002c000300000005002e000100000008002b003f0000000600280002000000050035001d00000008003c0003000000050033000100000008003b0002000000"], 0x64}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000080) (async) write$cgroup_pressure(r2, &(0x7f0000000040)={'some', 0x20, 0x3ff, 0x20, 0xfffffffffffffbff}, 0x2f) (async) 23:02:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5450, 0x2) [ 2113.396609][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2113.406835][T10538] FAULT_INJECTION: forcing a failure. [ 2113.406835][T10538] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.431176][T10538] CPU: 1 PID: 10538 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2113.441206][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2113.451099][T10538] Call Trace: [ 2113.454236][T10538] dump_stack+0x1d8/0x241 [ 2113.458394][T10538] ? panic+0x896/0x896 [ 2113.462299][T10538] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2113.467942][T10538] should_fail+0x71f/0x880 [ 2113.472194][T10538] ? setup_fault_attr+0x3d0/0x3d0 [ 2113.477053][T10538] ? pcpu_alloc+0xb57/0x1050 [ 2113.481480][T10538] ? sbitmap_queue_init_node+0x67d/0xf40 [ 2113.486947][T10538] should_failslab+0x5/0x20 [ 2113.491288][T10538] kmem_cache_alloc_trace+0x28/0x260 [ 2113.496408][T10538] sbitmap_queue_init_node+0x67d/0xf40 [ 2113.501705][T10538] blk_mq_init_tags+0x183/0x2d0 [ 2113.506392][T10538] blk_mq_alloc_rq_map+0x95/0x1a0 [ 2113.511249][T10538] __blk_mq_alloc_rq_map+0x70/0x2a0 [ 2113.516303][T10538] blk_mq_alloc_rq_maps+0xac/0x410 [ 2113.521235][T10538] blk_mq_alloc_tag_set+0x5c2/0xb40 [ 2113.526268][T10538] loop_add+0x231/0x740 [ 2113.530261][T10538] ? get_pid_task+0xde/0x130 [ 2113.534686][T10538] ? radix_tree_lookup+0x16f/0x1c0 [ 2113.539631][T10538] loop_control_ioctl+0x448/0x620 [ 2113.544491][T10538] ? loop_remove+0xa0/0xa0 [ 2113.548747][T10538] ? memset+0x1f/0x40 [ 2113.552563][T10538] ? fsnotify+0x1280/0x1340 [ 2113.556900][T10538] ? loop_remove+0xa0/0xa0 [ 2113.561153][T10538] do_vfs_ioctl+0x742/0x1720 [ 2113.565584][T10538] ? ioctl_preallocate+0x250/0x250 [ 2113.570528][T10538] ? __fget+0x407/0x490 [ 2113.574519][T10538] ? fget_many+0x20/0x20 [ 2113.578600][T10538] ? debug_smp_processor_id+0x20/0x20 [ 2113.583807][T10538] ? security_file_ioctl+0x7d/0xa0 [ 2113.588755][T10538] __x64_sys_ioctl+0xd4/0x110 [ 2113.593269][T10538] do_syscall_64+0xca/0x1c0 23:02:54 executing program 3: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x10fc}, 0x1, 0x0, 0x0, 0x20008014}, 0xc014) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:02:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5451, 0x2) 23:02:54 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x810) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c81, r6) 23:02:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 8) 23:02:55 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x810) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c81, r6) (async) ioctl$LOOP_CTL_ADD(r5, 0x4c81, r6) 23:02:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080), 0x4) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x810) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) (async) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c81, r6) [ 2113.597606][T10538] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2113.607854][T10538] blk-mq: reduced tag depth (128 -> 64) 23:02:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)='mptcp_pm\x00'}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x1e, 0x1, 0x546, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="5f03000000000000003b0e9dfce9e542aeed78b0b7d283ba98eec3cfc33e1f267cb80d1612200328b83453e5641c8ee81ffe5021d3752016d442c9d1e8000150e740ea965e17f9fe69799681e4f83ed67b1d99341a9513317f9f54cc10bf4f6c9c766176f57c8905b11c6bcddad9d1c806c47205a2c4bd2c6cc07e642a6ee70e389c62acfff92a16b06ea6e5028948506eae9767d16f17a08bc49f6a370244f11178c2aa3ef7b9e5f3009ccaeb1ff9f034de62f6b9ff169cf3bf776067855b9f7a1f98fc5c1419a2d487caa54a0071ecb8ce49b486fb39f89225bd42aae249c8d99528a3fa2b3cdcb128"], 0x10) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x30, r2, 0x8e144000) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) r5 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) gettid() ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) socket$nl_sock_diag(0x10, 0x3, 0x4) 23:02:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:02:55 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r1) 23:02:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)='mptcp_pm\x00'}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x1e, 0x1, 0x546, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="5f03000000000000003b0e9dfce9e542aeed78b0b7d283ba98eec3cfc33e1f267cb80d1612200328b83453e5641c8ee81ffe5021d3752016d442c9d1e8000150e740ea965e17f9fe69799681e4f83ed67b1d99341a9513317f9f54cc10bf4f6c9c766176f57c8905b11c6bcddad9d1c806c47205a2c4bd2c6cc07e642a6ee70e389c62acfff92a16b06ea6e5028948506eae9767d16f17a08bc49f6a370244f11178c2aa3ef7b9e5f3009ccaeb1ff9f034de62f6b9ff169cf3bf776067855b9f7a1f98fc5c1419a2d487caa54a0071ecb8ce49b486fb39f89225bd42aae249c8d99528a3fa2b3cdcb128"], 0x10) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x30, r2, 0x8e144000) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) r5 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) gettid() ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)='mptcp_pm\x00'}, 0x30) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x1e, 0x1, 0x546, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="5f03000000000000003b0e9dfce9e542aeed78b0b7d283ba98eec3cfc33e1f267cb80d1612200328b83453e5641c8ee81ffe5021d3752016d442c9d1e8000150e740ea965e17f9fe69799681e4f83ed67b1d99341a9513317f9f54cc10bf4f6c9c766176f57c8905b11c6bcddad9d1c806c47205a2c4bd2c6cc07e642a6ee70e389c62acfff92a16b06ea6e5028948506eae9767d16f17a08bc49f6a370244f11178c2aa3ef7b9e5f3009ccaeb1ff9f034de62f6b9ff169cf3bf776067855b9f7a1f98fc5c1419a2d487caa54a0071ecb8ce49b486fb39f89225bd42aae249c8d99528a3fa2b3cdcb128"], 0x10) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x30, r2, 0x8e144000) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) (async) gettid() (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) [ 2113.687033][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2113.696760][T10570] FAULT_INJECTION: forcing a failure. [ 2113.696760][T10570] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.710120][T10570] CPU: 0 PID: 10570 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2113.720149][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2113.730042][T10570] Call Trace: [ 2113.733175][T10570] dump_stack+0x1d8/0x241 [ 2113.737338][T10570] ? panic+0x896/0x896 [ 2113.741239][T10570] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2113.746882][T10570] should_fail+0x71f/0x880 [ 2113.751137][T10570] ? sbitmap_queue_init_node+0x67d/0xf40 [ 2113.756602][T10570] ? setup_fault_attr+0x3d0/0x3d0 [ 2113.761471][T10570] ? sbitmap_queue_init_node+0xb28/0xf40 [ 2113.766931][T10570] ? blk_mq_alloc_rq_map+0xb5/0x1a0 [ 2113.771963][T10570] should_failslab+0x5/0x20 [ 2113.776301][T10570] __kmalloc+0x51/0x2e0 [ 2113.780295][T10570] blk_mq_alloc_rq_map+0xb5/0x1a0 23:02:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5452, 0x2) [ 2113.785168][T10570] __blk_mq_alloc_rq_map+0x70/0x2a0 [ 2113.790192][T10570] blk_mq_alloc_rq_maps+0xac/0x410 [ 2113.795144][T10570] blk_mq_alloc_tag_set+0x5c2/0xb40 [ 2113.800183][T10570] loop_add+0x231/0x740 [ 2113.804167][T10570] ? get_pid_task+0xde/0x130 [ 2113.808589][T10570] ? radix_tree_lookup+0x16f/0x1c0 [ 2113.813537][T10570] loop_control_ioctl+0x448/0x620 [ 2113.818395][T10570] ? loop_remove+0xa0/0xa0 [ 2113.822653][T10570] ? memset+0x1f/0x40 [ 2113.826469][T10570] ? fsnotify+0x1280/0x1340 [ 2113.830807][T10570] ? loop_remove+0xa0/0xa0 23:02:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 9) [ 2113.835059][T10570] do_vfs_ioctl+0x742/0x1720 [ 2113.839488][T10570] ? ioctl_preallocate+0x250/0x250 [ 2113.844435][T10570] ? __fget+0x407/0x490 [ 2113.848430][T10570] ? fget_many+0x20/0x20 [ 2113.852507][T10570] ? debug_smp_processor_id+0x20/0x20 [ 2113.857711][T10570] ? security_file_ioctl+0x7d/0xa0 [ 2113.862663][T10570] __x64_sys_ioctl+0xd4/0x110 [ 2113.867171][T10570] do_syscall_64+0xca/0x1c0 [ 2113.871511][T10570] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2113.877509][T10570] blk-mq: reduced tag depth (128 -> 64) 23:02:55 executing program 3: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x10fc}, 0x1, 0x0, 0x0, 0x20008014}, 0xc014) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:02:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5460, 0x2) [ 2113.932846][ T1787] udevd[1787]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2113.939379][T10593] debugfs: Directory 'loop0' with parent 'block' already present! 23:02:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)='mptcp_pm\x00'}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x1e, 0x1, 0x546, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async, rerun: 64) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="5f03000000000000003b0e9dfce9e542aeed78b0b7d283ba98eec3cfc33e1f267cb80d1612200328b83453e5641c8ee81ffe5021d3752016d442c9d1e8000150e740ea965e17f9fe69799681e4f83ed67b1d99341a9513317f9f54cc10bf4f6c9c766176f57c8905b11c6bcddad9d1c806c47205a2c4bd2c6cc07e642a6ee70e389c62acfff92a16b06ea6e5028948506eae9767d16f17a08bc49f6a370244f11178c2aa3ef7b9e5f3009ccaeb1ff9f034de62f6b9ff169cf3bf776067855b9f7a1f98fc5c1419a2d487caa54a0071ecb8ce49b486fb39f89225bd42aae249c8d99528a3fa2b3cdcb128"], 0x10) (rerun: 64) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x30, r2, 0x8e144000) (async) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) (async) r5 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) (async) gettid() ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) [ 2113.991295][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2113.998557][T10592] FAULT_INJECTION: forcing a failure. [ 2113.998557][T10592] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.013220][T10592] CPU: 1 PID: 10592 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2114.023242][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2114.033138][T10592] Call Trace: [ 2114.036269][T10592] dump_stack+0x1d8/0x241 [ 2114.040430][T10592] ? panic+0x896/0x896 [ 2114.044385][T10592] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2114.049995][T10592] should_fail+0x71f/0x880 [ 2114.054237][T10592] ? setup_fault_attr+0x3d0/0x3d0 [ 2114.059094][T10592] ? blk_mq_alloc_rq_map+0xeb/0x1a0 [ 2114.064130][T10592] should_failslab+0x5/0x20 [ 2114.068465][T10592] __kmalloc+0x51/0x2e0 [ 2114.072461][T10592] blk_mq_alloc_rq_map+0xeb/0x1a0 [ 2114.077317][T10592] __blk_mq_alloc_rq_map+0x70/0x2a0 [ 2114.082353][T10592] blk_mq_alloc_rq_maps+0xac/0x410 [ 2114.087299][T10592] blk_mq_alloc_tag_set+0x5c2/0xb40 [ 2114.092333][T10592] loop_add+0x231/0x740 [ 2114.096334][T10592] ? get_pid_task+0xde/0x130 [ 2114.100749][T10592] ? radix_tree_lookup+0x16f/0x1c0 [ 2114.105695][T10592] loop_control_ioctl+0x448/0x620 [ 2114.110568][T10592] ? loop_remove+0xa0/0xa0 [ 2114.114819][T10592] ? memset+0x1f/0x40 [ 2114.118628][T10592] ? fsnotify+0x1280/0x1340 [ 2114.122976][T10592] ? loop_remove+0xa0/0xa0 [ 2114.127239][T10592] do_vfs_ioctl+0x742/0x1720 [ 2114.131653][T10592] ? ioctl_preallocate+0x250/0x250 [ 2114.136598][T10592] ? __fget+0x407/0x490 23:02:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 10) 23:02:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 23:02:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r1) [ 2114.140591][T10592] ? fget_many+0x20/0x20 [ 2114.144674][T10592] ? debug_smp_processor_id+0x20/0x20 [ 2114.149879][T10592] ? security_file_ioctl+0x7d/0xa0 [ 2114.154826][T10592] __x64_sys_ioctl+0xd4/0x110 [ 2114.159337][T10592] do_syscall_64+0xca/0x1c0 [ 2114.163676][T10592] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2114.169742][T10592] blk-mq: reduced tag depth (128 -> 64) 23:02:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:55 executing program 3: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x10fc}, 0x1, 0x0, 0x0, 0x20008014}, 0xc014) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:02:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x40049409, 0x2) 23:02:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x1, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 23:02:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x40086602, 0x2) 23:02:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) [ 2114.259658][T10640] FAULT_INJECTION: forcing a failure. [ 2114.259658][T10640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2114.273396][T10640] CPU: 0 PID: 10640 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2114.283429][T10640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2114.293319][T10640] Call Trace: [ 2114.296454][T10640] dump_stack+0x1d8/0x241 [ 2114.300612][T10640] ? panic+0x896/0x896 [ 2114.304518][T10640] ? stack_trace_save+0x118/0x1c0 [ 2114.309380][T10640] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2114.315028][T10640] ? stack_trace_snprint+0x170/0x170 [ 2114.320139][T10640] ? sbitmap_queue_init_node+0x67d/0xf40 [ 2114.325610][T10640] should_fail+0x71f/0x880 [ 2114.329965][T10640] ? setup_fault_attr+0x3d0/0x3d0 [ 2114.334830][T10640] ? __kasan_kmalloc+0x171/0x210 [ 2114.339594][T10640] ? blk_mq_alloc_rq_map+0xeb/0x1a0 [ 2114.344632][T10640] ? blk_mq_alloc_rq_maps+0xac/0x410 [ 2114.349754][T10640] ? blk_mq_alloc_tag_set+0x5c2/0xb40 [ 2114.354956][T10640] __alloc_pages_nodemask+0x1b4/0x840 [ 2114.360164][T10640] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2114.365544][T10640] ? find_next_bit+0x7b/0x100 [ 2114.370056][T10640] ? blk_mq_hw_queue_to_node+0xe3/0x100 [ 2114.375443][T10640] blk_mq_alloc_rqs+0x230/0x660 [ 2114.380127][T10640] __blk_mq_alloc_rq_map+0x11e/0x2a0 [ 2114.385259][T10640] blk_mq_alloc_rq_maps+0xac/0x410 [ 2114.390193][T10640] blk_mq_alloc_tag_set+0x5c2/0xb40 [ 2114.395226][T10640] loop_add+0x231/0x740 [ 2114.399217][T10640] ? get_pid_task+0xde/0x130 [ 2114.403647][T10640] ? radix_tree_lookup+0x16f/0x1c0 [ 2114.408592][T10640] loop_control_ioctl+0x448/0x620 [ 2114.413454][T10640] ? loop_remove+0xa0/0xa0 [ 2114.417706][T10640] ? memset+0x1f/0x40 [ 2114.421521][T10640] ? fsnotify+0x1280/0x1340 [ 2114.425863][T10640] ? loop_remove+0xa0/0xa0 [ 2114.430116][T10640] do_vfs_ioctl+0x742/0x1720 [ 2114.434555][T10640] ? ioctl_preallocate+0x250/0x250 [ 2114.439497][T10640] ? __fget+0x407/0x490 [ 2114.443481][T10640] ? fget_many+0x20/0x20 [ 2114.447562][T10640] ? debug_smp_processor_id+0x20/0x20 [ 2114.452777][T10640] ? security_file_ioctl+0x7d/0xa0 23:02:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 11) [ 2114.457718][T10640] __x64_sys_ioctl+0xd4/0x110 [ 2114.462229][T10640] do_syscall_64+0xca/0x1c0 [ 2114.466569][T10640] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 23:02:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x40087602, 0x2) 23:02:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x1, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (rerun: 32) [ 2114.524186][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2114.543288][T10648] FAULT_INJECTION: forcing a failure. [ 2114.543288][T10648] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.555739][T10648] CPU: 0 PID: 10648 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2114.565734][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2114.575627][T10648] Call Trace: [ 2114.578760][T10648] dump_stack+0x1d8/0x241 [ 2114.582924][T10648] ? panic+0x896/0x896 [ 2114.586827][T10648] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2114.592470][T10648] ? lo_complete_rq+0x2b0/0x2b0 [ 2114.597157][T10648] ? loop_init_request+0x31/0xa0 [ 2114.601928][T10648] ? blk_mq_alloc_rqs+0x5f5/0x660 [ 2114.606793][T10648] should_fail+0x71f/0x880 [ 2114.611053][T10648] ? setup_fault_attr+0x3d0/0x3d0 [ 2114.615904][T10648] ? __blk_mq_alloc_rq_map+0x236/0x2a0 [ 2114.621201][T10648] ? blk_alloc_queue_node+0x2c/0x640 [ 2114.626322][T10648] should_failslab+0x5/0x20 [ 2114.630659][T10648] kmem_cache_alloc+0x28/0x250 [ 2114.635270][T10648] blk_alloc_queue_node+0x2c/0x640 [ 2114.640280][T10648] ? blk_mq_alloc_tag_set+0x84f/0xb40 [ 2114.645421][T10648] blk_mq_init_queue+0x34/0xa0 [ 2114.650018][T10648] loop_add+0x25c/0x740 [ 2114.654019][T10648] ? get_pid_task+0xde/0x130 [ 2114.658431][T10648] ? radix_tree_lookup+0x16f/0x1c0 [ 2114.663386][T10648] loop_control_ioctl+0x448/0x620 [ 2114.668240][T10648] ? loop_remove+0xa0/0xa0 [ 2114.672491][T10648] ? memset+0x1f/0x40 [ 2114.676307][T10648] ? fsnotify+0x1280/0x1340 [ 2114.680656][T10648] ? loop_remove+0xa0/0xa0 [ 2114.684906][T10648] do_vfs_ioctl+0x742/0x1720 [ 2114.689333][T10648] ? ioctl_preallocate+0x250/0x250 [ 2114.694277][T10648] ? __fget+0x407/0x490 [ 2114.698267][T10648] ? fget_many+0x20/0x20 [ 2114.702348][T10648] ? debug_smp_processor_id+0x20/0x20 [ 2114.707554][T10648] ? security_file_ioctl+0x7d/0xa0 [ 2114.712505][T10648] __x64_sys_ioctl+0xd4/0x110 [ 2114.717012][T10648] do_syscall_64+0xca/0x1c0 23:02:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) 23:02:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4020940d, 0x2) 23:02:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x1, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 23:02:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 23:02:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 12) 23:02:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) [ 2114.721356][T10648] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2114.739508][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2114.763713][T10674] FAULT_INJECTION: forcing a failure. 23:02:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x80086601, 0x2) [ 2114.763713][T10674] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.777234][T10674] CPU: 0 PID: 10674 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2114.787269][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2114.797155][T10674] Call Trace: [ 2114.800291][T10674] dump_stack+0x1d8/0x241 [ 2114.804449][T10674] ? panic+0x896/0x896 [ 2114.808355][T10674] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2114.813998][T10674] should_fail+0x71f/0x880 [ 2114.818254][T10674] ? setup_fault_attr+0x3d0/0x3d0 [ 2114.823109][T10674] ? ida_alloc_range+0x98f/0xa60 [ 2114.827886][T10674] ? xas_nomem+0x18b/0x1c0 [ 2114.832136][T10674] ? mempool_init_node+0x133/0x4e0 [ 2114.837084][T10674] should_failslab+0x5/0x20 [ 2114.841424][T10674] __kmalloc+0x51/0x2e0 [ 2114.845429][T10674] mempool_init_node+0x133/0x4e0 [ 2114.850247][T10674] ? idr_replace+0x230/0x230 [ 2114.854625][T10674] ? mempool_free+0x380/0x380 [ 2114.859133][T10674] ? mempool_alloc_slab+0x20/0x20 [ 2114.863991][T10674] mempool_init+0x35/0x50 [ 2114.868158][T10674] bioset_init+0x432/0x600 [ 2114.872416][T10674] blk_alloc_queue_node+0xcb/0x640 [ 2114.877363][T10674] ? blk_mq_alloc_tag_set+0x84f/0xb40 [ 2114.882564][T10674] blk_mq_init_queue+0x34/0xa0 [ 2114.887163][T10674] loop_add+0x25c/0x740 [ 2114.891153][T10674] ? get_pid_task+0xde/0x130 [ 2114.895581][T10674] ? radix_tree_lookup+0x16f/0x1c0 [ 2114.900528][T10674] loop_control_ioctl+0x448/0x620 [ 2114.905388][T10674] ? loop_remove+0xa0/0xa0 [ 2114.909641][T10674] ? memset+0x1f/0x40 [ 2114.913459][T10674] ? fsnotify+0x1280/0x1340 [ 2114.917803][T10674] ? loop_remove+0xa0/0xa0 23:02:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) 23:02:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 23:02:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 13) 23:02:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) [ 2114.922057][T10674] do_vfs_ioctl+0x742/0x1720 [ 2114.926478][T10674] ? ioctl_preallocate+0x250/0x250 [ 2114.931425][T10674] ? __fget+0x407/0x490 [ 2114.935419][T10674] ? fget_many+0x20/0x20 [ 2114.939496][T10674] ? debug_smp_processor_id+0x20/0x20 [ 2114.944711][T10674] ? security_file_ioctl+0x7d/0xa0 [ 2114.949654][T10674] __x64_sys_ioctl+0xd4/0x110 [ 2114.954170][T10674] do_syscall_64+0xca/0x1c0 [ 2114.958512][T10674] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 23:02:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x80087601, 0x2) 23:02:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x16040, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2115.017231][T10692] FAULT_INJECTION: forcing a failure. [ 2115.017231][T10692] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.029922][T10692] CPU: 1 PID: 10692 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2115.039954][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2115.049847][T10692] Call Trace: [ 2115.052981][T10692] dump_stack+0x1d8/0x241 [ 2115.057147][T10692] ? panic+0x896/0x896 [ 2115.061045][T10692] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2115.066689][T10692] should_fail+0x71f/0x880 [ 2115.070947][T10692] ? setup_fault_attr+0x3d0/0x3d0 [ 2115.075802][T10692] ? mempool_init_node+0x1ec/0x4e0 [ 2115.080751][T10692] should_failslab+0x5/0x20 [ 2115.085092][T10692] kmem_cache_alloc+0x28/0x250 [ 2115.089687][T10692] ? mempool_free+0x380/0x380 [ 2115.094201][T10692] mempool_init_node+0x1ec/0x4e0 [ 2115.098976][T10692] ? mempool_free+0x380/0x380 [ 2115.103484][T10692] ? mempool_alloc_slab+0x20/0x20 [ 2115.108345][T10692] mempool_init+0x35/0x50 [ 2115.112513][T10692] bioset_init+0x432/0x600 [ 2115.116765][T10692] blk_alloc_queue_node+0xcb/0x640 [ 2115.121714][T10692] ? blk_mq_alloc_tag_set+0x84f/0xb40 [ 2115.126918][T10692] blk_mq_init_queue+0x34/0xa0 [ 2115.131519][T10692] loop_add+0x25c/0x740 [ 2115.135509][T10692] ? get_pid_task+0xde/0x130 [ 2115.139946][T10692] ? radix_tree_lookup+0x16f/0x1c0 [ 2115.144890][T10692] loop_control_ioctl+0x448/0x620 [ 2115.149747][T10692] ? loop_remove+0xa0/0xa0 [ 2115.153998][T10692] ? memset+0x1f/0x40 [ 2115.157815][T10692] ? fsnotify+0x1280/0x1340 [ 2115.162154][T10692] ? loop_remove+0xa0/0xa0 23:02:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 14) 23:02:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) [ 2115.166407][T10692] do_vfs_ioctl+0x742/0x1720 [ 2115.170843][T10692] ? ioctl_preallocate+0x250/0x250 [ 2115.175781][T10692] ? __fget+0x407/0x490 [ 2115.179780][T10692] ? fget_many+0x20/0x20 [ 2115.183860][T10692] ? debug_smp_processor_id+0x20/0x20 [ 2115.189061][T10692] ? security_file_ioctl+0x7d/0xa0 [ 2115.194008][T10692] __x64_sys_ioctl+0xd4/0x110 [ 2115.198521][T10692] do_syscall_64+0xca/0x1c0 [ 2115.202868][T10692] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2115.223165][T10698] FAULT_INJECTION: forcing a failure. [ 2115.223165][T10698] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.235618][T10698] CPU: 1 PID: 10698 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2115.245619][T10698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2115.255512][T10698] Call Trace: [ 2115.258645][T10698] dump_stack+0x1d8/0x241 [ 2115.262813][T10698] ? panic+0x896/0x896 [ 2115.266720][T10698] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2115.272357][T10698] should_fail+0x71f/0x880 [ 2115.276616][T10698] ? setup_fault_attr+0x3d0/0x3d0 [ 2115.281467][T10698] ? mempool_init_node+0x1ec/0x4e0 [ 2115.286417][T10698] should_failslab+0x5/0x20 [ 2115.290754][T10698] kmem_cache_alloc+0x28/0x250 [ 2115.295352][T10698] ? mempool_free+0x380/0x380 [ 2115.299866][T10698] mempool_init_node+0x1ec/0x4e0 [ 2115.304641][T10698] ? mempool_free+0x380/0x380 [ 2115.309152][T10698] ? mempool_alloc_slab+0x20/0x20 [ 2115.314012][T10698] mempool_init+0x35/0x50 [ 2115.318181][T10698] bioset_init+0x432/0x600 23:02:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2115.322433][T10698] blk_alloc_queue_node+0xcb/0x640 [ 2115.327385][T10698] ? blk_mq_alloc_tag_set+0x84f/0xb40 [ 2115.332595][T10698] blk_mq_init_queue+0x34/0xa0 [ 2115.337201][T10698] loop_add+0x25c/0x740 [ 2115.341177][T10698] ? get_pid_task+0xde/0x130 [ 2115.345603][T10698] ? radix_tree_lookup+0x16f/0x1c0 [ 2115.350552][T10698] loop_control_ioctl+0x448/0x620 [ 2115.355411][T10698] ? loop_remove+0xa0/0xa0 [ 2115.359666][T10698] ? memset+0x1f/0x40 [ 2115.363492][T10698] ? fsnotify+0x1280/0x1340 [ 2115.367831][T10698] ? loop_remove+0xa0/0xa0 23:02:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{}, "0100", "98a7e743bc3fd9fe7727efc21b64a3f9b42341253977cb3d1f2459ff094c630a", "e5219b1e", "3896650c4bd03c99"}, 0x38) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x16040, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0xc0045878, 0x2) 23:02:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) 23:02:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 15) 23:02:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x16040, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x16040, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:02:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) (async) 23:02:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{}, "0100", "98a7e743bc3fd9fe7727efc21b64a3f9b42341253977cb3d1f2459ff094c630a", "e5219b1e", "3896650c4bd03c99"}, 0x38) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{}, "0100", "98a7e743bc3fd9fe7727efc21b64a3f9b42341253977cb3d1f2459ff094c630a", "e5219b1e", "3896650c4bd03c99"}, 0x38) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:02:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0xc0045878, 0x2) [ 2115.372089][T10698] do_vfs_ioctl+0x742/0x1720 [ 2115.376511][T10698] ? ioctl_preallocate+0x250/0x250 [ 2115.381466][T10698] ? __fget+0x407/0x490 [ 2115.385447][T10698] ? fget_many+0x20/0x20 [ 2115.389520][T10698] ? debug_smp_processor_id+0x20/0x20 [ 2115.394728][T10698] ? security_file_ioctl+0x7d/0xa0 [ 2115.399680][T10698] __x64_sys_ioctl+0xd4/0x110 [ 2115.404194][T10698] do_syscall_64+0xca/0x1c0 [ 2115.408536][T10698] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2115.453803][T10729] FAULT_INJECTION: forcing a failure. [ 2115.453803][T10729] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.466532][T10729] CPU: 0 PID: 10729 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2115.476560][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2115.486452][T10729] Call Trace: [ 2115.489587][T10729] dump_stack+0x1d8/0x241 [ 2115.493749][T10729] ? panic+0x896/0x896 [ 2115.497653][T10729] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2115.503297][T10729] should_fail+0x71f/0x880 [ 2115.507552][T10729] ? setup_fault_attr+0x3d0/0x3d0 [ 2115.512418][T10729] ? mempool_init_node+0x133/0x4e0 [ 2115.517356][T10729] should_failslab+0x5/0x20 [ 2115.521697][T10729] __kmalloc+0x51/0x2e0 [ 2115.525685][T10729] ? kmem_cache_alloc+0xd9/0x250 [ 2115.530460][T10729] mempool_init_node+0x133/0x4e0 [ 2115.535234][T10729] ? mempool_free+0x380/0x380 [ 2115.539749][T10729] ? mempool_alloc_slab+0x20/0x20 [ 2115.544611][T10729] mempool_init+0x35/0x50 [ 2115.548773][T10729] bioset_init+0x4d8/0x600 [ 2115.553028][T10729] blk_alloc_queue_node+0xcb/0x640 [ 2115.557981][T10729] ? blk_mq_alloc_tag_set+0x84f/0xb40 [ 2115.563184][T10729] blk_mq_init_queue+0x34/0xa0 [ 2115.567789][T10729] loop_add+0x25c/0x740 [ 2115.571776][T10729] ? get_pid_task+0xde/0x130 [ 2115.576200][T10729] ? radix_tree_lookup+0x16f/0x1c0 [ 2115.581151][T10729] loop_control_ioctl+0x448/0x620 [ 2115.586008][T10729] ? loop_remove+0xa0/0xa0 [ 2115.590262][T10729] ? memset+0x1f/0x40 [ 2115.594076][T10729] ? fsnotify+0x1280/0x1340 [ 2115.598417][T10729] ? loop_remove+0xa0/0xa0 23:02:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) (async) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{}, "0100", "98a7e743bc3fd9fe7727efc21b64a3f9b42341253977cb3d1f2459ff094c630a", "e5219b1e", "3896650c4bd03c99"}, 0x38) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 16) 23:02:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x335182, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = socket$pptp(0x18, 0x1, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4018, r3}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) 23:02:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0xc0189436, 0x2) [ 2115.602670][T10729] do_vfs_ioctl+0x742/0x1720 [ 2115.607108][T10729] ? ioctl_preallocate+0x250/0x250 [ 2115.612059][T10729] ? __fget+0x407/0x490 [ 2115.616052][T10729] ? fget_many+0x20/0x20 [ 2115.620118][T10729] ? debug_smp_processor_id+0x20/0x20 [ 2115.625325][T10729] ? security_file_ioctl+0x7d/0xa0 [ 2115.630273][T10729] __x64_sys_ioctl+0xd4/0x110 [ 2115.634793][T10729] do_syscall_64+0xca/0x1c0 [ 2115.639131][T10729] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x335182, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = socket$pptp(0x18, 0x1, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4018, r3}, 0x18) (async, rerun: 32) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) (rerun: 32) 23:02:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) [ 2115.677871][T10767] FAULT_INJECTION: forcing a failure. [ 2115.677871][T10767] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.694450][T10767] CPU: 1 PID: 10767 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2115.704482][T10767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2115.714374][T10767] Call Trace: [ 2115.717507][T10767] dump_stack+0x1d8/0x241 [ 2115.721666][T10767] ? panic+0x896/0x896 [ 2115.725579][T10767] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2115.731215][T10767] should_fail+0x71f/0x880 [ 2115.735467][T10767] ? setup_fault_attr+0x3d0/0x3d0 [ 2115.740330][T10767] ? mempool_init_node+0x1ec/0x4e0 [ 2115.745285][T10767] should_failslab+0x5/0x20 [ 2115.749625][T10767] kmem_cache_alloc+0x28/0x250 [ 2115.754214][T10767] ? mempool_free+0x380/0x380 [ 2115.758726][T10767] mempool_init_node+0x1ec/0x4e0 [ 2115.763501][T10767] ? mempool_free+0x380/0x380 [ 2115.768014][T10767] ? mempool_alloc_slab+0x20/0x20 [ 2115.772873][T10767] mempool_init+0x35/0x50 [ 2115.777041][T10767] bioset_init+0x4d8/0x600 [ 2115.781298][T10767] blk_alloc_queue_node+0xcb/0x640 [ 2115.786243][T10767] ? blk_mq_alloc_tag_set+0x84f/0xb40 [ 2115.791460][T10767] blk_mq_init_queue+0x34/0xa0 [ 2115.796050][T10767] loop_add+0x25c/0x740 [ 2115.800041][T10767] ? get_pid_task+0xde/0x130 [ 2115.804468][T10767] ? radix_tree_lookup+0x16f/0x1c0 [ 2115.809415][T10767] loop_control_ioctl+0x448/0x620 [ 2115.814278][T10767] ? loop_remove+0xa0/0xa0 [ 2115.818531][T10767] ? memset+0x1f/0x40 [ 2115.822350][T10767] ? fsnotify+0x1280/0x1340 23:02:57 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x335182, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = socket$pptp(0x18, 0x1, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4018, r3}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) 23:02:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 17) 23:02:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:57 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2115.826688][T10767] ? loop_remove+0xa0/0xa0 [ 2115.830939][T10767] do_vfs_ioctl+0x742/0x1720 [ 2115.835367][T10767] ? ioctl_preallocate+0x250/0x250 [ 2115.840313][T10767] ? __fget+0x407/0x490 [ 2115.844311][T10767] ? fget_many+0x20/0x20 [ 2115.848384][T10767] ? debug_smp_processor_id+0x20/0x20 [ 2115.853595][T10767] ? security_file_ioctl+0x7d/0xa0 [ 2115.858540][T10767] __x64_sys_ioctl+0xd4/0x110 [ 2115.863068][T10767] do_syscall_64+0xca/0x1c0 [ 2115.867413][T10767] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x851) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x52200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x20000004) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c81, r7) 23:02:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0xc020660b, 0x2) [ 2115.901845][T10786] FAULT_INJECTION: forcing a failure. [ 2115.901845][T10786] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.920443][T10786] CPU: 1 PID: 10786 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2115.930477][T10786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2115.940369][T10786] Call Trace: [ 2115.943504][T10786] dump_stack+0x1d8/0x241 [ 2115.947668][T10786] ? panic+0x896/0x896 [ 2115.951570][T10786] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2115.957212][T10786] should_fail+0x71f/0x880 [ 2115.961463][T10786] ? setup_fault_attr+0x3d0/0x3d0 [ 2115.966324][T10786] ? mempool_init_node+0x1ec/0x4e0 [ 2115.971269][T10786] should_failslab+0x5/0x20 [ 2115.975610][T10786] kmem_cache_alloc+0x28/0x250 [ 2115.980210][T10786] ? mempool_free+0x380/0x380 [ 2115.984729][T10786] mempool_init_node+0x1ec/0x4e0 [ 2115.989501][T10786] ? mempool_free+0x380/0x380 [ 2115.994013][T10786] ? mempool_alloc_slab+0x20/0x20 [ 2115.998879][T10786] mempool_init+0x35/0x50 [ 2116.003046][T10786] bioset_init+0x4d8/0x600 [ 2116.007290][T10786] blk_alloc_queue_node+0xcb/0x640 [ 2116.012244][T10786] ? blk_mq_alloc_tag_set+0x84f/0xb40 [ 2116.017451][T10786] blk_mq_init_queue+0x34/0xa0 [ 2116.022045][T10786] loop_add+0x25c/0x740 [ 2116.026034][T10786] ? get_pid_task+0xde/0x130 [ 2116.030463][T10786] ? radix_tree_lookup+0x16f/0x1c0 [ 2116.035409][T10786] loop_control_ioctl+0x448/0x620 [ 2116.040272][T10786] ? loop_remove+0xa0/0xa0 [ 2116.044524][T10786] ? memset+0x1f/0x40 23:02:57 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:02:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 18) 23:02:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x851) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x52200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x20000004) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) (async) r7 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c81, r7) 23:02:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2116.048338][T10786] ? fsnotify+0x1280/0x1340 [ 2116.052679][T10786] ? loop_remove+0xa0/0xa0 [ 2116.056931][T10786] do_vfs_ioctl+0x742/0x1720 [ 2116.061377][T10786] ? ioctl_preallocate+0x250/0x250 [ 2116.066307][T10786] ? __fget+0x407/0x490 [ 2116.070303][T10786] ? fget_many+0x20/0x20 [ 2116.074376][T10786] ? debug_smp_processor_id+0x20/0x20 [ 2116.079586][T10786] ? security_file_ioctl+0x7d/0xa0 [ 2116.084530][T10786] __x64_sys_ioctl+0xd4/0x110 [ 2116.089048][T10786] do_syscall_64+0xca/0x1c0 [ 2116.093385][T10786] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:57 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x118, 0x12, 0x1, 0x70bd26, 0x25dfdbfb, {0x22, 0x5, 0xd4, 0x9, {0x4e20, 0x4e22, [0x71, 0x2564, 0x5, 0x16ca128a], [0x4, 0x5, 0xa83f, 0x41], 0x0, [0x1ff, 0x6]}, 0x10000, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "24f79102b5f7d2eeb59d72b6d8855b942af9559f35098316a6aed648bcd9058bf260a8a554f181bbe6a155006187984ce1ddc312dd75d28977475e18e5499168807ae033c058cd2b2f69c48cbb3e4e2ed86f59665756a86b6edda958247385c0263124420f853debda97a52db93aee93c7189a86e14fa3a1c3d2543ec163af5ac0aaf21de639e45c853398d82ca0c2e3ec86d47790417ff1e2d6acea5af121906efa9dc0586163826f2d258c"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "2a71311357eb8bf852ee1b9c"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "96f427e3898012ad"}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) 23:02:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x6b6041, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2116.120089][T10806] FAULT_INJECTION: forcing a failure. [ 2116.120089][T10806] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.132955][T10806] CPU: 1 PID: 10806 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2116.142997][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2116.152877][T10806] Call Trace: [ 2116.156011][T10806] dump_stack+0x1d8/0x241 [ 2116.160180][T10806] ? panic+0x896/0x896 [ 2116.164079][T10806] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2116.169723][T10806] should_fail+0x71f/0x880 [ 2116.173981][T10806] ? setup_fault_attr+0x3d0/0x3d0 [ 2116.178833][T10806] ? mempool_alloc_slab+0x20/0x20 [ 2116.183692][T10806] ? mempool_init+0x35/0x50 [ 2116.188032][T10806] ? bdi_alloc_node+0x69/0xd0 [ 2116.192551][T10806] should_failslab+0x5/0x20 [ 2116.196894][T10806] kmem_cache_alloc_trace+0x28/0x260 [ 2116.202013][T10806] bdi_alloc_node+0x69/0xd0 [ 2116.206351][T10806] blk_alloc_queue_node+0x112/0x640 [ 2116.211391][T10806] blk_mq_init_queue+0x34/0xa0 [ 2116.215981][T10806] loop_add+0x25c/0x740 [ 2116.219975][T10806] ? get_pid_task+0xde/0x130 [ 2116.224398][T10806] ? radix_tree_lookup+0x16f/0x1c0 [ 2116.229345][T10806] loop_control_ioctl+0x448/0x620 [ 2116.234204][T10806] ? loop_remove+0xa0/0xa0 [ 2116.238463][T10806] ? memset+0x1f/0x40 [ 2116.242278][T10806] ? fsnotify+0x1280/0x1340 [ 2116.246616][T10806] ? loop_remove+0xa0/0xa0 [ 2116.250869][T10806] do_vfs_ioctl+0x742/0x1720 [ 2116.255299][T10806] ? ioctl_preallocate+0x250/0x250 [ 2116.260245][T10806] ? __fget+0x407/0x490 [ 2116.264236][T10806] ? fget_many+0x20/0x20 23:02:57 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x851) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x52200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x20000004) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x20000004) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) (async) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c81, r7) (async) ioctl$LOOP_CTL_ADD(r5, 0x4c81, r7) 23:02:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}}, 0x801) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000000180)={0x1408, 0x14, 0x100, 0x70bd2c, 0x25dfdbfb, {0x2, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "3a5764dc7c30070223a8cc755c4ff1cc58e98f9384ebe394a13ed0cb50c0709aca10e9a78ecb6d9a990117ebb5dc7d871fc74a0165174c13b4516f1be8a92ad97d8cfacdad12a6f1e5eff413c93e8a0f959ce17f05c3470b9a306026affad38dae11c1bede1d95ba9001584bfd38e5db0aa2e5947ebd2284b4"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "e42fea42ad2f4362eb385c1294bc36a9f74a9faf5f724f4b102328a8fbe3c9b34ceb7b4a048fb41a8bb99534d45498f633cc70526fc88d755ede2ab95c0749659aba4f4d9f32c253d2e6f082e1fd8978f7df03790be402db10d12c75e99705e8805fc6f75bcffd442fc4f9f9f02db12bc20cf8760aca072a98f4aad2a513df9c8e954f84c82a6133f787149578cc265ab260284dc05b2b9206a3b5aa"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "5c9784cf7ea1ea1eef0c0ca1dafcb44171f9490c3214e19a8fa604565aab38ce57ab8abd21dbe38dbfda3770bb374ef284d1072e38da0d4936"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "ebe852b5f150cd9b829b93095448814403e5d685d371655679ed25451da052ae8f6be6bb205999780ef388fd4aff130496af1fd7c294e2bbe6b3f9260d1e5bc02f431ee916ac3b"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "a122148de1fddefa80d670fa70a484978d24494284ec67771dbdac45c85ebe585ff0bc64d97f1e713f143c9e19463db7374799a7805620ce8138bf4a912fc048cc0e6ad0dee3bcbc126e9f6c7c655d7c6e46494735"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "8c3fcbe67b5b1529cb2972d12435db4a12c9868fe80efb037885f145c89ca381670899b74ac49eaf704ec38451ab74228498039d5f19cc31fb59bb328ad75f9a21b38909a715c27d65466b95d02e40a89c9a0d3baa61b442238fa3d1c4bfe1f04fdb60689763c6ac9660221dbe3353f3da6f303a08d0f9d68376bafb35d235ac6d62220b1694409314e33dc0502408d97f9d063e05fedc9ac07cf62324728794c8b0eb3fb05b5387cda8524f3eeb38225b59a4126ddfa834cc80e9f73a674957004224eb972f791ffc7186d1cbd6a604a512479267f44420a6a787ae62d42a4d98b1ad0273612f923857e0c8"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "8c1289fb19fae61be37270d79d2735a050b9f672a212b99aa5bf89566c3717469bd22fe1f5cf7819c9a5947807c13b95ab84186105da06f190d647a4ac75aeddf131bc3344fe7567aa938296db391b7e88314f8adcd9297263863ab56f5444f3599de844a357cde90e95f60425c7bd3112d9610413156a7050fffd57c585a5f9082638bb3b00082de4f19c5f1e72e3e77bd21404853a477dbfc72d49b3cf3c13667865c1cd0febc06efbe22b07969859d477fa3d4dcf1f9283245bfe7fd0cb35120a26f4a33f6f205d44a00b86babdee62f95aef24ac19a206bc689fbec3452687428ceadd098be22da72b654fb4f72e109292"}]}, 0x1408}, 0x1, 0x0, 0x0, 0xc001}, 0x448c1) 23:02:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 19) 23:02:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x6b6041, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async, rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}}, 0x801) (rerun: 32) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000000180)={0x1408, 0x14, 0x100, 0x70bd2c, 0x25dfdbfb, {0x2, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "3a5764dc7c30070223a8cc755c4ff1cc58e98f9384ebe394a13ed0cb50c0709aca10e9a78ecb6d9a990117ebb5dc7d871fc74a0165174c13b4516f1be8a92ad97d8cfacdad12a6f1e5eff413c93e8a0f959ce17f05c3470b9a306026affad38dae11c1bede1d95ba9001584bfd38e5db0aa2e5947ebd2284b4"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "e42fea42ad2f4362eb385c1294bc36a9f74a9faf5f724f4b102328a8fbe3c9b34ceb7b4a048fb41a8bb99534d45498f633cc70526fc88d755ede2ab95c0749659aba4f4d9f32c253d2e6f082e1fd8978f7df03790be402db10d12c75e99705e8805fc6f75bcffd442fc4f9f9f02db12bc20cf8760aca072a98f4aad2a513df9c8e954f84c82a6133f787149578cc265ab260284dc05b2b9206a3b5aa"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "5c9784cf7ea1ea1eef0c0ca1dafcb44171f9490c3214e19a8fa604565aab38ce57ab8abd21dbe38dbfda3770bb374ef284d1072e38da0d4936"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "ebe852b5f150cd9b829b93095448814403e5d685d371655679ed25451da052ae8f6be6bb205999780ef388fd4aff130496af1fd7c294e2bbe6b3f9260d1e5bc02f431ee916ac3b"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "a122148de1fddefa80d670fa70a484978d24494284ec67771dbdac45c85ebe585ff0bc64d97f1e713f143c9e19463db7374799a7805620ce8138bf4a912fc048cc0e6ad0dee3bcbc126e9f6c7c655d7c6e46494735"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "8c3fcbe67b5b1529cb2972d12435db4a12c9868fe80efb037885f145c89ca381670899b74ac49eaf704ec38451ab74228498039d5f19cc31fb59bb328ad75f9a21b38909a715c27d65466b95d02e40a89c9a0d3baa61b442238fa3d1c4bfe1f04fdb60689763c6ac9660221dbe3353f3da6f303a08d0f9d68376bafb35d235ac6d62220b1694409314e33dc0502408d97f9d063e05fedc9ac07cf62324728794c8b0eb3fb05b5387cda8524f3eeb38225b59a4126ddfa834cc80e9f73a674957004224eb972f791ffc7186d1cbd6a604a512479267f44420a6a787ae62d42a4d98b1ad0273612f923857e0c8"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "8c1289fb19fae61be37270d79d2735a050b9f672a212b99aa5bf89566c3717469bd22fe1f5cf7819c9a5947807c13b95ab84186105da06f190d647a4ac75aeddf131bc3344fe7567aa938296db391b7e88314f8adcd9297263863ab56f5444f3599de844a357cde90e95f60425c7bd3112d9610413156a7050fffd57c585a5f9082638bb3b00082de4f19c5f1e72e3e77bd21404853a477dbfc72d49b3cf3c13667865c1cd0febc06efbe22b07969859d477fa3d4dcf1f9283245bfe7fd0cb35120a26f4a33f6f205d44a00b86babdee62f95aef24ac19a206bc689fbec3452687428ceadd098be22da72b654fb4f72e109292"}]}, 0x1408}, 0x1, 0x0, 0x0, 0xc001}, 0x448c1) [ 2116.268313][T10806] ? debug_smp_processor_id+0x20/0x20 [ 2116.273522][T10806] ? security_file_ioctl+0x7d/0xa0 [ 2116.278467][T10806] __x64_sys_ioctl+0xd4/0x110 [ 2116.282982][T10806] do_syscall_64+0xca/0x1c0 [ 2116.287321][T10806] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:57 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (rerun: 32) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async, rerun: 64) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x118, 0x12, 0x1, 0x70bd26, 0x25dfdbfb, {0x22, 0x5, 0xd4, 0x9, {0x4e20, 0x4e22, [0x71, 0x2564, 0x5, 0x16ca128a], [0x4, 0x5, 0xa83f, 0x41], 0x0, [0x1ff, 0x6]}, 0x10000, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "24f79102b5f7d2eeb59d72b6d8855b942af9559f35098316a6aed648bcd9058bf260a8a554f181bbe6a155006187984ce1ddc312dd75d28977475e18e5499168807ae033c058cd2b2f69c48cbb3e4e2ed86f59665756a86b6edda958247385c0263124420f853debda97a52db93aee93c7189a86e14fa3a1c3d2543ec163af5ac0aaf21de639e45c853398d82ca0c2e3ec86d47790417ff1e2d6acea5af121906efa9dc0586163826f2d258c"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "2a71311357eb8bf852ee1b9c"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "96f427e3898012ad"}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) (rerun: 64) 23:02:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x6b6041, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2116.341452][T10827] FAULT_INJECTION: