(r1, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7)

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RLERROR(r1, &(0x7f0000000000)={0x13, 0x7, 0x2, {0xa, '/dev/vcs#\x00'}}, 0x13)

05:30:12 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x0, {0x0, [{{0x40, 0x3, 0x1}, 0x5, 0x0, 0x7, './file0'}]}}, 0x2a)

05:30:12 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa50, 0x0, 0x0, 0x0, 0x3ff}, [@generic={0x3, 0x9, 0x9, 0x800, 0x5}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10000000}, @ldst={0x2, 0x2, 0x1, 0x7, 0x2, 0x8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x7, 0x0, 0x9, 0x3, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x6d0, 0x6f, &(0x7f0000000100)=""/111, 0x41000, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xe, 0xfff, 0x3}, 0x10, 0xffffffffffffffff}, 0x80)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={0xffffffffffffffff, r1}, 0x10) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:12 executing program 3:
mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x4, 0x89071, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x39)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0xcc901, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xf)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000001240)={{0xffff, 0x1, 0x1000, 0x6}, 'syz1\x00', 0x2c})
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x8081, 0x0)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000001180)={0x0, &(0x7f0000000180)=""/4096})
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x3, 0x0, {0xa, 0x4e23, 0x100, @remote, 0x5}}}, 0x32)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffffffffffe83, 0x77, 0x4, 0xfffffffe}, 0xfffffffffffffd60)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000011c0), 0x98001, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001200)={0xffffffffffffffff, r3})

05:30:12 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:12 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RLERROR(r1, &(0x7f0000000000)={0x13, 0x7, 0x2, {0xa, '/dev/vcs#\x00'}}, 0x13)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RLERROR(r1, &(0x7f0000000000)={0x13, 0x7, 0x2, {0xa, '/dev/vcs#\x00'}}, 0x13) (async)

05:30:12 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x0, {0x0, [{{0x40, 0x3, 0x1}, 0x5, 0x0, 0x7, './file0'}]}}, 0x2a)

05:30:12 executing program 3:
mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x4, 0x89071, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x39) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0xcc901, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xf)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000001240)={{0xffff, 0x1, 0x1000, 0x6}, 'syz1\x00', 0x2c}) (async)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x8081, 0x0)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000001180)={0x0, &(0x7f0000000180)=""/4096}) (async, rerun: 32)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x3, 0x0, {0xa, 0x4e23, 0x100, @remote, 0x5}}}, 0x32) (async, rerun: 32)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffffffffffe83, 0x77, 0x4, 0xfffffffe}, 0xfffffffffffffd60) (async)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000011c0), 0x98001, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001200)={0xffffffffffffffff, r3})

05:30:12 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa50, 0x0, 0x0, 0x0, 0x3ff}, [@generic={0x3, 0x9, 0x9, 0x800, 0x5}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10000000}, @ldst={0x2, 0x2, 0x1, 0x7, 0x2, 0x8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x7, 0x0, 0x9, 0x3, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x6d0, 0x6f, &(0x7f0000000100)=""/111, 0x41000, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xe, 0xfff, 0x3}, 0x10, 0xffffffffffffffff}, 0x80)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={0xffffffffffffffff, r1}, 0x10) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:12 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10c001, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:12 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x40, 0x3, 0x1}, 0x5, 0x0, 0x7, './file0'}, {{}, 0x0, 0x3, 0x7, './file0'}]}}, 0x49)

05:30:12 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RLERROR(r1, &(0x7f0000000000)={0x13, 0x7, 0x2, {0xa, '/dev/vcs#\x00'}}, 0x13)

05:30:12 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10c001, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10c001, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:12 executing program 3:
mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x4, 0x89071, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x39)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0xcc901, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xf)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000001240)={{0xffff, 0x1, 0x1000, 0x6}, 'syz1\x00', 0x2c})
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x8081, 0x0)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000001180)={0x0, &(0x7f0000000180)=""/4096})
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x3, 0x0, {0xa, 0x4e23, 0x100, @remote, 0x5}}}, 0x32)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffffffffffe83, 0x77, 0x4, 0xfffffffe}, 0xfffffffffffffd60)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000011c0), 0x98001, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001200)={0xffffffffffffffff, r3})
mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x4, 0x89071, 0xffffffffffffffff, 0x0) (async)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x39) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0xcc901, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xf) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000001240)={{0xffff, 0x1, 0x1000, 0x6}, 'syz1\x00', 0x2c}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x8081, 0x0) (async)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000001180)={0x0, &(0x7f0000000180)=""/4096}) (async)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x3, 0x0, {0xa, 0x4e23, 0x100, @remote, 0x5}}}, 0x32) (async)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffffffffffe83, 0x77, 0x4, 0xfffffffe}, 0xfffffffffffffd60) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000011c0), 0x98001, 0x0) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001200)={0xffffffffffffffff, r3}) (async)