forcing a failure. [ 2116.341452][T10827] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.354089][T10827] CPU: 0 PID: 10827 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2116.364120][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2116.374012][T10827] Call Trace: [ 2116.377145][T10827] dump_stack+0x1d8/0x241 [ 2116.381301][T10827] ? panic+0x896/0x896 [ 2116.385211][T10827] ? stack_trace_save+0x118/0x1c0 [ 2116.390065][T10827] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2116.395707][T10827] ? stack_trace_snprint+0x170/0x170 [ 2116.400841][T10827] should_fail+0x71f/0x880 [ 2116.405084][T10827] ? setup_fault_attr+0x3d0/0x3d0 [ 2116.409941][T10827] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 2116.415235][T10827] ? __kasan_kmalloc+0x171/0x210 [ 2116.420010][T10827] ? _raw_spin_lock+0x1b0/0x1b0 [ 2116.424695][T10827] ? loop_control_ioctl+0x448/0x620 [ 2116.429729][T10827] ? __x64_sys_ioctl+0xd4/0x110 [ 2116.434418][T10827] ? wb_congested_get_create+0x1a7/0x380 [ 2116.439882][T10827] should_failslab+0x5/0x20 [ 2116.444228][T10827] kmem_cache_alloc_trace+0x28/0x260 [ 2116.449347][T10827] wb_congested_get_create+0x1a7/0x380 [ 2116.454638][T10827] wb_init+0x4b1/0x8b0 [ 2116.458545][T10827] ? stable_pages_required_show+0x90/0x90 [ 2116.464098][T10827] bdi_init+0x20a/0x360 [ 2116.468092][T10827] bdi_alloc_node+0x79/0xd0 [ 2116.472432][T10827] blk_alloc_queue_node+0x112/0x640 [ 2116.477467][T10827] blk_mq_init_queue+0x34/0xa0 [ 2116.482068][T10827] loop_add+0x25c/0x740 [ 2116.486057][T10827] ? get_pid_task+0xde/0x130 [ 2116.490483][T10827] ? radix_tree_lookup+0x16f/0x1c0 [ 2116.495429][T10827] loop_control_ioctl+0x448/0x620 [ 2116.500298][T10827] ? loop_remove+0xa0/0xa0 [ 2116.504543][T10827] ? memset+0x1f/0x40 [ 2116.508362][T10827] ? fsnotify+0x1280/0x1340 [ 2116.512700][T10827] ? loop_remove+0xa0/0xa0 [ 2116.516953][T10827] do_vfs_ioctl+0x742/0x1720 [ 2116.521382][T10827] ? ioctl_preallocate+0x250/0x250 [ 2116.526330][T10827] ? __fget+0x407/0x490 [ 2116.530319][T10827] ? fget_many+0x20/0x20 [ 2116.534404][T10827] ? debug_smp_processor_id+0x20/0x20 23:02:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:57 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x118, 0x12, 0x1, 0x70bd26, 0x25dfdbfb, {0x22, 0x5, 0xd4, 0x9, {0x4e20, 0x4e22, [0x71, 0x2564, 0x5, 0x16ca128a], [0x4, 0x5, 0xa83f, 0x41], 0x0, [0x1ff, 0x6]}, 0x10000, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "24f79102b5f7d2eeb59d72b6d8855b942af9559f35098316a6aed648bcd9058bf260a8a554f181bbe6a155006187984ce1ddc312dd75d28977475e18e5499168807ae033c058cd2b2f69c48cbb3e4e2ed86f59665756a86b6edda958247385c0263124420f853debda97a52db93aee93c7189a86e14fa3a1c3d2543ec163af5ac0aaf21de639e45c853398d82ca0c2e3ec86d47790417ff1e2d6acea5af121906efa9dc0586163826f2d258c"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "2a71311357eb8bf852ee1b9c"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "96f427e3898012ad"}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x118, 0x12, 0x1, 0x70bd26, 0x25dfdbfb, {0x22, 0x5, 0xd4, 0x9, {0x4e20, 0x4e22, [0x71, 0x2564, 0x5, 0x16ca128a], [0x4, 0x5, 0xa83f, 0x41], 0x0, [0x1ff, 0x6]}, 0x10000, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "24f79102b5f7d2eeb59d72b6d8855b942af9559f35098316a6aed648bcd9058bf260a8a554f181bbe6a155006187984ce1ddc312dd75d28977475e18e5499168807ae033c058cd2b2f69c48cbb3e4e2ed86f59665756a86b6edda958247385c0263124420f853debda97a52db93aee93c7189a86e14fa3a1c3d2543ec163af5ac0aaf21de639e45c853398d82ca0c2e3ec86d47790417ff1e2d6acea5af121906efa9dc0586163826f2d258c"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "2a71311357eb8bf852ee1b9c"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "96f427e3898012ad"}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) 23:02:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:02:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}}, 0x801) (async) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000000180)={0x1408, 0x14, 0x100, 0x70bd2c, 0x25dfdbfb, {0x2, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "3a5764dc7c30070223a8cc755c4ff1cc58e98f9384ebe394a13ed0cb50c0709aca10e9a78ecb6d9a990117ebb5dc7d871fc74a0165174c13b4516f1be8a92ad97d8cfacdad12a6f1e5eff413c93e8a0f959ce17f05c3470b9a306026affad38dae11c1bede1d95ba9001584bfd38e5db0aa2e5947ebd2284b4"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "4950e66be42ae4f86d98b0b504f7e4dcc9abd5a74e81f8f99aed74428bd9e8c81227ec50b18b375a0293265091498b7f5b05232179ec7d425695740927a2079bc57f41a340a08898694c29939422fbff9fa982ecf66849bdda2815942dcc45379687bfcbb04d2a6d54b17ddfc55f4f136724c39d565af8367f21aff3d1ec8bc8e367bcbb4caf8706de10b30ffd418254a14ba0a216044b42eadbf70bf599a11371eff2b4627ecb758ef0b042f293404918621bd82fe2be509678c0f3b964cb2b073264944afceb71561331e665b5e4f2b9684ed4001c79afcc032616c77f30fa78e466bf07975ddbad24b54af60011bdbb00bbe23218e491e90ba49174fcdeba1c447a07a7710dd928996197aa2b22467c17830848bd99c5d2a4148f05b6e8081b8851c0531cad032b67339cedfa27e14b8c291a7939f5a8a47d3ecaef34bd24755f2eaf782a78fb720e578d803c027322313ffc9bfb06ecd5f199ffe3822e419082bd348d5190c3aa45f6375347c096678703d37101b4cdaaac85bbd89ca8491815aeca5102d4ab5bbd2afd572756deb9d4ed93928cb824efa8501de8edfa28e2de5ff98c14d47d1babb18ebb060871c14b70828460c8f340a62655e1c8abe7938dab8eedb0720e53418590906dc518861696bdf5a1419c1992a11db3bc7f5d2c11cd2a5031247cd275cf9c721771fd526173fa43f27bf17debf5819ab770ab88cbe96371fd867e2aeb228f47517a66d9e48f7b6cbebe208e7a087c805355fcc3091250b65a648babc29927584341f89eb86ad0c61764b99e5cc8594ce8cdb4905c4ee8f997cfaf38a5d68ac8281a982e1744c22e364dfcb09256a652c8454cc3089c23267ff4738586a79ef7c85ef8ec652a0bb6854b2ab11e8781113c10d3be53d8b45ea85cb660d0fd1704641b034f3b3728b7ce452a40cfc6519f5ec31b5dfb772e341b252270183be43fe3ed9ad264ca5562d6d2aea6313fdf5a003e9ef9801720cfafcd1ca4bd85ebb530dc120b572a01e9e6e6f2300334567c1b35a87f43d1e36d7ca71fadcda19e5f361020a8cdb4e42e9b740e57c980c435142ae2ec4516d5780e6809e22e2ee714db01890da4a319452f4d1cf6eadedcf4137d81993d78d97858301434bf606d3264450f6411dd136d2f09318ed2d860a7893db9dc0477716824f212de54a6be595da689b44b3e8001dd29b8bbdd374a86a6e236dca91fec343b0f7695112900d2740fc2644711e5e1c044c7189915ac55dfd17a813d267d2864887792e4bb757b381e5b5fe86d52ee535100349f9aec4bc28891637debaf532fcab739975d478ea2d2e64c9df7122a3a08fb130a181f676e247d1d8f9957a7f29a7df49c6892271b97a526fc548822837d77c92a785e885d7af527ba227c04bd9142af5a008b7ed2f9ef7d6dd7647025a196c8fdea8a8c5a5ff2ff07c740f8021990ba09583ccb3e85ec2e5dc89a354001a8b0088410afbfc29416b83291c9b83ea15e7c7b6f49ba2b04982ffa6d7abaf549a6d5dd1329b2c17220313b2e4491acdca65d6f4b781886901b4ffebb64e41570fed3d54176ca082e549eaeaf7e875b53a3dd6d7f9c010cbc1b6b248babf25b9ef09d8ea9532770d2cb7698c73f454bf08ab1c06eef96d86f33ec0eec948d1d27d35a3e075d49ecaeb8add066eabd0389a60a296215665ab6a8a7401ae5a02b7a4a8f3eaf0fd4ee95eee9c11e911fae8d82baa90fe8c66711e2479b4fddf31c4b9b7b1e79cf38ee55f9feb1b2317e3ade48c6417dc2a461c9315fe3d94b49e8d21176aca0ea42ee57ebf49c0b7f964712ae04e22a6d79f43156ca5d2917cbb1c0c1f9e9b23d09dd7f6d457d984a035da66636f439418cd2ceeb40ba1c78b0ab6fa592d3f88a7f63ab47691368ea22d9a21648743c4a3ad36a3fd5156ac9b8a003a52722a560a2fa73d6312577c9cdeef79e2dbae91c775316d3f8b7f4dfcca3523e82ba61931982a5f993459de3db068f5d510bc10e9936d5e4a88905f74976d9c2631267f72d50b474ab5e7710879ffb7b7a19986503d2a1faf72ed2431376bf67de55b009f89c375fc8937455f517c18c738f10241e9653dd00cea2ded6e6c6269766feefb941e84f09c5c4b4666aaf3057f09ab2ed934e3d66509f06827e6e7de3b38c3f4b35c4461c0e3609150121696fbd3b42bc283af5e307c64687915b1cc724499992f711c1f022041bb148a65d298c10ced4af037bc2cd9f1bc77b27d0df947c97bb81fa890dbdbed909f25bcaa51e51ca846fe0181ecd848d8cb8a29f01d20197a92dd37207160e6de3485a0dfd64eee3e58f28d09ecc5ab8cb759e00223d69a8df0b69cf058981ad1e6e01ceb9f2031bbe1e1bd5f401c057d825ad653b653574cf0b570620d6cd97a3251d3731af8a807ebe6b037366c25b26f89ece50bc8f626d32273fa9a7ad599f661a9cd45df1b215b4b8a384533f66b194075e1b1de23895f161c975c80ee829c67177e7065695c72974d55ef55a51d28d3d096e5f4ee39e9b4cfc0ecd3a5c090c2479a745c9f29a01dd6c8637f4d735904bb1a81ecd0f31521724b60198e6f4141415c6d70c1000a4da595d40fff738fce4217ba35b48bd2aa8022c74fe1d56a5c3ee115c5720f984b2596ce70808c2db04d176450994b8dc5ad4b52a4d1ad59e67a6822b407b8bdb839dcf302dd91fa40954f6b0a1f7c065fd6e4e36165e1672dcd4f45c7ff67aadf7aa89210131588d1394a2b17d837e6a6584e95dece2317b3cf6da78af6f473a4b2c1b8aa08538a7cb4459d60f2d7af1949d28ea30904a1e97cb883ad906b683051ff69e8779fdf2a49d5735f00b35bbae4be921371a6d41f15869dd2b7b6f6ad60a527bbf575e0389d48a4efd83e57c9e2033d506e1f1ce08b82206c452b63f96442ae0104dd2c97303ce584fc18fd261a500fa8ceaeef61cbf40b843eca5843017f359e06fcdbb3bac7cc5c6c651e9f3e31e21f46562e72d3b12155548dc0b680e52cc7a809cc422a7a29e9ca255bdcbcf67a3f01d09e445738fb288c6bcf3d13edc7b70d4ac30bb2ecacbc4d2729c9d74c0d44cde21c50133e0067f76a6c4e0bf3bed52ded93d42bb6970f33b777436056748fb0b24b457b8b3f37c01f25f8284526dea789bd31b3ec8db0f589c1aac52422af884ce92b4c9a947baf4bda3c2326a83a3fc05e81eba09f2e2b8121f520ba9784ba5e7ffc15e8f5a51af295091a34da97910401aa72dbe9e51fb87c671f6e02013637d7c3aba8314ce7b41507f1187f6312dda8f9c5974b2693284de7e3febd83ab0b4ec654760c00a64764875e5f93f613e7ef65438dd23f1d9de074da5df014109363e3322b2d35a8eefc6be51d97873c6f39ff19b9a61f9f4e4290776dc8d28848dc13dcaed6b9137a3332a52065c7a25ad5595ee925dc2b918d318883f746265e9c0468105d7dcc5764df6fab4bfcc85db06e77cd73c4f3ca04fc60d343a0ba8839d2c5418c091ecc02acea3ec6f50bee72885cefebc8735de4d3437af9f88c017027a9d6a08569a3420b87b8370031728d7e6ab794a3f7b5aba11106881e1b96ee2bd131789e85d6509cadc2daba9a433fb93630f0cded0198fd57a003a8caa8b7d1081a56d0e9835d2f38d8181a54b0a48c194919241496dd6eea8fcb7867b4b725b25934db81fb589fd75dd735137a2598abd7d51cc402024935e07315ace80704fbe15089e6044b411a0219f59a00cbf13bd71af57400a8de6f226e05a6494fc5814a25fb3b0347a6d3257eddbfb4d00c40c233c2c210905d92b4c9347691bca14d6a6d54a683e48eb0be11fe42f20246cc346cc9d2dae6a30141ca8252e6d0841fa912c842b48085d19d9afbba76da644cef2b562e6aa8bfa3546dd8d59a32d9c158186834428af8b10b31f7435f0d23145692fdbc937d194784fcf4e25dd290ac7b1f9c0e63f3a7a4dfebb5fbbf7b19d26840ac460d29c0f322429b6ce588ab347568c0ed1309c1427e8ebb2277da7bbd95db4c6aab3e12536b7790574debf116adc4b87feed2f08582b9fb48c646a2c64187606cb3f0895a7ed2918393663b71918cf01f690b1c8e10880419be9289d0d5d66042627b5abf2c03402d61c477a96d1402b98908a9f6de8580d35f43155ccc60b91378eb2ba590a929d8fe8b34725cd2ea1a3697eead36baed2c5607002f1f998af286f8beecb0c23291a6e53471f96a15b8cf46dbb0a8d8f6e18ce5ea4dc5b8b216954507f3aa702344868ab70313a84ec061ad5dd0192c1023baf391b2e7343409c184138cb8516845ef53753371c45f452162dcc48381c552a2bc4a5e103003661350648ae880963e2582305b5e615f7848aa03ffba175e89ef7de59b204dec1ec1e64d4c3c770abc92af84425e2b44efacb6b5da8a6ba912d4bc56a8bb41bc6e1b9ff4071d90d59226e217d43ed00d46bd509e5c25297cd4b34cac6c725f69f1b85662bc81b952acd18faa9427a6bff39f81a422c7366800d1edddb0b291389986f7f329b256fd458a74f57e81a7e2a47c18b2898cc5cc940e97270c577996ec1c7fdddf204c67d5336af2f18fa98f8f3dd812c106a65c436da8110b8ceede1651adb5fe2eae7f403152672463b0e3b55e4c182d72782fd81482db8936e67a5f50cf4012a95d92b1e05c310c204bdab7ee4044c1aeb6945a48362fa9a04ba73a3bc4742e8f15d4ac2336dbe370e882c7e6a9320215d43b1d1889df2f86a49fca20f85d685d92fcf8bcb93f4da398723ea9caa7488e33ca59c9c5c3eae54bd7e85cc5fe3ad78f5e06e57568c1c847501061c334d3e2c38c850d40c47014eb261a607e43b0aec096526d6e8111d5334c7cfb89a8e13b4cebca875d3d407f64116b31b1d51faa679da5ecd2f48b757b11277c877d75e3bd9fb38c2d3b46f5f204a6950573315c1e59600a3a08c8994788fff7290dfe6724661667bd4bc8c7effbe1fa98873ec446d3ce07d5417e2f8fa8672efb948483bf71ce8346af33851cd46c9089e1b8d69c412e535905285c10f0a0f74f6c76cd8679f8b8e08b5095ab3e61b0ad3cf593d1484b3f8ca81913b5f4667107852cf7760761921d7491ac330f181cee9cdc723918c1a7df9cf2d7d57501678ed866947db6a7ec5e6c1671d79233c2bd475fa9e689a9bd3ef935af3491095b398a81bc9cd1f0b33fd38901dbad6370d64e2d548901a2174dac12e164636ec4747e0dd7fd4a75d04309b15fc1520e6348d5e55845f98e7a1baf9b6bb453ce21e78c6f7b538a7262438bafcd31e92cb7709e9b06c94fc6a593f17a270338c1f73351985ad8f31cacb6a68b17f349415659e59fa7b9d147961251637f87e39b63aecb4e753c57b5abe596041f58293f5f122556eb70f50c3388b530eb77c1408553037e7e93304fb58a656c91e30d1d20c52e9cc3255bad53abe20b0a152a6c39c36e33abf024b5f340982507e1dc46142705a3cb76c638b40941e8529fe85d64351c1f44a2113d547358d3d94224d5c0b79171b4272fa7041d5a9c624c9f7084078ef6064e40d1dfece8a981467ecccdcf581997914905378f2354618493841ca2d864019f962a3be67d22c7713e946711ecdb90d4e6073f0f90ad49d1fffbd91a91641922afc3443df684e743acb084102253eec95a6ff7cb0543f72d524affec44716e935e5d176a0416554d1da9403af3f068f13b607b3dd87bce647044caff3b20dc93746894d352c0d790f3154d48be65b612e2449890611b8f207f95c6dc8819048b3471297ecfbb22f01e5645f8846"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "e42fea42ad2f4362eb385c1294bc36a9f74a9faf5f724f4b102328a8fbe3c9b34ceb7b4a048fb41a8bb99534d45498f633cc70526fc88d755ede2ab95c0749659aba4f4d9f32c253d2e6f082e1fd8978f7df03790be402db10d12c75e99705e8805fc6f75bcffd442fc4f9f9f02db12bc20cf8760aca072a98f4aad2a513df9c8e954f84c82a6133f787149578cc265ab260284dc05b2b9206a3b5aa"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "5c9784cf7ea1ea1eef0c0ca1dafcb44171f9490c3214e19a8fa604565aab38ce57ab8abd21dbe38dbfda3770bb374ef284d1072e38da0d4936"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "ebe852b5f150cd9b829b93095448814403e5d685d371655679ed25451da052ae8f6be6bb205999780ef388fd4aff130496af1fd7c294e2bbe6b3f9260d1e5bc02f431ee916ac3b"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "a122148de1fddefa80d670fa70a484978d24494284ec67771dbdac45c85ebe585ff0bc64d97f1e713f143c9e19463db7374799a7805620ce8138bf4a912fc048cc0e6ad0dee3bcbc126e9f6c7c655d7c6e46494735"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "8c3fcbe67b5b1529cb2972d12435db4a12c9868fe80efb037885f145c89ca381670899b74ac49eaf704ec38451ab74228498039d5f19cc31fb59bb328ad75f9a21b38909a715c27d65466b95d02e40a89c9a0d3baa61b442238fa3d1c4bfe1f04fdb60689763c6ac9660221dbe3353f3da6f303a08d0f9d68376bafb35d235ac6d62220b1694409314e33dc0502408d97f9d063e05fedc9ac07cf62324728794c8b0eb3fb05b5387cda8524f3eeb38225b59a4126ddfa834cc80e9f73a674957004224eb972f791ffc7186d1cbd6a604a512479267f44420a6a787ae62d42a4d98b1ad0273612f923857e0c8"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "8c1289fb19fae61be37270d79d2735a050b9f672a212b99aa5bf89566c3717469bd22fe1f5cf7819c9a5947807c13b95ab84186105da06f190d647a4ac75aeddf131bc3344fe7567aa938296db391b7e88314f8adcd9297263863ab56f5444f3599de844a357cde90e95f60425c7bd3112d9610413156a7050fffd57c585a5f9082638bb3b00082de4f19c5f1e72e3e77bd21404853a477dbfc72d49b3cf3c13667865c1cd0febc06efbe22b07969859d477fa3d4dcf1f9283245bfe7fd0cb35120a26f4a33f6f205d44a00b86babdee62f95aef24ac19a206bc689fbec3452687428ceadd098be22da72b654fb4f72e109292"}]}, 0x1408}, 0x1, 0x0, 0x0, 0xc001}, 0x448c1) 23:02:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 20) 23:02:57 executing program 5: r0 = socket(0x11, 0x1, 0x10001) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:57 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2a00, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x7) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) [ 2116.539608][T10827] ? security_file_ioctl+0x7d/0xa0 [ 2116.544557][T10827] __x64_sys_ioctl+0xd4/0x110 [ 2116.549077][T10827] do_syscall_64+0xca/0x1c0 [ 2116.553407][T10827] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x15, @val=@iter={&(0x7f00000001c0)=@cgroup={0x1, r5, 0x70}, 0x10}}, 0x40) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200040a4}, 0x4048841) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c81, 0x2) 23:02:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) [ 2116.604594][T10850] FAULT_INJECTION: forcing a failure. [ 2116.604594][T10850] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.617715][T10850] CPU: 0 PID: 10850 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2116.627742][T10850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2116.637637][T10850] Call Trace: [ 2116.640777][T10850] dump_stack+0x1d8/0x241 [ 2116.644929][T10850] ? panic+0x896/0x896 [ 2116.648832][T10850] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2116.654477][T10850] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 2116.660119][T10850] should_fail+0x71f/0x880 [ 2116.664373][T10850] ? setup_fault_attr+0x3d0/0x3d0 [ 2116.669238][T10850] ? stable_pages_required_show+0x90/0x90 [ 2116.674786][T10850] ? blk_alloc_queue_stats+0x48/0x100 [ 2116.679996][T10850] should_failslab+0x5/0x20 [ 2116.684340][T10850] kmem_cache_alloc_trace+0x28/0x260 [ 2116.689462][T10850] blk_alloc_queue_stats+0x48/0x100 [ 2116.694492][T10850] blk_alloc_queue_node+0x14f/0x640 [ 2116.699522][T10850] blk_mq_init_queue+0x34/0xa0 [ 2116.704122][T10850] loop_add+0x25c/0x740 [ 2116.708120][T10850] ? get_pid_task+0xde/0x130 [ 2116.712539][T10850] ? radix_tree_lookup+0x16f/0x1c0 [ 2116.717491][T10850] loop_control_ioctl+0x448/0x620 [ 2116.722348][T10850] ? loop_remove+0xa0/0xa0 [ 2116.726609][T10850] ? memset+0x1f/0x40 [ 2116.730422][T10850] ? fsnotify+0x1280/0x1340 [ 2116.734759][T10850] ? loop_remove+0xa0/0xa0 [ 2116.739012][T10850] do_vfs_ioctl+0x742/0x1720 [ 2116.743438][T10850] ? ioctl_preallocate+0x250/0x250 [ 2116.748391][T10850] ? __fget+0x407/0x490 23:02:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 21) 23:02:58 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4800) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) [ 2116.752375][T10850] ? fget_many+0x20/0x20 [ 2116.756456][T10850] ? switch_fpu_return+0x1d4/0x410 [ 2116.761402][T10850] ? security_file_ioctl+0x7d/0xa0 [ 2116.766348][T10850] __x64_sys_ioctl+0xd4/0x110 [ 2116.770863][T10850] do_syscall_64+0xca/0x1c0 [ 2116.775204][T10850] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2116.790037][T10865] Unknown ioctl 1074033728 23:02:58 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2a00, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x7) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:02:58 executing program 5: r0 = socket(0x11, 0x1, 0x10001) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6e, 0x0, 0xffffffffffffffff, 0x1005, '\x00', 0x0, r3, 0x3, 0x4, 0x3}, 0x48) 23:02:58 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4800) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) 23:02:58 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4800) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4800) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) (async) 23:02:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) [ 2116.804133][T10870] FAULT_INJECTION: forcing a failure. [ 2116.804133][T10870] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.820573][T10870] CPU: 0 PID: 10870 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2116.830609][T10870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2116.840503][T10870] Call Trace: [ 2116.843637][T10870] dump_stack+0x1d8/0x241 [ 2116.847801][T10870] ? panic+0x896/0x896 [ 2116.851703][T10870] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2116.857339][T10870] ? pcpu_chunk_relocate+0xdc/0x3a0 [ 2116.862372][T10870] should_fail+0x71f/0x880 [ 2116.866628][T10870] ? setup_fault_attr+0x3d0/0x3d0 [ 2116.871488][T10870] ? find_next_bit+0xc3/0x100 [ 2116.875996][T10870] ? cpumask_next+0xc/0x20 [ 2116.880265][T10870] ? blkg_alloc+0x7e/0x480 [ 2116.884501][T10870] should_failslab+0x5/0x20 [ 2116.888842][T10870] kmem_cache_alloc_trace+0x28/0x260 [ 2116.893965][T10870] blkg_alloc+0x7e/0x480 [ 2116.898046][T10870] ? blk_timeout_work+0x10/0x10 [ 2116.902732][T10870] blkcg_init_queue+0x24/0x150 [ 2116.907330][T10870] blk_alloc_queue_node+0x4e9/0x640 [ 2116.912363][T10870] blk_mq_init_queue+0x34/0xa0 [ 2116.916966][T10870] loop_add+0x25c/0x740 [ 2116.920954][T10870] ? get_pid_task+0xde/0x130 [ 2116.925384][T10870] ? radix_tree_lookup+0x16f/0x1c0 [ 2116.930337][T10870] loop_control_ioctl+0x448/0x620 [ 2116.935190][T10870] ? loop_remove+0xa0/0xa0 [ 2116.939448][T10870] ? memset+0x1f/0x40 [ 2116.943271][T10870] ? fsnotify+0x1280/0x1340 [ 2116.947599][T10870] ? loop_remove+0xa0/0xa0 [ 2116.951851][T10870] do_vfs_ioctl+0x742/0x1720 [ 2116.956282][T10870] ? ioctl_preallocate+0x250/0x250 [ 2116.961227][T10870] ? __fget+0x407/0x490 [ 2116.965218][T10870] ? fget_many+0x20/0x20 [ 2116.969295][T10870] ? debug_smp_processor_id+0x20/0x20 [ 2116.974506][T10870] ? security_file_ioctl+0x7d/0xa0 [ 2116.979451][T10870] __x64_sys_ioctl+0xd4/0x110 [ 2116.983968][T10870] do_syscall_64+0xca/0x1c0 [ 2116.988306][T10870] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 22) 23:02:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x15, @val=@iter={&(0x7f00000001c0)=@cgroup={0x1, r5, 0x70}, 0x10}}, 0x40) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200040a4}, 0x4048841) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200040a4}, 0x4048841) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r6, 0x4c81, 0x2) 23:02:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6e, 0x0, 0xffffffffffffffff, 0x1005, '\x00', 0x0, r3, 0x3, 0x4, 0x3}, 0x48) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6e, 0x0, 0xffffffffffffffff, 0x1005, '\x00', 0x0, r3, 0x3, 0x4, 0x3}, 0x48) (async) 23:02:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 23:02:58 executing program 5: r0 = socket(0x11, 0x1, 0x10001) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) [ 2117.004242][T10893] Unknown ioctl 1074033728 [ 2117.019402][T10896] FAULT_INJECTION: forcing a failure. [ 2117.019402][T10896] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.032547][T10896] CPU: 1 PID: 10896 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2117.042569][T10896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2117.052466][T10896] Call Trace: [ 2117.055596][T10896] dump_stack+0x1d8/0x241 [ 2117.059765][T10896] ? panic+0x896/0x896 [ 2117.063661][T10896] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2117.069304][T10896] ? _raw_spin_lock+0xa4/0x1b0 [ 2117.073907][T10896] should_fail+0x71f/0x880 [ 2117.078156][T10896] ? setup_fault_attr+0x3d0/0x3d0 [ 2117.083024][T10896] ? blkg_create+0xd61/0x1270 [ 2117.087556][T10896] ? blk_mq_poll_stats_fn+0x110/0x110 [ 2117.092738][T10896] ? blk_stat_alloc_callback+0x5c/0x210 [ 2117.098120][T10896] should_failslab+0x5/0x20 [ 2117.102461][T10896] kmem_cache_alloc_trace+0x28/0x260 [ 2117.107608][T10896] ? blk_mq_poll_stats_fn+0x110/0x110 [ 2117.112789][T10896] ? blk_mq_free_tag_set+0x650/0x650 [ 2117.117906][T10896] blk_stat_alloc_callback+0x5c/0x210 [ 2117.123119][T10896] blk_mq_init_allocated_queue+0x8c/0x1990 [ 2117.128756][T10896] ? blkcg_init_queue+0x12c/0x150 [ 2117.133620][T10896] ? blk_alloc_queue_node+0x5a2/0x640 [ 2117.138832][T10896] blk_mq_init_queue+0x49/0xa0 [ 2117.143432][T10896] loop_add+0x25c/0x740 [ 2117.147426][T10896] ? get_pid_task+0xde/0x130 [ 2117.151846][T10896] ? radix_tree_lookup+0x16f/0x1c0 [ 2117.156789][T10896] loop_control_ioctl+0x448/0x620 [ 2117.161650][T10896] ? loop_remove+0xa0/0xa0 [ 2117.165903][T10896] ? memset+0x1f/0x40 [ 2117.169718][T10896] ? fsnotify+0x1280/0x1340 [ 2117.174064][T10896] ? loop_remove+0xa0/0xa0 [ 2117.178315][T10896] do_vfs_ioctl+0x742/0x1720 [ 2117.182739][T10896] ? ioctl_preallocate+0x250/0x250 [ 2117.187685][T10896] ? __fget+0x407/0x490 [ 2117.191685][T10896] ? fget_many+0x20/0x20 [ 2117.195755][T10896] ? debug_smp_processor_id+0x20/0x20 [ 2117.200963][T10896] ? security_file_ioctl+0x7d/0xa0 23:02:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6e, 0x0, 0xffffffffffffffff, 0x1005, '\x00', 0x0, r3, 0x3, 0x4, 0x3}, 0x48) 23:02:58 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2a00, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x7) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:02:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 23) 23:02:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x15, @val=@iter={&(0x7f00000001c0)=@cgroup={0x1, r5, 0x70}, 0x10}}, 0x40) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200040a4}, 0x4048841) (async) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c81, 0x2) 23:02:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x1) 23:02:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 23:02:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xffffffffffffff35, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf25024a6cf4d3549e5400000008002b0000", @ANYRES32=0x0, @ANYBLOB="caa2a8439f1f75234f008e0f26178964e5eb4c95ea53c17ff118d5e4b806747dfa7be7ef6575eb2bf053be6b828c40cc6e59d19a64a436205cb04c498d72d9e5e2a9772a9aaa4ef110f834a4094b16f11c16c0cd40c2df31b96f"], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) [ 2117.205912][T10896] __x64_sys_ioctl+0xd4/0x110 [ 2117.210431][T10896] do_syscall_64+0xca/0x1c0 [ 2117.214770][T10896] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x1) 23:02:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x9090c0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000fddbdf25050000000800020000000000080004000000400108000400090000000800030008000000280001801400040000000000000000000000ffffe05aa2ee078f9eaa", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0800020003000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x18000) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x100010, r5, 0x47e93000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa70057a761e032c9}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="524a3f4c6e26dd4f7e799355a347bfd8714d5c59b73694979d40797476af3dd0d8342f085f131f61631a969f07ab6fa1d128ad29ecf6b9400c657f2287ce206a9ede2057d8155acc614b89d6", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf2502000000050035003f00000008003a000600000000000300", @ANYRES32=0x0, @ANYBLOB="05002f000400000005003300010000000a000900aaaaaaaaaaaa000005002d0001000000080039007f00000008003b0002000000"], 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xb) 23:02:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000092a09cf5b777f2187800", @ANYRES16=0x0, @ANYBLOB="100a29bd7001fedbdfff020000000a000900aaaaaaaaaa3b000008003a0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x801) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x1) 23:02:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xffffffffffffff35, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf25024a6cf4d3549e5400000008002b0000", @ANYRES32=0x0, @ANYBLOB="caa2a8439f1f75234f008e0f26178964e5eb4c95ea53c17ff118d5e4b806747dfa7be7ef6575eb2bf053be6b828c40cc6e59d19a64a436205cb04c498d72d9e5e2a9772a9aaa4ef110f834a4094b16f11c16c0cd40c2df31b96f"], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$LOOP_CTL_ADD(r0, 0x4b47, r3) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000040)={0x80, 0x80000001}) 23:02:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x9090c0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async, rerun: 32) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) (rerun: 32) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000fddbdf25050000000800020000000000080004000000400108000400090000000800030008000000280001801400040000000000000000000000ffffe05aa2ee078f9eaa", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0800020003000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x18000) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x100010, r5, 0x47e93000) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa70057a761e032c9}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="524a3f4c6e26dd4f7e799355a347bfd8714d5c59b73694979d40797476af3dd0d8342f085f131f61631a969f07ab6fa1d128ad29ecf6b9400c657f2287ce206a9ede2057d8155acc614b89d6", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf2502000000050035003f00000008003a000600000000000300", @ANYRES32=0x0, @ANYBLOB="05002f000400000005003300010000000a000900aaaaaaaaaaaa000005002d0001000000080039007f00000008003b0002000000"], 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xb) [ 2117.268426][T10933] Unknown ioctl 1074033728 [ 2117.319635][T10943] FAULT_INJECTION: forcing a failure. [ 2117.319635][T10943] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.332336][T10943] CPU: 0 PID: 10943 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2117.342361][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2117.352255][T10943] Call Trace: [ 2117.355390][T10943] dump_stack+0x1d8/0x241 [ 2117.359549][T10943] ? panic+0x896/0x896 [ 2117.363454][T10943] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2117.369095][T10943] ? _raw_spin_lock+0xa4/0x1b0 [ 2117.373700][T10943] should_fail+0x71f/0x880 [ 2117.377950][T10943] ? setup_fault_attr+0x3d0/0x3d0 [ 2117.382816][T10943] ? blkg_create+0xd61/0x1270 [ 2117.387330][T10943] ? blk_mq_poll_stats_fn+0x110/0x110 [ 2117.392529][T10943] ? blk_stat_alloc_callback+0x5c/0x210 [ 2117.397907][T10943] should_failslab+0x5/0x20 [ 2117.402253][T10943] kmem_cache_alloc_trace+0x28/0x260 [ 2117.407371][T10943] ? blk_mq_poll_stats_fn+0x110/0x110 [ 2117.412576][T10943] ? blk_mq_free_tag_set+0x650/0x650 [ 2117.417696][T10943] blk_stat_alloc_callback+0x5c/0x210 [ 2117.422907][T10943] blk_mq_init_allocated_queue+0x8c/0x1990 [ 2117.428545][T10943] ? blkcg_init_queue+0x12c/0x150 [ 2117.433414][T10943] ? blk_alloc_queue_node+0x5a2/0x640 [ 2117.438631][T10943] blk_mq_init_queue+0x49/0xa0 [ 2117.443223][T10943] loop_add+0x25c/0x740 [ 2117.447217][T10943] ? get_pid_task+0xde/0x130 [ 2117.451639][T10943] ? radix_tree_lookup+0x16f/0x1c0 [ 2117.456584][T10943] loop_control_ioctl+0x448/0x620 [ 2117.461441][T10943] ? loop_remove+0xa0/0xa0 [ 2117.465696][T10943] ? memset+0x1f/0x40 23:02:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 24) 23:02:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x47412000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 23:02:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xffffffffffffff35, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf25024a6cf4d3549e5400000008002b0000", @ANYRES32=0x0, @ANYBLOB="caa2a8439f1f75234f008e0f26178964e5eb4c95ea53c17ff118d5e4b806747dfa7be7ef6575eb2bf053be6b828c40cc6e59d19a64a436205cb04c498d72d9e5e2a9772a9aaa4ef110f834a4094b16f11c16c0cd40c2df31b96f"], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x9090c0, 0x0) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000fddbdf25050000000800020000000000080004000000400108000400090000000800030008000000280001801400040000000000000000000000ffffe05aa2ee078f9eaa", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0800020003000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x18000) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x100010, r5, 0x47e93000) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa70057a761e032c9}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="524a3f4c6e26dd4f7e799355a347bfd8714d5c59b73694979d40797476af3dd0d8342f085f131f61631a969f07ab6fa1d128ad29ecf6b9400c657f2287ce206a9ede2057d8155acc614b89d6", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf2502000000050035003f00000008003a000600000000000300", @ANYRES32=0x0, @ANYBLOB="05002f000400000005003300010000000a000900aaaaaaaaaaaa000005002d0001000000080039007f00000008003b0002000000"], 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xb) 23:02:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000092a09cf5b777f2187800", @ANYRES16=0x0, @ANYBLOB="100a29bd7001fedbdfff020000000a000900aaaaaaaaaa3b000008003a0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x801) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$LOOP_CTL_ADD(r0, 0x4b47, r3) (async, rerun: 64) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (rerun: 64) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000040)={0x80, 0x80000001}) [ 2117.469512][T10943] ? fsnotify+0x1280/0x1340 [ 2117.473852][T10943] ? loop_remove+0xa0/0xa0 [ 2117.478110][T10943] do_vfs_ioctl+0x742/0x1720 [ 2117.482531][T10943] ? ioctl_preallocate+0x250/0x250 [ 2117.487482][T10943] ? __fget+0x407/0x490 [ 2117.491471][T10943] ? fget_many+0x20/0x20 [ 2117.495550][T10943] ? debug_smp_processor_id+0x20/0x20 [ 2117.500760][T10943] ? security_file_ioctl+0x7d/0xa0 [ 2117.505705][T10943] __x64_sys_ioctl+0xd4/0x110 [ 2117.510223][T10943] do_syscall_64+0xca/0x1c0 [ 2117.514558][T10943] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x40004) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c81, 0x2) 23:02:58 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/251) syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x208501) 23:02:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$LOOP_CTL_ADD(r0, 0x4b47, r3) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000040)={0x80, 0x80000001}) 23:02:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000092a09cf5b777f2187800", @ANYRES16=0x0, @ANYBLOB="100a29bd7001fedbdfff020000000a000900aaaaaaaaaa3b000008003a0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x801) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:02:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x47412000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 2117.586243][T10979] FAULT_INJECTION: forcing a failure. [ 2117.586243][T10979] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.601953][T10979] CPU: 0 PID: 10979 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2117.611993][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2117.621896][T10979] Call Trace: [ 2117.625025][T10979] dump_stack+0x1d8/0x241 [ 2117.629179][T10979] ? panic+0x896/0x896 [ 2117.633081][T10979] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2117.638726][T10979] should_fail+0x71f/0x880 [ 2117.642985][T10979] ? cpumask_next+0xc/0x20 [ 2117.647238][T10979] ? setup_fault_attr+0x3d0/0x3d0 [ 2117.652095][T10979] ? init_timer_key+0x2d/0x1f0 [ 2117.656696][T10979] ? blk_mq_init_allocated_queue+0x108/0x1990 [ 2117.662592][T10979] should_failslab+0x5/0x20 [ 2117.666937][T10979] kmem_cache_alloc_trace+0x28/0x260 [ 2117.672056][T10979] blk_mq_init_allocated_queue+0x108/0x1990 [ 2117.677784][T10979] ? blkcg_init_queue+0x12c/0x150 [ 2117.682640][T10979] ? blk_alloc_queue_node+0x5a2/0x640 [ 2117.687849][T10979] blk_mq_init_queue+0x49/0xa0 [ 2117.692448][T10979] loop_add+0x25c/0x740 [ 2117.696439][T10979] ? get_pid_task+0xde/0x130 [ 2117.700868][T10979] ? radix_tree_lookup+0x16f/0x1c0 [ 2117.705822][T10979] loop_control_ioctl+0x448/0x620 [ 2117.710675][T10979] ? loop_remove+0xa0/0xa0 [ 2117.714931][T10979] ? memset+0x1f/0x40 [ 2117.718746][T10979] ? fsnotify+0x1280/0x1340 [ 2117.723086][T10979] ? loop_remove+0xa0/0xa0 [ 2117.727339][T10979] do_vfs_ioctl+0x742/0x1720 [ 2117.731771][T10979] ? ioctl_preallocate+0x250/0x250 23:02:59 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/251) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/251) syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x208501) 23:02:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 25) 23:02:59 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x40004) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c81, 0x2) 23:02:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x47412000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 23:02:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async, rerun: 32) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2117.736712][T10979] ? __fget+0x407/0x490 [ 2117.740704][T10979] ? fget_many+0x20/0x20 [ 2117.744787][T10979] ? debug_smp_processor_id+0x20/0x20 [ 2117.749991][T10979] ? security_file_ioctl+0x7d/0xa0 [ 2117.754938][T10979] __x64_sys_ioctl+0xd4/0x110 [ 2117.759452][T10979] do_syscall_64+0xca/0x1c0 [ 2117.763802][T10979] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x56a, 0x40000) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0xc}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140), 0x0, 0x10, &(0x7f0000000100), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 23:02:59 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/251) syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x208501) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xb) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/251) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x208501) (async) 23:02:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2117.812615][T10996] FAULT_INJECTION: forcing a failure. [ 2117.812615][T10996] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.848240][T10996] CPU: 1 PID: 10996 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2117.858287][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2117.868177][T10996] Call Trace: [ 2117.871308][T10996] dump_stack+0x1d8/0x241 [ 2117.875472][T10996] ? panic+0x896/0x896 [ 2117.879377][T10996] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2117.885018][T10996] should_fail+0x71f/0x880 [ 2117.889277][T10996] ? cpumask_next+0xc/0x20 [ 2117.893521][T10996] ? setup_fault_attr+0x3d0/0x3d0 [ 2117.898382][T10996] ? init_timer_key+0x2d/0x1f0 [ 2117.902980][T10996] ? blk_mq_init_allocated_queue+0x108/0x1990 [ 2117.908882][T10996] should_failslab+0x5/0x20 [ 2117.913223][T10996] kmem_cache_alloc_trace+0x28/0x260 [ 2117.918345][T10996] blk_mq_init_allocated_queue+0x108/0x1990 [ 2117.924071][T10996] ? blkcg_init_queue+0x12c/0x150 [ 2117.928934][T10996] ? blk_alloc_queue_node+0x5a2/0x640 [ 2117.934148][T10996] blk_mq_init_queue+0x49/0xa0 [ 2117.938745][T10996] loop_add+0x25c/0x740 [ 2117.942736][T10996] ? get_pid_task+0xde/0x130 [ 2117.947159][T10996] ? radix_tree_lookup+0x16f/0x1c0 [ 2117.952107][T10996] loop_control_ioctl+0x448/0x620 [ 2117.956968][T10996] ? loop_remove+0xa0/0xa0 [ 2117.961221][T10996] ? memset+0x1f/0x40 [ 2117.965038][T10996] ? fsnotify+0x1280/0x1340 [ 2117.969377][T10996] ? loop_remove+0xa0/0xa0 [ 2117.973628][T10996] do_vfs_ioctl+0x742/0x1720 [ 2117.978056][T10996] ? ioctl_preallocate+0x250/0x250 [ 2117.983004][T10996] ? __fget+0x407/0x490 [ 2117.986994][T10996] ? fget_many+0x20/0x20 [ 2117.991073][T10996] ? debug_smp_processor_id+0x20/0x20 [ 2117.996281][T10996] ? security_file_ioctl+0x7d/0xa0 [ 2118.001228][T10996] __x64_sys_ioctl+0xd4/0x110 [ 2118.005742][T10996] do_syscall_64+0xca/0x1c0 23:02:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x40004) (async) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c81, 0x2) 23:02:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 26) [ 2118.010085][T10996] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x56a, 0x40000) (async, rerun: 32) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async, rerun: 32) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async, rerun: 64) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0xc}, 0x18) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140), 0x0, 0x10, &(0x7f0000000100), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 23:02:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4051) [ 2118.075609][T11024] FAULT_INJECTION: forcing a failure. [ 2118.075609][T11024] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.089566][T11024] CPU: 0 PID: 11024 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2118.099685][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2118.109575][T11024] Call Trace: [ 2118.112713][T11024] dump_stack+0x1d8/0x241 [ 2118.116877][T11024] ? panic+0x896/0x896 [ 2118.120780][T11024] ? __kasan_kmalloc+0x1d9/0x210 [ 2118.125551][T11024] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2118.131192][T11024] ? __kasan_kmalloc+0x1d9/0x210 [ 2118.135965][T11024] ? do_vfs_ioctl+0x742/0x1720 [ 2118.140567][T11024] should_fail+0x71f/0x880 [ 2118.144819][T11024] ? __x64_sys_ioctl+0xd4/0x110 [ 2118.149501][T11024] ? do_syscall_64+0xca/0x1c0 [ 2118.154016][T11024] ? setup_fault_attr+0x3d0/0x3d0 [ 2118.158876][T11024] ? _raw_spin_lock+0xa4/0x1b0 [ 2118.163477][T11024] ? _raw_spin_trylock_bh+0x190/0x190 [ 2118.168683][T11024] ? blk_mq_realloc_hw_ctxs+0x303/0x13b0 [ 2118.174153][T11024] should_failslab+0x5/0x20 [ 2118.178491][T11024] __kmalloc+0x51/0x2e0 [ 2118.182482][T11024] ? blk_mq_hw_queue_to_node+0xe3/0x100 [ 2118.187867][T11024] blk_mq_realloc_hw_ctxs+0x303/0x13b0 [ 2118.193168][T11024] blk_mq_init_allocated_queue+0x52d/0x1990 [ 2118.198889][T11024] blk_mq_init_queue+0x49/0xa0 [ 2118.203488][T11024] loop_add+0x25c/0x740 [ 2118.207485][T11024] ? get_pid_task+0xde/0x130 [ 2118.211908][T11024] ? radix_tree_lookup+0x16f/0x1c0 [ 2118.216855][T11024] loop_control_ioctl+0x448/0x620 [ 2118.221714][T11024] ? loop_remove+0xa0/0xa0 [ 2118.225971][T11024] ? memset+0x1f/0x40 [ 2118.229790][T11024] ? fsnotify+0x1280/0x1340 [ 2118.234123][T11024] ? loop_remove+0xa0/0xa0 [ 2118.238376][T11024] do_vfs_ioctl+0x742/0x1720 [ 2118.242802][T11024] ? ioctl_preallocate+0x250/0x250 [ 2118.247757][T11024] ? __fget+0x407/0x490 [ 2118.251750][T11024] ? fget_many+0x20/0x20 [ 2118.255821][T11024] ? debug_smp_processor_id+0x20/0x20 [ 2118.261029][T11024] ? security_file_ioctl+0x7d/0xa0 [ 2118.265977][T11024] __x64_sys_ioctl+0xd4/0x110 [ 2118.270492][T11024] do_syscall_64+0xca/0x1c0 23:02:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:02:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x56a, 0x40000) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0xc}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140), 0x0, 0x10, &(0x7f0000000100), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000080), 0x56a, 0x40000) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0xc}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140), 0x0, 0x10, &(0x7f0000000100), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) 23:02:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400080, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:02:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 27) 23:02:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2118.274829][T11024] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:59 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x34d700, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 23:02:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4051) 23:02:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400080, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) [ 2118.317909][T11058] FAULT_INJECTION: forcing a failure. [ 2118.317909][T11058] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.340418][T11058] CPU: 0 PID: 11058 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2118.350452][T11058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2118.360342][T11058] Call Trace: [ 2118.363475][T11058] dump_stack+0x1d8/0x241 [ 2118.367636][T11058] ? panic+0x896/0x896 [ 2118.371542][T11058] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2118.377186][T11058] should_fail+0x71f/0x880 [ 2118.381437][T11058] ? setup_fault_attr+0x3d0/0x3d0 [ 2118.386300][T11058] ? blk_mq_realloc_hw_ctxs+0x5aa/0x13b0 [ 2118.391763][T11058] should_failslab+0x5/0x20 [ 2118.396116][T11058] __kmalloc+0x51/0x2e0 [ 2118.400120][T11058] ? init_timer_key+0x2d/0x1f0 [ 2118.404701][T11058] blk_mq_realloc_hw_ctxs+0x5aa/0x13b0 [ 2118.409994][T11058] blk_mq_init_allocated_queue+0x52d/0x1990 [ 2118.415727][T11058] blk_mq_init_queue+0x49/0xa0 [ 2118.420320][T11058] loop_add+0x25c/0x740 [ 2118.424310][T11058] ? get_pid_task+0xde/0x130 [ 2118.428738][T11058] ? radix_tree_lookup+0x16f/0x1c0 [ 2118.433687][T11058] loop_control_ioctl+0x448/0x620 [ 2118.438544][T11058] ? loop_remove+0xa0/0xa0 [ 2118.442799][T11058] ? memset+0x1f/0x40 [ 2118.446619][T11058] ? fsnotify+0x1280/0x1340 [ 2118.450957][T11058] ? loop_remove+0xa0/0xa0 [ 2118.455208][T11058] do_vfs_ioctl+0x742/0x1720 [ 2118.459635][T11058] ? ioctl_preallocate+0x250/0x250 [ 2118.464582][T11058] ? __fget+0x407/0x490 23:02:59 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x34d700, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x34d700, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) 23:02:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:02:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 28) 23:02:59 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x34d700, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x34d700, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) (async) 23:02:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4051) [ 2118.468573][T11058] ? fget_many+0x20/0x20 [ 2118.472655][T11058] ? debug_smp_processor_id+0x20/0x20 [ 2118.477861][T11058] ? security_file_ioctl+0x7d/0xa0 [ 2118.482808][T11058] __x64_sys_ioctl+0xd4/0x110 [ 2118.487321][T11058] do_syscall_64+0xca/0x1c0 [ 2118.491670][T11058] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:02:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400080, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400080, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) 23:02:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x34002) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x91}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1e}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 23:02:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:02:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101003, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) r5 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) 23:02:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101003, 0x0) (async) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) (async) r5 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) 23:02:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101003, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) r5 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101003, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) (async) [ 2118.525364][T11080] FAULT_INJECTION: forcing a failure. [ 2118.525364][T11080] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.540345][T11080] CPU: 0 PID: 11080 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2118.550383][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2118.560276][T11080] Call Trace: [ 2118.563417][T11080] dump_stack+0x1d8/0x241 [ 2118.567585][T11080] ? panic+0x896/0x896 [ 2118.571481][T11080] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2118.577129][T11080] should_fail+0x71f/0x880 [ 2118.581375][T11080] ? setup_fault_attr+0x3d0/0x3d0 [ 2118.586228][T11080] ? blk_mq_realloc_hw_ctxs+0x5aa/0x13b0 [ 2118.591690][T11080] should_failslab+0x5/0x20 [ 2118.596029][T11080] __kmalloc+0x51/0x2e0 [ 2118.600027][T11080] ? init_timer_key+0x2d/0x1f0 [ 2118.604626][T11080] blk_mq_realloc_hw_ctxs+0x5aa/0x13b0 [ 2118.609923][T11080] blk_mq_init_allocated_queue+0x52d/0x1990 [ 2118.615651][T11080] blk_mq_init_queue+0x49/0xa0 [ 2118.620248][T11080] loop_add+0x25c/0x740 23:03:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x4c5b, 0x7f}, @sack_perm, @timestamp, @mss={0x2, 0x587e}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x7) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2118.624324][T11080] ? get_pid_task+0xde/0x130 [ 2118.628764][T11080] ? radix_tree_lookup+0x16f/0x1c0 [ 2118.633704][T11080] loop_control_ioctl+0x448/0x620 [ 2118.638561][T11080] ? loop_remove+0xa0/0xa0 [ 2118.642821][T11080] ? memset+0x1f/0x40 [ 2118.646638][T11080] ? fsnotify+0x1280/0x1340 [ 2118.650977][T11080] ? loop_remove+0xa0/0xa0 [ 2118.655224][T11080] do_vfs_ioctl+0x742/0x1720 [ 2118.659651][T11080] ? ioctl_preallocate+0x250/0x250 [ 2118.664597][T11080] ? __fget+0x407/0x490 [ 2118.668593][T11080] ? fget_many+0x20/0x20 23:03:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 29) 23:03:00 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x4c5b, 0x7f}, @sack_perm, @timestamp, @mss={0x2, 0x587e}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x7) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:00 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='$!\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x20) [ 2118.672668][T11080] ? debug_smp_processor_id+0x20/0x20 [ 2118.677885][T11080] ? security_file_ioctl+0x7d/0xa0 [ 2118.682826][T11080] __x64_sys_ioctl+0xd4/0x110 [ 2118.687343][T11080] do_syscall_64+0xca/0x1c0 [ 2118.691678][T11080] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x34002) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x91}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1e}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 23:03:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) (async) 23:03:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x4c5b, 0x7f}, @sack_perm, @timestamp, @mss={0x2, 0x587e}, @mss={0x2, 0x9}, @timestamp, @sack_perm], 0x7) (rerun: 32) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) [ 2118.812030][T11123] FAULT_INJECTION: forcing a failure. [ 2118.812030][T11123] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.824554][T11123] CPU: 0 PID: 11123 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2118.834485][T11123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2118.844377][T11123] Call Trace: [ 2118.847511][T11123] dump_stack+0x1d8/0x241 [ 2118.851673][T11123] ? panic+0x896/0x896 [ 2118.855585][T11123] ? blk_mq_init_queue+0x49/0xa0 [ 2118.860352][T11123] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2118.865995][T11123] ? __x64_sys_ioctl+0xd4/0x110 [ 2118.870680][T11123] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2118.876582][T11123] should_fail+0x71f/0x880 [ 2118.880836][T11123] ? setup_fault_attr+0x3d0/0x3d0 [ 2118.885696][T11123] ? sbitmap_init_node+0x14a/0x380 [ 2118.890642][T11123] should_failslab+0x5/0x20 [ 2118.894988][T11123] __kmalloc+0x51/0x2e0 [ 2118.898974][T11123] sbitmap_init_node+0x14a/0x380 [ 2118.903753][T11123] blk_mq_realloc_hw_ctxs+0x61c/0x13b0 [ 2118.909046][T11123] blk_mq_init_allocated_queue+0x52d/0x1990 [ 2118.914772][T11123] blk_mq_init_queue+0x49/0xa0 [ 2118.919368][T11123] loop_add+0x25c/0x740 [ 2118.923364][T11123] ? get_pid_task+0xde/0x130 [ 2118.927808][T11123] ? radix_tree_lookup+0x16f/0x1c0 [ 2118.932737][T11123] loop_control_ioctl+0x448/0x620 [ 2118.937606][T11123] ? loop_remove+0xa0/0xa0 [ 2118.941851][T11123] ? memset+0x1f/0x40 [ 2118.945669][T11123] ? fsnotify+0x1280/0x1340 [ 2118.950006][T11123] ? loop_remove+0xa0/0xa0 [ 2118.954257][T11123] do_vfs_ioctl+0x742/0x1720 23:03:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 30) 23:03:00 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='$!\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x20) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x20) 23:03:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x34002) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x91}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1e}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x91}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1e}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 23:03:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) (async) [ 2118.958686][T11123] ? ioctl_preallocate+0x250/0x250 [ 2118.963633][T11123] ? __fget+0x407/0x490 [ 2118.967625][T11123] ? fget_many+0x20/0x20 [ 2118.971704][T11123] ? debug_smp_processor_id+0x20/0x20 [ 2118.976918][T11123] ? security_file_ioctl+0x7d/0xa0 [ 2118.981866][T11123] __x64_sys_ioctl+0xd4/0x110 [ 2118.986376][T11123] do_syscall_64+0xca/0x1c0 [ 2118.990714][T11123] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) [ 2119.022959][T11147] FAULT_INJECTION: forcing a failure. [ 2119.022959][T11147] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.035475][T11147] CPU: 0 PID: 11147 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2119.045408][T11147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2119.055299][T11147] Call Trace: [ 2119.058432][T11147] dump_stack+0x1d8/0x241 [ 2119.062594][T11147] ? panic+0x896/0x896 [ 2119.066499][T11147] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2119.072145][T11147] should_fail+0x71f/0x880 [ 2119.076403][T11147] ? setup_fault_attr+0x3d0/0x3d0 [ 2119.081260][T11147] ? blk_alloc_flush_queue+0xd4/0x250 [ 2119.086470][T11147] should_failslab+0x5/0x20 [ 2119.090806][T11147] __kmalloc+0x51/0x2e0 [ 2119.094796][T11147] ? blk_alloc_flush_queue+0x72/0x250 [ 2119.100001][T11147] blk_alloc_flush_queue+0xd4/0x250 [ 2119.105036][T11147] blk_mq_realloc_hw_ctxs+0x99b/0x13b0 [ 2119.110331][T11147] blk_mq_init_allocated_queue+0x52d/0x1990 [ 2119.116070][T11147] blk_mq_init_queue+0x49/0xa0 [ 2119.120657][T11147] loop_add+0x25c/0x740 [ 2119.124648][T11147] ? get_pid_task+0xde/0x130 [ 2119.129085][T11147] ? radix_tree_lookup+0x16f/0x1c0 [ 2119.134035][T11147] loop_control_ioctl+0x448/0x620 [ 2119.138893][T11147] ? loop_remove+0xa0/0xa0 [ 2119.143146][T11147] ? memset+0x1f/0x40 [ 2119.146960][T11147] ? fsnotify+0x1280/0x1340 [ 2119.151303][T11147] ? loop_remove+0xa0/0xa0 [ 2119.155556][T11147] do_vfs_ioctl+0x742/0x1720 [ 2119.159983][T11147] ? ioctl_preallocate+0x250/0x250 [ 2119.164921][T11147] ? __fget+0x407/0x490 [ 2119.168917][T11147] ? fget_many+0x20/0x20 23:03:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x50b182, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x428000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001380), 0x80c00, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xa) syz_clone3(&(0x7f00000002c0)={0x800000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x1c}, &(0x7f0000000180)=""/11, 0xb, &(0x7f00000001c0)=""/164, &(0x7f0000000280)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) process_madvise(r1, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x1000}], 0x1, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) 23:03:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 31) 23:03:00 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='$!\x00') (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x20) 23:03:00 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) 23:03:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) [ 2119.172990][T11147] ? debug_smp_processor_id+0x20/0x20 [ 2119.178199][T11147] ? security_file_ioctl+0x7d/0xa0 [ 2119.183149][T11147] __x64_sys_ioctl+0xd4/0x110 [ 2119.187659][T11147] do_syscall_64+0xca/0x1c0 [ 2119.192002][T11147] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:00 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) [ 2119.247773][T11178] FAULT_INJECTION: forcing a failure. [ 2119.247773][T11178] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.260585][T11178] CPU: 1 PID: 11178 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2119.270615][T11178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2119.280506][T11178] Call Trace: [ 2119.283641][T11178] dump_stack+0x1d8/0x241 [ 2119.287804][T11178] ? panic+0x896/0x896 [ 2119.291708][T11178] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2119.297353][T11178] ? find_next_and_bit+0xba/0x190 [ 2119.302213][T11178] should_fail+0x71f/0x880 [ 2119.306464][T11178] ? setup_fault_attr+0x3d0/0x3d0 [ 2119.311353][T11178] ? __alloc_disk_node+0x76/0x5a0 [ 2119.316191][T11178] should_failslab+0x5/0x20 [ 2119.320531][T11178] kmem_cache_alloc_trace+0x28/0x260 [ 2119.325641][T11178] __alloc_disk_node+0x76/0x5a0 [ 2119.330332][T11178] loop_add+0x315/0x740 [ 2119.334323][T11178] loop_control_ioctl+0x448/0x620 [ 2119.339180][T11178] ? loop_remove+0xa0/0xa0 [ 2119.343438][T11178] ? memset+0x1f/0x40 23:03:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x50b182, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x428000, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001380), 0x80c00, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xa) (async) syz_clone3(&(0x7f00000002c0)={0x800000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x1c}, &(0x7f0000000180)=""/11, 0xb, &(0x7f00000001c0)=""/164, &(0x7f0000000280)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) process_madvise(r1, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x1000}], 0x1, 0x1, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) 23:03:00 executing program 3: r0 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x9, &(0x7f0000000040)=""/114) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:03:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) socket(0x15, 0x2, 0x9) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) 23:03:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 32) 23:03:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x50b182, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x428000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001380), 0x80c00, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xa) syz_clone3(&(0x7f00000002c0)={0x800000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x1c}, &(0x7f0000000180)=""/11, 0xb, &(0x7f00000001c0)=""/164, &(0x7f0000000280)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) process_madvise(r1, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x1000}], 0x1, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x50b182, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x428000, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001380), 0x80c00, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xa) (async) syz_clone3(&(0x7f00000002c0)={0x800000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x1c}, &(0x7f0000000180)=""/11, 0xb, &(0x7f00000001c0)=""/164, &(0x7f0000000280)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) process_madvise(r1, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x1000}], 0x1, 0x1, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) (async) [ 2119.347251][T11178] ? fsnotify+0x1280/0x1340 [ 2119.351592][T11178] ? loop_remove+0xa0/0xa0 [ 2119.355846][T11178] do_vfs_ioctl+0x742/0x1720 [ 2119.360275][T11178] ? ioctl_preallocate+0x250/0x250 [ 2119.365220][T11178] ? __fget+0x407/0x490 [ 2119.369211][T11178] ? fget_many+0x20/0x20 [ 2119.373290][T11178] ? debug_smp_processor_id+0x20/0x20 [ 2119.378501][T11178] ? security_file_ioctl+0x7d/0xa0 [ 2119.383444][T11178] __x64_sys_ioctl+0xd4/0x110 [ 2119.387959][T11178] do_syscall_64+0xca/0x1c0 [ 2119.392298][T11178] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:00 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) 23:03:00 executing program 3: r0 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x9, &(0x7f0000000040)=""/114) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:03:00 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x300, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000040)) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x100) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x100, 0xeb, &(0x7f0000000100)=""/235, 0xc2e00, 0x30, '\x00', r5, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x2, 0x81}, 0x10, 0x2dd05, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000280)=[{0x0, 0x3, 0x8, 0xb}, {0x2, 0x2, 0x1, 0x3}], 0x10, 0x8000}, 0x90) 23:03:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000003c0)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4880) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0xcd70}]}, 0x24}}, 0xc000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) [ 2119.442342][T11201] FAULT_INJECTION: forcing a failure. [ 2119.442342][T11201] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.458901][T11201] CPU: 0 PID: 11201 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2119.468942][T11201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2119.478834][T11201] Call Trace: [ 2119.481964][T11201] dump_stack+0x1d8/0x241 [ 2119.486129][T11201] ? panic+0x896/0x896 [ 2119.490030][T11201] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2119.495672][T11201] ? pcpu_alloc_area+0x658/0x750 [ 2119.500449][T11201] should_fail+0x71f/0x880 [ 2119.504698][T11201] ? setup_fault_attr+0x3d0/0x3d0 [ 2119.509564][T11201] ? __alloc_disk_node+0x31e/0x5a0 [ 2119.514505][T11201] should_failslab+0x5/0x20 [ 2119.518846][T11201] kmem_cache_alloc_trace+0x28/0x260 [ 2119.523972][T11201] __alloc_disk_node+0x31e/0x5a0 [ 2119.528742][T11201] loop_add+0x315/0x740 [ 2119.532756][T11201] loop_control_ioctl+0x448/0x620 [ 2119.537592][T11201] ? loop_remove+0xa0/0xa0 [ 2119.541845][T11201] ? memset+0x1f/0x40 [ 2119.545667][T11201] ? fsnotify+0x1280/0x1340 [ 2119.550009][T11201] ? loop_remove+0xa0/0xa0 [ 2119.554256][T11201] do_vfs_ioctl+0x742/0x1720 [ 2119.558684][T11201] ? ioctl_preallocate+0x250/0x250 [ 2119.563632][T11201] ? __fget+0x407/0x490 [ 2119.567625][T11201] ? fget_many+0x20/0x20 [ 2119.571702][T11201] ? debug_smp_processor_id+0x20/0x20 [ 2119.576910][T11201] ? security_file_ioctl+0x7d/0xa0 [ 2119.581857][T11201] __x64_sys_ioctl+0xd4/0x110 [ 2119.586371][T11201] do_syscall_64+0xca/0x1c0 23:03:00 executing program 3: r0 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x9, &(0x7f0000000040)=""/114) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:03:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 33) [ 2119.590709][T11201] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:01 executing program 5: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:01 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) socket(0x15, 0x2, 0x9) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) (async) socket(0x15, 0x2, 0x9) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) (async) 23:03:01 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103d02, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) 23:03:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000003c0)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4880) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0xcd70}]}, 0x24}}, 0xc000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000003c0)) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4880) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0xcd70}]}, 0x24}}, 0xc000) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) (async) 23:03:01 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x300, 0x0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000040)) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x100) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x100, 0xeb, &(0x7f0000000100)=""/235, 0xc2e00, 0x30, '\x00', r5, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x2, 0x81}, 0x10, 0x2dd05, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000280)=[{0x0, 0x3, 0x8, 0xb}, {0x2, 0x2, 0x1, 0x3}], 0x10, 0x8000}, 0x90) [ 2119.666701][T11222] FAULT_INJECTION: forcing a failure. [ 2119.666701][T11222] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.683724][T11222] CPU: 0 PID: 11222 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2119.693766][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2119.703657][T11222] Call Trace: [ 2119.706799][T11222] dump_stack+0x1d8/0x241 [ 2119.710952][T11222] ? panic+0x896/0x896 [ 2119.714871][T11222] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2119.720501][T11222] should_fail+0x71f/0x880 [ 2119.724755][T11222] ? find_next_bit+0xc3/0x100 [ 2119.729265][T11222] ? setup_fault_attr+0x3d0/0x3d0 [ 2119.734124][T11222] ? rand_initialize_disk+0x4b/0xa3 [ 2119.739161][T11222] should_failslab+0x5/0x20 [ 2119.743498][T11222] kmem_cache_alloc_trace+0x28/0x260 [ 2119.748620][T11222] rand_initialize_disk+0x4b/0xa3 [ 2119.753477][T11222] __alloc_disk_node+0x3fd/0x5a0 [ 2119.758253][T11222] loop_add+0x315/0x740 [ 2119.762245][T11222] loop_control_ioctl+0x448/0x620 [ 2119.767103][T11222] ? loop_remove+0xa0/0xa0 [ 2119.771361][T11222] ? memset+0x1f/0x40 [ 2119.775174][T11222] ? fsnotify+0x1280/0x1340 [ 2119.779514][T11222] ? loop_remove+0xa0/0xa0 [ 2119.783770][T11222] do_vfs_ioctl+0x742/0x1720 [ 2119.788197][T11222] ? ioctl_preallocate+0x250/0x250 [ 2119.793147][T11222] ? __fget+0x407/0x490 [ 2119.797146][T11222] ? fget_many+0x20/0x20 [ 2119.801219][T11222] ? debug_smp_processor_id+0x20/0x20 [ 2119.806420][T11222] ? security_file_ioctl+0x7d/0xa0 [ 2119.811379][T11222] __x64_sys_ioctl+0xd4/0x110 23:03:01 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) (async) socket(0x15, 0x2, 0x9) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) 23:03:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 34) 23:03:01 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103d02, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) [ 2119.815881][T11222] do_syscall_64+0xca/0x1c0 [ 2119.820221][T11222] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:01 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x300, 0x0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) (async) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000040)) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x100) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x100, 0xeb, &(0x7f0000000100)=""/235, 0xc2e00, 0x30, '\x00', r5, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x2, 0x81}, 0x10, 0x2dd05, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000280)=[{0x0, 0x3, 0x8, 0xb}, {0x2, 0x2, 0x1, 0x3}], 0x10, 0x8000}, 0x90) 23:03:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000003c0)) (rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4880) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0xcd70}]}, 0x24}}, 0xc000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) (async, rerun: 32) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) 23:03:01 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103d02, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffff) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103d02, 0x0) (async) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x2) (async) [ 2119.861521][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2119.901091][T11255] FAULT_INJECTION: forcing a failure. 23:03:01 executing program 2: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="2d63ace36fe675ca6948bbd4bd47a949", 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x30103, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0xa) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000000, 0x50, r1, 0x10000000) [ 2119.901091][T11255] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.917191][T11255] CPU: 0 PID: 11255 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2119.927229][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2119.937122][T11255] Call Trace: [ 2119.940254][T11255] dump_stack+0x1d8/0x241 [ 2119.944415][T11255] ? panic+0x896/0x896 [ 2119.948319][T11255] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2119.953958][T11255] ? stack_trace_save+0x1c0/0x1c0 [ 2119.958821][T11255] should_fail+0x71f/0x880 [ 2119.963075][T11255] ? setup_fault_attr+0x3d0/0x3d0 [ 2119.967933][T11255] ? memset+0x1f/0x40 [ 2119.971755][T11255] ? number+0xd53/0x1000 [ 2119.975836][T11255] ? device_create_vargs+0x7d/0x210 [ 2119.980866][T11255] should_failslab+0x5/0x20 [ 2119.985203][T11255] kmem_cache_alloc_trace+0x28/0x260 [ 2119.990326][T11255] device_create_vargs+0x7d/0x210 [ 2119.995185][T11255] device_create+0xea/0x130 [ 2119.999530][T11255] ? device_create_vargs+0x210/0x210 [ 2120.004662][T11255] ? memset+0x1f/0x40 [ 2120.008467][T11255] ? number+0xd53/0x1000 [ 2120.012556][T11255] bdi_register_va+0x84/0x610 [ 2120.017061][T11255] bdi_register+0xd1/0x120 [ 2120.021312][T11255] ? __device_add_disk+0x551/0x1220 [ 2120.026348][T11255] ? bdi_register_va+0x610/0x610 [ 2120.031121][T11255] ? vsnprintf+0x1b96/0x1c70 [ 2120.035546][T11255] bdi_register_owner+0x55/0xf0 [ 2120.040232][T11255] __device_add_disk+0x5d1/0x1220 [ 2120.045090][T11255] ? device_add_disk+0x30/0x30 [ 2120.049689][T11255] ? vsprintf+0x30/0x30 [ 2120.053685][T11255] ? __alloc_disk_node+0x459/0x5a0 [ 2120.058630][T11255] loop_add+0x573/0x740 [ 2120.062624][T11255] loop_control_ioctl+0x448/0x620 [ 2120.067481][T11255] ? loop_remove+0xa0/0xa0 [ 2120.071737][T11255] ? memset+0x1f/0x40 [ 2120.075552][T11255] ? fsnotify+0x1280/0x1340 [ 2120.079893][T11255] ? loop_remove+0xa0/0xa0 [ 2120.084145][T11255] do_vfs_ioctl+0x742/0x1720 [ 2120.088572][T11255] ? ioctl_preallocate+0x250/0x250 [ 2120.093520][T11255] ? __fget+0x407/0x490 [ 2120.097513][T11255] ? fget_many+0x20/0x20 [ 2120.101591][T11255] ? debug_smp_processor_id+0x20/0x20 [ 2120.106801][T11255] ? security_file_ioctl+0x7d/0xa0 23:03:01 executing program 5: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2120.111745][T11255] __x64_sys_ioctl+0xd4/0x110 [ 2120.116268][T11255] do_syscall_64+0xca/0x1c0 [ 2120.120598][T11255] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2120.129443][T11255] ------------[ cut here ]------------ [ 2120.134775][T11255] WARNING: CPU: 1 PID: 11255 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2120.143694][T11255] Modules linked in: [ 2120.147434][T11255] CPU: 1 PID: 11255 Comm: syz-executor.1 Not tainted 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2120.157495][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2120.167397][T11255] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2120.173034][T11255] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2120.192472][T11255] RSP: 0018:ffff8881d515fa20 EFLAGS: 00010287 [ 2120.198372][T11255] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2120.206185][T11255] RDX: ffffc90000f45000 RSI: 000000000000a2ae RDI: 000000000000a2af [ 2120.213995][T11255] RBP: ffff8881d515fb58 R08: ffffffff82251cdc R09: fffffbfff0beed57 [ 2120.221809][T11255] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e4bea000 [ 2120.229619][T11255] R13: dffffc0000000000 R14: ffff8881e4bea070 R15: 1ffff1103c97d49d [ 2120.237432][T11255] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2120.246196][T11255] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2120.252620][T11255] CR2: 00007f8d94080000 CR3: 00000001cafad000 CR4: 00000000003406a0 [ 2120.260431][T11255] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2120.268243][T11255] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2120.276048][T11255] Call Trace: [ 2120.279183][T11255] ? __warn+0x162/0x250 [ 2120.283171][T11255] ? report_bug+0x3a1/0x4e0 [ 2120.287510][T11255] ? __device_add_disk+0xea1/0x1220 [ 2120.292544][T11255] ? __device_add_disk+0xea1/0x1220 [ 2120.297576][T11255] ? do_invalid_op+0x6e/0x110 [ 2120.302090][T11255] ? invalid_op+0x1e/0x30 [ 2120.306257][T11255] ? __device_add_disk+0x5dc/0x1220 [ 2120.311290][T11255] ? __device_add_disk+0xea1/0x1220 [ 2120.316324][T11255] ? __device_add_disk+0xea1/0x1220 [ 2120.321362][T11255] ? device_add_disk+0x30/0x30 [ 2120.325960][T11255] ? vsprintf+0x30/0x30 [ 2120.329951][T11255] ? __alloc_disk_node+0x459/0x5a0 [ 2120.334899][T11255] loop_add+0x573/0x740 [ 2120.338893][T11255] loop_control_ioctl+0x448/0x620 [ 2120.343753][T11255] ? loop_remove+0xa0/0xa0 [ 2120.348007][T11255] ? memset+0x1f/0x40 [ 2120.351825][T11255] ? fsnotify+0x1280/0x1340 [ 2120.356163][T11255] ? loop_remove+0xa0/0xa0 23:03:01 executing program 2: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="2d63ace36fe675ca6948bbd4bd47a949", 0x10) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x30103, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0xa) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000000, 0x50, r1, 0x10000000) 23:03:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 35) [ 2120.360416][T11255] do_vfs_ioctl+0x742/0x1720 [ 2120.364844][T11255] ? ioctl_preallocate+0x250/0x250 [ 2120.369791][T11255] ? __fget+0x407/0x490 [ 2120.373785][T11255] ? fget_many+0x20/0x20 [ 2120.377860][T11255] ? debug_smp_processor_id+0x20/0x20 [ 2120.383067][T11255] ? security_file_ioctl+0x7d/0xa0 [ 2120.388014][T11255] __x64_sys_ioctl+0xd4/0x110 [ 2120.392527][T11255] do_syscall_64+0xca/0x1c0 [ 2120.396867][T11255] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2120.402595][T11255] ---[ end trace 55340ab167959359 ]--- 23:03:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x12, r1, 0x2fed8000) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x420040, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:03:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="24e33672de7a26bbb6d02358c2d3d000007e", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x80000001, 0x501f41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x40}}, 0x40) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) [ 2120.470276][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2120.477490][T11275] FAULT_INJECTION: forcing a failure. [ 2120.477490][T11275] name failslab, interval 1, probability 0, space 0, times 0 [ 2120.493451][T11275] CPU: 1 PID: 11275 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2120.504874][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2120.514763][T11275] Call Trace: [ 2120.517899][T11275] dump_stack+0x1d8/0x241 [ 2120.522057][T11275] ? panic+0x896/0x896 [ 2120.525962][T11275] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2120.531607][T11275] ? stack_trace_save+0x1c0/0x1c0 [ 2120.536465][T11275] should_fail+0x71f/0x880 [ 2120.540721][T11275] ? setup_fault_attr+0x3d0/0x3d0 [ 2120.545578][T11275] ? memset+0x1f/0x40 [ 2120.549400][T11275] ? number+0xd53/0x1000 [ 2120.553474][T11275] ? device_create_vargs+0x7d/0x210 [ 2120.558507][T11275] should_failslab+0x5/0x20 [ 2120.562852][T11275] kmem_cache_alloc_trace+0x28/0x260 [ 2120.567969][T11275] device_create_vargs+0x7d/0x210 [ 2120.572830][T11275] device_create+0xea/0x130 [ 2120.577169][T11275] ? device_create_vargs+0x210/0x210 [ 2120.582288][T11275] ? memset+0x1f/0x40 [ 2120.586108][T11275] ? number+0xd53/0x1000 [ 2120.590189][T11275] bdi_register_va+0x84/0x610 [ 2120.594701][T11275] bdi_register+0xd1/0x120 [ 2120.598953][T11275] ? __device_add_disk+0x551/0x1220 [ 2120.603988][T11275] ? bdi_register_va+0x610/0x610 [ 2120.608762][T11275] ? vsnprintf+0x1b96/0x1c70 [ 2120.613187][T11275] bdi_register_owner+0x55/0xf0 [ 2120.617872][T11275] __device_add_disk+0x5d1/0x1220 [ 2120.622737][T11275] ? device_add_disk+0x30/0x30 [ 2120.627333][T11275] ? vsprintf+0x30/0x30 [ 2120.631326][T11275] ? __alloc_disk_node+0x459/0x5a0 [ 2120.636273][T11275] loop_add+0x573/0x740 [ 2120.640266][T11275] loop_control_ioctl+0x448/0x620 [ 2120.645125][T11275] ? loop_remove+0xa0/0xa0 [ 2120.649379][T11275] ? memset+0x1f/0x40 [ 2120.653196][T11275] ? fsnotify+0x1280/0x1340 [ 2120.657535][T11275] ? loop_remove+0xa0/0xa0 [ 2120.661790][T11275] do_vfs_ioctl+0x742/0x1720 [ 2120.666216][T11275] ? ioctl_preallocate+0x250/0x250 23:03:02 executing program 2: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="2d63ace36fe675ca6948bbd4bd47a949", 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async, rerun: 32) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x30103, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0xa) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000000, 0x50, r1, 0x10000000) 23:03:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x420040, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) [ 2120.671164][T11275] ? __fget+0x407/0x490 [ 2120.675157][T11275] ? fget_many+0x20/0x20 [ 2120.679234][T11275] ? debug_smp_processor_id+0x20/0x20 [ 2120.684442][T11275] ? security_file_ioctl+0x7d/0xa0 [ 2120.689392][T11275] __x64_sys_ioctl+0xd4/0x110 [ 2120.693904][T11275] do_syscall_64+0xca/0x1c0 [ 2120.698241][T11275] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2120.711025][T11275] ------------[ cut here ]------------ [ 2120.716301][T11275] WARNING: CPU: 0 PID: 11275 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2120.725223][T11275] Modules linked in: [ 2120.728964][T11275] CPU: 0 PID: 11275 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2120.740420][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2120.750315][T11275] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2120.755951][T11275] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2120.775390][T11275] RSP: 0018:ffff8881e6257a20 EFLAGS: 00010283 [ 2120.781295][T11275] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2120.789106][T11275] RDX: ffffc90000f45000 RSI: 000000000001b28e RDI: 000000000001b28f [ 2120.796917][T11275] RBP: ffff8881e6257b58 R08: ffffffff82251cdc R09: fffffbfff0beed57 [ 2120.804728][T11275] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e0b54000 [ 2120.812538][T11275] R13: dffffc0000000000 R14: ffff8881e0b54070 R15: 1ffff1103c16a89d [ 2120.820352][T11275] FS: 00007f4525bc86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2120.829114][T11275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2120.835546][T11275] CR2: 00007f8d94085988 CR3: 00000001ef48a000 CR4: 00000000003406b0 [ 2120.843355][T11275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2120.851169][T11275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2120.858973][T11275] Call Trace: [ 2120.862106][T11275] ? __warn+0x162/0x250 [ 2120.866093][T11275] ? report_bug+0x3a1/0x4e0 [ 2120.870430][T11275] ? __device_add_disk+0xea1/0x1220 [ 2120.875467][T11275] ? __device_add_disk+0xea1/0x1220 [ 2120.880499][T11275] ? do_invalid_op+0x6e/0x110 [ 2120.885027][T11275] ? invalid_op+0x1e/0x30 [ 2120.889266][T11275] ? __device_add_disk+0x5dc/0x1220 [ 2120.894299][T11275] ? __device_add_disk+0xea1/0x1220 [ 2120.899335][T11275] ? __device_add_disk+0xea1/0x1220 [ 2120.904369][T11275] ? device_add_disk+0x30/0x30 [ 2120.908965][T11275] ? vsprintf+0x30/0x30 [ 2120.912959][T11275] ? __alloc_disk_node+0x459/0x5a0 [ 2120.917905][T11275] loop_add+0x573/0x740 [ 2120.921902][T11275] loop_control_ioctl+0x448/0x620 [ 2120.926755][T11275] ? loop_remove+0xa0/0xa0 [ 2120.931012][T11275] ? memset+0x1f/0x40 [ 2120.934827][T11275] ? fsnotify+0x1280/0x1340 [ 2120.939169][T11275] ? loop_remove+0xa0/0xa0 [ 2120.943422][T11275] do_vfs_ioctl+0x742/0x1720 [ 2120.947848][T11275] ? ioctl_preallocate+0x250/0x250 [ 2120.952794][T11275] ? __fget+0x407/0x490 [ 2120.956788][T11275] ? fget_many+0x20/0x20 [ 2120.960881][T11275] ? debug_smp_processor_id+0x20/0x20 [ 2120.966091][T11275] ? security_file_ioctl+0x7d/0xa0 23:03:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x420040, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:03:02 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:02 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 36) 23:03:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000080), &(0x7f0000000140)=r7}, 0x20) [ 2120.971023][T11275] __x64_sys_ioctl+0xd4/0x110 [ 2120.975536][T11275] do_syscall_64+0xca/0x1c0 [ 2120.979882][T11275] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2120.985608][T11275] ---[ end trace 55340ab16795935a ]--- 23:03:02 executing program 5: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) [ 2121.022334][T11310] FAULT_INJECTION: forcing a failure. [ 2121.022334][T11310] name failslab, interval 1, probability 0, space 0, times 0 [ 2121.035036][T11310] CPU: 1 PID: 11310 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2121.046444][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2121.056335][T11310] Call Trace: [ 2121.059471][T11310] dump_stack+0x1d8/0x241 [ 2121.063632][T11310] ? panic+0x896/0x896 [ 2121.067535][T11310] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2121.073181][T11310] should_fail+0x71f/0x880 [ 2121.077432][T11310] ? setup_fault_attr+0x3d0/0x3d0 [ 2121.082298][T11310] ? device_add+0xb6/0xbb0 [ 2121.086544][T11310] should_failslab+0x5/0x20 [ 2121.090890][T11310] kmem_cache_alloc_trace+0x28/0x260 [ 2121.096011][T11310] device_add+0xb6/0xbb0 [ 2121.100089][T11310] device_create_vargs+0x1b9/0x210 [ 2121.105031][T11310] device_create+0xea/0x130 [ 2121.109370][T11310] ? device_create_vargs+0x210/0x210 [ 2121.114493][T11310] ? memset+0x1f/0x40 [ 2121.118311][T11310] ? number+0xd53/0x1000 [ 2121.122390][T11310] bdi_register_va+0x84/0x610 [ 2121.126907][T11310] bdi_register+0xd1/0x120 [ 2121.131156][T11310] ? __device_add_disk+0x551/0x1220 [ 2121.136188][T11310] ? bdi_register_va+0x610/0x610 [ 2121.140980][T11310] ? vsnprintf+0x1b96/0x1c70 [ 2121.145388][T11310] bdi_register_owner+0x55/0xf0 [ 2121.150075][T11310] __device_add_disk+0x5d1/0x1220 [ 2121.154943][T11310] ? device_add_disk+0x30/0x30 [ 2121.159536][T11310] ? vsprintf+0x30/0x30 [ 2121.163528][T11310] ? __alloc_disk_node+0x459/0x5a0 [ 2121.168475][T11310] loop_add+0x573/0x740 [ 2121.172473][T11310] loop_control_ioctl+0x448/0x620 [ 2121.177326][T11310] ? loop_remove+0xa0/0xa0 [ 2121.181580][T11310] ? memset+0x1f/0x40 [ 2121.185397][T11310] ? fsnotify+0x1280/0x1340 [ 2121.189738][T11310] ? loop_remove+0xa0/0xa0 [ 2121.193989][T11310] do_vfs_ioctl+0x742/0x1720 [ 2121.198533][T11310] ? ioctl_preallocate+0x250/0x250 [ 2121.203471][T11310] ? __fget+0x407/0x490 [ 2121.207461][T11310] ? fget_many+0x20/0x20 [ 2121.211542][T11310] ? debug_smp_processor_id+0x20/0x20 [ 2121.216747][T11310] ? security_file_ioctl+0x7d/0xa0 [ 2121.221697][T11310] __x64_sys_ioctl+0xd4/0x110 [ 2121.226214][T11310] do_syscall_64+0xca/0x1c0 [ 2121.230554][T11310] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2121.236442][T11310] ------------[ cut here ]------------ [ 2121.241701][T11310] WARNING: CPU: 1 PID: 11310 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2121.250632][T11310] Modules linked in: [ 2121.254365][T11310] CPU: 1 PID: 11310 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2121.265816][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2121.275718][T11310] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2121.281358][T11310] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2121.300796][T11310] RSP: 0018:ffff8881e8ad7a20 EFLAGS: 00010283 [ 2121.306696][T11310] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2121.314515][T11310] RDX: ffffc90000f45000 RSI: 0000000000008fc7 RDI: 0000000000008fc8 23:03:02 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x12, r1, 0x2fed8000) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2121.322319][T11310] RBP: ffff8881e8ad7b58 R08: ffffffff82251cdc R09: 0000000000000003 [ 2121.330132][T11310] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881ce520000 [ 2121.337949][T11310] R13: dffffc0000000000 R14: ffff8881ce520070 R15: 1ffff11039ca409d [ 2121.345758][T11310] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2121.354518][T11310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2121.360942][T11310] CR2: 00007f4525bc7ff8 CR3: 00000001cb31e000 CR4: 00000000003406a0 [ 2121.368753][T11310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2121.376563][T11310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2121.384374][T11310] Call Trace: [ 2121.387508][T11310] ? __warn+0x162/0x250 [ 2121.391501][T11310] ? report_bug+0x3a1/0x4e0 [ 2121.395838][T11310] ? __device_add_disk+0xea1/0x1220 [ 2121.400867][T11310] ? __device_add_disk+0xea1/0x1220 [ 2121.405902][T11310] ? do_invalid_op+0x6e/0x110 [ 2121.410413][T11310] ? invalid_op+0x1e/0x30 [ 2121.414580][T11310] ? __device_add_disk+0x5dc/0x1220 [ 2121.419615][T11310] ? __device_add_disk+0xea1/0x1220 [ 2121.424648][T11310] ? __device_add_disk+0xea1/0x1220 [ 2121.429685][T11310] ? device_add_disk+0x30/0x30 [ 2121.434281][T11310] ? vsprintf+0x30/0x30 [ 2121.438275][T11310] ? __alloc_disk_node+0x459/0x5a0 [ 2121.443233][T11310] loop_add+0x573/0x740 [ 2121.447216][T11310] loop_control_ioctl+0x448/0x620 [ 2121.452072][T11310] ? loop_remove+0xa0/0xa0 [ 2121.456328][T11310] ? memset+0x1f/0x40 [ 2121.460145][T11310] ? fsnotify+0x1280/0x1340 [ 2121.464486][T11310] ? loop_remove+0xa0/0xa0 [ 2121.468741][T11310] do_vfs_ioctl+0x742/0x1720 23:03:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000080), &(0x7f0000000140)=r7}, 0x20) [ 2121.473166][T11310] ? ioctl_preallocate+0x250/0x250 [ 2121.478120][T11310] ? __fget+0x407/0x490 [ 2121.482106][T11310] ? fget_many+0x20/0x20 [ 2121.486183][T11310] ? debug_smp_processor_id+0x20/0x20 [ 2121.491399][T11310] ? security_file_ioctl+0x7d/0xa0 [ 2121.496339][T11310] __x64_sys_ioctl+0xd4/0x110 [ 2121.500851][T11310] do_syscall_64+0xca/0x1c0 [ 2121.505200][T11310] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2121.510926][T11310] ---[ end trace 55340ab16795935b ]--- 23:03:02 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 37) 23:03:02 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2121.519130][T11310] debugfs: Directory 'loop2' with parent 'block' already present! [ 2121.528672][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2121.540318][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2121.551307][T11325] FAULT_INJECTION: forcing a failure. [ 2121.551307][T11325] name failslab, interval 1, probability 0, space 0, times 0 [ 2121.563909][T11325] CPU: 1 PID: 11325 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2121.575329][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2121.585218][T11325] Call Trace: [ 2121.588352][T11325] dump_stack+0x1d8/0x241 [ 2121.592512][T11325] ? panic+0x896/0x896 [ 2121.596419][T11325] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2121.602067][T11325] should_fail+0x71f/0x880 [ 2121.606315][T11325] ? setup_fault_attr+0x3d0/0x3d0 [ 2121.611175][T11325] ? deref_stack_reg+0x1f0/0x1f0 [ 2121.615946][T11325] ? __unwind_start+0x708/0x890 [ 2121.620641][T11325] ? __kernfs_new_node+0x99/0x6e0 [ 2121.625496][T11325] should_failslab+0x5/0x20 [ 2121.629835][T11325] __kmalloc_track_caller+0x4f/0x2b0 [ 2121.634955][T11325] ? stack_trace_save+0x1c0/0x1c0 [ 2121.639815][T11325] kstrdup_const+0x51/0x90 [ 2121.644069][T11325] __kernfs_new_node+0x99/0x6e0 [ 2121.648757][T11325] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2121.654659][T11325] ? kernfs_new_node+0x160/0x160 [ 2121.659428][T11325] ? stack_trace_save+0x118/0x1c0 [ 2121.664289][T11325] ? stack_trace_snprint+0x170/0x170 [ 2121.669409][T11325] ? stack_trace_save+0x118/0x1c0 [ 2121.674282][T11325] kernfs_create_dir_ns+0x90/0x220 [ 2121.679219][T11325] sysfs_create_dir_ns+0x185/0x390 [ 2121.684172][T11325] ? sysfs_warn_dup+0xa0/0xa0 [ 2121.688677][T11325] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2121.694582][T11325] kobject_add_internal+0x6b7/0xca0 [ 2121.699627][T11325] kobject_add+0x14e/0x210 [ 2121.703868][T11325] ? _raw_spin_lock+0xa4/0x1b0 [ 2121.708473][T11325] ? kobject_init+0x1d0/0x1d0 [ 2121.712979][T11325] ? mutex_unlock+0x18/0x40 [ 2121.717320][T11325] ? get_device_parent+0x293/0x400 [ 2121.722266][T11325] device_add+0x3eb/0xbb0 [ 2121.726435][T11325] device_create_vargs+0x1b9/0x210 [ 2121.731381][T11325] device_create+0xea/0x130 [ 2121.735722][T11325] ? device_create_vargs+0x210/0x210 [ 2121.740839][T11325] ? memset+0x1f/0x40 [ 2121.744660][T11325] ? number+0xd53/0x1000 [ 2121.748738][T11325] bdi_register_va+0x84/0x610 [ 2121.753252][T11325] bdi_register+0xd1/0x120 [ 2121.757508][T11325] ? __device_add_disk+0x551/0x1220 [ 2121.762545][T11325] ? bdi_register_va+0x610/0x610 [ 2121.767310][T11325] ? vsnprintf+0x1b96/0x1c70 [ 2121.771739][T11325] bdi_register_owner+0x55/0xf0 [ 2121.776424][T11325] __device_add_disk+0x5d1/0x1220 [ 2121.781288][T11325] ? device_add_disk+0x30/0x30 [ 2121.785886][T11325] ? vsprintf+0x30/0x30 [ 2121.789885][T11325] ? __alloc_disk_node+0x459/0x5a0 [ 2121.794829][T11325] loop_add+0x573/0x740 [ 2121.798825][T11325] loop_control_ioctl+0x448/0x620 [ 2121.803678][T11325] ? loop_remove+0xa0/0xa0 [ 2121.807938][T11325] ? memset+0x1f/0x40 [ 2121.811753][T11325] ? fsnotify+0x1280/0x1340 [ 2121.816090][T11325] ? loop_remove+0xa0/0xa0 [ 2121.820348][T11325] do_vfs_ioctl+0x742/0x1720 23:03:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="24e33672de7a26bbb6d02358c2d3d000007e", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x80000001, 0x501f41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async, rerun: 64) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x40}}, 0x40) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) [ 2121.824770][T11325] ? ioctl_preallocate+0x250/0x250 [ 2121.829718][T11325] ? __fget+0x407/0x490 [ 2121.833708][T11325] ? fget_many+0x20/0x20 [ 2121.837789][T11325] ? debug_smp_processor_id+0x20/0x20 [ 2121.842994][T11325] ? security_file_ioctl+0x7d/0xa0 [ 2121.847942][T11325] __x64_sys_ioctl+0xd4/0x110 [ 2121.852455][T11325] do_syscall_64+0xca/0x1c0 [ 2121.856803][T11325] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2121.863099][T11325] kobject_add_internal failed for 7:2 (error: -12 parent: bdi) [ 2121.870605][T11325] ------------[ cut here ]------------ [ 2121.875864][T11325] WARNING: CPU: 1 PID: 11325 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2121.884791][T11325] Modules linked in: [ 2121.888531][T11325] CPU: 1 PID: 11325 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2121.899988][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2121.909884][T11325] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2121.915519][T11325] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2121.934960][T11325] RSP: 0018:ffff8881cf137a20 EFLAGS: 00010287 [ 2121.940863][T11325] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2121.948672][T11325] RDX: ffffc90000f45000 RSI: 000000000000c926 RDI: 000000000000c927 [ 2121.956484][T11325] RBP: ffff8881cf137b58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2121.964294][T11325] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881cdd02000 [ 2121.972103][T11325] R13: dffffc0000000000 R14: ffff8881cdd02070 R15: 1ffff11039ba049d [ 2121.979921][T11325] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2121.988686][T11325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2121.995108][T11325] CR2: 00007f4525bc7ff8 CR3: 00000001ef305000 CR4: 00000000003406a0 [ 2122.002917][T11325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2122.010726][T11325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2122.018536][T11325] Call Trace: [ 2122.021670][T11325] ? __warn+0x162/0x250 [ 2122.025662][T11325] ? report_bug+0x3a1/0x4e0 [ 2122.029997][T11325] ? __device_add_disk+0xea1/0x1220 [ 2122.035030][T11325] ? __device_add_disk+0xea1/0x1220 [ 2122.040069][T11325] ? do_invalid_op+0x6e/0x110 [ 2122.044580][T11325] ? invalid_op+0x1e/0x30 [ 2122.048748][T11325] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2122.054392][T11325] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2122.060459][T11325] ? __device_add_disk+0x5dc/0x1220 [ 2122.065494][T11325] ? __device_add_disk+0xea1/0x1220 [ 2122.070529][T11325] ? __device_add_disk+0xea1/0x1220 [ 2122.075562][T11325] ? device_add_disk+0x30/0x30 [ 2122.080162][T11325] ? vsprintf+0x30/0x30 [ 2122.084153][T11325] ? __alloc_disk_node+0x459/0x5a0 [ 2122.089103][T11325] loop_add+0x573/0x740 [ 2122.093094][T11325] loop_control_ioctl+0x448/0x620 [ 2122.097974][T11325] ? loop_remove+0xa0/0xa0 [ 2122.102207][T11325] ? memset+0x1f/0x40 [ 2122.106023][T11325] ? fsnotify+0x1280/0x1340 [ 2122.110370][T11325] ? loop_remove+0xa0/0xa0 [ 2122.114619][T11325] do_vfs_ioctl+0x742/0x1720 [ 2122.119053][T11325] ? ioctl_preallocate+0x250/0x250 23:03:03 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 38) [ 2122.123992][T11325] ? __fget+0x407/0x490 [ 2122.127985][T11325] ? fget_many+0x20/0x20 [ 2122.132064][T11325] ? debug_smp_processor_id+0x20/0x20 [ 2122.137269][T11325] ? security_file_ioctl+0x7d/0xa0 [ 2122.142224][T11325] __x64_sys_ioctl+0xd4/0x110 [ 2122.146736][T11325] do_syscall_64+0xca/0x1c0 [ 2122.151072][T11325] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2122.156799][T11325] ---[ end trace 55340ab16795935c ]--- 23:03:03 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x12, r1, 0x2fed8000) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:03 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:03:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="24e33672de7a26bbb6d02358c2d3d000007e", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x80000001, 0x501f41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x40}}, 0x40) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="24e33672de7a26bbb6d02358c2d3d000007e", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x80000001, 0x501f41) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x40}}, 0x40) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) [ 2122.221867][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory 23:03:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000080), &(0x7f0000000140)=r7}, 0x20) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000080), &(0x7f0000000140)=r7}, 0x20) (async) [ 2122.271147][T11337] FAULT_INJECTION: forcing a failure. [ 2122.271147][T11337] name failslab, interval 1, probability 0, space 0, times 0 [ 2122.286954][T11337] CPU: 1 PID: 11337 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2122.298373][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2122.308268][T11337] Call Trace: [ 2122.311396][T11337] dump_stack+0x1d8/0x241 [ 2122.315565][T11337] ? panic+0x896/0x896 [ 2122.319468][T11337] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2122.325112][T11337] should_fail+0x71f/0x880 [ 2122.329363][T11337] ? setup_fault_attr+0x3d0/0x3d0 [ 2122.334225][T11337] ? __kernfs_new_node+0xdb/0x6e0 [ 2122.339084][T11337] should_failslab+0x5/0x20 [ 2122.343420][T11337] kmem_cache_alloc+0x28/0x250 [ 2122.348021][T11337] __kernfs_new_node+0xdb/0x6e0 [ 2122.352710][T11337] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2122.358607][T11337] ? kernfs_new_node+0x160/0x160 [ 2122.363383][T11337] ? stack_trace_save+0x118/0x1c0 [ 2122.368243][T11337] ? stack_trace_snprint+0x170/0x170 [ 2122.373370][T11337] ? stack_trace_save+0x118/0x1c0 [ 2122.378224][T11337] kernfs_create_dir_ns+0x90/0x220 [ 2122.383171][T11337] sysfs_create_dir_ns+0x185/0x390 [ 2122.388119][T11337] ? sysfs_warn_dup+0xa0/0xa0 [ 2122.392634][T11337] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2122.398534][T11337] kobject_add_internal+0x6b7/0xca0 [ 2122.403574][T11337] kobject_add+0x14e/0x210 [ 2122.407820][T11337] ? _raw_spin_lock+0xa4/0x1b0 [ 2122.412426][T11337] ? kobject_init+0x1d0/0x1d0 [ 2122.416931][T11337] ? mutex_unlock+0x18/0x40 [ 2122.421271][T11337] ? get_device_parent+0x293/0x400 [ 2122.426217][T11337] device_add+0x3eb/0xbb0 [ 2122.430384][T11337] device_create_vargs+0x1b9/0x210 [ 2122.435332][T11337] device_create+0xea/0x130 [ 2122.439671][T11337] ? device_create_vargs+0x210/0x210 [ 2122.444794][T11337] ? memset+0x1f/0x40 [ 2122.448612][T11337] ? number+0xd53/0x1000 [ 2122.452699][T11337] bdi_register_va+0x84/0x610 [ 2122.457204][T11337] bdi_register+0xd1/0x120 [ 2122.461457][T11337] ? __device_add_disk+0x551/0x1220 [ 2122.466489][T11337] ? bdi_register_va+0x610/0x610 [ 2122.471262][T11337] ? vsnprintf+0x1b96/0x1c70 [ 2122.475689][T11337] bdi_register_owner+0x55/0xf0 [ 2122.480376][T11337] __device_add_disk+0x5d1/0x1220 [ 2122.485238][T11337] ? device_add_disk+0x30/0x30 [ 2122.489836][T11337] ? vsprintf+0x30/0x30 [ 2122.493828][T11337] ? __alloc_disk_node+0x459/0x5a0 [ 2122.498783][T11337] loop_add+0x573/0x740 [ 2122.502769][T11337] loop_control_ioctl+0x448/0x620 [ 2122.507633][T11337] ? loop_remove+0xa0/0xa0 [ 2122.511884][T11337] ? memset+0x1f/0x40 [ 2122.515700][T11337] ? fsnotify+0x1280/0x1340 [ 2122.520039][T11337] ? loop_remove+0xa0/0xa0 [ 2122.524292][T11337] do_vfs_ioctl+0x742/0x1720 [ 2122.528720][T11337] ? ioctl_preallocate+0x250/0x250 [ 2122.533667][T11337] ? __fget+0x407/0x490 [ 2122.537658][T11337] ? fget_many+0x20/0x20 [ 2122.541738][T11337] ? debug_smp_processor_id+0x20/0x20 [ 2122.546946][T11337] ? security_file_ioctl+0x7d/0xa0 [ 2122.551894][T11337] __x64_sys_ioctl+0xd4/0x110 [ 2122.556409][T11337] do_syscall_64+0xca/0x1c0 [ 2122.560747][T11337] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2122.567853][T11337] kobject_add_internal failed for 7:2 (error: -12 parent: bdi) [ 2122.575340][T11337] ------------[ cut here ]------------ [ 2122.580599][T11337] WARNING: CPU: 1 PID: 11337 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2122.589522][T11337] Modules linked in: [ 2122.593258][T11337] CPU: 1 PID: 11337 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2122.604709][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2122.614618][T11337] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2122.620254][T11337] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2122.639689][T11337] RSP: 0018:ffff8881e8f47a20 EFLAGS: 00010287 [ 2122.645594][T11337] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2122.653401][T11337] RDX: ffffc90000f45000 RSI: 000000000000beda RDI: 000000000000bedb [ 2122.661221][T11337] RBP: ffff8881e8f47b58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2122.669025][T11337] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881e34ef000 [ 2122.676836][T11337] R13: dffffc0000000000 R14: ffff8881e34ef070 R15: 1ffff1103c69de9d [ 2122.684653][T11337] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2122.693414][T11337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2122.699834][T11337] CR2: 00007fff088557a8 CR3: 00000001ef305000 CR4: 00000000003406a0 [ 2122.707647][T11337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2122.715456][T11337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2122.723266][T11337] Call Trace: [ 2122.726402][T11337] ? __warn+0x162/0x250 [ 2122.730389][T11337] ? report_bug+0x3a1/0x4e0 [ 2122.734729][T11337] ? __device_add_disk+0xea1/0x1220 [ 2122.739768][T11337] ? __device_add_disk+0xea1/0x1220 [ 2122.744794][T11337] ? do_invalid_op+0x6e/0x110 [ 2122.749306][T11337] ? invalid_op+0x1e/0x30 [ 2122.753480][T11337] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2122.759116][T11337] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2122.765198][T11337] ? __device_add_disk+0x5dc/0x1220 [ 2122.770244][T11337] ? __device_add_disk+0xea1/0x1220 [ 2122.775259][T11337] ? __device_add_disk+0xea1/0x1220 [ 2122.780297][T11337] ? device_add_disk+0x30/0x30 [ 2122.784891][T11337] ? vsprintf+0x30/0x30 [ 2122.788884][T11337] ? __alloc_disk_node+0x459/0x5a0 [ 2122.793832][T11337] loop_add+0x573/0x740 [ 2122.797826][T11337] loop_control_ioctl+0x448/0x620 [ 2122.802685][T11337] ? loop_remove+0xa0/0xa0 [ 2122.806938][T11337] ? memset+0x1f/0x40 [ 2122.810756][T11337] ? fsnotify+0x1280/0x1340 [ 2122.815096][T11337] ? loop_remove+0xa0/0xa0 [ 2122.819364][T11337] do_vfs_ioctl+0x742/0x1720 23:03:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x460100, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) [ 2122.823779][T11337] ? ioctl_preallocate+0x250/0x250 [ 2122.828723][T11337] ? __fget+0x407/0x490 [ 2122.832720][T11337] ? fget_many+0x20/0x20 [ 2122.836796][T11337] ? debug_smp_processor_id+0x20/0x20 [ 2122.842005][T11337] ? security_file_ioctl+0x7d/0xa0 [ 2122.846951][T11337] __x64_sys_ioctl+0xd4/0x110 [ 2122.851467][T11337] do_syscall_64+0xca/0x1c0 [ 2122.855803][T11337] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2122.861531][T11337] ---[ end trace 55340ab16795935d ]--- 23:03:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x460100, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:03:04 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 39) 23:03:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 23:03:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x351980, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:04 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x800, 0x7}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2122.873980][T10590] udevd[10590]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2122.901782][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory 23:03:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x351980, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x351980, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:03:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="21dee2829a03a5837a89aafe1212217118b233db54cc92"], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000001c0)=0x5, 0x4) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x2}, {0x4, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x20) 23:03:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x460100, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:03:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x351980, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:04 executing program 0: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8060}, 0x240008c7) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2122.930665][T11370] FAULT_INJECTION: forcing a failure. [ 2122.930665][T11370] name failslab, interval 1, probability 0, space 0, times 0 [ 2122.949372][T11370] CPU: 1 PID: 11370 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2122.960806][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2122.970696][T11370] Call Trace: [ 2122.973836][T11370] dump_stack+0x1d8/0x241 [ 2122.977984][T11370] ? panic+0x896/0x896 [ 2122.981899][T11370] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2122.987537][T11370] should_fail+0x71f/0x880 [ 2122.991787][T11370] ? setup_fault_attr+0x3d0/0x3d0 [ 2122.996645][T11370] ? __kernfs_new_node+0xdb/0x6e0 [ 2123.001518][T11370] should_failslab+0x5/0x20 [ 2123.005851][T11370] kmem_cache_alloc+0x28/0x250 [ 2123.010456][T11370] __kernfs_new_node+0xdb/0x6e0 [ 2123.015134][T11370] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2123.021036][T11370] ? kernfs_new_node+0x160/0x160 [ 2123.025813][T11370] ? stack_trace_save+0x118/0x1c0 [ 2123.030670][T11370] ? stack_trace_snprint+0x170/0x170 [ 2123.035790][T11370] ? stack_trace_save+0x118/0x1c0 [ 2123.040650][T11370] kernfs_create_dir_ns+0x90/0x220 [ 2123.045596][T11370] sysfs_create_dir_ns+0x185/0x390 [ 2123.050546][T11370] ? sysfs_warn_dup+0xa0/0xa0 [ 2123.055056][T11370] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2123.060960][T11370] kobject_add_internal+0x6b7/0xca0 [ 2123.065993][T11370] kobject_add+0x14e/0x210 [ 2123.070247][T11370] ? _raw_spin_lock+0xa4/0x1b0 [ 2123.074845][T11370] ? kobject_init+0x1d0/0x1d0 [ 2123.079358][T11370] ? mutex_unlock+0x18/0x40 [ 2123.083702][T11370] ? get_device_parent+0x293/0x400 [ 2123.088646][T11370] device_add+0x3eb/0xbb0 [ 2123.092810][T11370] device_create_vargs+0x1b9/0x210 [ 2123.097764][T11370] device_create+0xea/0x130 [ 2123.102099][T11370] ? device_create_vargs+0x210/0x210 [ 2123.107217][T11370] ? memset+0x1f/0x40 [ 2123.111035][T11370] ? number+0xd53/0x1000 [ 2123.115120][T11370] bdi_register_va+0x84/0x610 [ 2123.119631][T11370] bdi_register+0xd1/0x120 [ 2123.123883][T11370] ? __device_add_disk+0x551/0x1220 [ 2123.128916][T11370] ? bdi_register_va+0x610/0x610 [ 2123.133689][T11370] ? vsnprintf+0x1b96/0x1c70 [ 2123.138114][T11370] bdi_register_owner+0x55/0xf0 [ 2123.142800][T11370] __device_add_disk+0x5d1/0x1220 [ 2123.147661][T11370] ? device_add_disk+0x30/0x30 [ 2123.152261][T11370] ? vsprintf+0x30/0x30 [ 2123.156253][T11370] ? __alloc_disk_node+0x459/0x5a0 [ 2123.161200][T11370] loop_add+0x573/0x740 [ 2123.165197][T11370] loop_control_ioctl+0x448/0x620 [ 2123.170060][T11370] ? loop_remove+0xa0/0xa0 [ 2123.174309][T11370] ? memset+0x1f/0x40 23:03:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) [ 2123.178124][T11370] ? fsnotify+0x1280/0x1340 [ 2123.182466][T11370] ? loop_remove+0xa0/0xa0 [ 2123.186719][T11370] do_vfs_ioctl+0x742/0x1720 [ 2123.191146][T11370] ? ioctl_preallocate+0x250/0x250 [ 2123.196100][T11370] ? __fget+0x407/0x490 [ 2123.200086][T11370] ? fget_many+0x20/0x20 [ 2123.204163][T11370] ? debug_smp_processor_id+0x20/0x20 [ 2123.209375][T11370] ? security_file_ioctl+0x7d/0xa0 [ 2123.214318][T11370] __x64_sys_ioctl+0xd4/0x110 [ 2123.218839][T11370] do_syscall_64+0xca/0x1c0 [ 2123.223177][T11370] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) (async) [ 2123.230878][T11370] kobject_add_internal failed for 7:2 (error: -12 parent: bdi) [ 2123.238592][T11370] ------------[ cut here ]------------ [ 2123.243853][T11370] WARNING: CPU: 0 PID: 11370 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2123.252779][T11370] Modules linked in: [ 2123.256516][T11370] CPU: 0 PID: 11370 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2123.267968][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2123.277871][T11370] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2123.283510][T11370] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2123.302949][T11370] RSP: 0018:ffff8881eacc7a20 EFLAGS: 00010283 [ 2123.308849][T11370] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2123.316666][T11370] RDX: ffffc90000f45000 RSI: 000000000000be8e RDI: 000000000000be8f [ 2123.324473][T11370] RBP: ffff8881eacc7b58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2123.332282][T11370] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881d07a5000 [ 2123.340092][T11370] R13: dffffc0000000000 R14: ffff8881d07a5070 R15: 1ffff1103a0f4a9d [ 2123.347906][T11370] FS: 00007f4525bc86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2123.356671][T11370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2123.363093][T11370] CR2: 00007f8d93fca8c0 CR3: 00000001cd51c000 CR4: 00000000003406b0 [ 2123.370908][T11370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2123.378718][T11370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2123.386527][T11370] Call Trace: [ 2123.389659][T11370] ? __warn+0x162/0x250 [ 2123.393648][T11370] ? report_bug+0x3a1/0x4e0 [ 2123.397986][T11370] ? __device_add_disk+0xea1/0x1220 [ 2123.403019][T11370] ? __device_add_disk+0xea1/0x1220 [ 2123.408053][T11370] ? do_invalid_op+0x6e/0x110 [ 2123.412568][T11370] ? invalid_op+0x1e/0x30 [ 2123.416732][T11370] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2123.422374][T11370] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2123.428452][T11370] ? __device_add_disk+0x5dc/0x1220 [ 2123.433484][T11370] ? __device_add_disk+0xea1/0x1220 [ 2123.438516][T11370] ? __device_add_disk+0xea1/0x1220 [ 2123.443552][T11370] ? device_add_disk+0x30/0x30 [ 2123.448150][T11370] ? vsprintf+0x30/0x30 [ 2123.452143][T11370] ? __alloc_disk_node+0x459/0x5a0 [ 2123.457091][T11370] loop_add+0x573/0x740 [ 2123.461085][T11370] loop_control_ioctl+0x448/0x620 [ 2123.465947][T11370] ? loop_remove+0xa0/0xa0 [ 2123.470196][T11370] ? memset+0x1f/0x40 [ 2123.474014][T11370] ? fsnotify+0x1280/0x1340 [ 2123.478353][T11370] ? loop_remove+0xa0/0xa0 23:03:04 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 40) [ 2123.482613][T11370] do_vfs_ioctl+0x742/0x1720 [ 2123.487036][T11370] ? ioctl_preallocate+0x250/0x250 [ 2123.491981][T11370] ? __fget+0x407/0x490 [ 2123.495971][T11370] ? fget_many+0x20/0x20 [ 2123.500053][T11370] ? debug_smp_processor_id+0x20/0x20 [ 2123.505261][T11370] ? security_file_ioctl+0x7d/0xa0 [ 2123.510206][T11370] __x64_sys_ioctl+0xd4/0x110 [ 2123.514721][T11370] do_syscall_64+0xca/0x1c0 [ 2123.519060][T11370] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2123.524786][T11370] ---[ end trace 55340ab16795935e ]--- 23:03:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:03:04 executing program 0: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8060}, 0x240008c7) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:04 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x800, 0x7}) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="21dee2829a03a5837a89aafe1212217118b233db54cc92"], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (rerun: 64) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async, rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000001c0)=0x5, 0x4) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x2}, {0x4, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x20) [ 2123.548987][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2123.563517][T11403] FAULT_INJECTION: forcing a failure. [ 2123.563517][T11403] name failslab, interval 1, probability 0, space 0, times 0 [ 2123.576351][T11403] CPU: 0 PID: 11403 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2123.587770][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2123.597659][T11403] Call Trace: [ 2123.600803][T11403] dump_stack+0x1d8/0x241 [ 2123.604958][T11403] ? panic+0x896/0x896 [ 2123.608861][T11403] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2123.614503][T11403] ? _raw_spin_lock+0xa4/0x1b0 [ 2123.619107][T11403] should_fail+0x71f/0x880 [ 2123.623356][T11403] ? security_kernfs_init_security+0x75/0x90 [ 2123.629176][T11403] ? setup_fault_attr+0x3d0/0x3d0 [ 2123.634034][T11403] ? mutex_lock+0xa5/0x110 [ 2123.638283][T11403] ? __kernfs_new_node+0xdb/0x6e0 [ 2123.643144][T11403] should_failslab+0x5/0x20 [ 2123.647485][T11403] kmem_cache_alloc+0x28/0x250 [ 2123.652082][T11403] __kernfs_new_node+0xdb/0x6e0 [ 2123.656769][T11403] ? mutex_unlock+0x18/0x40 [ 2123.661111][T11403] ? kernfs_new_node+0x160/0x160 [ 2123.665882][T11403] ? __kernfs_create_file+0x1f4/0x260 [ 2123.671089][T11403] ? sysfs_add_file_mode_ns+0x292/0x340 [ 2123.676470][T11403] kernfs_new_node+0x95/0x160 [ 2123.680984][T11403] kernfs_create_link+0x9e/0x1f0 [ 2123.685759][T11403] sysfs_do_create_link_sd+0x85/0x100 [ 2123.690972][T11403] device_add_class_symlinks+0xd6/0x2a0 [ 2123.696347][T11403] device_add+0x4d3/0xbb0 [ 2123.700512][T11403] device_create_vargs+0x1b9/0x210 [ 2123.705461][T11403] device_create+0xea/0x130 [ 2123.709807][T11403] ? device_create_vargs+0x210/0x210 [ 2123.714917][T11403] ? memset+0x1f/0x40 [ 2123.718738][T11403] ? number+0xd53/0x1000 [ 2123.722819][T11403] bdi_register_va+0x84/0x610 [ 2123.727331][T11403] bdi_register+0xd1/0x120 [ 2123.731585][T11403] ? __device_add_disk+0x551/0x1220 [ 2123.736615][T11403] ? bdi_register_va+0x610/0x610 [ 2123.741392][T11403] ? vsnprintf+0x1b96/0x1c70 [ 2123.745817][T11403] bdi_register_owner+0x55/0xf0 [ 2123.750506][T11403] __device_add_disk+0x5d1/0x1220 [ 2123.755365][T11403] ? device_add_disk+0x30/0x30 [ 2123.759965][T11403] ? vsprintf+0x30/0x30 [ 2123.763957][T11403] ? __alloc_disk_node+0x459/0x5a0 [ 2123.768904][T11403] loop_add+0x573/0x740 [ 2123.772899][T11403] loop_control_ioctl+0x448/0x620 [ 2123.777766][T11403] ? loop_remove+0xa0/0xa0 [ 2123.782014][T11403] ? memset+0x1f/0x40 [ 2123.785832][T11403] ? fsnotify+0x1280/0x1340 [ 2123.790174][T11403] ? loop_remove+0xa0/0xa0 [ 2123.794433][T11403] do_vfs_ioctl+0x742/0x1720 23:03:05 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) [ 2123.798854][T11403] ? ioctl_preallocate+0x250/0x250 [ 2123.803798][T11403] ? __fget+0x407/0x490 [ 2123.807788][T11403] ? fget_many+0x20/0x20 [ 2123.811867][T11403] ? debug_smp_processor_id+0x20/0x20 [ 2123.817074][T11403] ? security_file_ioctl+0x7d/0xa0 [ 2123.822020][T11403] __x64_sys_ioctl+0xd4/0x110 [ 2123.826537][T11403] do_syscall_64+0xca/0x1c0 [ 2123.830873][T11403] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2123.837246][T11403] ------------[ cut here ]------------ [ 2123.842533][T11403] WARNING: CPU: 1 PID: 11403 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2123.851444][T11403] Modules linked in: [ 2123.855293][T11403] CPU: 1 PID: 11403 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2123.866745][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2123.876644][T11403] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2123.882280][T11403] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2123.901720][T11403] RSP: 0018:ffff8881e13afa20 EFLAGS: 00010287 [ 2123.907619][T11403] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2123.915430][T11403] RDX: ffffc90000f45000 RSI: 000000000000b7ef RDI: 000000000000b7f0 [ 2123.923241][T11403] RBP: ffff8881e13afb58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2123.931052][T11403] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881e0b96000 [ 2123.938865][T11403] R13: dffffc0000000000 R14: ffff8881e0b96070 R15: 1ffff1103c172c9d [ 2123.946677][T11403] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2123.955443][T11403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2123.961863][T11403] CR2: 00007f8d92c84d58 CR3: 00000001ca4e7000 CR4: 00000000003406a0 [ 2123.969680][T11403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2123.977485][T11403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2123.985297][T11403] Call Trace: [ 2123.988434][T11403] ? __warn+0x162/0x250 [ 2123.992421][T11403] ? report_bug+0x3a1/0x4e0 [ 2123.996757][T11403] ? __device_add_disk+0xea1/0x1220 [ 2124.001799][T11403] ? __device_add_disk+0xea1/0x1220 [ 2124.006824][T11403] ? do_invalid_op+0x6e/0x110 [ 2124.011353][T11403] ? invalid_op+0x1e/0x30 [ 2124.015503][T11403] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2124.021144][T11403] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2124.027221][T11403] ? __device_add_disk+0x5dc/0x1220 [ 2124.032255][T11403] ? __device_add_disk+0xea1/0x1220 [ 2124.037289][T11403] ? __device_add_disk+0xea1/0x1220 [ 2124.042320][T11403] ? device_add_disk+0x30/0x30 [ 2124.046921][T11403] ? vsprintf+0x30/0x30 [ 2124.050914][T11403] ? __alloc_disk_node+0x459/0x5a0 [ 2124.055861][T11403] loop_add+0x573/0x740 [ 2124.059856][T11403] loop_control_ioctl+0x448/0x620 [ 2124.064713][T11403] ? loop_remove+0xa0/0xa0 [ 2124.068968][T11403] ? memset+0x1f/0x40 [ 2124.072785][T11403] ? fsnotify+0x1280/0x1340 [ 2124.077124][T11403] ? loop_remove+0xa0/0xa0 [ 2124.081386][T11403] do_vfs_ioctl+0x742/0x1720 [ 2124.085804][T11403] ? ioctl_preallocate+0x250/0x250 [ 2124.090752][T11403] ? __fget+0x407/0x490 [ 2124.094744][T11403] ? fget_many+0x20/0x20 23:03:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:03:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 41) [ 2124.098828][T11403] ? debug_smp_processor_id+0x20/0x20 [ 2124.104031][T11403] ? security_file_ioctl+0x7d/0xa0 [ 2124.108982][T11403] __x64_sys_ioctl+0xd4/0x110 [ 2124.113493][T11403] do_syscall_64+0xca/0x1c0 [ 2124.117831][T11403] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2124.123556][T11403] ---[ end trace 55340ab16795935f ]--- 23:03:05 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x800, 0x7}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2124.154348][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2124.158832][T11436] FAULT_INJECTION: forcing a failure. [ 2124.158832][T11436] name failslab, interval 1, probability 0, space 0, times 0 [ 2124.176136][T11436] CPU: 1 PID: 11436 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2124.187562][T11436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2124.197456][T11436] Call Trace: [ 2124.200590][T11436] dump_stack+0x1d8/0x241 [ 2124.204749][T11436] ? panic+0x896/0x896 [ 2124.208665][T11436] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2124.214302][T11436] should_fail+0x71f/0x880 [ 2124.218566][T11436] ? setup_fault_attr+0x3d0/0x3d0 [ 2124.223425][T11436] ? radix_tree_node_alloc+0x190/0x3d0 [ 2124.228712][T11436] should_failslab+0x5/0x20 [ 2124.233049][T11436] kmem_cache_alloc+0x28/0x250 [ 2124.237649][T11436] radix_tree_node_alloc+0x190/0x3d0 [ 2124.242773][T11436] ? __kernfs_new_node+0xdb/0x6e0 [ 2124.247624][T11436] ? kernfs_create_dir_ns+0x90/0x220 [ 2124.252752][T11436] ? sysfs_create_dir_ns+0x185/0x390 [ 2124.257868][T11436] ? kobject_add_internal+0x6b7/0xca0 [ 2124.263076][T11436] idr_get_free+0x29d/0x980 [ 2124.267418][T11436] idr_alloc_cyclic+0x1dc/0x5d0 [ 2124.272101][T11436] ? idr_alloc+0x2f0/0x2f0 [ 2124.276365][T11436] ? _raw_spin_lock+0xa4/0x1b0 [ 2124.280958][T11436] ? __radix_tree_preload+0x268/0x2d0 [ 2124.286161][T11436] __kernfs_new_node+0x122/0x6e0 [ 2124.290933][T11436] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2124.296839][T11436] ? kernfs_new_node+0x160/0x160 [ 2124.301632][T11436] ? stack_trace_save+0x118/0x1c0 [ 2124.306470][T11436] ? stack_trace_snprint+0x170/0x170 [ 2124.311724][T11436] ? stack_trace_save+0x118/0x1c0 [ 2124.316583][T11436] kernfs_create_dir_ns+0x90/0x220 [ 2124.321521][T11436] sysfs_create_dir_ns+0x185/0x390 [ 2124.326473][T11436] ? sysfs_warn_dup+0xa0/0xa0 [ 2124.330982][T11436] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2124.336885][T11436] kobject_add_internal+0x6b7/0xca0 [ 2124.341918][T11436] kobject_add+0x14e/0x210 [ 2124.346170][T11436] ? _raw_spin_lock+0xa4/0x1b0 [ 2124.350766][T11436] ? kobject_init+0x1d0/0x1d0 [ 2124.355281][T11436] ? mutex_unlock+0x18/0x40 [ 2124.359619][T11436] ? get_device_parent+0x293/0x400 [ 2124.364569][T11436] device_add+0x3eb/0xbb0 [ 2124.368733][T11436] device_create_vargs+0x1b9/0x210 [ 2124.373685][T11436] device_create+0xea/0x130 [ 2124.378022][T11436] ? device_create_vargs+0x210/0x210 [ 2124.383140][T11436] ? memset+0x1f/0x40 [ 2124.386967][T11436] ? number+0xd53/0x1000 [ 2124.391037][T11436] bdi_register_va+0x84/0x610 [ 2124.395554][T11436] bdi_register+0xd1/0x120 [ 2124.399805][T11436] ? __device_add_disk+0x551/0x1220 [ 2124.404835][T11436] ? bdi_register_va+0x610/0x610 [ 2124.409612][T11436] ? vsnprintf+0x1b96/0x1c70 [ 2124.414039][T11436] bdi_register_owner+0x55/0xf0 [ 2124.418727][T11436] __device_add_disk+0x5d1/0x1220 [ 2124.423584][T11436] ? device_add_disk+0x30/0x30 [ 2124.428183][T11436] ? vsprintf+0x30/0x30 [ 2124.432177][T11436] ? __alloc_disk_node+0x459/0x5a0 [ 2124.437123][T11436] loop_add+0x573/0x740 [ 2124.441120][T11436] loop_control_ioctl+0x448/0x620 [ 2124.445977][T11436] ? loop_remove+0xa0/0xa0 [ 2124.450229][T11436] ? memset+0x1f/0x40 23:03:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 42) [ 2124.454052][T11436] ? fsnotify+0x1280/0x1340 [ 2124.458395][T11436] ? loop_remove+0xa0/0xa0 [ 2124.462640][T11436] do_vfs_ioctl+0x742/0x1720 [ 2124.467068][T11436] ? ioctl_preallocate+0x250/0x250 [ 2124.472014][T11436] ? __fget+0x407/0x490 [ 2124.476012][T11436] ? fget_many+0x20/0x20 [ 2124.480085][T11436] ? debug_smp_processor_id+0x20/0x20 [ 2124.485295][T11436] ? security_file_ioctl+0x7d/0xa0 [ 2124.490245][T11436] __x64_sys_ioctl+0xd4/0x110 [ 2124.494761][T11436] do_syscall_64+0xca/0x1c0 [ 2124.499099][T11436] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x21102, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r5 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x0, 0x0) r6 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r6, 0xff, 0x2002) ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x8, &(0x7f0000000480)={[0x6]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000900000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018240000", @ANYRES32, @ANYBLOB="00000000050000001839000004000000000000000000000018010000202064250000000000201af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000003d602000500000085100000ffffffff18240000", @ANYRES32=r1, @ANYBLOB="00000000ffff0000185b00000d000000000000000000000018120000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xffff, 0x7, &(0x7f0000000200)=""/7, 0x41000, 0x4e, '\x00', r3, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0x1, 0x8001}, 0x10, 0x2a383, 0xffffffffffffffff, 0x7, &(0x7f0000000300)=[r4, r7], &(0x7f0000000340)=[{0x3, 0x5, 0xc, 0x3}, {0x1, 0x5, 0xc, 0x2}, {0x0, 0x3, 0x1, 0x9}, {0x0, 0x4, 0xc, 0x8}, {0x5, 0x5, 0xf, 0xb}, {0x4, 0x5, 0xf, 0x6}, {0x1, 0x4, 0xffff966f, 0x4}], 0x10, 0x6}, 0x90) 23:03:05 executing program 0: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8060}, 0x240008c7) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:05 executing program 5: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x428, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20008090) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) [ 2124.551858][T11444] FAULT_INJECTION: forcing a failure. [ 2124.551858][T11444] name failslab, interval 1, probability 0, space 0, times 0 [ 2124.560602][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2124.564430][T11444] CPU: 1 PID: 11444 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2124.585079][T11444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2124.594972][T11444] Call Trace: 23:03:05 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="21dee2829a03a5837a89aafe1212217118b233db54cc92"], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000001c0)=0x5, 0x4) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000001c0)=0x5, 0x4) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x2}, {0x4, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x20) [ 2124.598107][T11444] dump_stack+0x1d8/0x241 [ 2124.602271][T11444] ? panic+0x896/0x896 [ 2124.606166][T11444] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2124.611813][T11444] ? idr_alloc+0x2f0/0x2f0 [ 2124.616067][T11444] should_fail+0x71f/0x880 [ 2124.620320][T11444] ? setup_fault_attr+0x3d0/0x3d0 [ 2124.625170][T11444] ? mutex_lock+0xa5/0x110 [ 2124.629425][T11444] ? __kernfs_new_node+0xdb/0x6e0 [ 2124.634281][T11444] should_failslab+0x5/0x20 [ 2124.638628][T11444] kmem_cache_alloc+0x28/0x250 [ 2124.643229][T11444] __kernfs_new_node+0xdb/0x6e0 [ 2124.647919][T11444] ? mutex_unlock+0x18/0x40 [ 2124.652254][T11444] ? kernfs_new_node+0x160/0x160 [ 2124.657021][T11444] ? kernfs_create_dir_ns+0x1e0/0x220 [ 2124.662232][T11444] ? sysfs_create_dir_ns+0x185/0x390 [ 2124.667351][T11444] ? sysfs_create_dir_ns+0x1cb/0x390 [ 2124.672474][T11444] kernfs_new_node+0x95/0x160 [ 2124.676993][T11444] __kernfs_create_file+0x45/0x260 [ 2124.681936][T11444] sysfs_add_file_mode_ns+0x292/0x340 [ 2124.687144][T11444] sysfs_create_file_ns+0x196/0x2a0 [ 2124.692175][T11444] ? sysfs_add_file_mode_ns+0x340/0x340 [ 2124.697555][T11444] ? dev_fwnode+0x4c/0x80 [ 2124.701722][T11444] ? device_create_file+0xea/0x1b0 [ 2124.706668][T11444] device_add+0x4b2/0xbb0 [ 2124.710837][T11444] device_create_vargs+0x1b9/0x210 [ 2124.715782][T11444] device_create+0xea/0x130 [ 2124.720123][T11444] ? device_create_vargs+0x210/0x210 [ 2124.725243][T11444] ? memset+0x1f/0x40 [ 2124.729056][T11444] ? number+0xd53/0x1000 [ 2124.733137][T11444] bdi_register_va+0x84/0x610 [ 2124.737651][T11444] bdi_register+0xd1/0x120 [ 2124.741906][T11444] ? __device_add_disk+0x551/0x1220 [ 2124.746936][T11444] ? bdi_register_va+0x610/0x610 [ 2124.751710][T11444] ? vsnprintf+0x1b96/0x1c70 [ 2124.756141][T11444] bdi_register_owner+0x55/0xf0 [ 2124.760826][T11444] __device_add_disk+0x5d1/0x1220 [ 2124.765684][T11444] ? device_add_disk+0x30/0x30 [ 2124.770284][T11444] ? vsprintf+0x30/0x30 [ 2124.774278][T11444] ? __alloc_disk_node+0x459/0x5a0 [ 2124.779224][T11444] loop_add+0x573/0x740 [ 2124.783219][T11444] loop_control_ioctl+0x448/0x620 [ 2124.788078][T11444] ? loop_remove+0xa0/0xa0 [ 2124.792333][T11444] ? memset+0x1f/0x40 [ 2124.796146][T11444] ? fsnotify+0x1280/0x1340 [ 2124.800566][T11444] ? loop_remove+0xa0/0xa0 [ 2124.804748][T11444] do_vfs_ioctl+0x742/0x1720 [ 2124.809175][T11444] ? ioctl_preallocate+0x250/0x250 [ 2124.814121][T11444] ? __fget+0x407/0x490 [ 2124.818107][T11444] ? fget_many+0x20/0x20 [ 2124.822188][T11444] ? debug_smp_processor_id+0x20/0x20 [ 2124.827394][T11444] ? security_file_ioctl+0x7d/0xa0 [ 2124.832343][T11444] __x64_sys_ioctl+0xd4/0x110 [ 2124.836853][T11444] do_syscall_64+0xca/0x1c0 [ 2124.841195][T11444] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2124.848967][T11444] ------------[ cut here ]------------ [ 2124.854241][T11444] WARNING: CPU: 1 PID: 11444 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2124.863158][T11444] Modules linked in: [ 2124.866901][T11444] CPU: 1 PID: 11444 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2124.878350][T11444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2124.888252][T11444] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2124.893890][T11444] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2124.913334][T11444] RSP: 0018:ffff8881e2557a20 EFLAGS: 00010246 [ 2124.919231][T11444] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2124.927044][T11444] RDX: ffffc90000f45000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2124.934850][T11444] RBP: ffff8881e2557b58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2124.942665][T11444] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881cddd6000 [ 2124.950647][T11444] R13: dffffc0000000000 R14: ffff8881cddd6070 R15: 1ffff11039bbac9d [ 2124.958462][T11444] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2124.967225][T11444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2124.973650][T11444] CR2: 00007f4525bc7ff8 CR3: 00000001ca4b0000 CR4: 00000000003406a0 [ 2124.981460][T11444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2124.989271][T11444] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2124.997084][T11444] Call Trace: [ 2125.000221][T11444] ? __warn+0x162/0x250 [ 2125.004205][T11444] ? report_bug+0x3a1/0x4e0 [ 2125.008541][T11444] ? __device_add_disk+0xea1/0x1220 [ 2125.013576][T11444] ? __device_add_disk+0xea1/0x1220 [ 2125.018609][T11444] ? do_invalid_op+0x6e/0x110 [ 2125.023123][T11444] ? invalid_op+0x1e/0x30 [ 2125.027290][T11444] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2125.032927][T11444] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2125.039005][T11444] ? __device_add_disk+0x5dc/0x1220 [ 2125.044035][T11444] ? __device_add_disk+0xea1/0x1220 [ 2125.049070][T11444] ? __device_add_disk+0xea1/0x1220 [ 2125.054107][T11444] ? device_add_disk+0x30/0x30 [ 2125.058715][T11444] ? vsprintf+0x30/0x30 [ 2125.062704][T11444] ? __alloc_disk_node+0x459/0x5a0 [ 2125.067646][T11444] loop_add+0x573/0x740 [ 2125.071643][T11444] loop_control_ioctl+0x448/0x620 [ 2125.076503][T11444] ? loop_remove+0xa0/0xa0 [ 2125.080755][T11444] ? memset+0x1f/0x40 [ 2125.084572][T11444] ? fsnotify+0x1280/0x1340 [ 2125.088908][T11444] ? loop_remove+0xa0/0xa0 [ 2125.093166][T11444] do_vfs_ioctl+0x742/0x1720 [ 2125.097594][T11444] ? ioctl_preallocate+0x250/0x250 23:03:06 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf73a2fa08fa3eea7}, 0x20040011) 23:03:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 43) [ 2125.102622][T11444] ? __fget+0x407/0x490 [ 2125.106613][T11444] ? fget_many+0x20/0x20 [ 2125.110694][T11444] ? debug_smp_processor_id+0x20/0x20 [ 2125.115912][T11444] ? security_file_ioctl+0x7d/0xa0 [ 2125.120854][T11444] __x64_sys_ioctl+0xd4/0x110 [ 2125.125361][T11444] do_syscall_64+0xca/0x1c0 [ 2125.129699][T11444] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2125.135429][T11444] ---[ end trace 55340ab167959360 ]--- 23:03:06 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf73a2fa08fa3eea7}, 0x20040011) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf73a2fa08fa3eea7}, 0x20040011) 23:03:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000f363c7e65a4b6f34a57abbc31d8008b50a5164600f27b7574c7cd6c48732a40aed4ec7000000000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) io_uring_setup(0x6458, &(0x7f0000000200)={0x0, 0xaebb, 0x200, 0x3, 0x67}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x181000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, r2}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000400)={0x7f, "634c770a658a6c4b7ecb5bd39455839f45de99fa2dd4499c0e32ae6ccf3aee7a94e1531c38fc653a1bda74e140e73ffbb3d0afd0d6e0a568be496cf95a5471e0"}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) waitid$P_PIDFD(0x3, r3, 0x0, 0x80000000, &(0x7f0000000300)) 23:03:06 executing program 5: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x428, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20008090) (async, rerun: 64) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) 23:03:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x21102, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r5 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x0, 0x0) r6 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x0, 0x0) (async) ptrace$ARCH_MAP_VDSO_32(0x1e, r6, 0xff, 0x2002) ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x8, &(0x7f0000000480)={[0x6]}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000900000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018240000", @ANYRES32, @ANYBLOB="00000000050000001839000004000000000000000000000018010000202064250000000000201af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000003d602000500000085100000ffffffff18240000", @ANYRES32=r1, @ANYBLOB="00000000ffff0000185b00000d000000000000000000000018120000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xffff, 0x7, &(0x7f0000000200)=""/7, 0x41000, 0x4e, '\x00', r3, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0x1, 0x8001}, 0x10, 0x2a383, 0xffffffffffffffff, 0x7, &(0x7f0000000300)=[r4, r7], &(0x7f0000000340)=[{0x3, 0x5, 0xc, 0x3}, {0x1, 0x5, 0xc, 0x2}, {0x0, 0x3, 0x1, 0x9}, {0x0, 0x4, 0xc, 0x8}, {0x5, 0x5, 0xf, 0xb}, {0x4, 0x5, 0xf, 0x6}, {0x1, 0x4, 0xffff966f, 0x4}], 0x10, 0x6}, 0x90) 23:03:06 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x4, 0x80000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@raw=[@exit, @exit, @jmp={0x5, 0x1, 0xb, 0x6, 0x7, 0x4, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000040)='GPL\x00', 0x1ff, 0x92, &(0x7f0000000100)=""/146, 0x41000, 0x23, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1b8f0, r1, 0x0, 0x0, &(0x7f0000000200), 0x10, 0x7}, 0x90) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x404080, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) [ 2125.211590][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2125.242614][T11457] FAULT_INJECTION: forcing a failure. [ 2125.242614][T11457] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.257032][T11457] CPU: 1 PID: 11457 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2125.268459][T11457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2125.278348][T11457] Call Trace: [ 2125.281488][T11457] dump_stack+0x1d8/0x241 [ 2125.285641][T11457] ? panic+0x896/0x896 [ 2125.289547][T11457] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2125.295190][T11457] ? _raw_spin_lock+0xa4/0x1b0 [ 2125.299786][T11457] should_fail+0x71f/0x880 [ 2125.304130][T11457] ? security_kernfs_init_security+0x75/0x90 [ 2125.309862][T11457] ? setup_fault_attr+0x3d0/0x3d0 [ 2125.314716][T11457] ? mutex_lock+0xa5/0x110 [ 2125.318974][T11457] ? __kernfs_new_node+0xdb/0x6e0 [ 2125.323836][T11457] should_failslab+0x5/0x20 [ 2125.328170][T11457] kmem_cache_alloc+0x28/0x250 [ 2125.332771][T11457] __kernfs_new_node+0xdb/0x6e0 [ 2125.337458][T11457] ? mutex_unlock+0x18/0x40 [ 2125.341793][T11457] ? kernfs_new_node+0x160/0x160 [ 2125.346572][T11457] ? __kernfs_create_file+0x1f4/0x260 [ 2125.351782][T11457] ? sysfs_add_file_mode_ns+0x292/0x340 [ 2125.357157][T11457] kernfs_new_node+0x95/0x160 [ 2125.361676][T11457] kernfs_create_link+0x9e/0x1f0 [ 2125.366453][T11457] sysfs_do_create_link_sd+0x85/0x100 [ 2125.371664][T11457] device_add_class_symlinks+0xd6/0x2a0 [ 2125.377034][T11457] device_add+0x4d3/0xbb0 [ 2125.381199][T11457] device_create_vargs+0x1b9/0x210 [ 2125.386147][T11457] device_create+0xea/0x130 [ 2125.390489][T11457] ? device_create_vargs+0x210/0x210 [ 2125.395612][T11457] ? memset+0x1f/0x40 [ 2125.399425][T11457] ? number+0xd53/0x1000 [ 2125.403510][T11457] bdi_register_va+0x84/0x610 [ 2125.408017][T11457] bdi_register+0xd1/0x120 [ 2125.412279][T11457] ? __device_add_disk+0x551/0x1220 [ 2125.417305][T11457] ? bdi_register_va+0x610/0x610 [ 2125.422080][T11457] ? vsnprintf+0x1b96/0x1c70 [ 2125.426503][T11457] bdi_register_owner+0x55/0xf0 [ 2125.431192][T11457] __device_add_disk+0x5d1/0x1220 [ 2125.436049][T11457] ? device_add_disk+0x30/0x30 [ 2125.440653][T11457] ? vsprintf+0x30/0x30 [ 2125.444649][T11457] ? __alloc_disk_node+0x459/0x5a0 [ 2125.449590][T11457] loop_add+0x573/0x740 [ 2125.453589][T11457] loop_control_ioctl+0x448/0x620 [ 2125.458446][T11457] ? loop_remove+0xa0/0xa0 [ 2125.462696][T11457] ? memset+0x1f/0x40 [ 2125.466514][T11457] ? fsnotify+0x1280/0x1340 [ 2125.470855][T11457] ? loop_remove+0xa0/0xa0 [ 2125.475104][T11457] do_vfs_ioctl+0x742/0x1720 [ 2125.479533][T11457] ? ioctl_preallocate+0x250/0x250 [ 2125.484479][T11457] ? __fget+0x407/0x490 [ 2125.488470][T11457] ? fget_many+0x20/0x20 [ 2125.492549][T11457] ? debug_smp_processor_id+0x20/0x20 [ 2125.497754][T11457] ? security_file_ioctl+0x7d/0xa0 [ 2125.502705][T11457] __x64_sys_ioctl+0xd4/0x110 [ 2125.507223][T11457] do_syscall_64+0xca/0x1c0 [ 2125.511558][T11457] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2125.518326][T11457] ------------[ cut here ]------------ [ 2125.523607][T11457] WARNING: CPU: 1 PID: 11457 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2125.532527][T11457] Modules linked in: [ 2125.536266][T11457] CPU: 1 PID: 11457 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2125.547718][T11457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2125.557620][T11457] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2125.563261][T11457] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2125.582699][T11457] RSP: 0018:ffff8881e1abfa20 EFLAGS: 00010283 [ 2125.588597][T11457] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2125.596410][T11457] RDX: ffffc90000f45000 RSI: 000000000000b6fc RDI: 000000000000b6fd [ 2125.604229][T11457] RBP: ffff8881e1abfb58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2125.612032][T11457] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881ced14000 [ 2125.619845][T11457] R13: dffffc0000000000 R14: ffff8881ced14070 R15: 1ffff11039da289d [ 2125.627653][T11457] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2125.636418][T11457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2125.642841][T11457] CR2: 00007f57a3a57d58 CR3: 00000001ca4b0000 CR4: 00000000003406a0 [ 2125.650655][T11457] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2125.658462][T11457] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2125.666273][T11457] Call Trace: [ 2125.669408][T11457] ? __warn+0x162/0x250 [ 2125.673395][T11457] ? report_bug+0x3a1/0x4e0 [ 2125.677733][T11457] ? __device_add_disk+0xea1/0x1220 [ 2125.682768][T11457] ? __device_add_disk+0xea1/0x1220 [ 2125.687803][T11457] ? do_invalid_op+0x6e/0x110 [ 2125.692314][T11457] ? invalid_op+0x1e/0x30 [ 2125.696480][T11457] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2125.702122][T11457] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2125.708200][T11457] ? __device_add_disk+0x5dc/0x1220 [ 2125.713231][T11457] ? __device_add_disk+0xea1/0x1220 [ 2125.718266][T11457] ? __device_add_disk+0xea1/0x1220 [ 2125.723299][T11457] ? device_add_disk+0x30/0x30 [ 2125.727903][T11457] ? vsprintf+0x30/0x30 [ 2125.731891][T11457] ? __alloc_disk_node+0x459/0x5a0 [ 2125.736843][T11457] loop_add+0x573/0x740 [ 2125.740833][T11457] loop_control_ioctl+0x448/0x620 [ 2125.745695][T11457] ? loop_remove+0xa0/0xa0 [ 2125.749955][T11457] ? memset+0x1f/0x40 [ 2125.753762][T11457] ? fsnotify+0x1280/0x1340 [ 2125.758101][T11457] ? loop_remove+0xa0/0xa0 23:03:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 44) [ 2125.762355][T11457] do_vfs_ioctl+0x742/0x1720 [ 2125.766782][T11457] ? ioctl_preallocate+0x250/0x250 [ 2125.771729][T11457] ? __fget+0x407/0x490 [ 2125.775720][T11457] ? fget_many+0x20/0x20 [ 2125.779809][T11457] ? debug_smp_processor_id+0x20/0x20 [ 2125.785007][T11457] ? security_file_ioctl+0x7d/0xa0 [ 2125.789953][T11457] __x64_sys_ioctl+0xd4/0x110 [ 2125.794467][T11457] do_syscall_64+0xca/0x1c0 [ 2125.798806][T11457] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2125.804533][T11457] ---[ end trace 55340ab167959361 ]--- 23:03:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000f363c7e65a4b6f34a57abbc31d8008b50a5164600f27b7574c7cd6c48732a40aed4ec7000000000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) io_uring_setup(0x6458, &(0x7f0000000200)={0x0, 0xaebb, 0x200, 0x3, 0x67}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x181000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, r2}, 0x18) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000400)={0x7f, "634c770a658a6c4b7ecb5bd39455839f45de99fa2dd4499c0e32ae6ccf3aee7a94e1531c38fc653a1bda74e140e73ffbb3d0afd0d6e0a568be496cf95a5471e0"}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) (async) waitid$P_PIDFD(0x3, r3, 0x0, 0x80000000, &(0x7f0000000300)) 23:03:07 executing program 5: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x428, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20008090) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) 23:03:07 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x4, 0x80000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@raw=[@exit, @exit, @jmp={0x5, 0x1, 0xb, 0x6, 0x7, 0x4, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000040)='GPL\x00', 0x1ff, 0x92, &(0x7f0000000100)=""/146, 0x41000, 0x23, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1b8f0, r1, 0x0, 0x0, &(0x7f0000000200), 0x10, 0x7}, 0x90) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x404080, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 23:03:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x21102, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r5 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x0, 0x0) (async) r6 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r6, 0xff, 0x2002) (async) ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x8, &(0x7f0000000480)={[0x6]}) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) (async, rerun: 64) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000900000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018240000", @ANYRES32, @ANYBLOB="00000000050000001839000004000000000000000000000018010000202064250000000000201af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000003d602000500000085100000ffffffff18240000", @ANYRES32=r1, @ANYBLOB="00000000ffff0000185b00000d000000000000000000000018120000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xffff, 0x7, &(0x7f0000000200)=""/7, 0x41000, 0x4e, '\x00', r3, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0x1, 0x8001}, 0x10, 0x2a383, 0xffffffffffffffff, 0x7, &(0x7f0000000300)=[r4, r7], &(0x7f0000000340)=[{0x3, 0x5, 0xc, 0x3}, {0x1, 0x5, 0xc, 0x2}, {0x0, 0x3, 0x1, 0x9}, {0x0, 0x4, 0xc, 0x8}, {0x5, 0x5, 0xf, 0xb}, {0x4, 0x5, 0xf, 0x6}, {0x1, 0x4, 0xffff966f, 0x4}], 0x10, 0x6}, 0x90) 23:03:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf73a2fa08fa3eea7}, 0x20040011) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) (async) accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) (async) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) (async) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf73a2fa08fa3eea7}, 0x20040011) (async) [ 2125.841917][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2125.856834][T11479] FAULT_INJECTION: forcing a failure. [ 2125.856834][T11479] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.872212][T11479] CPU: 0 PID: 11479 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2125.883640][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2125.893528][T11479] Call Trace: [ 2125.896665][T11479] dump_stack+0x1d8/0x241 [ 2125.900825][T11479] ? panic+0x896/0x896 [ 2125.904727][T11479] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2125.910369][T11479] ? mutex_lock+0xa5/0x110 [ 2125.914621][T11479] should_fail+0x71f/0x880 [ 2125.918873][T11479] ? kstrdup_const+0x51/0x90 [ 2125.923302][T11479] ? setup_fault_attr+0x3d0/0x3d0 [ 2125.928160][T11479] ? mutex_lock+0xa5/0x110 [ 2125.932410][T11479] ? mutex_trylock+0xa0/0xa0 [ 2125.936845][T11479] ? __kernfs_new_node+0xdb/0x6e0 [ 2125.941698][T11479] should_failslab+0x5/0x20 [ 2125.946038][T11479] kmem_cache_alloc+0x28/0x250 [ 2125.950637][T11479] __kernfs_new_node+0xdb/0x6e0 [ 2125.955329][T11479] ? idr_alloc_cyclic+0x369/0x5d0 [ 2125.960185][T11479] ? kernfs_new_node+0x160/0x160 [ 2125.964957][T11479] ? selinux_path_notify+0x6d0/0x6d0 [ 2125.970079][T11479] ? idr_alloc+0x2f0/0x2f0 [ 2125.974332][T11479] ? _raw_spin_lock+0xa4/0x1b0 [ 2125.978933][T11479] kernfs_new_node+0x95/0x160 [ 2125.983445][T11479] __kernfs_create_file+0x45/0x260 23:03:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xc) [ 2125.988405][T11479] sysfs_add_file_mode_ns+0x292/0x340 [ 2125.993607][T11479] internal_create_group+0x573/0xf00 [ 2125.998722][T11479] ? mutex_unlock+0x18/0x40 [ 2126.003069][T11479] ? sysfs_create_group+0x20/0x20 [ 2126.007934][T11479] sysfs_create_groups+0x52/0x110 [ 2126.012783][T11479] device_add_attrs+0x87/0x370 [ 2126.017383][T11479] device_add+0x4f4/0xbb0 [ 2126.021553][T11479] device_create_vargs+0x1b9/0x210 [ 2126.026497][T11479] device_create+0xea/0x130 [ 2126.030835][T11479] ? device_create_vargs+0x210/0x210 [ 2126.035957][T11479] ? memset+0x1f/0x40 [ 2126.039775][T11479] ? number+0xd53/0x1000 [ 2126.043855][T11479] bdi_register_va+0x84/0x610 [ 2126.048370][T11479] bdi_register+0xd1/0x120 [ 2126.052619][T11479] ? __device_add_disk+0x551/0x1220 [ 2126.057652][T11479] ? bdi_register_va+0x610/0x610 [ 2126.062424][T11479] ? vsnprintf+0x1b96/0x1c70 [ 2126.066851][T11479] bdi_register_owner+0x55/0xf0 [ 2126.071547][T11479] __device_add_disk+0x5d1/0x1220 [ 2126.076399][T11479] ? device_add_disk+0x30/0x30 [ 2126.081004][T11479] ? vsprintf+0x30/0x30 [ 2126.084990][T11479] ? __alloc_disk_node+0x459/0x5a0 [ 2126.089937][T11479] loop_add+0x573/0x740 [ 2126.093938][T11479] loop_control_ioctl+0x448/0x620 [ 2126.098800][T11479] ? loop_remove+0xa0/0xa0 [ 2126.103044][T11479] ? memset+0x1f/0x40 [ 2126.106864][T11479] ? fsnotify+0x1280/0x1340 [ 2126.111204][T11479] ? loop_remove+0xa0/0xa0 [ 2126.115456][T11479] do_vfs_ioctl+0x742/0x1720 [ 2126.119893][T11479] ? ioctl_preallocate+0x250/0x250 [ 2126.124830][T11479] ? __fget+0x407/0x490 [ 2126.128820][T11479] ? fget_many+0x20/0x20 [ 2126.132898][T11479] ? debug_smp_processor_id+0x20/0x20 [ 2126.138114][T11479] ? security_file_ioctl+0x7d/0xa0 [ 2126.143052][T11479] __x64_sys_ioctl+0xd4/0x110 [ 2126.147571][T11479] do_syscall_64+0xca/0x1c0 [ 2126.151906][T11479] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2126.159092][T11479] ------------[ cut here ]------------ [ 2126.164374][T11479] WARNING: CPU: 1 PID: 11479 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2126.173294][T11479] Modules linked in: [ 2126.177024][T11479] CPU: 1 PID: 11479 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2126.188481][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2126.198410][T11479] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2126.204013][T11479] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2126.223457][T11479] RSP: 0018:ffff8881e2a67a20 EFLAGS: 00010287 [ 2126.229354][T11479] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2126.237168][T11479] RDX: ffffc90000f45000 RSI: 000000000000cf4d RDI: 000000000000cf4e [ 2126.244979][T11479] RBP: ffff8881e2a67b58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2126.252790][T11479] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881e6e67000 [ 2126.260599][T11479] R13: dffffc0000000000 R14: ffff8881e6e67070 R15: 1ffff1103cdcce9d [ 2126.268422][T11479] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2126.277176][T11479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2126.283604][T11479] CR2: 00007f9db70f9f78 CR3: 00000001ca4b0000 CR4: 00000000003406a0 [ 2126.291409][T11479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2126.299225][T11479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2126.307032][T11479] Call Trace: [ 2126.310170][T11479] ? __warn+0x162/0x250 [ 2126.314154][T11479] ? report_bug+0x3a1/0x4e0 [ 2126.318493][T11479] ? __device_add_disk+0xea1/0x1220 [ 2126.323525][T11479] ? __device_add_disk+0xea1/0x1220 [ 2126.328557][T11479] ? do_invalid_op+0x6e/0x110 [ 2126.333076][T11479] ? invalid_op+0x1e/0x30 [ 2126.337238][T11479] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2126.342877][T11479] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2126.348956][T11479] ? __device_add_disk+0x5dc/0x1220 [ 2126.353989][T11479] ? __device_add_disk+0xea1/0x1220 [ 2126.359022][T11479] ? __device_add_disk+0xea1/0x1220 [ 2126.364056][T11479] ? device_add_disk+0x30/0x30 [ 2126.368657][T11479] ? vsprintf+0x30/0x30 [ 2126.372648][T11479] ? __alloc_disk_node+0x459/0x5a0 [ 2126.377597][T11479] loop_add+0x573/0x740 [ 2126.381591][T11479] loop_control_ioctl+0x448/0x620 [ 2126.386448][T11479] ? loop_remove+0xa0/0xa0 [ 2126.390704][T11479] ? memset+0x1f/0x40 [ 2126.394520][T11479] ? fsnotify+0x1280/0x1340 [ 2126.398866][T11479] ? loop_remove+0xa0/0xa0 [ 2126.403112][T11479] do_vfs_ioctl+0x742/0x1720 [ 2126.407538][T11479] ? ioctl_preallocate+0x250/0x250 [ 2126.412485][T11479] ? __fget+0x407/0x490 [ 2126.416478][T11479] ? fget_many+0x20/0x20 [ 2126.420555][T11479] ? debug_smp_processor_id+0x20/0x20 [ 2126.425766][T11479] ? security_file_ioctl+0x7d/0xa0 [ 2126.430824][T11479] __x64_sys_ioctl+0xd4/0x110 [ 2126.435327][T11479] do_syscall_64+0xca/0x1c0 23:03:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 45) 23:03:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xc) 23:03:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xc) [ 2126.439667][T11479] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2126.445390][T11479] ---[ end trace 55340ab167959362 ]--- [ 2126.483825][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory 23:03:07 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x5c000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4203, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) 23:03:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000f363c7e65a4b6f34a57abbc31d8008b50a5164600f27b7574c7cd6c48732a40aed4ec7000000000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) io_uring_setup(0x6458, &(0x7f0000000200)={0x0, 0xaebb, 0x200, 0x3, 0x67}) (async, rerun: 32) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x181000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, r2}, 0x18) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000400)={0x7f, "634c770a658a6c4b7ecb5bd39455839f45de99fa2dd4499c0e32ae6ccf3aee7a94e1531c38fc653a1bda74e140e73ffbb3d0afd0d6e0a568be496cf95a5471e0"}) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) (async, rerun: 32) waitid$P_PIDFD(0x3, r3, 0x0, 0x80000000, &(0x7f0000000300)) 23:03:07 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x4, 0x80000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@raw=[@exit, @exit, @jmp={0x5, 0x1, 0xb, 0x6, 0x7, 0x4, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000040)='GPL\x00', 0x1ff, 0x92, &(0x7f0000000100)=""/146, 0x41000, 0x23, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1b8f0, r1, 0x0, 0x0, &(0x7f0000000200), 0x10, 0x7}, 0x90) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x404080, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) [ 2126.502280][T11521] FAULT_INJECTION: forcing a failure. [ 2126.502280][T11521] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.520334][T11521] CPU: 0 PID: 11521 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2126.531758][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2126.541650][T11521] Call Trace: [ 2126.544780][T11521] dump_stack+0x1d8/0x241 [ 2126.548939][T11521] ? panic+0x896/0x896 [ 2126.552846][T11521] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2126.558489][T11521] ? mutex_lock+0xa5/0x110 [ 2126.562743][T11521] should_fail+0x71f/0x880 [ 2126.566993][T11521] ? kstrdup_const+0x51/0x90 [ 2126.571419][T11521] ? setup_fault_attr+0x3d0/0x3d0 [ 2126.576278][T11521] ? mutex_lock+0xa5/0x110 [ 2126.580533][T11521] ? mutex_trylock+0xa0/0xa0 [ 2126.584967][T11521] ? __kernfs_new_node+0xdb/0x6e0 [ 2126.589818][T11521] should_failslab+0x5/0x20 [ 2126.594158][T11521] kmem_cache_alloc+0x28/0x250 [ 2126.598766][T11521] __kernfs_new_node+0xdb/0x6e0 [ 2126.603452][T11521] ? idr_alloc_cyclic+0x369/0x5d0 [ 2126.608308][T11521] ? kernfs_new_node+0x160/0x160 [ 2126.613079][T11521] ? selinux_path_notify+0x6d0/0x6d0 [ 2126.618200][T11521] ? idr_alloc+0x2f0/0x2f0 [ 2126.622459][T11521] ? _raw_spin_lock+0xa4/0x1b0 [ 2126.627050][T11521] kernfs_new_node+0x95/0x160 [ 2126.631568][T11521] __kernfs_create_file+0x45/0x260 [ 2126.636517][T11521] sysfs_add_file_mode_ns+0x292/0x340 [ 2126.641722][T11521] internal_create_group+0x573/0xf00 [ 2126.646841][T11521] ? mutex_unlock+0x18/0x40 [ 2126.651177][T11521] ? sysfs_create_group+0x20/0x20 [ 2126.656040][T11521] sysfs_create_groups+0x52/0x110 [ 2126.660902][T11521] device_add_attrs+0x87/0x370 [ 2126.665499][T11521] device_add+0x4f4/0xbb0 [ 2126.669670][T11521] device_create_vargs+0x1b9/0x210 [ 2126.674612][T11521] device_create+0xea/0x130 [ 2126.678954][T11521] ? device_create_vargs+0x210/0x210 [ 2126.684074][T11521] ? memset+0x1f/0x40 [ 2126.687890][T11521] ? number+0xd53/0x1000 [ 2126.691971][T11521] bdi_register_va+0x84/0x610 [ 2126.696485][T11521] bdi_register+0xd1/0x120 [ 2126.700737][T11521] ? __device_add_disk+0x551/0x1220 [ 2126.705770][T11521] ? bdi_register_va+0x610/0x610 [ 2126.710542][T11521] ? vsnprintf+0x1b96/0x1c70 [ 2126.714970][T11521] bdi_register_owner+0x55/0xf0 [ 2126.719663][T11521] __device_add_disk+0x5d1/0x1220 [ 2126.724518][T11521] ? device_add_disk+0x30/0x30 [ 2126.729116][T11521] ? vsprintf+0x30/0x30 [ 2126.733109][T11521] ? __alloc_disk_node+0x459/0x5a0 [ 2126.738058][T11521] loop_add+0x573/0x740 [ 2126.742049][T11521] loop_control_ioctl+0x448/0x620 [ 2126.746908][T11521] ? loop_remove+0xa0/0xa0 [ 2126.751163][T11521] ? memset+0x1f/0x40 [ 2126.754979][T11521] ? fsnotify+0x1280/0x1340 [ 2126.759322][T11521] ? loop_remove+0xa0/0xa0 [ 2126.763573][T11521] do_vfs_ioctl+0x742/0x1720 [ 2126.768003][T11521] ? ioctl_preallocate+0x250/0x250 [ 2126.772952][T11521] ? __fget+0x407/0x490 [ 2126.776938][T11521] ? fget_many+0x20/0x20 [ 2126.781018][T11521] ? debug_smp_processor_id+0x20/0x20 [ 2126.786225][T11521] ? security_file_ioctl+0x7d/0xa0 [ 2126.791172][T11521] __x64_sys_ioctl+0xd4/0x110 [ 2126.795685][T11521] do_syscall_64+0xca/0x1c0 [ 2126.800027][T11521] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2126.807049][T11521] ------------[ cut here ]------------ [ 2126.812322][T11521] WARNING: CPU: 1 PID: 11521 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2126.821240][T11521] Modules linked in: [ 2126.824987][T11521] CPU: 1 PID: 11521 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2126.836429][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2126.846333][T11521] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2126.851967][T11521] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2126.871406][T11521] RSP: 0018:ffff8881e3d8fa20 EFLAGS: 00010283 [ 2126.877311][T11521] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2126.885122][T11521] RDX: ffffc90000f45000 RSI: 000000000000cafd RDI: 000000000000cafe [ 2126.892932][T11521] RBP: ffff8881e3d8fb58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2126.900742][T11521] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881dc17c000 [ 2126.908553][T11521] R13: dffffc0000000000 R14: ffff8881dc17c070 R15: 1ffff1103b82f89d [ 2126.916367][T11521] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2126.925133][T11521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2126.931555][T11521] CR2: 0000001b32421000 CR3: 00000001cd45a000 CR4: 00000000003406a0 [ 2126.939365][T11521] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2126.947175][T11521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2126.954985][T11521] Call Trace: [ 2126.958119][T11521] ? __warn+0x162/0x250 [ 2126.962113][T11521] ? report_bug+0x3a1/0x4e0 [ 2126.966448][T11521] ? __device_add_disk+0xea1/0x1220 [ 2126.971482][T11521] ? __device_add_disk+0xea1/0x1220 [ 2126.976533][T11521] ? do_invalid_op+0x6e/0x110 [ 2126.981034][T11521] ? invalid_op+0x1e/0x30 [ 2126.985209][T11521] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2126.990843][T11521] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2126.996931][T11521] ? __device_add_disk+0x5dc/0x1220 [ 2127.001951][T11521] ? __device_add_disk+0xea1/0x1220 [ 2127.006988][T11521] ? __device_add_disk+0xea1/0x1220 [ 2127.012018][T11521] ? device_add_disk+0x30/0x30 [ 2127.016627][T11521] ? vsprintf+0x30/0x30 [ 2127.020609][T11521] ? __alloc_disk_node+0x459/0x5a0 [ 2127.025560][T11521] loop_add+0x573/0x740 [ 2127.029553][T11521] loop_control_ioctl+0x448/0x620 [ 2127.034409][T11521] ? loop_remove+0xa0/0xa0 [ 2127.038662][T11521] ? memset+0x1f/0x40 [ 2127.042478][T11521] ? fsnotify+0x1280/0x1340 [ 2127.046817][T11521] ? loop_remove+0xa0/0xa0 23:03:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000080)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, r2, 0x8, 0x80000}) 23:03:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x5c000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:08 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4203, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4203, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) [ 2127.051073][T11521] do_vfs_ioctl+0x742/0x1720 [ 2127.055500][T11521] ? ioctl_preallocate+0x250/0x250 [ 2127.060448][T11521] ? __fget+0x407/0x490 [ 2127.064438][T11521] ? fget_many+0x20/0x20 [ 2127.068518][T11521] ? debug_smp_processor_id+0x20/0x20 [ 2127.073741][T11521] ? security_file_ioctl+0x7d/0xa0 [ 2127.078673][T11521] __x64_sys_ioctl+0xd4/0x110 [ 2127.083187][T11521] do_syscall_64+0xca/0x1c0 [ 2127.087526][T11521] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2127.093251][T11521] ---[ end trace 55340ab167959363 ]--- 23:03:08 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 46) 23:03:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x5c000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:08 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4203, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) 23:03:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000080)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, r2, 0x8, 0x80000}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, r2, 0x8, 0x80000}) (async) 23:03:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, r2, 0x25, 0x8, @val=@iter={&(0x7f0000000100)=@map_fd=r3, 0x10}}, 0x40) [ 2127.184473][T11559] FAULT_INJECTION: forcing a failure. [ 2127.184473][T11559] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.201044][T11559] CPU: 0 PID: 11559 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2127.212467][T11559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2127.222358][T11559] Call Trace: [ 2127.225502][T11559] dump_stack+0x1d8/0x241 [ 2127.229651][T11559] ? panic+0x896/0x896 [ 2127.233562][T11559] ? mutex_unlock+0x18/0x40 [ 2127.237902][T11559] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2127.243540][T11559] ? selinux_kernfs_init_security+0x14e/0x730 [ 2127.249446][T11559] ? idr_alloc_cyclic+0x369/0x5d0 [ 2127.254300][T11559] should_fail+0x71f/0x880 [ 2127.258559][T11559] ? setup_fault_attr+0x3d0/0x3d0 [ 2127.263414][T11559] ? _raw_spin_lock+0xa4/0x1b0 [ 2127.268019][T11559] ? __kernfs_new_node+0xdb/0x6e0 [ 2127.272875][T11559] should_failslab+0x5/0x20 [ 2127.277220][T11559] kmem_cache_alloc+0x28/0x250 [ 2127.281815][T11559] __kernfs_new_node+0xdb/0x6e0 [ 2127.286499][T11559] ? kernfs_new_node+0x160/0x160 [ 2127.291273][T11559] ? mutex_lock+0xa5/0x110 [ 2127.295523][T11559] ? mutex_trylock+0xa0/0xa0 [ 2127.299952][T11559] ? kernfs_activate+0x2fe/0x320 [ 2127.304725][T11559] kernfs_new_node+0x95/0x160 [ 2127.309249][T11559] __kernfs_create_file+0x45/0x260 [ 2127.314189][T11559] sysfs_add_file_mode_ns+0x292/0x340 [ 2127.319394][T11559] internal_create_group+0x573/0xf00 [ 2127.324520][T11559] ? mutex_unlock+0x18/0x40 [ 2127.328854][T11559] ? sysfs_create_group+0x20/0x20 [ 2127.333713][T11559] sysfs_create_groups+0x52/0x110 [ 2127.338576][T11559] device_add_attrs+0x87/0x370 [ 2127.343175][T11559] device_add+0x4f4/0xbb0 [ 2127.347347][T11559] device_create_vargs+0x1b9/0x210 [ 2127.352286][T11559] device_create+0xea/0x130 [ 2127.356629][T11559] ? device_create_vargs+0x210/0x210 [ 2127.361749][T11559] ? memset+0x1f/0x40 [ 2127.365567][T11559] ? number+0xd53/0x1000 [ 2127.369654][T11559] bdi_register_va+0x84/0x610 [ 2127.374161][T11559] bdi_register+0xd1/0x120 [ 2127.378412][T11559] ? __device_add_disk+0x551/0x1220 [ 2127.383445][T11559] ? bdi_register_va+0x610/0x610 [ 2127.388229][T11559] ? vsnprintf+0x1b96/0x1c70 [ 2127.392646][T11559] bdi_register_owner+0x55/0xf0 [ 2127.397331][T11559] __device_add_disk+0x5d1/0x1220 [ 2127.402197][T11559] ? device_add_disk+0x30/0x30 [ 2127.406795][T11559] ? vsprintf+0x30/0x30 [ 2127.410783][T11559] ? __alloc_disk_node+0x459/0x5a0 [ 2127.415732][T11559] loop_add+0x573/0x740 [ 2127.419725][T11559] loop_control_ioctl+0x448/0x620 [ 2127.424585][T11559] ? loop_remove+0xa0/0xa0 [ 2127.428849][T11559] ? memset+0x1f/0x40 [ 2127.432655][T11559] ? fsnotify+0x1280/0x1340 [ 2127.436994][T11559] ? loop_remove+0xa0/0xa0 [ 2127.441248][T11559] do_vfs_ioctl+0x742/0x1720 [ 2127.445674][T11559] ? ioctl_preallocate+0x250/0x250 [ 2127.450623][T11559] ? __fget+0x407/0x490 [ 2127.454701][T11559] ? fget_many+0x20/0x20 [ 2127.458781][T11559] ? debug_smp_processor_id+0x20/0x20 [ 2127.463996][T11559] ? security_file_ioctl+0x7d/0xa0 [ 2127.468937][T11559] __x64_sys_ioctl+0xd4/0x110 [ 2127.473448][T11559] do_syscall_64+0xca/0x1c0 [ 2127.477790][T11559] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000080)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, r2, 0x8, 0x80000}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, r2, 0x8, 0x80000}) (async) [ 2127.488140][T11559] ------------[ cut here ]------------ [ 2127.493415][T11559] WARNING: CPU: 0 PID: 11559 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2127.502334][T11559] Modules linked in: [ 2127.506072][T11559] CPU: 0 PID: 11559 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2127.517524][T11559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2127.527428][T11559] RIP: 0010:__device_add_disk+0xea1/0x1220 23:03:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex=r1, 0xffffffffffffffff, 0x37, 0x4, 0x0, @link_id=r2}, 0x20) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) [ 2127.533063][T11559] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2127.552511][T11559] RSP: 0018:ffff8881e9637a20 EFLAGS: 00010287 [ 2127.558402][T11559] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2127.566223][T11559] RDX: ffffc90000f45000 RSI: 000000000000cafe RDI: 000000000000caff [ 2127.574036][T11559] RBP: ffff8881e9637b58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2127.581844][T11559] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881e859a000 [ 2127.589658][T11559] R13: dffffc0000000000 R14: ffff8881e859a070 R15: 1ffff1103d0b349d [ 2127.597460][T11559] FS: 00007f4525bc86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2127.606229][T11559] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2127.612745][T11559] CR2: 00007f8d92bffd00 CR3: 00000001e6611000 CR4: 00000000003406b0 [ 2127.620548][T11559] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2127.628355][T11559] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2127.636167][T11559] Call Trace: [ 2127.639300][T11559] ? __warn+0x162/0x250 [ 2127.643288][T11559] ? report_bug+0x3a1/0x4e0 [ 2127.647625][T11559] ? __device_add_disk+0xea1/0x1220 [ 2127.652667][T11559] ? __device_add_disk+0xea1/0x1220 [ 2127.657701][T11559] ? do_invalid_op+0x6e/0x110 [ 2127.662207][T11559] ? invalid_op+0x1e/0x30 [ 2127.666373][T11559] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2127.672018][T11559] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2127.678091][T11559] ? __device_add_disk+0x5dc/0x1220 [ 2127.683122][T11559] ? __device_add_disk+0xea1/0x1220 [ 2127.688168][T11559] ? __device_add_disk+0xea1/0x1220 [ 2127.693192][T11559] ? device_add_disk+0x30/0x30 [ 2127.697791][T11559] ? vsprintf+0x30/0x30 [ 2127.701784][T11559] ? __alloc_disk_node+0x459/0x5a0 [ 2127.706742][T11559] loop_add+0x573/0x740 [ 2127.710725][T11559] loop_control_ioctl+0x448/0x620 [ 2127.715583][T11559] ? loop_remove+0xa0/0xa0 [ 2127.719840][T11559] ? memset+0x1f/0x40 [ 2127.723658][T11559] ? fsnotify+0x1280/0x1340 [ 2127.727997][T11559] ? loop_remove+0xa0/0xa0 [ 2127.732247][T11559] do_vfs_ioctl+0x742/0x1720 23:03:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 47) [ 2127.736676][T11559] ? ioctl_preallocate+0x250/0x250 [ 2127.741621][T11559] ? __fget+0x407/0x490 [ 2127.745628][T11559] ? fget_many+0x20/0x20 [ 2127.749693][T11559] ? debug_smp_processor_id+0x20/0x20 [ 2127.754907][T11559] ? security_file_ioctl+0x7d/0xa0 [ 2127.759847][T11559] __x64_sys_ioctl+0xd4/0x110 [ 2127.764368][T11559] do_syscall_64+0xca/0x1c0 [ 2127.768706][T11559] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2127.774427][T11559] ---[ end trace 55340ab167959364 ]--- 23:03:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x50c00, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:03:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex=r1, 0xffffffffffffffff, 0x37, 0x4, 0x0, @link_id=r2}, 0x20) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) 23:03:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) [ 2127.814897][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2127.826063][T11592] FAULT_INJECTION: forcing a failure. [ 2127.826063][T11592] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.839286][T11592] CPU: 0 PID: 11592 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2127.850710][T11592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2127.860598][T11592] Call Trace: [ 2127.863732][T11592] dump_stack+0x1d8/0x241 [ 2127.867893][T11592] ? panic+0x896/0x896 [ 2127.871798][T11592] ? mutex_unlock+0x18/0x40 [ 2127.876138][T11592] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2127.881778][T11592] ? selinux_kernfs_init_security+0x14e/0x730 [ 2127.887682][T11592] ? idr_alloc_cyclic+0x369/0x5d0 [ 2127.892544][T11592] should_fail+0x71f/0x880 [ 2127.896794][T11592] ? setup_fault_attr+0x3d0/0x3d0 [ 2127.901653][T11592] ? _raw_spin_lock+0xa4/0x1b0 [ 2127.906255][T11592] ? __kernfs_new_node+0xdb/0x6e0 [ 2127.911114][T11592] should_failslab+0x5/0x20 [ 2127.915452][T11592] kmem_cache_alloc+0x28/0x250 [ 2127.920053][T11592] __kernfs_new_node+0xdb/0x6e0 [ 2127.924739][T11592] ? kernfs_new_node+0x160/0x160 [ 2127.929517][T11592] ? mutex_lock+0xa5/0x110 [ 2127.933765][T11592] ? mutex_trylock+0xa0/0xa0 [ 2127.938193][T11592] ? kernfs_activate+0x2fe/0x320 [ 2127.942965][T11592] kernfs_new_node+0x95/0x160 [ 2127.947479][T11592] __kernfs_create_file+0x45/0x260 [ 2127.952427][T11592] sysfs_add_file_mode_ns+0x292/0x340 [ 2127.957634][T11592] internal_create_group+0x573/0xf00 [ 2127.962754][T11592] ? mutex_unlock+0x18/0x40 [ 2127.967094][T11592] ? sysfs_create_group+0x20/0x20 [ 2127.971956][T11592] sysfs_create_groups+0x52/0x110 [ 2127.976814][T11592] device_add_attrs+0x87/0x370 [ 2127.981419][T11592] device_add+0x4f4/0xbb0 [ 2127.985580][T11592] device_create_vargs+0x1b9/0x210 [ 2127.990528][T11592] device_create+0xea/0x130 [ 2127.994867][T11592] ? device_create_vargs+0x210/0x210 [ 2127.999990][T11592] ? memset+0x1f/0x40 [ 2128.003806][T11592] ? number+0xd53/0x1000 [ 2128.007885][T11592] bdi_register_va+0x84/0x610 [ 2128.012399][T11592] bdi_register+0xd1/0x120 [ 2128.016652][T11592] ? __device_add_disk+0x551/0x1220 [ 2128.021686][T11592] ? bdi_register_va+0x610/0x610 [ 2128.026457][T11592] ? vsnprintf+0x1b96/0x1c70 [ 2128.030888][T11592] bdi_register_owner+0x55/0xf0 [ 2128.035572][T11592] __device_add_disk+0x5d1/0x1220 [ 2128.040445][T11592] ? device_add_disk+0x30/0x30 [ 2128.045040][T11592] ? vsprintf+0x30/0x30 [ 2128.049028][T11592] ? __alloc_disk_node+0x459/0x5a0 [ 2128.053982][T11592] loop_add+0x573/0x740 [ 2128.057967][T11592] loop_control_ioctl+0x448/0x620 [ 2128.062826][T11592] ? loop_remove+0xa0/0xa0 [ 2128.067085][T11592] ? memset+0x1f/0x40 [ 2128.070897][T11592] ? fsnotify+0x1280/0x1340 [ 2128.075234][T11592] ? loop_remove+0xa0/0xa0 [ 2128.079489][T11592] do_vfs_ioctl+0x742/0x1720 [ 2128.083917][T11592] ? ioctl_preallocate+0x250/0x250 [ 2128.088862][T11592] ? __fget+0x407/0x490 [ 2128.092856][T11592] ? fget_many+0x20/0x20 [ 2128.096932][T11592] ? debug_smp_processor_id+0x20/0x20 [ 2128.102143][T11592] ? security_file_ioctl+0x7d/0xa0 [ 2128.107092][T11592] __x64_sys_ioctl+0xd4/0x110 [ 2128.111602][T11592] do_syscall_64+0xca/0x1c0 23:03:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x50c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) 23:03:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async, rerun: 32) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, r2, 0x25, 0x8, @val=@iter={&(0x7f0000000100)=@map_fd=r3, 0x10}}, 0x40) 23:03:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x50c00, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x50c00, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) (async) 23:03:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2128.115940][T11592] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2128.125781][T11592] ------------[ cut here ]------------ [ 2128.131055][T11592] WARNING: CPU: 1 PID: 11592 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2128.139980][T11592] Modules linked in: [ 2128.143715][T11592] CPU: 1 PID: 11592 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2128.155173][T11592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2128.165188][T11592] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2128.170812][T11592] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2128.190255][T11592] RSP: 0018:ffff8881e211fa20 EFLAGS: 00010287 [ 2128.196152][T11592] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2128.203968][T11592] RDX: ffffc90000f45000 RSI: 000000000000ca5b RDI: 000000000000ca5c [ 2128.211777][T11592] RBP: ffff8881e211fb58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2128.219587][T11592] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881f3dc7000 [ 2128.227398][T11592] R13: dffffc0000000000 R14: ffff8881f3dc7070 R15: 1ffff1103e7b8e9d [ 2128.235216][T11592] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2128.243976][T11592] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2128.250398][T11592] CR2: 00007fa5e00ac353 CR3: 00000001cd51c000 CR4: 00000000003406a0 [ 2128.258215][T11592] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2128.266018][T11592] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2128.273914][T11592] Call Trace: [ 2128.277048][T11592] ? __warn+0x162/0x250 [ 2128.281035][T11592] ? report_bug+0x3a1/0x4e0 [ 2128.285377][T11592] ? __device_add_disk+0xea1/0x1220 [ 2128.290412][T11592] ? __device_add_disk+0xea1/0x1220 [ 2128.295443][T11592] ? do_invalid_op+0x6e/0x110 [ 2128.299957][T11592] ? invalid_op+0x1e/0x30 [ 2128.304130][T11592] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2128.309766][T11592] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2128.315836][T11592] ? __device_add_disk+0x5dc/0x1220 [ 2128.320877][T11592] ? __device_add_disk+0xea1/0x1220 [ 2128.325907][T11592] ? __device_add_disk+0xea1/0x1220 [ 2128.330941][T11592] ? device_add_disk+0x30/0x30 [ 2128.335539][T11592] ? vsprintf+0x30/0x30 [ 2128.339533][T11592] ? __alloc_disk_node+0x459/0x5a0 [ 2128.344480][T11592] loop_add+0x573/0x740 [ 2128.348477][T11592] loop_control_ioctl+0x448/0x620 [ 2128.353331][T11592] ? loop_remove+0xa0/0xa0 [ 2128.357584][T11592] ? memset+0x1f/0x40 [ 2128.361402][T11592] ? fsnotify+0x1280/0x1340 23:03:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 48) [ 2128.365743][T11592] ? loop_remove+0xa0/0xa0 [ 2128.369996][T11592] do_vfs_ioctl+0x742/0x1720 [ 2128.374425][T11592] ? ioctl_preallocate+0x250/0x250 [ 2128.379372][T11592] ? __fget+0x407/0x490 [ 2128.383365][T11592] ? fget_many+0x20/0x20 [ 2128.387442][T11592] ? debug_smp_processor_id+0x20/0x20 [ 2128.392648][T11592] ? security_file_ioctl+0x7d/0xa0 [ 2128.397612][T11592] __x64_sys_ioctl+0xd4/0x110 [ 2128.402114][T11592] do_syscall_64+0xca/0x1c0 [ 2128.406454][T11592] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2128.412181][T11592] ---[ end trace 55340ab167959365 ]--- 23:03:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1, 0x0}, 0x8) (rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex=r1, 0xffffffffffffffff, 0x37, 0x4, 0x0, @link_id=r2}, 0x20) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) 23:03:09 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2128.445759][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2128.455898][T11614] FAULT_INJECTION: forcing a failure. [ 2128.455898][T11614] name failslab, interval 1, probability 0, space 0, times 0 [ 2128.468687][T11614] CPU: 1 PID: 11614 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2128.480104][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2128.489998][T11614] Call Trace: [ 2128.493128][T11614] dump_stack+0x1d8/0x241 [ 2128.497292][T11614] ? panic+0x896/0x896 [ 2128.501194][T11614] ? mutex_unlock+0x18/0x40 [ 2128.505542][T11614] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2128.511177][T11614] ? selinux_kernfs_init_security+0x14e/0x730 [ 2128.517083][T11614] ? idr_alloc_cyclic+0x369/0x5d0 [ 2128.521939][T11614] should_fail+0x71f/0x880 [ 2128.526200][T11614] ? setup_fault_attr+0x3d0/0x3d0 [ 2128.531052][T11614] ? _raw_spin_lock+0xa4/0x1b0 [ 2128.535650][T11614] ? __kernfs_new_node+0xdb/0x6e0 [ 2128.540512][T11614] should_failslab+0x5/0x20 [ 2128.544851][T11614] kmem_cache_alloc+0x28/0x250 [ 2128.549467][T11614] __kernfs_new_node+0xdb/0x6e0 [ 2128.554140][T11614] ? kernfs_new_node+0x160/0x160 [ 2128.558920][T11614] ? mutex_lock+0xa5/0x110 [ 2128.563170][T11614] ? mutex_trylock+0xa0/0xa0 [ 2128.567592][T11614] ? kernfs_activate+0x2fe/0x320 [ 2128.572371][T11614] kernfs_new_node+0x95/0x160 [ 2128.576887][T11614] __kernfs_create_file+0x45/0x260 [ 2128.581827][T11614] sysfs_add_file_mode_ns+0x292/0x340 [ 2128.587036][T11614] internal_create_group+0x573/0xf00 [ 2128.592155][T11614] ? mutex_unlock+0x18/0x40 [ 2128.596493][T11614] ? sysfs_create_group+0x20/0x20 [ 2128.601362][T11614] sysfs_create_groups+0x52/0x110 [ 2128.606218][T11614] device_add_attrs+0x87/0x370 [ 2128.610827][T11614] device_add+0x4f4/0xbb0 [ 2128.614982][T11614] device_create_vargs+0x1b9/0x210 [ 2128.619934][T11614] device_create+0xea/0x130 [ 2128.624274][T11614] ? device_create_vargs+0x210/0x210 [ 2128.629386][T11614] ? memset+0x1f/0x40 [ 2128.633205][T11614] ? number+0xd53/0x1000 [ 2128.637290][T11614] bdi_register_va+0x84/0x610 [ 2128.641797][T11614] bdi_register+0xd1/0x120 [ 2128.646050][T11614] ? __device_add_disk+0x551/0x1220 [ 2128.651081][T11614] ? bdi_register_va+0x610/0x610 [ 2128.655866][T11614] ? vsnprintf+0x1b96/0x1c70 [ 2128.660287][T11614] bdi_register_owner+0x55/0xf0 [ 2128.664973][T11614] __device_add_disk+0x5d1/0x1220 [ 2128.669833][T11614] ? device_add_disk+0x30/0x30 [ 2128.674429][T11614] ? vsprintf+0x30/0x30 [ 2128.678421][T11614] ? __alloc_disk_node+0x459/0x5a0 [ 2128.683378][T11614] loop_add+0x573/0x740 [ 2128.687362][T11614] loop_control_ioctl+0x448/0x620 [ 2128.692228][T11614] ? loop_remove+0xa0/0xa0 [ 2128.696477][T11614] ? memset+0x1f/0x40 [ 2128.700292][T11614] ? fsnotify+0x1280/0x1340 [ 2128.704633][T11614] ? loop_remove+0xa0/0xa0 [ 2128.708895][T11614] do_vfs_ioctl+0x742/0x1720 [ 2128.713324][T11614] ? ioctl_preallocate+0x250/0x250 [ 2128.718257][T11614] ? __fget+0x407/0x490 [ 2128.722250][T11614] ? fget_many+0x20/0x20 [ 2128.726330][T11614] ? debug_smp_processor_id+0x20/0x20 [ 2128.731537][T11614] ? security_file_ioctl+0x7d/0xa0 [ 2128.736489][T11614] __x64_sys_ioctl+0xd4/0x110 [ 2128.740999][T11614] do_syscall_64+0xca/0x1c0 [ 2128.745338][T11614] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2128.751517][T11614] ------------[ cut here ]------------ [ 2128.756777][T11614] WARNING: CPU: 1 PID: 11614 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2128.765703][T11614] Modules linked in: [ 2128.769443][T11614] CPU: 1 PID: 11614 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2128.780899][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2128.790799][T11614] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2128.796433][T11614] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2128.815879][T11614] RSP: 0018:ffff8881eaf87a20 EFLAGS: 00010283 [ 2128.821772][T11614] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2128.829583][T11614] RDX: ffffc90000f45000 RSI: 000000000000cb0d RDI: 000000000000cb0e [ 2128.837400][T11614] RBP: ffff8881eaf87b58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2128.845209][T11614] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881e331b000 [ 2128.853019][T11614] R13: dffffc0000000000 R14: ffff8881e331b070 R15: 1ffff1103c66369d [ 2128.860833][T11614] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2128.869600][T11614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2128.876024][T11614] CR2: 00007f8d94bad6be CR3: 00000001cd51c000 CR4: 00000000003406a0 [ 2128.883830][T11614] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2128.891639][T11614] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2128.899448][T11614] Call Trace: [ 2128.902586][T11614] ? __warn+0x162/0x250 [ 2128.906574][T11614] ? report_bug+0x3a1/0x4e0 [ 2128.910914][T11614] ? __device_add_disk+0xea1/0x1220 [ 2128.915945][T11614] ? __device_add_disk+0xea1/0x1220 [ 2128.920978][T11614] ? do_invalid_op+0x6e/0x110 [ 2128.925490][T11614] ? invalid_op+0x1e/0x30 [ 2128.929658][T11614] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2128.935297][T11614] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2128.941375][T11614] ? __device_add_disk+0x5dc/0x1220 [ 2128.946413][T11614] ? __device_add_disk+0xea1/0x1220 [ 2128.951447][T11614] ? __device_add_disk+0xea1/0x1220 [ 2128.956474][T11614] ? device_add_disk+0x30/0x30 [ 2128.961086][T11614] ? vsprintf+0x30/0x30 [ 2128.965070][T11614] ? __alloc_disk_node+0x459/0x5a0 [ 2128.970024][T11614] loop_add+0x573/0x740 [ 2128.974011][T11614] loop_control_ioctl+0x448/0x620 [ 2128.978871][T11614] ? loop_remove+0xa0/0xa0 [ 2128.983124][T11614] ? memset+0x1f/0x40 [ 2128.986948][T11614] ? fsnotify+0x1280/0x1340 [ 2128.991282][T11614] ? loop_remove+0xa0/0xa0 [ 2128.995533][T11614] do_vfs_ioctl+0x742/0x1720 [ 2128.999963][T11614] ? ioctl_preallocate+0x250/0x250 [ 2129.004909][T11614] ? __fget+0x407/0x490 [ 2129.008898][T11614] ? fget_many+0x20/0x20 [ 2129.012978][T11614] ? debug_smp_processor_id+0x20/0x20 [ 2129.018184][T11614] ? security_file_ioctl+0x7d/0xa0 [ 2129.023133][T11614] __x64_sys_ioctl+0xd4/0x110 [ 2129.027649][T11614] do_syscall_64+0xca/0x1c0 [ 2129.031984][T11614] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2129.037711][T11614] ---[ end trace 55340ab167959366 ]--- 23:03:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 49) 23:03:10 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, r2, 0x25, 0x8, @val=@iter={&(0x7f0000000100)=@map_fd=r3, 0x10}}, 0x40) 23:03:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xccc6, '\x00', 0x0, r3, 0x0, 0x3}, 0x48) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) 23:03:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%p \x00'}, 0x20) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) [ 2129.050775][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2129.087261][T11632] FAULT_INJECTION: forcing a failure. [ 2129.087261][T11632] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.100558][T11632] CPU: 1 PID: 11632 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2129.111973][T11632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2129.121866][T11632] Call Trace: [ 2129.125000][T11632] dump_stack+0x1d8/0x241 [ 2129.129161][T11632] ? panic+0x896/0x896 [ 2129.133078][T11632] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2129.138712][T11632] ? idr_alloc+0x2f0/0x2f0 [ 2129.142973][T11632] should_fail+0x71f/0x880 [ 2129.147214][T11632] ? setup_fault_attr+0x3d0/0x3d0 [ 2129.152081][T11632] ? security_kernfs_init_security+0x75/0x90 [ 2129.157894][T11632] ? __kernfs_new_node+0x472/0x6e0 [ 2129.162834][T11632] ? __kernfs_new_node+0xdb/0x6e0 [ 2129.167699][T11632] should_failslab+0x5/0x20 [ 2129.172034][T11632] kmem_cache_alloc+0x28/0x250 [ 2129.176634][T11632] __kernfs_new_node+0xdb/0x6e0 [ 2129.181327][T11632] ? kernfs_new_node+0x160/0x160 [ 2129.186095][T11632] ? kernfs_activate+0x2fe/0x320 [ 2129.190869][T11632] ? mutex_unlock+0x18/0x40 [ 2129.195204][T11632] ? kernfs_add_one+0x49a/0x5b0 [ 2129.199904][T11632] kernfs_new_node+0x95/0x160 [ 2129.204407][T11632] __kernfs_create_file+0x45/0x260 [ 2129.209355][T11632] sysfs_add_file_mode_ns+0x292/0x340 [ 2129.214563][T11632] sysfs_create_file_ns+0x196/0x2a0 [ 2129.219595][T11632] ? sysfs_create_group+0x20/0x20 [ 2129.224456][T11632] ? sysfs_add_file_mode_ns+0x340/0x340 [ 2129.229837][T11632] ? device_create_file+0xea/0x1b0 [ 2129.234790][T11632] device_add_attrs+0x2bf/0x370 [ 2129.239471][T11632] device_add+0x4f4/0xbb0 [ 2129.243638][T11632] device_create_vargs+0x1b9/0x210 [ 2129.248583][T11632] device_create+0xea/0x130 [ 2129.252925][T11632] ? device_create_vargs+0x210/0x210 [ 2129.258042][T11632] ? memset+0x1f/0x40 [ 2129.261863][T11632] ? number+0xd53/0x1000 [ 2129.265941][T11632] bdi_register_va+0x84/0x610 [ 2129.270454][T11632] bdi_register+0xd1/0x120 [ 2129.274709][T11632] ? __device_add_disk+0x551/0x1220 [ 2129.279741][T11632] ? bdi_register_va+0x610/0x610 [ 2129.284513][T11632] ? vsnprintf+0x1b96/0x1c70 [ 2129.288943][T11632] bdi_register_owner+0x55/0xf0 [ 2129.293629][T11632] __device_add_disk+0x5d1/0x1220 [ 2129.298488][T11632] ? device_add_disk+0x30/0x30 [ 2129.303086][T11632] ? vsprintf+0x30/0x30 [ 2129.307089][T11632] ? __alloc_disk_node+0x459/0x5a0 [ 2129.312027][T11632] loop_add+0x573/0x740 [ 2129.316021][T11632] loop_control_ioctl+0x448/0x620 [ 2129.320880][T11632] ? loop_remove+0xa0/0xa0 [ 2129.325133][T11632] ? memset+0x1f/0x40 [ 2129.328957][T11632] ? fsnotify+0x1280/0x1340 [ 2129.333292][T11632] ? loop_remove+0xa0/0xa0 [ 2129.337543][T11632] do_vfs_ioctl+0x742/0x1720 [ 2129.341973][T11632] ? ioctl_preallocate+0x250/0x250 [ 2129.346918][T11632] ? __fget+0x407/0x490 [ 2129.350921][T11632] ? fget_many+0x20/0x20 [ 2129.354988][T11632] ? debug_smp_processor_id+0x20/0x20 [ 2129.360197][T11632] ? security_file_ioctl+0x7d/0xa0 [ 2129.365153][T11632] __x64_sys_ioctl+0xd4/0x110 [ 2129.369658][T11632] do_syscall_64+0xca/0x1c0 [ 2129.374001][T11632] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2129.380802][T11632] ------------[ cut here ]------------ [ 2129.386069][T11632] WARNING: CPU: 1 PID: 11632 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2129.394994][T11632] Modules linked in: [ 2129.398731][T11632] CPU: 1 PID: 11632 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2129.410187][T11632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2129.420088][T11632] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2129.425726][T11632] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2129.445162][T11632] RSP: 0018:ffff8881e211fa20 EFLAGS: 00010283 [ 2129.451065][T11632] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2129.458875][T11632] RDX: ffffc90000f45000 RSI: 000000000000c6e4 RDI: 000000000000c6e5 [ 2129.466685][T11632] RBP: ffff8881e211fb58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2129.474495][T11632] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881ed972000 [ 2129.482308][T11632] R13: dffffc0000000000 R14: ffff8881ed972070 R15: 1ffff1103db2e49d [ 2129.490120][T11632] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2129.498884][T11632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2129.505306][T11632] CR2: 00007f8d92ce6c98 CR3: 00000001ca55e000 CR4: 00000000003406a0 [ 2129.513119][T11632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2129.520930][T11632] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2129.528739][T11632] Call Trace: [ 2129.531874][T11632] ? __warn+0x162/0x250 [ 2129.535860][T11632] ? report_bug+0x3a1/0x4e0 [ 2129.540200][T11632] ? __device_add_disk+0xea1/0x1220 [ 2129.545234][T11632] ? __device_add_disk+0xea1/0x1220 [ 2129.550268][T11632] ? do_invalid_op+0x6e/0x110 [ 2129.554780][T11632] ? invalid_op+0x1e/0x30 [ 2129.558947][T11632] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2129.564589][T11632] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2129.570664][T11632] ? __device_add_disk+0x5dc/0x1220 [ 2129.575699][T11632] ? __device_add_disk+0xea1/0x1220 [ 2129.580730][T11632] ? __device_add_disk+0xea1/0x1220 [ 2129.585766][T11632] ? device_add_disk+0x30/0x30 [ 2129.590367][T11632] ? vsprintf+0x30/0x30 [ 2129.594356][T11632] ? __alloc_disk_node+0x459/0x5a0 [ 2129.599305][T11632] loop_add+0x573/0x740 [ 2129.603299][T11632] loop_control_ioctl+0x448/0x620 [ 2129.608158][T11632] ? loop_remove+0xa0/0xa0 [ 2129.612411][T11632] ? memset+0x1f/0x40 [ 2129.616230][T11632] ? fsnotify+0x1280/0x1340 [ 2129.620569][T11632] ? loop_remove+0xa0/0xa0 [ 2129.624821][T11632] do_vfs_ioctl+0x742/0x1720 [ 2129.629248][T11632] ? ioctl_preallocate+0x250/0x250 [ 2129.634205][T11632] ? __fget+0x407/0x490 [ 2129.638186][T11632] ? fget_many+0x20/0x20 [ 2129.642265][T11632] ? debug_smp_processor_id+0x20/0x20 [ 2129.647474][T11632] ? security_file_ioctl+0x7d/0xa0 23:03:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xccc6, '\x00', 0x0, r3, 0x0, 0x3}, 0x48) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x8001, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xccc6, '\x00', 0x0, r3, 0x0, 0x3}, 0x48) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) (async) 23:03:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 50) [ 2129.652421][T11632] __x64_sys_ioctl+0xd4/0x110 [ 2129.656936][T11632] do_syscall_64+0xca/0x1c0 [ 2129.661275][T11632] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2129.667002][T11632] ---[ end trace 55340ab167959367 ]--- 23:03:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (rerun: 32) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%p \x00'}, 0x20) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4b47, 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4203, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) 23:03:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf73a2fa08fa3eea7}, 0x20040011) 23:03:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x800, 0x7}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB="f7995fa110581e68f304858b9e9db3486e44ea37dec2bc4b2c41e7868a6522245d3065ba4598375f8fee5710da275c7d13d5a3f2164bb257aab24fa97678d0678ef2bfd2f545652cad19353047776c6d28403f7a3b7a075461cb67d3816f1fc2d29fb96a0eb78022171597cb011e4ba0859b25e704dfbe60227a563b6ca3dc9ed164ba98f15a622c055fa63ecd9a35b7f7242a348d71f03e1955c7903b4818a77a286af754a1a60590aac42f899b5d4b047fb93189a88dd9869d509bc5b3e52d775078d296c77a479e266a8480a19385ce6727e87460b96c67fa1d561ffa4bfcfd61c0463610039b72a6e28d3e10d5798861df59afd5b1b49a6392e9fe3c489f79a5b7e98aad46fb90f397e3734b68742434ee6c000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%p \x00'}, 0x20) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%p \x00'}, 0x20) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) [ 2129.737866][T11656] FAULT_INJECTION: forcing a failure. [ 2129.737866][T11656] name failslab, interval 1, probability 0, space 0, times 0 [ 2129.760051][T11656] CPU: 0 PID: 11656 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2129.771489][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2129.781378][T11656] Call Trace: [ 2129.784527][T11656] dump_stack+0x1d8/0x241 [ 2129.788677][T11656] ? panic+0x896/0x896 [ 2129.792616][T11656] ? idr_alloc_cyclic+0x369/0x5d0 [ 2129.797440][T11656] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2129.803081][T11656] ? selinux_path_notify+0x6d0/0x6d0 [ 2129.808200][T11656] should_fail+0x71f/0x880 [ 2129.812466][T11656] ? setup_fault_attr+0x3d0/0x3d0 [ 2129.817312][T11656] ? security_kernfs_init_security+0x75/0x90 [ 2129.823137][T11656] ? __kernfs_new_node+0xdb/0x6e0 [ 2129.827997][T11656] should_failslab+0x5/0x20 [ 2129.832333][T11656] kmem_cache_alloc+0x28/0x250 [ 2129.836928][T11656] __kernfs_new_node+0xdb/0x6e0 [ 2129.841614][T11656] ? kernfs_new_node+0x160/0x160 [ 2129.846393][T11656] ? kernfs_activate+0x2fe/0x320 [ 2129.851167][T11656] ? mutex_unlock+0x18/0x40 [ 2129.855505][T11656] ? kernfs_add_one+0x49a/0x5b0 [ 2129.860187][T11656] kernfs_create_dir_ns+0x90/0x220 [ 2129.865139][T11656] internal_create_group+0x2c2/0xf00 [ 2129.870258][T11656] ? sysfs_create_group+0x20/0x20 [ 2129.875114][T11656] ? device_create_file+0xea/0x1b0 [ 2129.880069][T11656] ? bus_add_device+0x92/0x3f0 [ 2129.884662][T11656] dpm_sysfs_add+0x65/0x270 [ 2129.889000][T11656] device_add+0x536/0xbb0 [ 2129.893171][T11656] device_create_vargs+0x1b9/0x210 [ 2129.898116][T11656] device_create+0xea/0x130 [ 2129.902454][T11656] ? device_create_vargs+0x210/0x210 [ 2129.907573][T11656] ? memset+0x1f/0x40 [ 2129.911396][T11656] ? number+0xd53/0x1000 [ 2129.915472][T11656] bdi_register_va+0x84/0x610 [ 2129.919988][T11656] bdi_register+0xd1/0x120 [ 2129.924242][T11656] ? __device_add_disk+0x551/0x1220 [ 2129.929279][T11656] ? bdi_register_va+0x610/0x610 [ 2129.934053][T11656] ? vsnprintf+0x1b96/0x1c70 [ 2129.938474][T11656] bdi_register_owner+0x55/0xf0 [ 2129.943164][T11656] __device_add_disk+0x5d1/0x1220 [ 2129.948021][T11656] ? device_add_disk+0x30/0x30 [ 2129.952621][T11656] ? vsprintf+0x30/0x30 [ 2129.956610][T11656] ? __alloc_disk_node+0x459/0x5a0 [ 2129.961559][T11656] loop_add+0x573/0x740 [ 2129.965550][T11656] loop_control_ioctl+0x448/0x620 [ 2129.970411][T11656] ? loop_remove+0xa0/0xa0 [ 2129.974667][T11656] ? memset+0x1f/0x40 [ 2129.978480][T11656] ? fsnotify+0x1280/0x1340 [ 2129.982836][T11656] ? loop_remove+0xa0/0xa0 [ 2129.987084][T11656] do_vfs_ioctl+0x742/0x1720 [ 2129.991512][T11656] ? ioctl_preallocate+0x250/0x250 [ 2129.996456][T11656] ? __fget+0x407/0x490 [ 2130.000443][T11656] ? fget_many+0x20/0x20 [ 2130.004539][T11656] ? debug_smp_processor_id+0x20/0x20 [ 2130.009731][T11656] ? security_file_ioctl+0x7d/0xa0 [ 2130.014677][T11656] __x64_sys_ioctl+0xd4/0x110 [ 2130.019193][T11656] do_syscall_64+0xca/0x1c0 [ 2130.023527][T11656] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2130.030662][T11656] ------------[ cut here ]------------ [ 2130.035936][T11656] WARNING: CPU: 0 PID: 11656 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2130.044854][T11656] Modules linked in: [ 2130.048596][T11656] CPU: 0 PID: 11656 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2130.060049][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2130.069950][T11656] RIP: 0010:__device_add_disk+0xea1/0x1220 23:03:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xccc6, '\x00', 0x0, r3, 0x0, 0x3}, 0x48) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x8001, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xccc6, '\x00', 0x0, r3, 0x0, 0x3}, 0x48) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r2) (async) [ 2130.075581][T11656] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2130.095030][T11656] RSP: 0018:ffff8881e2fcfa20 EFLAGS: 00010287 [ 2130.100930][T11656] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2130.108739][T11656] RDX: ffffc90000f45000 RSI: 000000000000c376 RDI: 000000000000c377 [ 2130.116551][T11656] RBP: ffff8881e2fcfb58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2130.124361][T11656] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881ed977000 [ 2130.132169][T11656] R13: dffffc0000000000 R14: ffff8881ed977070 R15: 1ffff1103db2ee9d [ 2130.139983][T11656] FS: 00007f4525bc86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2130.148752][T11656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2130.155169][T11656] CR2: 00007f8d92ce6c98 CR3: 00000001cb6ba000 CR4: 00000000003406b0 [ 2130.162984][T11656] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2130.170787][T11656] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2130.178598][T11656] Call Trace: [ 2130.181734][T11656] ? __warn+0x162/0x250 [ 2130.185721][T11656] ? report_bug+0x3a1/0x4e0 [ 2130.190060][T11656] ? __device_add_disk+0xea1/0x1220 [ 2130.195093][T11656] ? __device_add_disk+0xea1/0x1220 [ 2130.200135][T11656] ? do_invalid_op+0x6e/0x110 [ 2130.204646][T11656] ? invalid_op+0x1e/0x30 [ 2130.208806][T11656] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2130.214446][T11656] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2130.220523][T11656] ? __device_add_disk+0x5dc/0x1220 [ 2130.225558][T11656] ? __device_add_disk+0xea1/0x1220 [ 2130.230589][T11656] ? __device_add_disk+0xea1/0x1220 [ 2130.235625][T11656] ? device_add_disk+0x30/0x30 [ 2130.240223][T11656] ? vsprintf+0x30/0x30 [ 2130.244216][T11656] ? __alloc_disk_node+0x459/0x5a0 [ 2130.249164][T11656] loop_add+0x573/0x740 [ 2130.253167][T11656] loop_control_ioctl+0x448/0x620 [ 2130.258022][T11656] ? loop_remove+0xa0/0xa0 [ 2130.262279][T11656] ? memset+0x1f/0x40 [ 2130.266087][T11656] ? fsnotify+0x1280/0x1340 [ 2130.270427][T11656] ? loop_remove+0xa0/0xa0 [ 2130.274684][T11656] do_vfs_ioctl+0x742/0x1720 [ 2130.279106][T11656] ? ioctl_preallocate+0x250/0x250 [ 2130.284055][T11656] ? __fget+0x407/0x490 23:03:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 51) 23:03:11 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2130.288044][T11656] ? fget_many+0x20/0x20 [ 2130.292124][T11656] ? debug_smp_processor_id+0x20/0x20 [ 2130.297333][T11656] ? security_file_ioctl+0x7d/0xa0 [ 2130.302279][T11656] __x64_sys_ioctl+0xd4/0x110 [ 2130.306808][T11656] do_syscall_64+0xca/0x1c0 [ 2130.311138][T11656] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2130.316872][T11656] ---[ end trace 55340ab167959368 ]--- 23:03:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf73a2fa08fa3eea7}, 0x20040011) 23:03:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa482, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2130.441205][T10590] udevd[10590]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2130.451351][T11699] FAULT_INJECTION: forcing a failure. [ 2130.451351][T11699] name failslab, interval 1, probability 0, space 0, times 0 [ 2130.466630][T11699] CPU: 0 PID: 11699 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2130.478052][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2130.487940][T11699] Call Trace: [ 2130.491074][T11699] dump_stack+0x1d8/0x241 [ 2130.495240][T11699] ? panic+0x896/0x896 [ 2130.499138][T11699] ? mutex_unlock+0x18/0x40 [ 2130.503480][T11699] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2130.509126][T11699] ? selinux_kernfs_init_security+0x14e/0x730 [ 2130.515025][T11699] ? idr_alloc_cyclic+0x369/0x5d0 [ 2130.519885][T11699] should_fail+0x71f/0x880 [ 2130.524137][T11699] ? setup_fault_attr+0x3d0/0x3d0 [ 2130.528995][T11699] ? _raw_spin_lock+0xa4/0x1b0 [ 2130.533605][T11699] ? __kernfs_new_node+0xdb/0x6e0 [ 2130.538465][T11699] should_failslab+0x5/0x20 [ 2130.542806][T11699] kmem_cache_alloc+0x28/0x250 [ 2130.547400][T11699] __kernfs_new_node+0xdb/0x6e0 [ 2130.552097][T11699] ? kernfs_new_node+0x160/0x160 [ 2130.556866][T11699] ? mutex_lock+0xa5/0x110 [ 2130.561114][T11699] ? mutex_trylock+0xa0/0xa0 [ 2130.565537][T11699] ? kernfs_activate+0x2fe/0x320 [ 2130.570307][T11699] kernfs_new_node+0x95/0x160 [ 2130.574823][T11699] __kernfs_create_file+0x45/0x260 [ 2130.579775][T11699] sysfs_add_file_mode_ns+0x292/0x340 [ 2130.584978][T11699] sysfs_merge_group+0x1fe/0x450 [ 2130.589751][T11699] ? sysfs_remove_groups+0xa0/0xa0 [ 2130.594697][T11699] ? device_create_file+0xea/0x1b0 [ 2130.599642][T11699] ? bus_add_device+0x92/0x3f0 [ 2130.604242][T11699] dpm_sysfs_add+0xcf/0x270 [ 2130.608588][T11699] device_add+0x536/0xbb0 [ 2130.612752][T11699] device_create_vargs+0x1b9/0x210 [ 2130.617699][T11699] device_create+0xea/0x130 [ 2130.622036][T11699] ? device_create_vargs+0x210/0x210 [ 2130.627156][T11699] ? memset+0x1f/0x40 [ 2130.630977][T11699] ? number+0xd53/0x1000 [ 2130.635057][T11699] bdi_register_va+0x84/0x610 [ 2130.639567][T11699] bdi_register+0xd1/0x120 [ 2130.643828][T11699] ? __device_add_disk+0x551/0x1220 [ 2130.648854][T11699] ? bdi_register_va+0x610/0x610 [ 2130.653626][T11699] ? vsnprintf+0x1b96/0x1c70 [ 2130.658055][T11699] bdi_register_owner+0x55/0xf0 [ 2130.662744][T11699] __device_add_disk+0x5d1/0x1220 [ 2130.667610][T11699] ? device_add_disk+0x30/0x30 [ 2130.672199][T11699] ? vsprintf+0x30/0x30 [ 2130.676191][T11699] ? __alloc_disk_node+0x459/0x5a0 [ 2130.681143][T11699] loop_add+0x573/0x740 [ 2130.685138][T11699] loop_control_ioctl+0x448/0x620 [ 2130.689992][T11699] ? loop_remove+0xa0/0xa0 [ 2130.694248][T11699] ? memset+0x1f/0x40 [ 2130.698069][T11699] ? fsnotify+0x1280/0x1340 [ 2130.702407][T11699] ? loop_remove+0xa0/0xa0 [ 2130.706659][T11699] do_vfs_ioctl+0x742/0x1720 [ 2130.711085][T11699] ? ioctl_preallocate+0x250/0x250 [ 2130.716116][T11699] ? __fget+0x407/0x490 [ 2130.720116][T11699] ? fget_many+0x20/0x20 [ 2130.724189][T11699] ? debug_smp_processor_id+0x20/0x20 [ 2130.729396][T11699] ? security_file_ioctl+0x7d/0xa0 [ 2130.734348][T11699] __x64_sys_ioctl+0xd4/0x110 23:03:12 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xff}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) [ 2130.738859][T11699] do_syscall_64+0xca/0x1c0 [ 2130.743206][T11699] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2130.751441][T11699] ------------[ cut here ]------------ [ 2130.756720][T11699] WARNING: CPU: 0 PID: 11699 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2130.765637][T11699] Modules linked in: [ 2130.769382][T11699] CPU: 0 PID: 11699 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2130.780826][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2130.790730][T11699] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2130.796363][T11699] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2130.815810][T11699] RSP: 0018:ffff8881e155fa20 EFLAGS: 00010287 [ 2130.821715][T11699] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2130.829513][T11699] RDX: ffffc90000f45000 RSI: 000000000000ccea RDI: 000000000000cceb [ 2130.837324][T11699] RBP: ffff8881e155fb58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2130.845138][T11699] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881d01aa000 [ 2130.852947][T11699] R13: dffffc0000000000 R14: ffff8881d01aa070 R15: 1ffff1103a03549d [ 2130.860761][T11699] FS: 00007f4525bc86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2130.869524][T11699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2130.875945][T11699] CR2: 00005555570a8818 CR3: 00000001cb6ba000 CR4: 00000000003406b0 [ 2130.883762][T11699] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2130.891569][T11699] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2130.899378][T11699] Call Trace: [ 2130.902515][T11699] ? __warn+0x162/0x250 [ 2130.906499][T11699] ? report_bug+0x3a1/0x4e0 [ 2130.910839][T11699] ? __device_add_disk+0xea1/0x1220 [ 2130.915874][T11699] ? __device_add_disk+0xea1/0x1220 [ 2130.920912][T11699] ? do_invalid_op+0x6e/0x110 [ 2130.925421][T11699] ? invalid_op+0x1e/0x30 [ 2130.929592][T11699] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2130.935229][T11699] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2130.941304][T11699] ? __device_add_disk+0x5dc/0x1220 [ 2130.946337][T11699] ? __device_add_disk+0xea1/0x1220 [ 2130.951382][T11699] ? __device_add_disk+0xea1/0x1220 [ 2130.956404][T11699] ? device_add_disk+0x30/0x30 [ 2130.961003][T11699] ? vsprintf+0x30/0x30 [ 2130.964996][T11699] ? __alloc_disk_node+0x459/0x5a0 [ 2130.969945][T11699] loop_add+0x573/0x740 [ 2130.973939][T11699] loop_control_ioctl+0x448/0x620 [ 2130.978798][T11699] ? loop_remove+0xa0/0xa0 [ 2130.983051][T11699] ? memset+0x1f/0x40 [ 2130.986870][T11699] ? fsnotify+0x1280/0x1340 [ 2130.991214][T11699] ? loop_remove+0xa0/0xa0 [ 2130.995461][T11699] do_vfs_ioctl+0x742/0x1720 [ 2130.999890][T11699] ? ioctl_preallocate+0x250/0x250 [ 2131.004837][T11699] ? __fget+0x407/0x490 [ 2131.008827][T11699] ? fget_many+0x20/0x20 [ 2131.012907][T11699] ? debug_smp_processor_id+0x20/0x20 [ 2131.018113][T11699] ? security_file_ioctl+0x7d/0xa0 [ 2131.023061][T11699] __x64_sys_ioctl+0xd4/0x110 [ 2131.027579][T11699] do_syscall_64+0xca/0x1c0 [ 2131.031913][T11699] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2131.037648][T11699] ---[ end trace 55340ab167959369 ]--- 23:03:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 52) 23:03:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x800, 0x7}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2131.044608][T11699] debugfs: Directory 'loop2' with parent 'block' already present! 23:03:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa482, 0x0) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (rerun: 64) 23:03:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf73a2fa08fa3eea7}, 0x20040011) [ 2131.142435][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2131.152469][T11714] FAULT_INJECTION: forcing a failure. [ 2131.152469][T11714] name failslab, interval 1, probability 0, space 0, times 0 [ 2131.164943][T11714] CPU: 1 PID: 11714 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2131.176297][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2131.186185][T11714] Call Trace: [ 2131.189321][T11714] dump_stack+0x1d8/0x241 [ 2131.193480][T11714] ? panic+0x896/0x896 [ 2131.197384][T11714] ? mutex_unlock+0x18/0x40 [ 2131.201733][T11714] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2131.207367][T11714] ? selinux_kernfs_init_security+0x14e/0x730 [ 2131.213266][T11714] ? idr_alloc_cyclic+0x369/0x5d0 [ 2131.218128][T11714] should_fail+0x71f/0x880 [ 2131.222395][T11714] ? setup_fault_attr+0x3d0/0x3d0 [ 2131.227257][T11714] ? _raw_spin_lock+0xa4/0x1b0 [ 2131.231846][T11714] ? __kernfs_new_node+0xdb/0x6e0 [ 2131.236702][T11714] should_failslab+0x5/0x20 [ 2131.241046][T11714] kmem_cache_alloc+0x28/0x250 [ 2131.245648][T11714] __kernfs_new_node+0xdb/0x6e0 [ 2131.250336][T11714] ? kernfs_new_node+0x160/0x160 [ 2131.255100][T11714] ? mutex_lock+0xa5/0x110 [ 2131.259353][T11714] ? mutex_trylock+0xa0/0xa0 [ 2131.263780][T11714] ? kernfs_activate+0x2fe/0x320 [ 2131.268553][T11714] kernfs_new_node+0x95/0x160 [ 2131.273067][T11714] __kernfs_create_file+0x45/0x260 [ 2131.278022][T11714] sysfs_add_file_mode_ns+0x292/0x340 [ 2131.283222][T11714] sysfs_merge_group+0x1fe/0x450 [ 2131.287997][T11714] ? sysfs_remove_groups+0xa0/0xa0 [ 2131.292954][T11714] ? device_create_file+0xea/0x1b0 [ 2131.297894][T11714] ? bus_add_device+0x92/0x3f0 [ 2131.302490][T11714] dpm_sysfs_add+0xcf/0x270 [ 2131.306829][T11714] device_add+0x536/0xbb0 [ 2131.310994][T11714] device_create_vargs+0x1b9/0x210 [ 2131.315943][T11714] device_create+0xea/0x130 [ 2131.320280][T11714] ? device_create_vargs+0x210/0x210 [ 2131.325403][T11714] ? memset+0x1f/0x40 [ 2131.329226][T11714] ? number+0xd53/0x1000 [ 2131.333301][T11714] bdi_register_va+0x84/0x610 [ 2131.337817][T11714] bdi_register+0xd1/0x120 [ 2131.342067][T11714] ? __device_add_disk+0x551/0x1220 [ 2131.347099][T11714] ? bdi_register_va+0x610/0x610 [ 2131.351874][T11714] ? vsnprintf+0x1b96/0x1c70 [ 2131.356309][T11714] bdi_register_owner+0x55/0xf0 [ 2131.360986][T11714] __device_add_disk+0x5d1/0x1220 [ 2131.365850][T11714] ? device_add_disk+0x30/0x30 [ 2131.370445][T11714] ? vsprintf+0x30/0x30 [ 2131.374441][T11714] ? __alloc_disk_node+0x459/0x5a0 [ 2131.379385][T11714] loop_add+0x573/0x740 [ 2131.383386][T11714] loop_control_ioctl+0x448/0x620 [ 2131.388236][T11714] ? loop_remove+0xa0/0xa0 [ 2131.392493][T11714] ? memset+0x1f/0x40 [ 2131.396307][T11714] ? fsnotify+0x1280/0x1340 [ 2131.400650][T11714] ? loop_remove+0xa0/0xa0 [ 2131.404908][T11714] do_vfs_ioctl+0x742/0x1720 [ 2131.409335][T11714] ? ioctl_preallocate+0x250/0x250 [ 2131.414276][T11714] ? __fget+0x407/0x490 [ 2131.418268][T11714] ? fget_many+0x20/0x20 [ 2131.422347][T11714] ? debug_smp_processor_id+0x20/0x20 [ 2131.427554][T11714] ? security_file_ioctl+0x7d/0xa0 [ 2131.432500][T11714] __x64_sys_ioctl+0xd4/0x110 [ 2131.437018][T11714] do_syscall_64+0xca/0x1c0 [ 2131.441354][T11714] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2131.448875][T11714] ------------[ cut here ]------------ [ 2131.454144][T11714] WARNING: CPU: 1 PID: 11714 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2131.463069][T11714] Modules linked in: [ 2131.466815][T11714] CPU: 1 PID: 11714 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2131.478260][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2131.488163][T11714] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2131.493799][T11714] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2131.513240][T11714] RSP: 0018:ffff8881c96efa20 EFLAGS: 00010283 [ 2131.519140][T11714] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2131.526951][T11714] RDX: ffffc90000f45000 RSI: 000000000000ce0c RDI: 000000000000ce0d [ 2131.534769][T11714] RBP: ffff8881c96efb58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2131.542575][T11714] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881e7910000 [ 2131.550390][T11714] R13: dffffc0000000000 R14: ffff8881e7910070 R15: 1ffff1103cf2209d [ 2131.558195][T11714] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2131.566962][T11714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2131.573383][T11714] CR2: 00007f7fef0d8d58 CR3: 00000001cb6ba000 CR4: 00000000003406a0 [ 2131.581204][T11714] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2131.589006][T11714] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2131.596814][T11714] Call Trace: [ 2131.599953][T11714] ? __warn+0x162/0x250 [ 2131.603936][T11714] ? report_bug+0x3a1/0x4e0 [ 2131.608275][T11714] ? __device_add_disk+0xea1/0x1220 [ 2131.613312][T11714] ? __device_add_disk+0xea1/0x1220 [ 2131.618344][T11714] ? do_invalid_op+0x6e/0x110 [ 2131.622859][T11714] ? invalid_op+0x1e/0x30 [ 2131.627023][T11714] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2131.632665][T11714] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2131.638744][T11714] ? __device_add_disk+0x5dc/0x1220 [ 2131.643772][T11714] ? __device_add_disk+0xea1/0x1220 [ 2131.648808][T11714] ? __device_add_disk+0xea1/0x1220 [ 2131.653847][T11714] ? device_add_disk+0x30/0x30 [ 2131.658442][T11714] ? vsprintf+0x30/0x30 [ 2131.662432][T11714] ? __alloc_disk_node+0x459/0x5a0 [ 2131.667381][T11714] loop_add+0x573/0x740 [ 2131.671382][T11714] loop_control_ioctl+0x448/0x620 [ 2131.676234][T11714] ? loop_remove+0xa0/0xa0 [ 2131.680490][T11714] ? memset+0x1f/0x40 [ 2131.684304][T11714] ? fsnotify+0x1280/0x1340 [ 2131.688645][T11714] ? loop_remove+0xa0/0xa0 23:03:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 53) [ 2131.692897][T11714] do_vfs_ioctl+0x742/0x1720 [ 2131.697324][T11714] ? ioctl_preallocate+0x250/0x250 [ 2131.702273][T11714] ? __fget+0x407/0x490 [ 2131.706261][T11714] ? fget_many+0x20/0x20 [ 2131.710342][T11714] ? debug_smp_processor_id+0x20/0x20 [ 2131.715550][T11714] ? security_file_ioctl+0x7d/0xa0 [ 2131.720499][T11714] __x64_sys_ioctl+0xd4/0x110 [ 2131.725010][T11714] do_syscall_64+0xca/0x1c0 [ 2131.729349][T11714] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2131.735078][T11714] ---[ end trace 55340ab16795936a ]--- 23:03:13 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) 23:03:13 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa482, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:13 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xff}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) 23:03:13 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) 23:03:13 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x800, 0x7}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2131.771257][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2131.793948][T11731] FAULT_INJECTION: forcing a failure. [ 2131.793948][T11731] name failslab, interval 1, probability 0, space 0, times 0 [ 2131.808840][T11731] CPU: 1 PID: 11731 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2131.820260][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2131.830159][T11731] Call Trace: [ 2131.833296][T11731] dump_stack+0x1d8/0x241 [ 2131.837444][T11731] ? panic+0x896/0x896 [ 2131.841353][T11731] ? mutex_unlock+0x18/0x40 [ 2131.845690][T11731] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2131.851333][T11731] ? selinux_kernfs_init_security+0x14e/0x730 [ 2131.857243][T11731] ? idr_alloc_cyclic+0x369/0x5d0 [ 2131.862098][T11731] should_fail+0x71f/0x880 [ 2131.866348][T11731] ? setup_fault_attr+0x3d0/0x3d0 [ 2131.871210][T11731] ? _raw_spin_lock+0xa4/0x1b0 [ 2131.875810][T11731] ? __kernfs_new_node+0xdb/0x6e0 [ 2131.880667][T11731] should_failslab+0x5/0x20 [ 2131.885009][T11731] kmem_cache_alloc+0x28/0x250 [ 2131.889605][T11731] __kernfs_new_node+0xdb/0x6e0 [ 2131.894294][T11731] ? kernfs_new_node+0x160/0x160 [ 2131.899073][T11731] ? mutex_lock+0xa5/0x110 [ 2131.903319][T11731] ? mutex_trylock+0xa0/0xa0 [ 2131.907746][T11731] ? kernfs_activate+0x2fe/0x320 [ 2131.912529][T11731] kernfs_new_node+0x95/0x160 [ 2131.917034][T11731] __kernfs_create_file+0x45/0x260 [ 2131.921981][T11731] sysfs_add_file_mode_ns+0x292/0x340 [ 2131.927189][T11731] sysfs_merge_group+0x1fe/0x450 [ 2131.931962][T11731] ? sysfs_remove_groups+0xa0/0xa0 [ 2131.936906][T11731] ? device_create_file+0xea/0x1b0 [ 2131.941859][T11731] ? bus_add_device+0x92/0x3f0 [ 2131.946454][T11731] dpm_sysfs_add+0xcf/0x270 [ 2131.950793][T11731] device_add+0x536/0xbb0 [ 2131.954960][T11731] device_create_vargs+0x1b9/0x210 [ 2131.959907][T11731] device_create+0xea/0x130 [ 2131.964361][T11731] ? device_create_vargs+0x210/0x210 [ 2131.969483][T11731] ? memset+0x1f/0x40 [ 2131.973295][T11731] ? number+0xd53/0x1000 [ 2131.977370][T11731] bdi_register_va+0x84/0x610 [ 2131.981887][T11731] bdi_register+0xd1/0x120 [ 2131.986139][T11731] ? __device_add_disk+0x551/0x1220 [ 2131.991171][T11731] ? bdi_register_va+0x610/0x610 [ 2131.995946][T11731] ? vsnprintf+0x1b96/0x1c70 [ 2132.000378][T11731] bdi_register_owner+0x55/0xf0 [ 2132.005060][T11731] __device_add_disk+0x5d1/0x1220 [ 2132.009920][T11731] ? device_add_disk+0x30/0x30 [ 2132.014522][T11731] ? vsprintf+0x30/0x30 [ 2132.018510][T11731] ? __alloc_disk_node+0x459/0x5a0 [ 2132.023464][T11731] loop_add+0x573/0x740 [ 2132.027451][T11731] loop_control_ioctl+0x448/0x620 [ 2132.032312][T11731] ? loop_remove+0xa0/0xa0 [ 2132.036567][T11731] ? memset+0x1f/0x40 [ 2132.040381][T11731] ? fsnotify+0x1280/0x1340 [ 2132.044721][T11731] ? loop_remove+0xa0/0xa0 [ 2132.048982][T11731] do_vfs_ioctl+0x742/0x1720 [ 2132.053409][T11731] ? ioctl_preallocate+0x250/0x250 [ 2132.058348][T11731] ? __fget+0x407/0x490 [ 2132.062343][T11731] ? fget_many+0x20/0x20 [ 2132.066419][T11731] ? debug_smp_processor_id+0x20/0x20 23:03:13 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2132.071649][T11731] ? security_file_ioctl+0x7d/0xa0 [ 2132.076583][T11731] __x64_sys_ioctl+0xd4/0x110 [ 2132.081098][T11731] do_syscall_64+0xca/0x1c0 [ 2132.085428][T11731] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2132.095077][T11731] ------------[ cut here ]------------ [ 2132.100350][T11731] WARNING: CPU: 0 PID: 11731 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2132.109277][T11731] Modules linked in: [ 2132.113013][T11731] CPU: 0 PID: 11731 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2132.124474][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2132.134367][T11731] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2132.140003][T11731] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2132.159444][T11731] RSP: 0018:ffff8881e521fa20 EFLAGS: 00010283 [ 2132.165349][T11731] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2132.173156][T11731] RDX: ffffc90000f45000 RSI: 000000000000cf1e RDI: 000000000000cf1f [ 2132.180969][T11731] RBP: ffff8881e521fb58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2132.188778][T11731] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881f0f54000 [ 2132.196592][T11731] R13: dffffc0000000000 R14: ffff8881f0f54070 R15: 1ffff1103e1ea89d [ 2132.204400][T11731] FS: 00007f4525bc86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2132.213168][T11731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2132.219587][T11731] CR2: 00007f57a3a34f78 CR3: 00000001e6bcb000 CR4: 00000000003406b0 [ 2132.227403][T11731] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2132.235211][T11731] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2132.243019][T11731] Call Trace: [ 2132.246155][T11731] ? __warn+0x162/0x250 [ 2132.250145][T11731] ? report_bug+0x3a1/0x4e0 [ 2132.254482][T11731] ? __device_add_disk+0xea1/0x1220 [ 2132.259517][T11731] ? __device_add_disk+0xea1/0x1220 [ 2132.264549][T11731] ? do_invalid_op+0x6e/0x110 [ 2132.269060][T11731] ? invalid_op+0x1e/0x30 [ 2132.273227][T11731] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2132.278869][T11731] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2132.284945][T11731] ? __device_add_disk+0x5dc/0x1220 [ 2132.289978][T11731] ? __device_add_disk+0xea1/0x1220 [ 2132.295014][T11731] ? __device_add_disk+0xea1/0x1220 [ 2132.300049][T11731] ? device_add_disk+0x30/0x30 [ 2132.304647][T11731] ? vsprintf+0x30/0x30 [ 2132.308639][T11731] ? __alloc_disk_node+0x459/0x5a0 [ 2132.313588][T11731] loop_add+0x573/0x740 [ 2132.317581][T11731] loop_control_ioctl+0x448/0x620 [ 2132.322438][T11731] ? loop_remove+0xa0/0xa0 [ 2132.326694][T11731] ? memset+0x1f/0x40 [ 2132.330509][T11731] ? fsnotify+0x1280/0x1340 [ 2132.334851][T11731] ? loop_remove+0xa0/0xa0 [ 2132.339102][T11731] do_vfs_ioctl+0x742/0x1720 [ 2132.343533][T11731] ? ioctl_preallocate+0x250/0x250 [ 2132.348476][T11731] ? __fget+0x407/0x490 [ 2132.352470][T11731] ? fget_many+0x20/0x20 [ 2132.356546][T11731] ? debug_smp_processor_id+0x20/0x20 [ 2132.361755][T11731] ? security_file_ioctl+0x7d/0xa0 [ 2132.366703][T11731] __x64_sys_ioctl+0xd4/0x110 23:03:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 54) [ 2132.371216][T11731] do_syscall_64+0xca/0x1c0 [ 2132.375556][T11731] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2132.381284][T11731] ---[ end trace 55340ab16795936b ]--- 23:03:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x80010, r1, 0x2cdfe000) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9cbe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x54}}, 0x24008080) 23:03:13 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xff}, 0x8) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) 23:03:13 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) [ 2132.421766][T11752] FAULT_INJECTION: forcing a failure. [ 2132.421766][T11752] name failslab, interval 1, probability 0, space 0, times 0 [ 2132.421934][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2132.434392][T11752] CPU: 0 PID: 11752 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2132.454987][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2132.464880][T11752] Call Trace: [ 2132.468017][T11752] dump_stack+0x1d8/0x241 [ 2132.472182][T11752] ? panic+0x896/0x896 [ 2132.476083][T11752] ? mutex_unlock+0x18/0x40 [ 2132.480425][T11752] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2132.486055][T11752] ? selinux_kernfs_init_security+0x14e/0x730 [ 2132.491956][T11752] ? idr_alloc_cyclic+0x369/0x5d0 [ 2132.496821][T11752] should_fail+0x71f/0x880 [ 2132.501070][T11752] ? setup_fault_attr+0x3d0/0x3d0 [ 2132.505930][T11752] ? _raw_spin_lock+0xa4/0x1b0 [ 2132.510530][T11752] ? __kernfs_new_node+0xdb/0x6e0 [ 2132.515388][T11752] should_failslab+0x5/0x20 [ 2132.519732][T11752] kmem_cache_alloc+0x28/0x250 [ 2132.524328][T11752] __kernfs_new_node+0xdb/0x6e0 [ 2132.529019][T11752] ? kernfs_new_node+0x160/0x160 [ 2132.533789][T11752] ? mutex_lock+0xa5/0x110 [ 2132.538039][T11752] ? mutex_trylock+0xa0/0xa0 [ 2132.542469][T11752] ? kernfs_activate+0x2fe/0x320 [ 2132.547241][T11752] kernfs_new_node+0x95/0x160 [ 2132.551753][T11752] __kernfs_create_file+0x45/0x260 [ 2132.556700][T11752] sysfs_add_file_mode_ns+0x292/0x340 [ 2132.561909][T11752] sysfs_merge_group+0x1fe/0x450 [ 2132.566690][T11752] ? sysfs_remove_groups+0xa0/0xa0 [ 2132.571633][T11752] ? device_create_file+0xea/0x1b0 [ 2132.576578][T11752] ? bus_add_device+0x92/0x3f0 [ 2132.581179][T11752] dpm_sysfs_add+0xcf/0x270 [ 2132.585519][T11752] device_add+0x536/0xbb0 [ 2132.589682][T11752] device_create_vargs+0x1b9/0x210 [ 2132.594630][T11752] device_create+0xea/0x130 [ 2132.598968][T11752] ? device_create_vargs+0x210/0x210 [ 2132.604101][T11752] ? memset+0x1f/0x40 [ 2132.607906][T11752] ? number+0xd53/0x1000 [ 2132.611989][T11752] bdi_register_va+0x84/0x610 [ 2132.616513][T11752] bdi_register+0xd1/0x120 [ 2132.620754][T11752] ? __device_add_disk+0x551/0x1220 [ 2132.625791][T11752] ? bdi_register_va+0x610/0x610 [ 2132.630561][T11752] ? vsnprintf+0x1b96/0x1c70 [ 2132.634987][T11752] bdi_register_owner+0x55/0xf0 [ 2132.639675][T11752] __device_add_disk+0x5d1/0x1220 [ 2132.644537][T11752] ? device_add_disk+0x30/0x30 [ 2132.649132][T11752] ? vsprintf+0x30/0x30 [ 2132.653124][T11752] ? __alloc_disk_node+0x459/0x5a0 [ 2132.658074][T11752] loop_add+0x573/0x740 [ 2132.662068][T11752] loop_control_ioctl+0x448/0x620 [ 2132.666926][T11752] ? loop_remove+0xa0/0xa0 [ 2132.671178][T11752] ? memset+0x1f/0x40 [ 2132.675008][T11752] ? fsnotify+0x1280/0x1340 [ 2132.679344][T11752] ? loop_remove+0xa0/0xa0 [ 2132.683592][T11752] do_vfs_ioctl+0x742/0x1720 [ 2132.688022][T11752] ? ioctl_preallocate+0x250/0x250 [ 2132.692963][T11752] ? __fget+0x407/0x490 [ 2132.696961][T11752] ? fget_many+0x20/0x20 [ 2132.701037][T11752] ? debug_smp_processor_id+0x20/0x20 [ 2132.706243][T11752] ? security_file_ioctl+0x7d/0xa0 [ 2132.711191][T11752] __x64_sys_ioctl+0xd4/0x110 [ 2132.715704][T11752] do_syscall_64+0xca/0x1c0 23:03:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd0}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6b66}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r1) [ 2132.720044][T11752] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2132.726809][T11752] ------------[ cut here ]------------ [ 2132.732080][T11752] WARNING: CPU: 1 PID: 11752 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2132.741006][T11752] Modules linked in: [ 2132.744751][T11752] CPU: 1 PID: 11752 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2132.756204][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2132.766096][T11752] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2132.771733][T11752] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2132.791173][T11752] RSP: 0018:ffff8881c96efa20 EFLAGS: 00010246 [ 2132.797071][T11752] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2132.804892][T11752] RDX: ffffc90000f45000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2132.812697][T11752] RBP: ffff8881c96efb58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2132.821025][T11752] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881e8d61000 [ 2132.828837][T11752] R13: dffffc0000000000 R14: ffff8881e8d61070 R15: 1ffff1103d1ac29d [ 2132.836650][T11752] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2132.845414][T11752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2132.851837][T11752] CR2: 00007f57a3a34f78 CR3: 00000001cafad000 CR4: 00000000003406a0 [ 2132.859658][T11752] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2132.867465][T11752] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2132.875274][T11752] Call Trace: [ 2132.878404][T11752] ? __warn+0x162/0x250 [ 2132.882395][T11752] ? report_bug+0x3a1/0x4e0 [ 2132.886741][T11752] ? __device_add_disk+0xea1/0x1220 [ 2132.891764][T11752] ? __device_add_disk+0xea1/0x1220 [ 2132.896797][T11752] ? do_invalid_op+0x6e/0x110 [ 2132.901315][T11752] ? invalid_op+0x1e/0x30 [ 2132.905487][T11752] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2132.911119][T11752] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2132.917323][T11752] ? __device_add_disk+0x5dc/0x1220 [ 2132.922349][T11752] ? __device_add_disk+0xea1/0x1220 [ 2132.927387][T11752] ? __device_add_disk+0xea1/0x1220 [ 2132.932417][T11752] ? device_add_disk+0x30/0x30 [ 2132.937021][T11752] ? vsprintf+0x30/0x30 [ 2132.941013][T11752] ? __alloc_disk_node+0x459/0x5a0 [ 2132.945956][T11752] loop_add+0x573/0x740 [ 2132.949948][T11752] loop_control_ioctl+0x448/0x620 [ 2132.954808][T11752] ? loop_remove+0xa0/0xa0 [ 2132.959061][T11752] ? memset+0x1f/0x40 [ 2132.962885][T11752] ? fsnotify+0x1280/0x1340 [ 2132.967219][T11752] ? loop_remove+0xa0/0xa0 23:03:14 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 55) [ 2132.971472][T11752] do_vfs_ioctl+0x742/0x1720 [ 2132.975900][T11752] ? ioctl_preallocate+0x250/0x250 [ 2132.980852][T11752] ? __fget+0x407/0x490 [ 2132.984839][T11752] ? fget_many+0x20/0x20 [ 2132.988916][T11752] ? debug_smp_processor_id+0x20/0x20 [ 2132.994141][T11752] ? security_file_ioctl+0x7d/0xa0 [ 2132.999073][T11752] __x64_sys_ioctl+0xd4/0x110 [ 2133.003589][T11752] do_syscall_64+0xca/0x1c0 [ 2133.007927][T11752] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2133.013652][T11752] ---[ end trace 55340ab16795936c ]--- 23:03:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x80010, r1, 0x2cdfe000) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9cbe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x54}}, 0x24008080) (async) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9cbe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x54}}, 0x24008080) 23:03:14 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) 23:03:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd0}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6b66}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd0}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6b66}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r1) (async) [ 2133.072062][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2133.074370][T11770] FAULT_INJECTION: forcing a failure. [ 2133.074370][T11770] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.098616][T11770] CPU: 1 PID: 11770 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2133.110040][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 23:03:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd0}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6b66}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd0}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6b66}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r1) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r1) [ 2133.119932][T11770] Call Trace: [ 2133.123068][T11770] dump_stack+0x1d8/0x241 [ 2133.127234][T11770] ? panic+0x896/0x896 [ 2133.131132][T11770] ? mutex_unlock+0x18/0x40 [ 2133.135472][T11770] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2133.141128][T11770] ? selinux_kernfs_init_security+0x14e/0x730 [ 2133.147019][T11770] ? idr_alloc_cyclic+0x369/0x5d0 [ 2133.151881][T11770] should_fail+0x71f/0x880 [ 2133.156136][T11770] ? setup_fault_attr+0x3d0/0x3d0 [ 2133.161007][T11770] ? _raw_spin_lock+0xa4/0x1b0 [ 2133.165602][T11770] ? __kernfs_new_node+0xdb/0x6e0 [ 2133.170462][T11770] should_failslab+0x5/0x20 [ 2133.174792][T11770] kmem_cache_alloc+0x28/0x250 [ 2133.179457][T11770] __kernfs_new_node+0xdb/0x6e0 [ 2133.184083][T11770] ? kernfs_new_node+0x160/0x160 [ 2133.188853][T11770] ? mutex_lock+0xa5/0x110 [ 2133.193102][T11770] ? mutex_trylock+0xa0/0xa0 [ 2133.197532][T11770] ? kernfs_activate+0x2fe/0x320 [ 2133.202301][T11770] kernfs_new_node+0x95/0x160 [ 2133.206816][T11770] __kernfs_create_file+0x45/0x260 [ 2133.211766][T11770] sysfs_add_file_mode_ns+0x292/0x340 [ 2133.216969][T11770] sysfs_merge_group+0x1fe/0x450 [ 2133.221743][T11770] ? sysfs_remove_groups+0xa0/0xa0 [ 2133.226694][T11770] ? device_create_file+0xea/0x1b0 [ 2133.231641][T11770] ? bus_add_device+0x92/0x3f0 [ 2133.236241][T11770] dpm_sysfs_add+0xcf/0x270 [ 2133.240581][T11770] device_add+0x536/0xbb0 [ 2133.244742][T11770] device_create_vargs+0x1b9/0x210 [ 2133.249691][T11770] device_create+0xea/0x130 [ 2133.254029][T11770] ? device_create_vargs+0x210/0x210 [ 2133.259151][T11770] ? memset+0x1f/0x40 [ 2133.262967][T11770] ? number+0xd53/0x1000 [ 2133.267048][T11770] bdi_register_va+0x84/0x610 [ 2133.271563][T11770] bdi_register+0xd1/0x120 [ 2133.275820][T11770] ? __device_add_disk+0x551/0x1220 [ 2133.280848][T11770] ? bdi_register_va+0x610/0x610 [ 2133.285627][T11770] ? vsnprintf+0x1b96/0x1c70 [ 2133.290054][T11770] bdi_register_owner+0x55/0xf0 [ 2133.294734][T11770] __device_add_disk+0x5d1/0x1220 [ 2133.299601][T11770] ? device_add_disk+0x30/0x30 [ 2133.304192][T11770] ? vsprintf+0x30/0x30 [ 2133.308186][T11770] ? __alloc_disk_node+0x459/0x5a0 [ 2133.313136][T11770] loop_add+0x573/0x740 [ 2133.317127][T11770] loop_control_ioctl+0x448/0x620 [ 2133.321997][T11770] ? loop_remove+0xa0/0xa0 [ 2133.326240][T11770] ? memset+0x1f/0x40 [ 2133.330056][T11770] ? fsnotify+0x1280/0x1340 [ 2133.334399][T11770] ? loop_remove+0xa0/0xa0 [ 2133.338649][T11770] do_vfs_ioctl+0x742/0x1720 [ 2133.343097][T11770] ? ioctl_preallocate+0x250/0x250 [ 2133.348029][T11770] ? __fget+0x407/0x490 [ 2133.352020][T11770] ? fget_many+0x20/0x20 [ 2133.356096][T11770] ? debug_smp_processor_id+0x20/0x20 [ 2133.361304][T11770] ? security_file_ioctl+0x7d/0xa0 [ 2133.366259][T11770] __x64_sys_ioctl+0xd4/0x110 23:03:14 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x800, 0x7}) [ 2133.370765][T11770] do_syscall_64+0xca/0x1c0 [ 2133.375107][T11770] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2133.384148][T11770] ------------[ cut here ]------------ [ 2133.389420][T11770] WARNING: CPU: 1 PID: 11770 at block/genhd.c:742 __device_add_disk+0xea1/0x1220 [ 2133.398346][T11770] Modules linked in: [ 2133.402084][T11770] CPU: 1 PID: 11770 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2133.413531][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2133.423436][T11770] RIP: 0010:__device_add_disk+0xea1/0x1220 [ 2133.429070][T11770] Code: ff ff e8 f2 1d 3f ff 0f 0b e9 52 f3 ff ff e8 e6 1d 3f ff 0f 0b 42 80 3c 2b 00 0f 85 ac f8 ff ff e9 af f8 ff ff e8 cf 1d 3f ff <0f> 0b e9 41 f7 ff ff e8 c3 1d 3f ff e9 18 ff ff ff 44 89 f9 80 e1 [ 2133.448513][T11770] RSP: 0018:ffff8881f0717a20 EFLAGS: 00010246 [ 2133.454412][T11770] RAX: ffffffff822525a1 RBX: 00000000fffffff4 RCX: 0000000000040000 [ 2133.462221][T11770] RDX: ffffc90000f45000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2133.470031][T11770] RBP: ffff8881f0717b58 R08: ffffffff82251cdc R09: ffffffff846031dc [ 2133.477846][T11770] R10: ffffffff84800000 R11: dffffc0000000000 R12: ffff8881e70c7000 [ 2133.485657][T11770] R13: dffffc0000000000 R14: ffff8881e70c7070 R15: 1ffff1103ce18e9d [ 2133.493470][T11770] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2133.502232][T11770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2133.508654][T11770] CR2: 00007ffe2d964b98 CR3: 00000001cb31b000 CR4: 00000000003406a0 [ 2133.516468][T11770] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2133.524277][T11770] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2133.532086][T11770] Call Trace: [ 2133.535223][T11770] ? __warn+0x162/0x250 [ 2133.539209][T11770] ? report_bug+0x3a1/0x4e0 [ 2133.543547][T11770] ? __device_add_disk+0xea1/0x1220 [ 2133.548585][T11770] ? __device_add_disk+0xea1/0x1220 [ 2133.553616][T11770] ? do_invalid_op+0x6e/0x110 [ 2133.558129][T11770] ? invalid_op+0x1e/0x30 [ 2133.562297][T11770] ? __irqentry_text_end+0x1fce24/0x1fce24 [ 2133.567935][T11770] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 2133.574018][T11770] ? __device_add_disk+0x5dc/0x1220 [ 2133.579046][T11770] ? __device_add_disk+0xea1/0x1220 [ 2133.584079][T11770] ? __device_add_disk+0xea1/0x1220 [ 2133.589114][T11770] ? device_add_disk+0x30/0x30 [ 2133.593751][T11770] ? vsprintf+0x30/0x30 [ 2133.597705][T11770] ? __alloc_disk_node+0x459/0x5a0 [ 2133.602658][T11770] loop_add+0x573/0x740 [ 2133.606647][T11770] loop_control_ioctl+0x448/0x620 [ 2133.611509][T11770] ? loop_remove+0xa0/0xa0 [ 2133.615759][T11770] ? memset+0x1f/0x40 [ 2133.619577][T11770] ? fsnotify+0x1280/0x1340 [ 2133.623915][T11770] ? loop_remove+0xa0/0xa0 [ 2133.628169][T11770] do_vfs_ioctl+0x742/0x1720 [ 2133.632596][T11770] ? ioctl_preallocate+0x250/0x250 [ 2133.637543][T11770] ? __fget+0x407/0x490 [ 2133.641534][T11770] ? fget_many+0x20/0x20 [ 2133.645620][T11770] ? debug_smp_processor_id+0x20/0x20 [ 2133.650821][T11770] ? security_file_ioctl+0x7d/0xa0 [ 2133.655769][T11770] __x64_sys_ioctl+0xd4/0x110 [ 2133.660284][T11770] do_syscall_64+0xca/0x1c0 [ 2133.664621][T11770] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 56) 23:03:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r1}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1e, 0xe000}, @window={0x3, 0x81, 0x3}, @window={0x3, 0x0, 0x3f}], 0x3) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32, @ANYBLOB="0c0006000300000104000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 23:03:15 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x80010, r1, 0x2cdfe000) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9cbe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x54}}, 0x24008080) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x80010, r1, 0x2cdfe000) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9cbe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x54}}, 0x24008080) (async) 23:03:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff8bdb}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="10373a4b04e3"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:15 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) 23:03:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r1}, 0x18) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1e, 0xe000}, @window={0x3, 0x81, 0x3}, @window={0x3, 0x0, 0x3f}], 0x3) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32, @ANYBLOB="0c0006000300000104000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) [ 2133.670348][T11770] ---[ end trace 55340ab16795936d ]--- [ 2133.680067][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2133.712274][T11805] FAULT_INJECTION: forcing a failure. [ 2133.712274][T11805] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.725635][T11805] CPU: 0 PID: 11805 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2133.737063][T11805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2133.746952][T11805] Call Trace: [ 2133.750087][T11805] dump_stack+0x1d8/0x241 [ 2133.754246][T11805] ? panic+0x896/0x896 [ 2133.758150][T11805] ? bdi_register_owner+0x55/0xf0 [ 2133.763020][T11805] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2133.768655][T11805] ? do_vfs_ioctl+0x742/0x1720 [ 2133.773254][T11805] ? do_syscall_64+0xca/0x1c0 [ 2133.777765][T11805] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2133.783672][T11805] should_fail+0x71f/0x880 [ 2133.787921][T11805] ? setup_fault_attr+0x3d0/0x3d0 [ 2133.792782][T11805] ? kobject_get_path+0xb3/0x190 [ 2133.797554][T11805] should_failslab+0x5/0x20 [ 2133.801894][T11805] __kmalloc+0x51/0x2e0 [ 2133.805888][T11805] kobject_get_path+0xb3/0x190 [ 2133.810486][T11805] kobject_uevent_env+0x286/0x710 [ 2133.815346][T11805] device_add+0x797/0xbb0 [ 2133.819515][T11805] device_create_vargs+0x1b9/0x210 [ 2133.824471][T11805] device_create+0xea/0x130 [ 2133.828813][T11805] ? device_create_vargs+0x210/0x210 [ 2133.833922][T11805] ? memset+0x1f/0x40 [ 2133.837739][T11805] ? number+0xd53/0x1000 [ 2133.841822][T11805] bdi_register_va+0x84/0x610 [ 2133.846349][T11805] bdi_register+0xd1/0x120 [ 2133.850717][T11805] ? __device_add_disk+0x551/0x1220 [ 2133.855742][T11805] ? bdi_register_va+0x610/0x610 [ 2133.860526][T11805] ? vsnprintf+0x1b96/0x1c70 [ 2133.864942][T11805] bdi_register_owner+0x55/0xf0 [ 2133.869634][T11805] __device_add_disk+0x5d1/0x1220 [ 2133.874489][T11805] ? device_add_disk+0x30/0x30 [ 2133.879087][T11805] ? vsprintf+0x30/0x30 [ 2133.883081][T11805] ? __alloc_disk_node+0x459/0x5a0 [ 2133.888033][T11805] loop_add+0x573/0x740 [ 2133.892021][T11805] loop_control_ioctl+0x448/0x620 [ 2133.896879][T11805] ? loop_remove+0xa0/0xa0 [ 2133.901134][T11805] ? memset+0x1f/0x40 [ 2133.904950][T11805] ? fsnotify+0x1280/0x1340 [ 2133.909289][T11805] ? loop_remove+0xa0/0xa0 [ 2133.913543][T11805] do_vfs_ioctl+0x742/0x1720 [ 2133.917972][T11805] ? ioctl_preallocate+0x250/0x250 23:03:15 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x800, 0x7}) 23:03:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 57) [ 2133.922916][T11805] ? __fget+0x407/0x490 [ 2133.926912][T11805] ? fget_many+0x20/0x20 [ 2133.930987][T11805] ? debug_smp_processor_id+0x20/0x20 [ 2133.936194][T11805] ? security_file_ioctl+0x7d/0xa0 [ 2133.941141][T11805] __x64_sys_ioctl+0xd4/0x110 [ 2133.945656][T11805] do_syscall_64+0xca/0x1c0 [ 2133.949998][T11805] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:15 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) 23:03:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r1}, 0x18) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1e, 0xe000}, @window={0x3, 0x81, 0x3}, @window={0x3, 0x0, 0x3f}], 0x3) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32, @ANYBLOB="0c0006000300000104000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 23:03:15 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x800, 0x7}) 23:03:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff8bdb}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="10373a4b04e3"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="4eb47179d2f36f7afcd663481f865046a2dff449c1e69bccf0bbf55ed390cbd2f24d1f88d3fe85ee10e8ed78da88ffad9b1e82fdb45f8937b60928dbfc05fc626697e159e6a472b8b8dd7e29424c73172bbf55ba", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2c00c084}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x48) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 2133.981551][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2134.012281][T11824] FAULT_INJECTION: forcing a failure. [ 2134.012281][T11824] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.027084][T11824] CPU: 0 PID: 11824 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2134.038517][T11824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2134.048399][T11824] Call Trace: [ 2134.051536][T11824] dump_stack+0x1d8/0x241 [ 2134.055708][T11824] ? panic+0x896/0x896 [ 2134.059602][T11824] ? bdi_register_owner+0x55/0xf0 [ 2134.064466][T11824] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2134.070103][T11824] ? do_vfs_ioctl+0x742/0x1720 [ 2134.074701][T11824] ? do_syscall_64+0xca/0x1c0 [ 2134.079413][T11824] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2134.085314][T11824] should_fail+0x71f/0x880 [ 2134.089560][T11824] ? setup_fault_attr+0x3d0/0x3d0 [ 2134.094418][T11824] ? kobject_get_path+0xb3/0x190 [ 2134.099190][T11824] should_failslab+0x5/0x20 [ 2134.103532][T11824] __kmalloc+0x51/0x2e0 [ 2134.107530][T11824] kobject_get_path+0xb3/0x190 [ 2134.112123][T11824] kobject_uevent_env+0x286/0x710 [ 2134.116987][T11824] device_add+0x797/0xbb0 [ 2134.121153][T11824] device_create_vargs+0x1b9/0x210 [ 2134.126093][T11824] device_create+0xea/0x130 [ 2134.130434][T11824] ? device_create_vargs+0x210/0x210 [ 2134.135560][T11824] ? memset+0x1f/0x40 [ 2134.139378][T11824] ? number+0xd53/0x1000 [ 2134.143456][T11824] bdi_register_va+0x84/0x610 [ 2134.147970][T11824] bdi_register+0xd1/0x120 [ 2134.152227][T11824] ? __device_add_disk+0x551/0x1220 [ 2134.157256][T11824] ? bdi_register_va+0x610/0x610 [ 2134.162025][T11824] ? vsnprintf+0x1b96/0x1c70 [ 2134.166455][T11824] bdi_register_owner+0x55/0xf0 [ 2134.171138][T11824] __device_add_disk+0x5d1/0x1220 [ 2134.176006][T11824] ? device_add_disk+0x30/0x30 [ 2134.180599][T11824] ? vsprintf+0x30/0x30 [ 2134.184596][T11824] ? __alloc_disk_node+0x459/0x5a0 [ 2134.189538][T11824] loop_add+0x573/0x740 [ 2134.193531][T11824] loop_control_ioctl+0x448/0x620 [ 2134.198391][T11824] ? loop_remove+0xa0/0xa0 [ 2134.202646][T11824] ? memset+0x1f/0x40 [ 2134.206467][T11824] ? fsnotify+0x1280/0x1340 [ 2134.210802][T11824] ? loop_remove+0xa0/0xa0 [ 2134.215055][T11824] do_vfs_ioctl+0x742/0x1720 [ 2134.219483][T11824] ? ioctl_preallocate+0x250/0x250 [ 2134.224428][T11824] ? __fget+0x407/0x490 [ 2134.228422][T11824] ? fget_many+0x20/0x20 23:03:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 58) 23:03:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000003c0)='/dev/loop-control\x00\xfb\xb9\x98\xcd{\'\xabUF:)cSqv\xcf^\xa6\xe5\x14N\xcdm\xd5\"r\xc8\xc3M\x04\xfe\xe5\x10\xe9\xe1\x7f\xbfd\xcc\x9d\xf401\xb0\xa8\xd6\xb5\xd3\xb6/\xf9\x88\xa1!\xc8k\xa1\x80[\x13\xd6\x8c\xc7\xba\xbf\xcbFyA\b\xeb\x8eJ\xf1w\x94\xd5\xe3)\fA\xf4d\r K\xbb\x1fQ\x8c#\v\xc8\xf6\x85\xad\x8c\x10F\xc6h\xbe/\xf6\xa4)L\x89\xc0n\xdbN\xa5!\xa5\x8d\xd6\xac') r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000854}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c81, 0x2) [ 2134.232501][T11824] ? debug_smp_processor_id+0x20/0x20 [ 2134.237709][T11824] ? security_file_ioctl+0x7d/0xa0 [ 2134.242656][T11824] __x64_sys_ioctl+0xd4/0x110 [ 2134.247170][T11824] do_syscall_64+0xca/0x1c0 [ 2134.251509][T11824] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="4eb47179d2f36f7afcd663481f865046a2dff449c1e69bccf0bbf55ed390cbd2f24d1f88d3fe85ee10e8ed78da88ffad9b1e82fdb45f8937b60928dbfc05fc626697e159e6a472b8b8dd7e29424c73172bbf55ba", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2c00c084}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x48) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="4eb47179d2f36f7afcd663481f865046a2dff449c1e69bccf0bbf55ed390cbd2f24d1f88d3fe85ee10e8ed78da88ffad9b1e82fdb45f8937b60928dbfc05fc626697e159e6a472b8b8dd7e29424c73172bbf55ba", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2c00c084}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x48) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) 23:03:15 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r3 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r1) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) 23:03:15 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) [ 2134.282816][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2134.288851][T11851] FAULT_INJECTION: forcing a failure. [ 2134.288851][T11851] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.309753][T11851] CPU: 1 PID: 11851 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2134.321178][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2134.331068][T11851] Call Trace: [ 2134.334200][T11851] dump_stack+0x1d8/0x241 [ 2134.338362][T11851] ? panic+0x896/0x896 [ 2134.342269][T11851] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2134.347913][T11851] should_fail+0x71f/0x880 [ 2134.352165][T11851] ? setup_fault_attr+0x3d0/0x3d0 [ 2134.357022][T11851] ? alloc_uevent_skb+0x74/0x220 [ 2134.361802][T11851] should_failslab+0x5/0x20 [ 2134.366146][T11851] __kmalloc_track_caller+0x4f/0x2b0 [ 2134.371260][T11851] ? kmem_cache_alloc+0xd9/0x250 [ 2134.376028][T11851] ? alloc_uevent_skb+0x74/0x220 [ 2134.380800][T11851] __alloc_skb+0xb4/0x4d0 [ 2134.384968][T11851] alloc_uevent_skb+0x74/0x220 [ 2134.389569][T11851] kobject_uevent_net_broadcast+0x2e3/0x560 [ 2134.395300][T11851] ? kobject_get_path+0x168/0x190 [ 2134.400160][T11851] kobject_uevent_env+0x54d/0x710 [ 2134.405017][T11851] device_add+0x797/0xbb0 [ 2134.409182][T11851] device_create_vargs+0x1b9/0x210 [ 2134.414144][T11851] device_create+0xea/0x130 [ 2134.418475][T11851] ? device_create_vargs+0x210/0x210 [ 2134.423598][T11851] ? memset+0x1f/0x40 [ 2134.427422][T11851] ? number+0xd53/0x1000 [ 2134.431496][T11851] bdi_register_va+0x84/0x610 [ 2134.436006][T11851] bdi_register+0xd1/0x120 [ 2134.440257][T11851] ? __device_add_disk+0x551/0x1220 [ 2134.445293][T11851] ? bdi_register_va+0x610/0x610 [ 2134.450062][T11851] ? vsnprintf+0x1b96/0x1c70 [ 2134.454490][T11851] bdi_register_owner+0x55/0xf0 [ 2134.459176][T11851] __device_add_disk+0x5d1/0x1220 [ 2134.464037][T11851] ? device_add_disk+0x30/0x30 [ 2134.468634][T11851] ? vsprintf+0x30/0x30 [ 2134.472629][T11851] ? __alloc_disk_node+0x459/0x5a0 [ 2134.477577][T11851] loop_add+0x573/0x740 [ 2134.481570][T11851] loop_control_ioctl+0x448/0x620 [ 2134.486430][T11851] ? loop_remove+0xa0/0xa0 [ 2134.490683][T11851] ? memset+0x1f/0x40 [ 2134.494512][T11851] ? fsnotify+0x1280/0x1340 [ 2134.498847][T11851] ? loop_remove+0xa0/0xa0 [ 2134.503096][T11851] do_vfs_ioctl+0x742/0x1720 [ 2134.507522][T11851] ? ioctl_preallocate+0x250/0x250 [ 2134.512477][T11851] ? __fget+0x407/0x490 [ 2134.516461][T11851] ? fget_many+0x20/0x20 [ 2134.520537][T11851] ? debug_smp_processor_id+0x20/0x20 [ 2134.525747][T11851] ? security_file_ioctl+0x7d/0xa0 23:03:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff8bdb}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="10373a4b04e3"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002b000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff8bdb}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="10373a4b04e3"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) 23:03:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) (rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="4eb47179d2f36f7afcd663481f865046a2dff449c1e69bccf0bbf55ed390cbd2f24d1f88d3fe85ee10e8ed78da88ffad9b1e82fdb45f8937b60928dbfc05fc626697e159e6a472b8b8dd7e29424c73172bbf55ba", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2c00c084}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x2) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x48) (async, rerun: 32) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 23:03:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 59) [ 2134.530703][T11851] __x64_sys_ioctl+0xd4/0x110 [ 2134.535213][T11851] do_syscall_64+0xca/0x1c0 [ 2134.539550][T11851] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000003c0)='/dev/loop-control\x00\xfb\xb9\x98\xcd{\'\xabUF:)cSqv\xcf^\xa6\xe5\x14N\xcdm\xd5\"r\xc8\xc3M\x04\xfe\xe5\x10\xe9\xe1\x7f\xbfd\xcc\x9d\xf401\xb0\xa8\xd6\xb5\xd3\xb6/\xf9\x88\xa1!\xc8k\xa1\x80[\x13\xd6\x8c\xc7\xba\xbf\xcbFyA\b\xeb\x8eJ\xf1w\x94\xd5\xe3)\fA\xf4d\r K\xbb\x1fQ\x8c#\v\xc8\xf6\x85\xad\x8c\x10F\xc6h\xbe/\xf6\xa4)L\x89\xc0n\xdbN\xa5!\xa5\x8d\xd6\xac') (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000854}, 0x10) (async, rerun: 64) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$LOOP_CTL_ADD(r6, 0x4c81, 0x2) 23:03:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = socket(0x8, 0x80000, 0x6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x600c42, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x3, 0x4, 0x2) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) 23:03:15 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r3 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r1) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) [ 2134.592186][ T1788] udevd[1788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 2134.605113][T11880] FAULT_INJECTION: forcing a failure. [ 2134.605113][T11880] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.619379][T11880] CPU: 0 PID: 11880 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2134.630806][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2134.640694][T11880] Call Trace: [ 2134.643829][T11880] dump_stack+0x1d8/0x241 [ 2134.647991][T11880] ? panic+0x896/0x896 [ 2134.651906][T11880] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2134.657544][T11880] ? vsnprintf+0x1c70/0x1c70 [ 2134.661967][T11880] ? do_vfs_ioctl+0x742/0x1720 [ 2134.666569][T11880] should_fail+0x71f/0x880 [ 2134.670815][T11880] ? string+0x29e/0x2f0 [ 2134.674812][T11880] ? setup_fault_attr+0x3d0/0x3d0 [ 2134.679668][T11880] ? skb_clone+0x1c0/0x360 [ 2134.683930][T11880] should_failslab+0x5/0x20 [ 2134.688302][T11880] kmem_cache_alloc+0x28/0x250 [ 2134.692866][T11880] skb_clone+0x1c0/0x360 [ 2134.696954][T11880] ? netlink_broadcast_filtered+0x679/0x1280 [ 2134.702766][T11880] netlink_broadcast_filtered+0x687/0x1280 [ 2134.708398][T11880] netlink_broadcast+0x35/0x50 [ 2134.712998][T11880] kobject_uevent_net_broadcast+0x375/0x560 [ 2134.718726][T11880] kobject_uevent_env+0x54d/0x710 [ 2134.723587][T11880] device_add+0x797/0xbb0 [ 2134.727756][T11880] device_create_vargs+0x1b9/0x210 [ 2134.732709][T11880] device_create+0xea/0x130 [ 2134.737043][T11880] ? device_create_vargs+0x210/0x210 [ 2134.742162][T11880] ? memset+0x1f/0x40 [ 2134.745977][T11880] ? number+0xd53/0x1000 [ 2134.750056][T11880] bdi_register_va+0x84/0x610 [ 2134.754573][T11880] bdi_register+0xd1/0x120 [ 2134.758833][T11880] ? __device_add_disk+0x551/0x1220 [ 2134.763857][T11880] ? bdi_register_va+0x610/0x610 [ 2134.768628][T11880] ? vsnprintf+0x1b96/0x1c70 [ 2134.773055][T11880] bdi_register_owner+0x55/0xf0 [ 2134.777757][T11880] __device_add_disk+0x5d1/0x1220 [ 2134.782613][T11880] ? device_add_disk+0x30/0x30 [ 2134.787204][T11880] ? vsprintf+0x30/0x30 [ 2134.791195][T11880] ? __alloc_disk_node+0x459/0x5a0 [ 2134.796143][T11880] loop_add+0x573/0x740 [ 2134.800136][T11880] loop_control_ioctl+0x448/0x620 [ 2134.804995][T11880] ? loop_remove+0xa0/0xa0 [ 2134.809254][T11880] ? memset+0x1f/0x40 [ 2134.813065][T11880] ? fsnotify+0x1280/0x1340 [ 2134.817407][T11880] ? loop_remove+0xa0/0xa0 [ 2134.821658][T11880] do_vfs_ioctl+0x742/0x1720 [ 2134.826090][T11880] ? ioctl_preallocate+0x250/0x250 [ 2134.831031][T11880] ? __fget+0x407/0x490 [ 2134.835031][T11880] ? fget_many+0x20/0x20 23:03:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xb) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xffffffffffff7fff) 23:03:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 60) 23:03:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000003c0)='/dev/loop-control\x00\xfb\xb9\x98\xcd{\'\xabUF:)cSqv\xcf^\xa6\xe5\x14N\xcdm\xd5\"r\xc8\xc3M\x04\xfe\xe5\x10\xe9\xe1\x7f\xbfd\xcc\x9d\xf401\xb0\xa8\xd6\xb5\xd3\xb6/\xf9\x88\xa1!\xc8k\xa1\x80[\x13\xd6\x8c\xc7\xba\xbf\xcbFyA\b\xeb\x8eJ\xf1w\x94\xd5\xe3)\fA\xf4d\r K\xbb\x1fQ\x8c#\v\xc8\xf6\x85\xad\x8c\x10F\xc6h\xbe/\xf6\xa4)L\x89\xc0n\xdbN\xa5!\xa5\x8d\xd6\xac') (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x17, 0x0, 0x101, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000854}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c81, 0x2) [ 2134.839106][T11880] ? debug_smp_processor_id+0x20/0x20 [ 2134.844310][T11880] ? security_file_ioctl+0x7d/0xa0 [ 2134.849258][T11880] __x64_sys_ioctl+0xd4/0x110 [ 2134.853771][T11880] do_syscall_64+0xca/0x1c0 [ 2134.858109][T11880] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:16 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r3 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r1) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) 23:03:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) r1 = socket(0x8, 0x80000, 0x6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x600c42, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x3, 0x4, 0x2) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) (rerun: 64) 23:03:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xb) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xffffffffffff7fff) [ 2134.966159][T11907] FAULT_INJECTION: forcing a failure. [ 2134.966159][T11907] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.985384][T11907] CPU: 1 PID: 11907 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2134.996818][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2135.006711][T11907] Call Trace: [ 2135.009847][T11907] dump_stack+0x1d8/0x241 [ 2135.014010][T11907] ? panic+0x896/0x896 [ 2135.017912][T11907] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2135.023557][T11907] ? check_preemption_disabled+0x153/0x320 [ 2135.029202][T11907] ? debug_smp_processor_id+0x20/0x20 [ 2135.034415][T11907] should_fail+0x71f/0x880 [ 2135.038662][T11907] ? setup_fault_attr+0x3d0/0x3d0 [ 2135.043517][T11907] ? __kasan_slab_free+0x233/0x270 [ 2135.048465][T11907] ? __kasan_slab_free+0x1b5/0x270 [ 2135.053416][T11907] ? kfree+0x123/0x370 [ 2135.057320][T11907] ? kobject_uevent_env+0x346/0x710 [ 2135.062349][T11907] ? device_add+0x797/0xbb0 [ 2135.066693][T11907] ? __d_alloc+0x2a/0x6a0 [ 2135.070856][T11907] should_failslab+0x5/0x20 [ 2135.075203][T11907] kmem_cache_alloc+0x28/0x250 [ 2135.079794][T11907] __d_alloc+0x2a/0x6a0 [ 2135.083788][T11907] d_alloc_parallel+0xe7/0x1310 [ 2135.088479][T11907] ? avc_has_perm_noaudit+0x2f1/0x3d0 [ 2135.093683][T11907] ? avc_denied+0x1d0/0x1d0 [ 2135.098019][T11907] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2135.102971][T11907] ? _raw_spin_lock+0xa4/0x1b0 [ 2135.107577][T11907] ? _raw_spin_trylock_bh+0x190/0x190 [ 2135.112778][T11907] ? selinux_inode_permission+0x380/0x6a0 [ 2135.118330][T11907] ? selinux_inode_permission+0x454/0x6a0 [ 2135.123891][T11907] __lookup_slow+0x156/0x460 [ 2135.128317][T11907] ? lookup_one_len+0x2c0/0x2c0 [ 2135.133001][T11907] lookup_one_len+0x180/0x2c0 [ 2135.137513][T11907] ? lookup_one_len_common+0x450/0x450 [ 2135.142810][T11907] start_creating+0xec/0x250 [ 2135.147236][T11907] debugfs_create_dir+0x24/0x380 [ 2135.152009][T11907] bdi_register_va+0x245/0x610 [ 2135.156606][T11907] bdi_register+0xd1/0x120 [ 2135.160871][T11907] ? __device_add_disk+0x551/0x1220 [ 2135.165893][T11907] ? bdi_register_va+0x610/0x610 [ 2135.170666][T11907] ? vsnprintf+0x1b96/0x1c70 [ 2135.175096][T11907] bdi_register_owner+0x55/0xf0 [ 2135.179778][T11907] __device_add_disk+0x5d1/0x1220 [ 2135.184643][T11907] ? device_add_disk+0x30/0x30 [ 2135.189237][T11907] ? vsprintf+0x30/0x30 [ 2135.193231][T11907] ? __alloc_disk_node+0x459/0x5a0 [ 2135.198181][T11907] loop_add+0x573/0x740 [ 2135.202174][T11907] loop_control_ioctl+0x448/0x620 [ 2135.207030][T11907] ? loop_remove+0xa0/0xa0 [ 2135.211289][T11907] ? memset+0x1f/0x40 [ 2135.215099][T11907] ? fsnotify+0x1280/0x1340 [ 2135.219440][T11907] ? loop_remove+0xa0/0xa0 [ 2135.223694][T11907] do_vfs_ioctl+0x742/0x1720 [ 2135.228122][T11907] ? ioctl_preallocate+0x250/0x250 [ 2135.233071][T11907] ? __fget+0x407/0x490 [ 2135.237061][T11907] ? fget_many+0x20/0x20 [ 2135.241256][T11907] ? debug_smp_processor_id+0x20/0x20 [ 2135.246459][T11907] ? security_file_ioctl+0x7d/0xa0 [ 2135.251411][T11907] __x64_sys_ioctl+0xd4/0x110 [ 2135.255914][T11907] do_syscall_64+0xca/0x1c0 [ 2135.260259][T11907] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 61) 23:03:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1aa41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={0x0, 0x800, 0x7}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:16 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) 23:03:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = socket(0x8, 0x80000, 0x6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x600c42, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x3, 0x4, 0x2) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) 23:03:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0xb) (async, rerun: 32) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xffffffffffff7fff) (rerun: 32) [ 2135.350768][T11926] FAULT_INJECTION: forcing a failure. [ 2135.350768][T11926] name failslab, interval 1, probability 0, space 0, times 0 [ 2135.368050][T11926] CPU: 0 PID: 11926 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2135.379481][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2135.389369][T11926] Call Trace: [ 2135.392502][T11926] dump_stack+0x1d8/0x241 [ 2135.396661][T11926] ? panic+0x896/0x896 [ 2135.400567][T11926] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2135.406209][T11926] ? simple_lookup+0xba/0xf0 [ 2135.410635][T11926] ? __lookup_slow+0x350/0x460 [ 2135.415237][T11926] should_fail+0x71f/0x880 [ 2135.419489][T11926] ? setup_fault_attr+0x3d0/0x3d0 [ 2135.424348][T11926] ? lookup_one_len+0x180/0x2c0 [ 2135.429032][T11926] ? new_inode_pseudo+0x78/0x210 [ 2135.433807][T11926] should_failslab+0x5/0x20 [ 2135.438147][T11926] kmem_cache_alloc+0x28/0x250 [ 2135.442749][T11926] new_inode_pseudo+0x78/0x210 [ 2135.447347][T11926] new_inode+0x25/0x1d0 [ 2135.451339][T11926] ? start_creating+0x15d/0x250 [ 2135.456025][T11926] debugfs_create_dir+0x66/0x380 [ 2135.460803][T11926] bdi_register_va+0x245/0x610 [ 2135.465402][T11926] bdi_register+0xd1/0x120 [ 2135.469653][T11926] ? __device_add_disk+0x551/0x1220 [ 2135.474686][T11926] ? bdi_register_va+0x610/0x610 [ 2135.479460][T11926] ? vsnprintf+0x1b96/0x1c70 [ 2135.483894][T11926] bdi_register_owner+0x55/0xf0 [ 2135.488574][T11926] __device_add_disk+0x5d1/0x1220 [ 2135.493433][T11926] ? device_add_disk+0x30/0x30 [ 2135.498031][T11926] ? vsprintf+0x30/0x30 [ 2135.502025][T11926] ? __alloc_disk_node+0x459/0x5a0 [ 2135.506973][T11926] loop_add+0x573/0x740 [ 2135.510967][T11926] loop_control_ioctl+0x448/0x620 [ 2135.515828][T11926] ? loop_remove+0xa0/0xa0 [ 2135.520080][T11926] ? memset+0x1f/0x40 [ 2135.523897][T11926] ? fsnotify+0x1280/0x1340 [ 2135.528234][T11926] ? loop_remove+0xa0/0xa0 [ 2135.532491][T11926] do_vfs_ioctl+0x742/0x1720 [ 2135.536927][T11926] ? ioctl_preallocate+0x250/0x250 [ 2135.541869][T11926] ? __fget+0x407/0x490 [ 2135.545858][T11926] ? fget_many+0x20/0x20 23:03:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1aa41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1aa41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:16 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x10004400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)=0x0, {0x1a}, &(0x7f0000000140)=""/131, 0x83, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58) syz_open_procfs$namespace(r1, &(0x7f00000012c0)='ns/cgroup\x00') ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f0000002480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002440)={&(0x7f0000001340)={0x10d0, 0x15, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "63840feb3d8686de4e1ab1330c9bf29edd2275eefa80e3a7fa9bb67cc7d82df2af42217b34c6a0b3667ecdfe5fb8259ef98cf6bc43446b06246646d1023cf1584c2e1ee633ecd6a604189e5f190698cf5a98969715283abdfc181f77b374cb143c4b3c701fd5300c360ebef6a8c1b2b433a17c2ea380796f205db608bbf6d94d0a1a091135b0002d103c0d9e18861afa2d67bbf3421fc076fce59806353db0ebbfae"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "cafbe4d485a6399beefa66a3"}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) 23:03:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 62) 23:03:16 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x10004400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)=0x0, {0x1a}, &(0x7f0000000140)=""/131, 0x83, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58) syz_open_procfs$namespace(r1, &(0x7f00000012c0)='ns/cgroup\x00') (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f0000002480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002440)={&(0x7f0000001340)={0x10d0, 0x15, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "63840feb3d8686de4e1ab1330c9bf29edd2275eefa80e3a7fa9bb67cc7d82df2af42217b34c6a0b3667ecdfe5fb8259ef98cf6bc43446b06246646d1023cf1584c2e1ee633ecd6a604189e5f190698cf5a98969715283abdfc181f77b374cb143c4b3c701fd5300c360ebef6a8c1b2b433a17c2ea380796f205db608bbf6d94d0a1a091135b0002d103c0d9e18861afa2d67bbf3421fc076fce59806353db0ebbfae"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "cafbe4d485a6399beefa66a3"}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) 23:03:16 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x10004400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)=0x0, {0x1a}, &(0x7f0000000140)=""/131, 0x83, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58) syz_open_procfs$namespace(r1, &(0x7f00000012c0)='ns/cgroup\x00') ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f0000002480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002440)={&(0x7f0000001340)={0x10d0, 0x15, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "63840feb3d8686de4e1ab1330c9bf29edd2275eefa80e3a7fa9bb67cc7d82df2af42217b34c6a0b3667ecdfe5fb8259ef98cf6bc43446b06246646d1023cf1584c2e1ee633ecd6a604189e5f190698cf5a98969715283abdfc181f77b374cb143c4b3c701fd5300c360ebef6a8c1b2b433a17c2ea380796f205db608bbf6d94d0a1a091135b0002d103c0d9e18861afa2d67bbf3421fc076fce59806353db0ebbfae"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "cafbe4d485a6399beefa66a3"}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) [ 2135.549933][T11926] ? debug_smp_processor_id+0x20/0x20 [ 2135.555140][T11926] ? security_file_ioctl+0x7d/0xa0 [ 2135.560092][T11926] __x64_sys_ioctl+0xd4/0x110 [ 2135.564602][T11926] do_syscall_64+0xca/0x1c0 [ 2135.568940][T11926] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2135.581716][T11926] debugfs: out of free dentries, can not create directory '7:2' 23:03:17 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') setns(r2, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) [ 2135.671571][T11952] FAULT_INJECTION: forcing a failure. [ 2135.671571][T11952] name failslab, interval 1, probability 0, space 0, times 0 [ 2135.700641][T11952] CPU: 0 PID: 11952 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2135.712080][T11952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2135.721972][T11952] Call Trace: [ 2135.725108][T11952] dump_stack+0x1d8/0x241 [ 2135.729266][T11952] ? panic+0x896/0x896 [ 2135.733171][T11952] ? do_vfs_ioctl+0x742/0x1720 [ 2135.737770][T11952] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2135.743419][T11952] should_fail+0x71f/0x880 [ 2135.747667][T11952] ? setup_fault_attr+0x3d0/0x3d0 [ 2135.752528][T11952] ? make_kgid+0x1f2/0x6f0 [ 2135.756781][T11952] ? security_inode_alloc+0x24/0x110 [ 2135.761898][T11952] should_failslab+0x5/0x20 [ 2135.766237][T11952] kmem_cache_alloc+0x28/0x250 [ 2135.770846][T11952] security_inode_alloc+0x24/0x110 [ 2135.775785][T11952] inode_init_always+0x655/0x8a0 [ 2135.780558][T11952] new_inode_pseudo+0x8f/0x210 [ 2135.785160][T11952] new_inode+0x25/0x1d0 [ 2135.789151][T11952] ? start_creating+0x15d/0x250 [ 2135.793842][T11952] debugfs_create_dir+0x66/0x380 [ 2135.798614][T11952] bdi_register_va+0x245/0x610 [ 2135.803211][T11952] bdi_register+0xd1/0x120 [ 2135.807478][T11952] ? __device_add_disk+0x551/0x1220 [ 2135.812502][T11952] ? bdi_register_va+0x610/0x610 [ 2135.817272][T11952] ? vsnprintf+0x1b96/0x1c70 [ 2135.821704][T11952] bdi_register_owner+0x55/0xf0 [ 2135.826385][T11952] __device_add_disk+0x5d1/0x1220 [ 2135.831249][T11952] ? device_add_disk+0x30/0x30 [ 2135.835843][T11952] ? vsprintf+0x30/0x30 [ 2135.839839][T11952] ? __alloc_disk_node+0x459/0x5a0 [ 2135.844788][T11952] loop_add+0x573/0x740 [ 2135.848783][T11952] loop_control_ioctl+0x448/0x620 [ 2135.853638][T11952] ? loop_remove+0xa0/0xa0 [ 2135.857891][T11952] ? memset+0x1f/0x40 [ 2135.861707][T11952] ? fsnotify+0x1280/0x1340 [ 2135.866050][T11952] ? loop_remove+0xa0/0xa0 [ 2135.870317][T11952] do_vfs_ioctl+0x742/0x1720 [ 2135.874733][T11952] ? ioctl_preallocate+0x250/0x250 [ 2135.879676][T11952] ? __fget+0x407/0x490 [ 2135.883670][T11952] ? fget_many+0x20/0x20 [ 2135.887748][T11952] ? debug_smp_processor_id+0x20/0x20 [ 2135.892956][T11952] ? security_file_ioctl+0x7d/0xa0 [ 2135.897899][T11952] __x64_sys_ioctl+0xd4/0x110 [ 2135.902414][T11952] do_syscall_64+0xca/0x1c0 [ 2135.906753][T11952] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2135.916243][T11952] debugfs: out of free dentries, can not create directory '7:2' 23:03:17 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={0x0, 0x800, 0x7}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:17 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000042}, 0x4010800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x81) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:17 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) 23:03:17 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 63) 23:03:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') setns(r2, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) 23:03:17 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000042}, 0x4010800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x81) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000042}, 0x4010800) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x81) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) 23:03:17 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r1, 0x0, r2, 0x4, 0x80000}) [ 2135.985399][T11974] FAULT_INJECTION: forcing a failure. [ 2135.985399][T11974] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2136.019831][T11974] CPU: 1 PID: 11974 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2136.031274][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2136.041165][T11974] Call Trace: [ 2136.044301][T11974] dump_stack+0x1d8/0x241 [ 2136.048464][T11974] ? panic+0x896/0x896 [ 2136.052374][T11974] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2136.058008][T11974] ? stack_trace_save+0x118/0x1c0 [ 2136.062868][T11974] ? stack_trace_snprint+0x170/0x170 [ 2136.067997][T11974] should_fail+0x71f/0x880 [ 2136.072248][T11974] ? setup_fault_attr+0x3d0/0x3d0 [ 2136.077105][T11974] ? __kasan_kmalloc+0x1d9/0x210 [ 2136.081874][T11974] ? remove_wait_queue+0x120/0x120 [ 2136.086825][T11974] ? __kasan_kmalloc+0x171/0x210 [ 2136.091600][T11974] __alloc_pages_nodemask+0x1b4/0x840 [ 2136.096801][T11974] ? __device_add_disk+0x5d1/0x1220 [ 2136.101838][T11974] ? loop_add+0x573/0x740 [ 2136.106003][T11974] ? loop_control_ioctl+0x448/0x620 [ 2136.111038][T11974] ? do_syscall_64+0xca/0x1c0 [ 2136.115559][T11974] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2136.120934][T11974] ? lockref_get+0x184/0x220 [ 2136.125363][T11974] __get_free_pages+0xa/0x30 [ 2136.129788][T11974] selinux_genfs_get_sid+0x54/0x260 [ 2136.134822][T11974] inode_doinit_with_dentry+0x892/0x1050 [ 2136.140289][T11974] ? sb_finish_set_opts+0x770/0x770 [ 2136.145326][T11974] ? current_time+0x1af/0x2f0 [ 2136.149832][T11974] ? atime_needs_update+0x590/0x590 [ 2136.154867][T11974] security_d_instantiate+0x97/0xf0 [ 2136.159898][T11974] d_instantiate+0x51/0x90 [ 2136.164157][T11974] debugfs_create_dir+0x1a2/0x380 [ 2136.169014][T11974] bdi_register_va+0x245/0x610 [ 2136.173617][T11974] bdi_register+0xd1/0x120 [ 2136.177869][T11974] ? __device_add_disk+0x551/0x1220 [ 2136.182905][T11974] ? bdi_register_va+0x610/0x610 [ 2136.187674][T11974] ? vsnprintf+0x1b96/0x1c70 [ 2136.192105][T11974] bdi_register_owner+0x55/0xf0 [ 2136.196788][T11974] __device_add_disk+0x5d1/0x1220 [ 2136.201664][T11974] ? device_add_disk+0x30/0x30 [ 2136.206248][T11974] ? vsprintf+0x30/0x30 [ 2136.210240][T11974] ? __alloc_disk_node+0x459/0x5a0 [ 2136.215190][T11974] loop_add+0x573/0x740 [ 2136.219182][T11974] loop_control_ioctl+0x448/0x620 [ 2136.224038][T11974] ? loop_remove+0xa0/0xa0 [ 2136.228292][T11974] ? memset+0x1f/0x40 [ 2136.232109][T11974] ? fsnotify+0x1280/0x1340 23:03:17 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 64) [ 2136.236449][T11974] ? loop_remove+0xa0/0xa0 [ 2136.240791][T11974] do_vfs_ioctl+0x742/0x1720 [ 2136.245225][T11974] ? ioctl_preallocate+0x250/0x250 [ 2136.250166][T11974] ? __fget+0x407/0x490 [ 2136.254157][T11974] ? fget_many+0x20/0x20 [ 2136.258236][T11974] ? debug_smp_processor_id+0x20/0x20 [ 2136.263444][T11974] ? security_file_ioctl+0x7d/0xa0 [ 2136.268391][T11974] __x64_sys_ioctl+0xd4/0x110 [ 2136.272902][T11974] do_syscall_64+0xca/0x1c0 [ 2136.277242][T11974] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:17 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r1, 0x0, r2, 0x4, 0x80000}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r1, 0x0, r2, 0x4, 0x80000}) (async) 23:03:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') setns(r2, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') (async) setns(r2, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r1) (async) [ 2136.385517][T11994] FAULT_INJECTION: forcing a failure. [ 2136.385517][T11994] name failslab, interval 1, probability 0, space 0, times 0 [ 2136.412993][T11994] CPU: 0 PID: 11994 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2136.424424][T11994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2136.434315][T11994] Call Trace: [ 2136.437450][T11994] dump_stack+0x1d8/0x241 [ 2136.441612][T11994] ? panic+0x896/0x896 [ 2136.445517][T11994] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2136.451160][T11994] ? stack_trace_save+0x1c0/0x1c0 [ 2136.456018][T11994] ? arch_stack_walk+0x105/0x140 [ 2136.460796][T11994] should_fail+0x71f/0x880 [ 2136.465051][T11994] ? setup_fault_attr+0x3d0/0x3d0 [ 2136.469907][T11994] ? stack_trace_snprint+0x170/0x170 [ 2136.475031][T11994] ? __d_alloc+0x2a/0x6a0 [ 2136.479192][T11994] should_failslab+0x5/0x20 [ 2136.483532][T11994] kmem_cache_alloc+0x28/0x250 [ 2136.488138][T11994] __d_alloc+0x2a/0x6a0 [ 2136.492124][T11994] ? __reset_page_owner+0x1f/0x100 [ 2136.497067][T11994] d_alloc_parallel+0xe7/0x1310 [ 2136.501759][T11994] ? security_d_instantiate+0x97/0xf0 [ 2136.506965][T11994] ? d_instantiate+0x51/0x90 [ 2136.511397][T11994] ? debugfs_create_dir+0x1a2/0x380 [ 2136.516427][T11994] ? bdi_register_va+0x245/0x610 [ 2136.521199][T11994] ? bdi_register+0xd1/0x120 [ 2136.525624][T11994] ? bdi_register_owner+0x55/0xf0 [ 2136.530489][T11994] ? avc_has_perm_noaudit+0x2f1/0x3d0 [ 2136.535694][T11994] ? avc_denied+0x1d0/0x1d0 [ 2136.540032][T11994] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2136.544982][T11994] ? selinux_inode_permission+0x380/0x6a0 [ 2136.550536][T11994] ? selinux_inode_permission+0x454/0x6a0 [ 2136.556089][T11994] __lookup_slow+0x156/0x460 [ 2136.560517][T11994] ? lookup_one_len+0x2c0/0x2c0 [ 2136.565206][T11994] lookup_one_len+0x180/0x2c0 [ 2136.569720][T11994] ? lookup_one_len_common+0x450/0x450 [ 2136.575008][T11994] ? up_write+0xa6/0x270 [ 2136.579090][T11994] start_creating+0xec/0x250 [ 2136.583516][T11994] __debugfs_create_file+0x74/0x400 [ 2136.588549][T11994] ? debugfs_create_dir+0x2e7/0x380 [ 2136.593589][T11994] bdi_register_va+0x287/0x610 [ 2136.598182][T11994] bdi_register+0xd1/0x120 [ 2136.602433][T11994] ? __device_add_disk+0x551/0x1220 [ 2136.607474][T11994] ? bdi_register_va+0x610/0x610 [ 2136.612244][T11994] ? vsnprintf+0x1b96/0x1c70 [ 2136.616678][T11994] bdi_register_owner+0x55/0xf0 [ 2136.621358][T11994] __device_add_disk+0x5d1/0x1220 [ 2136.626218][T11994] ? device_add_disk+0x30/0x30 [ 2136.630816][T11994] ? vsprintf+0x30/0x30 [ 2136.634807][T11994] ? __alloc_disk_node+0x459/0x5a0 [ 2136.639754][T11994] loop_add+0x573/0x740 [ 2136.643750][T11994] loop_control_ioctl+0x448/0x620 [ 2136.648608][T11994] ? loop_remove+0xa0/0xa0 [ 2136.652861][T11994] ? memset+0x1f/0x40 [ 2136.656678][T11994] ? fsnotify+0x1280/0x1340 [ 2136.661018][T11994] ? loop_remove+0xa0/0xa0 [ 2136.665275][T11994] do_vfs_ioctl+0x742/0x1720 [ 2136.669702][T11994] ? ioctl_preallocate+0x250/0x250 [ 2136.674644][T11994] ? __fget+0x407/0x490 [ 2136.678637][T11994] ? fget_many+0x20/0x20 [ 2136.682718][T11994] ? debug_smp_processor_id+0x20/0x20 [ 2136.687925][T11994] ? security_file_ioctl+0x7d/0xa0 [ 2136.692872][T11994] __x64_sys_ioctl+0xd4/0x110 [ 2136.697384][T11994] do_syscall_64+0xca/0x1c0 [ 2136.701730][T11994] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:18 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={0x0, 0x800, 0x7}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:18 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) 23:03:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 65) 23:03:18 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r1, 0x0, r2, 0x4, 0x80000}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r1, 0x0, r2, 0x4, 0x80000}) (async) 23:03:18 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r3 = accept4$nfc_llcp(r1, 0x0, &(0x7f00000001c0), 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r5, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) 23:03:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000042}, 0x4010800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x81) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:18 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) r5 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc5c, 0x62}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) [ 2136.811624][T12030] FAULT_INJECTION: forcing a failure. [ 2136.811624][T12030] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2136.851658][T12030] CPU: 0 PID: 12030 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2136.863094][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2136.872989][T12030] Call Trace: [ 2136.876120][T12030] dump_stack+0x1d8/0x241 [ 2136.880398][T12030] ? panic+0x896/0x896 [ 2136.884300][T12030] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2136.889937][T12030] ? stack_trace_save+0x118/0x1c0 [ 2136.894802][T12030] ? stack_trace_snprint+0x170/0x170 [ 2136.899922][T12030] should_fail+0x71f/0x880 [ 2136.904176][T12030] ? setup_fault_attr+0x3d0/0x3d0 [ 2136.909036][T12030] ? __kasan_kmalloc+0x1d9/0x210 [ 2136.913807][T12030] ? remove_wait_queue+0x120/0x120 [ 2136.918756][T12030] ? __kasan_kmalloc+0x171/0x210 [ 2136.923531][T12030] __alloc_pages_nodemask+0x1b4/0x840 [ 2136.928738][T12030] ? __device_add_disk+0x5d1/0x1220 [ 2136.933769][T12030] ? loop_add+0x573/0x740 [ 2136.937937][T12030] ? loop_control_ioctl+0x448/0x620 [ 2136.942969][T12030] ? do_syscall_64+0xca/0x1c0 [ 2136.947486][T12030] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2136.952863][T12030] ? lockref_get+0x184/0x220 [ 2136.957289][T12030] __get_free_pages+0xa/0x30 [ 2136.961720][T12030] selinux_genfs_get_sid+0x54/0x260 [ 2136.966757][T12030] inode_doinit_with_dentry+0x892/0x1050 [ 2136.972224][T12030] ? sb_finish_set_opts+0x770/0x770 [ 2136.977252][T12030] ? current_time+0x1af/0x2f0 [ 2136.981763][T12030] ? atime_needs_update+0x590/0x590 [ 2136.986799][T12030] security_d_instantiate+0x97/0xf0 [ 2136.991833][T12030] d_instantiate+0x51/0x90 [ 2136.996088][T12030] debugfs_create_dir+0x1a2/0x380 [ 2137.000949][T12030] bdi_register_va+0x245/0x610 [ 2137.005549][T12030] bdi_register+0xd1/0x120 [ 2137.009805][T12030] ? __device_add_disk+0x551/0x1220 [ 2137.014835][T12030] ? bdi_register_va+0x610/0x610 [ 2137.019606][T12030] ? vsnprintf+0x1b96/0x1c70 [ 2137.024046][T12030] bdi_register_owner+0x55/0xf0 [ 2137.028726][T12030] __device_add_disk+0x5d1/0x1220 [ 2137.033587][T12030] ? device_add_disk+0x30/0x30 [ 2137.038184][T12030] ? vsprintf+0x30/0x30 [ 2137.042181][T12030] ? __alloc_disk_node+0x459/0x5a0 [ 2137.047125][T12030] loop_add+0x573/0x740 [ 2137.051118][T12030] loop_control_ioctl+0x448/0x620 [ 2137.055973][T12030] ? loop_remove+0xa0/0xa0 [ 2137.060224][T12030] ? memset+0x1f/0x40 [ 2137.064044][T12030] ? fsnotify+0x1280/0x1340 [ 2137.068380][T12030] ? loop_remove+0xa0/0xa0 [ 2137.072633][T12030] do_vfs_ioctl+0x742/0x1720 [ 2137.077070][T12030] ? ioctl_preallocate+0x250/0x250 [ 2137.082015][T12030] ? __fget+0x407/0x490 [ 2137.086004][T12030] ? fget_many+0x20/0x20 [ 2137.090080][T12030] ? debug_smp_processor_id+0x20/0x20 [ 2137.095288][T12030] ? security_file_ioctl+0x7d/0xa0 [ 2137.100236][T12030] __x64_sys_ioctl+0xd4/0x110 [ 2137.104747][T12030] do_syscall_64+0xca/0x1c0 23:03:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 66) 23:03:18 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r3 = accept4$nfc_llcp(r1, 0x0, &(0x7f00000001c0), 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r5, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) [ 2137.109094][T12030] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:18 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={0x0, 0x800, 0x7}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:18 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) (async) r5 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc5c, 0x62}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 23:03:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002a000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) 23:03:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) (async) [ 2137.150813][T12052] FAULT_INJECTION: forcing a failure. [ 2137.150813][T12052] name failslab, interval 1, probability 0, space 0, times 0 [ 2137.180582][T12052] CPU: 1 PID: 12052 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2137.192014][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2137.201911][T12052] Call Trace: [ 2137.205041][T12052] dump_stack+0x1d8/0x241 [ 2137.209209][T12052] ? panic+0x896/0x896 [ 2137.213110][T12052] ? do_vfs_ioctl+0x742/0x1720 [ 2137.217712][T12052] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2137.223355][T12052] should_fail+0x71f/0x880 [ 2137.227604][T12052] ? setup_fault_attr+0x3d0/0x3d0 [ 2137.232464][T12052] ? make_kgid+0x1f2/0x6f0 [ 2137.236717][T12052] ? security_inode_alloc+0x24/0x110 [ 2137.241841][T12052] should_failslab+0x5/0x20 [ 2137.246182][T12052] kmem_cache_alloc+0x28/0x250 [ 2137.250780][T12052] security_inode_alloc+0x24/0x110 [ 2137.255724][T12052] inode_init_always+0x655/0x8a0 [ 2137.260494][T12052] new_inode_pseudo+0x8f/0x210 [ 2137.265095][T12052] new_inode+0x25/0x1d0 [ 2137.269087][T12052] ? start_creating+0x15d/0x250 [ 2137.273774][T12052] __debugfs_create_file+0xb6/0x400 [ 2137.278809][T12052] ? debugfs_create_dir+0x2e7/0x380 [ 2137.283848][T12052] bdi_register_va+0x287/0x610 [ 2137.288442][T12052] bdi_register+0xd1/0x120 [ 2137.292699][T12052] ? __device_add_disk+0x551/0x1220 [ 2137.297728][T12052] ? bdi_register_va+0x610/0x610 [ 2137.302502][T12052] ? vsnprintf+0x1b96/0x1c70 [ 2137.306932][T12052] bdi_register_owner+0x55/0xf0 [ 2137.311617][T12052] __device_add_disk+0x5d1/0x1220 [ 2137.316477][T12052] ? device_add_disk+0x30/0x30 [ 2137.321198][T12052] ? vsprintf+0x30/0x30 [ 2137.325183][T12052] ? __alloc_disk_node+0x459/0x5a0 [ 2137.330134][T12052] loop_add+0x573/0x740 [ 2137.334123][T12052] loop_control_ioctl+0x448/0x620 [ 2137.338981][T12052] ? loop_remove+0xa0/0xa0 [ 2137.343240][T12052] ? memset+0x1f/0x40 [ 2137.347052][T12052] ? fsnotify+0x1280/0x1340 [ 2137.351390][T12052] ? loop_remove+0xa0/0xa0 [ 2137.355644][T12052] do_vfs_ioctl+0x742/0x1720 [ 2137.360079][T12052] ? ioctl_preallocate+0x250/0x250 [ 2137.365027][T12052] ? __fget+0x407/0x490 [ 2137.369012][T12052] ? fget_many+0x20/0x20 [ 2137.373091][T12052] ? debug_smp_processor_id+0x20/0x20 [ 2137.378300][T12052] ? security_file_ioctl+0x7d/0xa0 [ 2137.383247][T12052] __x64_sys_ioctl+0xd4/0x110 [ 2137.387765][T12052] do_syscall_64+0xca/0x1c0 [ 2137.392104][T12052] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 67) 23:03:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002a000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002a000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) (async) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (async) 23:03:18 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r3 = accept4$nfc_llcp(r1, 0x0, &(0x7f00000001c0), 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r5, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) 23:03:18 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={0x0, 0x800, 0x7}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:18 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) (async) r5 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5f}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc5c, 0x62}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) [ 2137.401766][T12052] debugfs: out of free dentries, can not create file 'stats' 23:03:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250200000008002a000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async, rerun: 32) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x2) (rerun: 64) 23:03:18 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) [ 2137.487300][T12076] FAULT_INJECTION: forcing a failure. [ 2137.487300][T12076] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2137.502479][T12076] CPU: 1 PID: 12076 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2137.513909][T12076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2137.523795][T12076] Call Trace: [ 2137.526932][T12076] dump_stack+0x1d8/0x241 [ 2137.531094][T12076] ? panic+0x896/0x896 [ 2137.535006][T12076] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2137.540642][T12076] ? stack_trace_save+0x118/0x1c0 [ 2137.545506][T12076] ? stack_trace_snprint+0x170/0x170 [ 2137.550624][T12076] should_fail+0x71f/0x880 [ 2137.554881][T12076] ? setup_fault_attr+0x3d0/0x3d0 [ 2137.559735][T12076] ? __kasan_kmalloc+0x1d9/0x210 [ 2137.564511][T12076] ? remove_wait_queue+0x120/0x120 [ 2137.569455][T12076] ? __kasan_kmalloc+0x171/0x210 [ 2137.574235][T12076] __alloc_pages_nodemask+0x1b4/0x840 [ 2137.579435][T12076] ? __device_add_disk+0x5d1/0x1220 [ 2137.584473][T12076] ? loop_add+0x573/0x740 [ 2137.588637][T12076] ? loop_control_ioctl+0x448/0x620 [ 2137.593670][T12076] ? do_syscall_64+0xca/0x1c0 [ 2137.598185][T12076] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2137.603569][T12076] ? lockref_get+0x184/0x220 [ 2137.607995][T12076] __get_free_pages+0xa/0x30 [ 2137.612420][T12076] selinux_genfs_get_sid+0x54/0x260 [ 2137.617456][T12076] inode_doinit_with_dentry+0x892/0x1050 [ 2137.622927][T12076] ? sb_finish_set_opts+0x770/0x770 [ 2137.627958][T12076] ? current_time+0x1af/0x2f0 [ 2137.632466][T12076] ? atime_needs_update+0x590/0x590 [ 2137.637501][T12076] security_d_instantiate+0x97/0xf0 [ 2137.642533][T12076] d_instantiate+0x51/0x90 [ 2137.646787][T12076] __debugfs_create_file+0x257/0x400 [ 2137.651911][T12076] bdi_register_va+0x287/0x610 [ 2137.656509][T12076] bdi_register+0xd1/0x120 [ 2137.660760][T12076] ? __device_add_disk+0x551/0x1220 [ 2137.665792][T12076] ? bdi_register_va+0x610/0x610 [ 2137.670566][T12076] ? vsnprintf+0x1b96/0x1c70 [ 2137.674995][T12076] bdi_register_owner+0x55/0xf0 [ 2137.679679][T12076] __device_add_disk+0x5d1/0x1220 [ 2137.684542][T12076] ? device_add_disk+0x30/0x30 [ 2137.689142][T12076] ? vsprintf+0x30/0x30 [ 2137.693138][T12076] ? __alloc_disk_node+0x459/0x5a0 [ 2137.698083][T12076] loop_add+0x573/0x740 [ 2137.702074][T12076] loop_control_ioctl+0x448/0x620 [ 2137.706949][T12076] ? loop_remove+0xa0/0xa0 [ 2137.711193][T12076] ? memset+0x1f/0x40 [ 2137.715003][T12076] ? fsnotify+0x1280/0x1340 [ 2137.719341][T12076] ? loop_remove+0xa0/0xa0 [ 2137.723596][T12076] do_vfs_ioctl+0x742/0x1720 [ 2137.728025][T12076] ? ioctl_preallocate+0x250/0x250 [ 2137.732974][T12076] ? __fget+0x407/0x490 23:03:18 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) 23:03:19 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 68) 23:03:19 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000080)={0x0, 0x800, 0x7}) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:19 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) [ 2137.736964][T12076] ? fget_many+0x20/0x20 [ 2137.741052][T12076] ? debug_smp_processor_id+0x20/0x20 [ 2137.746251][T12076] ? security_file_ioctl+0x7d/0xa0 [ 2137.751196][T12076] __x64_sys_ioctl+0xd4/0x110 [ 2137.755710][T12076] do_syscall_64+0xca/0x1c0 [ 2137.760048][T12076] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:19 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x6, 0x208500) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x2c8, 0x15, 0x400, 0x70bd2b, 0x25dfdbff, {0xb, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "d0d33c7a7f095565c3a8125e871cb26bd8621e07d24ccf3e02d70ff541076e1da60c2989001a056fa97eae9824949b0a9c43a3b74e4540d2f32bd7e0e2202aa848dbcfd5f75d5ccd6d70366eac2ce7e6bce0e7016d85650970e4d85c1f705ea80368337c155307f1b01778e2da566db9c538d6e229748bf57f174333ad8651f71d80ed85712cd15db0737093b6db869bc1956621"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "6fe2cda0f89cf8e5f9b166d8b9e6296474dbdf9f084fde3fc9f7003d49d567d586bde1f203775b7d8e880945d57d1b7c50e9ff7b51fa9426135959099be5c8909dbe946762fe4a3fd586f4d97a2545bf43b78f2eab86850f"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "edd6ede35909ed54c66a16fd513121167af3788a1101984038f8a4d68dc390f8ea368e79ad96391aacc09ccba3be09446e813b05bd1ec89e8e850fdcd234b43a87da9b0f4c8a95dd69b32f008fc584d351e67dcf14e1d695f137c743a3a1bd03fe63f8e913c11b62fda54f2fa6a597d57a12d53ce6d11bf73c96b939c6cb"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "f98d9d48e4b126e41a5717e208f80e725a935e63ba0c"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "4a09172453951f0b2a4a8e532c91b4f64c8f4a427e9b91660ccac50b2ec8090f58ad18a71ee05f22743c4b1f9cf980d2feb43a2091dc041ce13da52567e4756cd72bb2c187d86791eb93b1b899c3ce5930d4"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "cc4f684aae1e739e7ca66a9a6894a627eb4003ec608fbfe9836353561a01c4067df9b702d4d104c148f20ec3067ffad88d31926230e6d4f03791402985a7d9f7b97d222d2fe053115481006d84bb8485710d5c626cc723ecb444a08dbddaa42df008781d9cf3798f6896662e14a176a6682db2464cf80781ab11c27f05c52df4c41cac227c75e499ad8908174454efc103661fb953cc3bb3710b9185aa9597398b876875295b2a0b0edfd9f092843ca63f8ae2167bda7d7ec28077c3503b7bdceb114b"}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x40000003}, 0x2001000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000406}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000044) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) 23:03:19 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) [ 2137.842795][T12101] FAULT_INJECTION: forcing a failure. [ 2137.842795][T12101] name failslab, interval 1, probability 0, space 0, times 0 [ 2137.857229][T12101] CPU: 0 PID: 12101 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2137.868656][T12101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2137.878550][T12101] Call Trace: [ 2137.881683][T12101] dump_stack+0x1d8/0x241 [ 2137.885852][T12101] ? panic+0x896/0x896 [ 2137.889747][T12101] ? check_preemption_disabled+0x9f/0x320 [ 2137.895416][T12101] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2137.901058][T12101] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 2137.905911][T12101] ? debug_smp_processor_id+0x20/0x20 [ 2137.911121][T12101] ? __debugfs_create_file+0x367/0x400 [ 2137.916413][T12101] should_fail+0x71f/0x880 [ 2137.920665][T12101] ? bdi_register_va+0x47d/0x610 [ 2137.925439][T12101] ? setup_fault_attr+0x3d0/0x3d0 [ 2137.930299][T12101] ? bdi_register+0xd1/0x120 [ 2137.934726][T12101] ? __device_add_disk+0x551/0x1220 [ 2137.939757][T12101] ? kobj_map+0x65/0x5a0 [ 2137.943834][T12101] should_failslab+0x5/0x20 [ 2137.948175][T12101] __kmalloc+0x51/0x2e0 [ 2137.952169][T12101] ? vsnprintf+0x1b96/0x1c70 [ 2137.956594][T12101] kobj_map+0x65/0x5a0 [ 2137.960501][T12101] ? disk_check_events+0x600/0x600 [ 2137.965447][T12101] ? exact_match+0x20/0x20 [ 2137.969701][T12101] __device_add_disk+0x65a/0x1220 [ 2137.974560][T12101] ? device_add_disk+0x30/0x30 [ 2137.979161][T12101] ? vsprintf+0x30/0x30 [ 2137.983160][T12101] ? __alloc_disk_node+0x459/0x5a0 [ 2137.988117][T12101] loop_add+0x573/0x740 [ 2137.992098][T12101] loop_control_ioctl+0x448/0x620 [ 2137.996954][T12101] ? loop_remove+0xa0/0xa0 [ 2138.001208][T12101] ? memset+0x1f/0x40 [ 2138.005035][T12101] ? fsnotify+0x1280/0x1340 [ 2138.009364][T12101] ? loop_remove+0xa0/0xa0 [ 2138.013619][T12101] do_vfs_ioctl+0x742/0x1720 [ 2138.018048][T12101] ? ioctl_preallocate+0x250/0x250 [ 2138.022993][T12101] ? __fget+0x407/0x490 [ 2138.026988][T12101] ? fget_many+0x20/0x20 [ 2138.031069][T12101] ? debug_smp_processor_id+0x20/0x20 [ 2138.036271][T12101] ? security_file_ioctl+0x7d/0xa0 23:03:19 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 69) [ 2138.041216][T12101] __x64_sys_ioctl+0xd4/0x110 [ 2138.045728][T12101] do_syscall_64+0xca/0x1c0 [ 2138.050074][T12101] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 23:03:19 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, r3) 23:03:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) 23:03:19 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x119000, 0x0) r4 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) write$cgroup_pressure(r5, &(0x7f0000000280)={'full', 0x20, 0xffff, 0x20, 0x80000000}, 0x2f) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000200)) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044080) [ 2138.116078][T12121] FAULT_INJECTION: forcing a failure. [ 2138.116078][T12121] name failslab, interval 1, probability 0, space 0, times 0 [ 2138.135617][T12121] CPU: 1 PID: 12121 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2138.147044][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2138.156934][T12121] Call Trace: [ 2138.160072][T12121] dump_stack+0x1d8/0x241 [ 2138.164237][T12121] ? panic+0x896/0x896 [ 2138.168135][T12121] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2138.173784][T12121] should_fail+0x71f/0x880 [ 2138.178032][T12121] ? memcpy+0x38/0x50 [ 2138.181853][T12121] ? setup_fault_attr+0x3d0/0x3d0 [ 2138.186710][T12121] ? dev_set_name+0xd1/0x120 [ 2138.191139][T12121] ? device_add+0xb6/0xbb0 [ 2138.195391][T12121] should_failslab+0x5/0x20 [ 2138.199731][T12121] kmem_cache_alloc_trace+0x28/0x260 [ 2138.204856][T12121] device_add+0xb6/0xbb0 [ 2138.208935][T12121] __device_add_disk+0x767/0x1220 [ 2138.213794][T12121] ? device_add_disk+0x30/0x30 [ 2138.218395][T12121] ? __alloc_disk_node+0x459/0x5a0 [ 2138.223339][T12121] loop_add+0x573/0x740 [ 2138.227332][T12121] loop_control_ioctl+0x448/0x620 [ 2138.232189][T12121] ? loop_remove+0xa0/0xa0 [ 2138.236444][T12121] ? memset+0x1f/0x40 [ 2138.240262][T12121] ? fsnotify+0x1280/0x1340 [ 2138.244601][T12121] ? loop_remove+0xa0/0xa0 [ 2138.248855][T12121] do_vfs_ioctl+0x742/0x1720 [ 2138.253280][T12121] ? ioctl_preallocate+0x250/0x250 [ 2138.258226][T12121] ? __fget+0x407/0x490 [ 2138.262217][T12121] ? fget_many+0x20/0x20 [ 2138.266297][T12121] ? debug_smp_processor_id+0x20/0x20 [ 2138.271505][T12121] ? security_file_ioctl+0x7d/0xa0 [ 2138.276451][T12121] __x64_sys_ioctl+0xd4/0x110 [ 2138.280967][T12121] do_syscall_64+0xca/0x1c0 [ 2138.285305][T12121] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2138.294124][T12121] kobject_add_internal failed for queue (error: -2 parent: loop2) [ 2138.301949][T12121] ------------[ cut here ]------------ [ 2138.307212][T12121] WARNING: CPU: 1 PID: 12121 at fs/sysfs/file.c:328 sysfs_create_files+0x325/0x470 [ 2138.316313][T12121] Modules linked in: [ 2138.320052][T12121] CPU: 1 PID: 12121 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2138.331515][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2138.341410][T12121] RIP: 0010:sysfs_create_files+0x325/0x470 [ 2138.347042][T12121] Code: c1 03 38 c1 0f 8c b7 fe ff ff 48 8d 7c 24 70 e8 c1 0e d6 ff e9 a8 fe ff ff e8 37 4d a6 ff 31 db e9 ef 00 00 00 e8 2b 4d a6 ff <0f> 0b bb ea ff ff ff 4c 8b 74 24 08 eb 17 85 db 0f 84 cf 00 00 00 [ 2138.366480][T12121] RSP: 0018:ffff8881e7517940 EFLAGS: 00010283 [ 2138.372383][T12121] RAX: ffffffff81bdf778 RBX: ffff8881cf6f10a0 RCX: 0000000000040000 [ 2138.380192][T12121] RDX: ffffc90000f45000 RSI: 0000000000008567 RDI: 0000000000008568 [ 2138.388006][T12121] RBP: ffff8881e7517a10 R08: ffffffff8449e3a0 R09: ffffed103e091586 [ 2138.395825][T12121] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2138.403629][T12121] R13: ffffffff84f98b00 R14: dffffc0000000000 R15: ffff8881cf6f1070 [ 2138.411441][T12121] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2138.420204][T12121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2138.426627][T12121] CR2: 0000001b32421000 CR3: 00000001e9707000 CR4: 00000000003406a0 [ 2138.434440][T12121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2138.442247][T12121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2138.450060][T12121] Call Trace: [ 2138.453195][T12121] ? __warn+0x162/0x250 [ 2138.457183][T12121] ? report_bug+0x3a1/0x4e0 [ 2138.461522][T12121] ? sysfs_create_files+0x325/0x470 [ 2138.466564][T12121] ? sysfs_create_files+0x325/0x470 [ 2138.471590][T12121] ? do_invalid_op+0x6e/0x110 [ 2138.476110][T12121] ? invalid_op+0x1e/0x30 [ 2138.480270][T12121] ? kobject_get+0xc0/0x110 [ 2138.484608][T12121] ? sysfs_create_files+0x458/0x470 [ 2138.489643][T12121] ? sysfs_create_files+0x325/0x470 [ 2138.494683][T12121] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 2138.499886][T12121] ? kobject_get+0xc9/0x110 [ 2138.504225][T12121] __device_add_disk+0x949/0x1220 [ 2138.509209][T12121] ? device_add_disk+0x30/0x30 [ 2138.513805][T12121] ? __alloc_disk_node+0x459/0x5a0 [ 2138.518750][T12121] loop_add+0x573/0x740 [ 2138.522742][T12121] loop_control_ioctl+0x448/0x620 [ 2138.527692][T12121] ? loop_remove+0xa0/0xa0 [ 2138.531943][T12121] ? memset+0x1f/0x40 [ 2138.535757][T12121] ? fsnotify+0x1280/0x1340 [ 2138.540102][T12121] ? loop_remove+0xa0/0xa0 [ 2138.544351][T12121] do_vfs_ioctl+0x742/0x1720 [ 2138.548778][T12121] ? ioctl_preallocate+0x250/0x250 [ 2138.553732][T12121] ? __fget+0x407/0x490 [ 2138.557725][T12121] ? fget_many+0x20/0x20 [ 2138.561797][T12121] ? debug_smp_processor_id+0x20/0x20 [ 2138.567004][T12121] ? security_file_ioctl+0x7d/0xa0 [ 2138.571952][T12121] __x64_sys_ioctl+0xd4/0x110 [ 2138.576468][T12121] do_syscall_64+0xca/0x1c0 [ 2138.580805][T12121] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2138.586530][T12121] ---[ end trace 55340ab16795936e ]--- [ 2138.592382][T12121] ------------[ cut here ]------------ [ 2138.597833][T12121] kernfs: can not remove 'events', no directory [ 2138.604060][T12121] WARNING: CPU: 1 PID: 12121 at fs/kernfs/dir.c:1511 kernfs_remove_by_name_ns+0xb1/0x100 [ 2138.613647][T12121] Modules linked in: [ 2138.617388][T12121] CPU: 1 PID: 12121 Comm: syz-executor.1 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2138.628837][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2138.638745][T12121] RIP: 0010:kernfs_remove_by_name_ns+0xb1/0x100 [ 2138.644813][T12121] Code: ff 03 48 89 df e8 ff ef ff ff 48 89 df e8 67 ae ff ff 31 db eb 27 e8 ce aa a6 ff 48 c7 c7 40 9a e5 84 4c 89 fe e8 3f 65 7d ff <0f> 0b bb fe ff ff ff eb 16 e8 b1 aa a6 ff bb fe ff ff ff 48 c7 c7 [ 2138.664255][T12121] RSP: 0018:ffff8881e7517918 EFLAGS: 00010246 [ 2138.670155][T12121] RAX: 376a106dbb937400 RBX: 0000000000000000 RCX: 0000000000040000 [ 2138.677965][T12121] RDX: ffffc90000f45000 RSI: 0000000000011325 RDI: 0000000000011326 [ 2138.685774][T12121] RBP: ffff8881e7517a10 R08: ffffffff814d6752 R09: 0000000000000003 [ 2138.693584][T12121] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000000 [ 2138.701397][T12121] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff84f98bc0 [ 2138.709211][T12121] FS: 00007f4525bc86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2138.717975][T12121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2138.724394][T12121] CR2: 0000001b32421000 CR3: 00000001e9707000 CR4: 00000000003406a0 [ 2138.732211][T12121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2138.740017][T12121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2138.747827][T12121] Call Trace: [ 2138.750966][T12121] ? __warn+0x162/0x250 [ 2138.754958][T12121] ? report_bug+0x3a1/0x4e0 [ 2138.759292][T12121] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2138.764769][T12121] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2138.770226][T12121] ? do_invalid_op+0x6e/0x110 [ 2138.774740][T12121] ? invalid_op+0x1e/0x30 [ 2138.778910][T12121] ? wake_up_klogd+0xb2/0xf0 [ 2138.783335][T12121] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2138.788802][T12121] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2138.794269][T12121] sysfs_create_files+0x3de/0x470 [ 2138.799129][T12121] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 2138.804339][T12121] ? kobject_get+0xc9/0x110 [ 2138.808674][T12121] __device_add_disk+0x949/0x1220 [ 2138.813538][T12121] ? device_add_disk+0x30/0x30 [ 2138.818143][T12121] ? __alloc_disk_node+0x459/0x5a0 [ 2138.823089][T12121] loop_add+0x573/0x740 [ 2138.827082][T12121] loop_control_ioctl+0x448/0x620 [ 2138.831937][T12121] ? loop_remove+0xa0/0xa0 [ 2138.836193][T12121] ? memset+0x1f/0x40 [ 2138.840005][T12121] ? fsnotify+0x1280/0x1340 [ 2138.844347][T12121] ? loop_remove+0xa0/0xa0 [ 2138.848603][T12121] do_vfs_ioctl+0x742/0x1720 [ 2138.853032][T12121] ? ioctl_preallocate+0x250/0x250 [ 2138.857975][T12121] ? __fget+0x407/0x490 [ 2138.861966][T12121] ? fget_many+0x20/0x20 23:03:20 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 70) [ 2138.866046][T12121] ? debug_smp_processor_id+0x20/0x20 [ 2138.871251][T12121] ? security_file_ioctl+0x7d/0xa0 [ 2138.876204][T12121] __x64_sys_ioctl+0xd4/0x110 [ 2138.880713][T12121] do_syscall_64+0xca/0x1c0 [ 2138.885054][T12121] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2138.890778][T12121] ---[ end trace 55340ab16795936f ]--- [ 2138.897577][T12121] loop2: failed to create sysfs files for events [ 2138.909056][T12124] ------------[ cut here ]------------ 23:03:20 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x6, 0x208500) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x2c8, 0x15, 0x400, 0x70bd2b, 0x25dfdbff, {0xb, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "d0d33c7a7f095565c3a8125e871cb26bd8621e07d24ccf3e02d70ff541076e1da60c2989001a056fa97eae9824949b0a9c43a3b74e4540d2f32bd7e0e2202aa848dbcfd5f75d5ccd6d70366eac2ce7e6bce0e7016d85650970e4d85c1f705ea80368337c155307f1b01778e2da566db9c538d6e229748bf57f174333ad8651f71d80ed85712cd15db0737093b6db869bc1956621"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "6fe2cda0f89cf8e5f9b166d8b9e6296474dbdf9f084fde3fc9f7003d49d567d586bde1f203775b7d8e880945d57d1b7c50e9ff7b51fa9426135959099be5c8909dbe946762fe4a3fd586f4d97a2545bf43b78f2eab86850f"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "edd6ede35909ed54c66a16fd513121167af3788a1101984038f8a4d68dc390f8ea368e79ad96391aacc09ccba3be09446e813b05bd1ec89e8e850fdcd234b43a87da9b0f4c8a95dd69b32f008fc584d351e67dcf14e1d695f137c743a3a1bd03fe63f8e913c11b62fda54f2fa6a597d57a12d53ce6d11bf73c96b939c6cb"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "f98d9d48e4b126e41a5717e208f80e725a935e63ba0c"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "4a09172453951f0b2a4a8e532c91b4f64c8f4a427e9b91660ccac50b2ec8090f58ad18a71ee05f22743c4b1f9cf980d2feb43a2091dc041ce13da52567e4756cd72bb2c187d86791eb93b1b899c3ce5930d4"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "cc4f684aae1e739e7ca66a9a6894a627eb4003ec608fbfe9836353561a01c4067df9b702d4d104c148f20ec3067ffad88d31926230e6d4f03791402985a7d9f7b97d222d2fe053115481006d84bb8485710d5c626cc723ecb444a08dbddaa42df008781d9cf3798f6896662e14a176a6682db2464cf80781ab11c27f05c52df4c41cac227c75e499ad8908174454efc103661fb953cc3bb3710b9185aa9597398b876875295b2a0b0edfd9f092843ca63f8ae2167bda7d7ec28077c3503b7bdceb114b"}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x40000003}, 0x2001000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40024}, 0x4048841) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000406}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000044) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c81, 0x2) [ 2138.921037][T12124] kernfs: can not remove 'events', no directory [ 2138.947494][T12124] WARNING: CPU: 0 PID: 12124 at fs/kernfs/dir.c:1511 kernfs_remove_by_name_ns+0xb1/0x100 [ 2138.957091][T12124] Modules linked in: [ 2138.960833][T12124] CPU: 0 PID: 12124 Comm: syz-executor.5 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2138.972285][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2138.982198][T12124] RIP: 0010:kernfs_remove_by_name_ns+0xb1/0x100 [ 2138.988263][T12124] Code: ff 03 48 89 df e8 ff ef ff ff 48 89 df e8 67 ae ff ff 31 db eb 27 e8 ce aa a6 ff 48 c7 c7 40 9a e5 84 4c 89 fe e8 3f 65 7d ff <0f> 0b bb fe ff ff ff eb 16 e8 b1 aa a6 ff bb fe ff ff ff 48 c7 c7 [ 2139.007702][T12124] RSP: 0018:ffff8881e6f1fa38 EFLAGS: 00010246 [ 2139.013601][T12124] RAX: 16e735c8bb612100 RBX: 0000000000000000 RCX: 0000000000040000 23:03:20 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x301180, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0xc0040, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x2) select(0x40, &(0x7f0000000000)={0x3941, 0x6, 0xf4, 0x1f, 0xffff, 0x8, 0x2, 0x5}, &(0x7f0000000040)={0x8, 0x0, 0x10000, 0x4e, 0x4, 0x3f, 0x8000}, &(0x7f0000000080)={0x8001, 0x3ff, 0xb48, 0x1000, 0xffffffffffffffff, 0x4, 0x8}, &(0x7f0000000100)={0x77359400}) [ 2139.021418][T12124] RDX: ffffc90002d54000 RSI: 00000000000003d6 RDI: 00000000000003d7 [ 2139.029224][T12124] RBP: ffffffff860656a0 R08: ffffffff814d6752 R09: ffffed103edca9b8 [ 2139.037038][T12124] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2139.044842][T12124] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84f98bc0 [ 2139.052660][T12124] FS: 00007fa5dedb36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2139.061425][T12124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2139.067843][T12124] CR2: 00007f4526f5c5d8 CR3: 00000001f0af3000 CR4: 00000000003406b0 [ 2139.075657][T12124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2139.083465][T12124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2139.091271][T12124] Call Trace: [ 2139.094417][T12124] ? __warn+0x162/0x250 [ 2139.098399][T12124] ? report_bug+0x3a1/0x4e0 [ 2139.102733][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.108197][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.113666][T12124] ? do_invalid_op+0x6e/0x110 [ 2139.118177][T12124] ? invalid_op+0x1e/0x30 [ 2139.122348][T12124] ? wake_up_klogd+0xb2/0xf0 [ 2139.126770][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.132240][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.137703][T12124] sysfs_remove_files+0x91/0xe0 [ 2139.142394][T12124] del_gendisk+0x26e/0xc30 [ 2139.146646][T12124] ? avc_flush+0x1f0/0x1f0 [ 2139.150896][T12124] ? device_add_disk_no_queue_reg+0x20/0x20 [ 2139.156623][T12124] ? delete_node+0x706/0x780 [ 2139.161054][T12124] loop_remove+0x42/0xa0 [ 2139.165130][T12124] loop_control_ioctl+0x564/0x620 [ 2139.169990][T12124] ? loop_remove+0xa0/0xa0 [ 2139.174246][T12124] ? proc_reg_unlocked_ioctl+0x266/0x330 [ 2139.179715][T12124] ? loop_remove+0xa0/0xa0 [ 2139.183964][T12124] do_vfs_ioctl+0x742/0x1720 [ 2139.188394][T12124] ? ioctl_preallocate+0x250/0x250 [ 2139.193338][T12124] ? __fget+0x407/0x490 [ 2139.197331][T12124] ? fget_many+0x20/0x20 [ 2139.201411][T12124] ? switch_fpu_return+0x1d4/0x410 [ 2139.206356][T12124] ? security_file_ioctl+0x7d/0xa0 [ 2139.211303][T12124] __x64_sys_ioctl+0xd4/0x110 [ 2139.215817][T12124] do_syscall_64+0xca/0x1c0 [ 2139.220157][T12124] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2139.225890][T12124] ---[ end trace 55340ab167959370 ]--- [ 2139.286739][T12124] ------------[ cut here ]------------ [ 2139.292079][T12124] kernfs: can not remove 'events_async', no directory [ 2139.298720][T12124] WARNING: CPU: 0 PID: 12124 at fs/kernfs/dir.c:1511 kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.308240][T12124] Modules linked in: [ 2139.311983][T12124] CPU: 0 PID: 12124 Comm: syz-executor.5 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2139.323434][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2139.333334][T12124] RIP: 0010:kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.339405][T12124] Code: ff 03 48 89 df e8 ff ef ff ff 48 89 df e8 67 ae ff ff 31 db eb 27 e8 ce aa a6 ff 48 c7 c7 40 9a e5 84 4c 89 fe e8 3f 65 7d ff <0f> 0b bb fe ff ff ff eb 16 e8 b1 aa a6 ff bb fe ff ff ff 48 c7 c7 [ 2139.358848][T12124] RSP: 0018:ffff8881e6f1fa38 EFLAGS: 00010246 [ 2139.364748][T12124] RAX: 16e735c8bb612100 RBX: 0000000000000000 RCX: 0000000000040000 [ 2139.372560][T12124] RDX: ffffc90002d54000 RSI: 0000000000008c45 RDI: 0000000000008c46 [ 2139.380368][T12124] RBP: ffffffff860656a0 R08: ffffffff814d6752 R09: ffffed103edc5262 [ 2139.388178][T12124] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2139.395992][T12124] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84f98c60 [ 2139.403798][T12124] FS: 00007fa5dedb36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2139.412562][T12124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2139.418985][T12124] CR2: 00007f57a4df1038 CR3: 00000001f0af3000 CR4: 00000000003406b0 [ 2139.426802][T12124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2139.434609][T12124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2139.442414][T12124] Call Trace: [ 2139.445549][T12124] ? __warn+0x162/0x250 [ 2139.449537][T12124] ? report_bug+0x3a1/0x4e0 [ 2139.453879][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.459347][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.464813][T12124] ? do_invalid_op+0x6e/0x110 [ 2139.469327][T12124] ? invalid_op+0x1e/0x30 [ 2139.473493][T12124] ? wake_up_klogd+0xb2/0xf0 [ 2139.477920][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.483385][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.488862][T12124] sysfs_remove_files+0x91/0xe0 [ 2139.493541][T12124] del_gendisk+0x26e/0xc30 [ 2139.497796][T12124] ? avc_flush+0x1f0/0x1f0 [ 2139.502047][T12124] ? device_add_disk_no_queue_reg+0x20/0x20 [ 2139.507772][T12124] ? delete_node+0x706/0x780 [ 2139.512201][T12124] loop_remove+0x42/0xa0 [ 2139.516280][T12124] loop_control_ioctl+0x564/0x620 [ 2139.521143][T12124] ? loop_remove+0xa0/0xa0 [ 2139.525393][T12124] ? proc_reg_unlocked_ioctl+0x266/0x330 [ 2139.530864][T12124] ? loop_remove+0xa0/0xa0 [ 2139.535113][T12124] do_vfs_ioctl+0x742/0x1720 [ 2139.539541][T12124] ? ioctl_preallocate+0x250/0x250 [ 2139.544488][T12124] ? __fget+0x407/0x490 [ 2139.548478][T12124] ? fget_many+0x20/0x20 [ 2139.552558][T12124] ? switch_fpu_return+0x1d4/0x410 [ 2139.557504][T12124] ? security_file_ioctl+0x7d/0xa0 [ 2139.562454][T12124] __x64_sys_ioctl+0xd4/0x110 [ 2139.566967][T12124] do_syscall_64+0xca/0x1c0 [ 2139.571305][T12124] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2139.577032][T12124] ---[ end trace 55340ab167959371 ]--- [ 2139.583033][T12124] ------------[ cut here ]------------ [ 2139.588368][T12124] kernfs: can not remove 'events_poll_msecs', no directory [ 2139.595838][T12124] WARNING: CPU: 1 PID: 12124 at fs/kernfs/dir.c:1511 kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.605426][T12124] Modules linked in: [ 2139.609169][T12124] CPU: 1 PID: 12124 Comm: syz-executor.5 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2139.620620][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2139.630531][T12124] RIP: 0010:kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.636597][T12124] Code: ff 03 48 89 df e8 ff ef ff ff 48 89 df e8 67 ae ff ff 31 db eb 27 e8 ce aa a6 ff 48 c7 c7 40 9a e5 84 4c 89 fe e8 3f 65 7d ff <0f> 0b bb fe ff ff ff eb 16 e8 b1 aa a6 ff bb fe ff ff ff 48 c7 c7 [ 2139.656033][T12124] RSP: 0018:ffff8881e6f1fa38 EFLAGS: 00010246 [ 2139.661941][T12124] RAX: 16e735c8bb612100 RBX: 0000000000000000 RCX: 0000000000040000 [ 2139.669744][T12124] RDX: ffffc90002d54000 RSI: 0000000000011518 RDI: 0000000000011519 [ 2139.677555][T12124] RBP: ffffffff860656a0 R08: ffffffff814d6752 R09: ffffed103edea9b8 [ 2139.685365][T12124] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2139.693177][T12124] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff84f98c80 [ 2139.700991][T12124] FS: 00007fa5dedb36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2139.709755][T12124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2139.716182][T12124] CR2: 0000555556ab0818 CR3: 00000001f0af3000 CR4: 00000000003406a0 [ 2139.723989][T12124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2139.731805][T12124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2139.739607][T12124] Call Trace: [ 2139.742749][T12124] ? __warn+0x162/0x250 [ 2139.746733][T12124] ? report_bug+0x3a1/0x4e0 [ 2139.751067][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.756541][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.762012][T12124] ? do_invalid_op+0x6e/0x110 [ 2139.766522][T12124] ? invalid_op+0x1e/0x30 [ 2139.770687][T12124] ? wake_up_klogd+0xb2/0xf0 [ 2139.775112][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.780579][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.786042][T12124] sysfs_remove_files+0x91/0xe0 [ 2139.790733][T12124] del_gendisk+0x26e/0xc30 [ 2139.794979][T12124] ? avc_flush+0x1f0/0x1f0 [ 2139.799233][T12124] ? device_add_disk_no_queue_reg+0x20/0x20 [ 2139.804964][T12124] ? delete_node+0x706/0x780 [ 2139.809389][T12124] loop_remove+0x42/0xa0 [ 2139.813471][T12124] loop_control_ioctl+0x564/0x620 [ 2139.818326][T12124] ? loop_remove+0xa0/0xa0 [ 2139.822580][T12124] ? proc_reg_unlocked_ioctl+0x266/0x330 [ 2139.828047][T12124] ? loop_remove+0xa0/0xa0 [ 2139.832300][T12124] do_vfs_ioctl+0x742/0x1720 [ 2139.836729][T12124] ? ioctl_preallocate+0x250/0x250 [ 2139.841698][T12124] ? __fget+0x407/0x490 [ 2139.845676][T12124] ? fget_many+0x20/0x20 [ 2139.849754][T12124] ? switch_fpu_return+0x1d4/0x410 [ 2139.854701][T12124] ? security_file_ioctl+0x7d/0xa0 [ 2139.859639][T12124] __x64_sys_ioctl+0xd4/0x110 [ 2139.864155][T12124] do_syscall_64+0xca/0x1c0 [ 2139.868493][T12124] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2139.874229][T12124] ---[ end trace 55340ab167959372 ]--- [ 2139.905046][T12124] ------------[ cut here ]------------ [ 2139.910355][T12124] kernfs: can not remove 'bdi', no directory [ 2139.916202][T12124] WARNING: CPU: 1 PID: 12124 at fs/kernfs/dir.c:1511 kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.925864][T12124] Modules linked in: [ 2139.929601][T12124] CPU: 1 PID: 12124 Comm: syz-executor.5 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2139.941052][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2139.951047][T12124] RIP: 0010:kernfs_remove_by_name_ns+0xb1/0x100 [ 2139.957116][T12124] Code: ff 03 48 89 df e8 ff ef ff ff 48 89 df e8 67 ae ff ff 31 db eb 27 e8 ce aa a6 ff 48 c7 c7 40 9a e5 84 4c 89 fe e8 3f 65 7d ff <0f> 0b bb fe ff ff ff eb 16 e8 b1 aa a6 ff bb fe ff ff ff 48 c7 c7 [ 2139.976557][T12124] RSP: 0018:ffff8881e6f1fa78 EFLAGS: 00010246 [ 2139.982453][T12124] RAX: 16e735c8bb612100 RBX: 0000000000000000 RCX: 0000000000040000 [ 2139.990263][T12124] RDX: ffffc90002d54000 RSI: 000000000001a5e5 RDI: 000000000001a5e6 [ 2139.998075][T12124] RBP: ffff8881e6f1fb88 R08: ffffffff814d6752 R09: ffffed103ede5262 [ 2140.005882][T12124] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881cf6f1000 [ 2140.013694][T12124] R13: ffff8881cf6f14e8 R14: 0000000000000000 R15: ffffffff84f98720 [ 2140.021506][T12124] FS: 00007fa5dedb36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2140.030272][T12124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2140.036693][T12124] CR2: 0000555556bda818 CR3: 00000001f0af3000 CR4: 00000000003406a0 [ 2140.044512][T12124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2140.052316][T12124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2140.060129][T12124] Call Trace: [ 2140.063268][T12124] ? __warn+0x162/0x250 [ 2140.067258][T12124] ? report_bug+0x3a1/0x4e0 [ 2140.071583][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2140.077052][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2140.082532][T12124] ? do_invalid_op+0x6e/0x110 [ 2140.087031][T12124] ? invalid_op+0x1e/0x30 [ 2140.091287][T12124] ? wake_up_klogd+0xb2/0xf0 [ 2140.095716][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2140.101182][T12124] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 2140.106651][T12124] del_gendisk+0x5a1/0xc30 [ 2140.110905][T12124] ? device_add_disk_no_queue_reg+0x20/0x20 [ 2140.116629][T12124] ? delete_node+0x706/0x780 [ 2140.121056][T12124] loop_remove+0x42/0xa0 [ 2140.125133][T12124] loop_control_ioctl+0x564/0x620 [ 2140.129994][T12124] ? loop_remove+0xa0/0xa0 [ 2140.134251][T12124] ? proc_reg_unlocked_ioctl+0x266/0x330 [ 2140.139718][T12124] ? loop_remove+0xa0/0xa0 [ 2140.143966][T12124] do_vfs_ioctl+0x742/0x1720 [ 2140.148393][T12124] ? ioctl_preallocate+0x250/0x250 [ 2140.153340][T12124] ? __fget+0x407/0x490 [ 2140.157331][T12124] ? fget_many+0x20/0x20 [ 2140.161411][T12124] ? switch_fpu_return+0x1d4/0x410 [ 2140.166358][T12124] ? security_file_ioctl+0x7d/0xa0 [ 2140.171305][T12124] __x64_sys_ioctl+0xd4/0x110 [ 2140.175821][T12124] do_syscall_64+0xca/0x1c0 [ 2140.180161][T12124] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2140.185886][T12124] ---[ end trace 55340ab167959373 ]--- [ 2140.200064][T12124] kasan: CONFIG_KASAN_INLINE enabled [ 2140.205152][T12124] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2140.213276][T12124] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2140.220012][T12124] CPU: 1 PID: 12124 Comm: syz-executor.5 Tainted: G W 5.4.254-syzkaller-00011-g2ac128c04e33 #0 [ 2140.231464][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2140.241367][T12124] RIP: 0010:device_del+0xe7/0xfa0 [ 2140.246220][T12124] Code: df e8 6d e7 fd fe 4c 89 7c 24 18 41 bf c8 00 00 00 48 89 5c 24 08 4c 03 3b 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 0f 85 31 0e 00 00 41 0f b6 1f 89 de 83 e6 01 [ 2140.265660][T12124] RSP: 0018:ffff8881e6f1f9c0 EFLAGS: 00010202 [ 2140.271559][T12124] RAX: dffffc0000000000 RBX: ffff8881cf6f10d8 RCX: 1ffff11039ede21b [ 2140.279369][T12124] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8881e6f1f940 [ 2140.287187][T12124] RBP: ffff8881e6f1fa90 R08: dffffc0000000000 R09: ffffed103cde3f29 [ 2140.294993][T12124] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000019 [ 2140.302808][T12124] R13: ffff8881cf6f1070 R14: ffff8881cf6f1110 R15: 00000000000000c8 [ 2140.310618][T12124] FS: 00007fa5dedb36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2140.319386][T12124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2140.325805][T12124] CR2: 00007f4526f41038 CR3: 00000001f0af3000 CR4: 00000000003406a0 [ 2140.333616][T12124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2140.341425][T12124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2140.349232][T12124] Call Trace: [ 2140.352373][T12124] ? __die+0xb4/0x100 [ 2140.356185][T12124] ? die+0x26/0x50 [ 2140.359750][T12124] ? do_general_protection+0x266/0x3c0 [ 2140.365040][T12124] ? do_trap+0x340/0x340 [ 2140.369122][T12124] ? general_protection+0x28/0x30 [ 2140.373988][T12124] ? device_del+0xe7/0xfa0 [ 2140.378232][T12124] ? mutex_trylock+0xa0/0xa0 [ 2140.382656][T12124] ? kill_device+0xc0/0xc0 [ 2140.386909][T12124] ? _raw_spin_unlock_irq+0x4a/0x60 [ 2140.391945][T12124] ? pm_runtime_set_memalloc_noio+0x1ec/0x250 [ 2140.397839][T12124] del_gendisk+0x9d9/0xc30 [ 2140.402092][T12124] ? device_add_disk_no_queue_reg+0x20/0x20 [ 2140.407816][T12124] ? delete_node+0x706/0x780 [ 2140.412247][T12124] loop_remove+0x42/0xa0 [ 2140.416324][T12124] loop_control_ioctl+0x564/0x620 [ 2140.421183][T12124] ? loop_remove+0xa0/0xa0 [ 2140.425439][T12124] ? proc_reg_unlocked_ioctl+0x266/0x330 [ 2140.430904][T12124] ? loop_remove+0xa0/0xa0 [ 2140.435157][T12124] do_vfs_ioctl+0x742/0x1720 [ 2140.439584][T12124] ? ioctl_preallocate+0x250/0x250 [ 2140.444532][T12124] ? __fget+0x407/0x490 [ 2140.448525][T12124] ? fget_many+0x20/0x20 [ 2140.452604][T12124] ? switch_fpu_return+0x1d4/0x410 [ 2140.457549][T12124] ? security_file_ioctl+0x7d/0xa0 [ 2140.462498][T12124] __x64_sys_ioctl+0xd4/0x110 [ 2140.467010][T12124] do_syscall_64+0xca/0x1c0 [ 2140.471355][T12124] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2140.477074][T12124] Modules linked in: [ 2140.484107][T12124] ---[ end trace 55340ab167959374 ]--- [ 2140.489459][T12124] RIP: 0010:device_del+0xe7/0xfa0 [ 2140.494659][T12124] Code: df e8 6d e7 fd fe 4c 89 7c 24 18 41 bf c8 00 00 00 48 89 5c 24 08 4c 03 3b 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 0f 85 31 0e 00 00 41 0f b6 1f 89 de 83 e6 01 [ 2140.514227][T12124] RSP: 0018:ffff8881e6f1f9c0 EFLAGS: 00010202 [ 2140.520302][T12124] RAX: dffffc0000000000 RBX: ffff8881cf6f10d8 RCX: 1ffff11039ede21b [ 2140.528087][T12124] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8881e6f1f940 [ 2140.536126][T12124] RBP: ffff8881e6f1fa90 R08: dffffc0000000000 R09: ffffed103cde3f29 [ 2140.544051][T12124] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000019 [ 2140.551981][T12124] R13: ffff8881cf6f1070 R14: ffff8881cf6f1110 R15: 00000000000000c8 [ 2140.559910][T12124] FS: 00007fa5dedb36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2140.568635][T12124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2140.575288][T12124] CR2: 00007f4526f41038 CR3: 00000001f0af3000 CR4: 00000000003406a0 [ 2140.583220][T12124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2140.591145][T12124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2140.598915][T12124] Kernel panic - not syncing: Fatal exception [ 2140.604952][T12124] Kernel Offset: disabled [ 2140.608978][T12124] Rebooting in 86400 seconds..