05:30:12 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x40, 0x3, 0x1}, 0x5, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:12 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x8401)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x18080)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:12 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10c001, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async, rerun: 32)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:12 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)

05:30:12 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffd, 0x800)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)

05:30:12 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r7, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000125bd7000fcdbdf250d000000080039008100000008003b492e6f2cbdf494c53400000005002a0000000000050029000100000005006f0000440000080031000200000008003c00090000000500300000f0ff000500290000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x440)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:12 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)

05:30:12 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x6ad80, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x3})

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x8401)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x18080)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x8401) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x18080) (async)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:12 executing program 0:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x600200, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', <r5=>0x0, 0x80, 0x80, 0x1, 0x3, {{0x11, 0x4, 0x1, 0x3f, 0x44, 0x67, 0x0, 0x7f, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0xb, [{@broadcast, 0x5}, {@empty, 0x5}]}, @noop, @ssrr={0x89, 0x1b, 0x4d, [@rand_addr=0x64010102, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}]}}}}})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000000c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x42c, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x54}}, 0x0)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x129103, 0x0)
write$P9_RRENAMEAT(r6, &(0x7f0000000340)={0x7, 0x4b, 0x1}, 0x7)
r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r7)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:12 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffd, 0x800)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)

05:30:12 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x6ad80, 0x0) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x3})

05:30:12 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)

05:30:12 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffd, 0x800)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x8401)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x18080)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:12 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 32)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 32)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x6ad80, 0x0) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x3})

05:30:12 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0x3, 0x1}, 0x5, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:12 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r7, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000125bd7000fcdbdf250d000000080039008100000008003b492e6f2cbdf494c53400000005002a0000000000050029000100000005006f0000440000080031000200000008003c00090000000500300000f0ff000500290000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x440)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) (async)
pipe(&(0x7f0000000000)) (async)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) (async)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r7, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000125bd7000fcdbdf250d000000080039008100000008003b492e6f2cbdf494c53400000005002a0000000000050029000100000005006f0000440000080031000200000008003c00090000000500300000f0ff000500290000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x440) (async)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:12 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x9, 0x401)
socket$inet_udplite(0x2, 0x2, 0x88)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
socket$inet(0x2, 0x4, 0x5)

05:30:12 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
connect$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x1, 0x3, 0x2}}, 0x14)

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', <r2=>0x0, 0x7800, 0x7800, 0x7, 0x7f, {{0x32, 0x4, 0x2, 0x24, 0xc8, 0x65, 0x0, 0xe8, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x3e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @broadcast]}, @timestamp={0x44, 0x20, 0x39, 0x0, 0x6, [0x2, 0x7, 0x5, 0x1000, 0x8, 0x5, 0xfffff801]}, @noop, @timestamp_prespec={0x44, 0x44, 0x4a, 0x3, 0x3, [{@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x514a}, {@broadcast, 0x3}, {@remote, 0x4}, {@loopback, 0x5}, {@rand_addr=0x64010101, 0x2}]}, @end, @ssrr={0x89, 0x7, 0x6a, [@local]}, @cipso={0x86, 0x27, 0x3, [{0x0, 0x4, "caa5"}, {0x1, 0x7, "b777dbd30d"}, {0x5, 0x10, "bff1d23b638f8a31261d68b48090"}, {0x7, 0x6, "2c4b9d87"}]}, @timestamp={0x44, 0xc, 0x66, 0x0, 0x7, [0x0, 0x7]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', r2, 0x29, 0x7f, 0x1, 0x401, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x4, 0xffffffff}})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:12 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0x0, 0x1}, 0x5, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:12 executing program 0:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x600200, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', <r5=>0x0, 0x80, 0x80, 0x1, 0x3, {{0x11, 0x4, 0x1, 0x3f, 0x44, 0x67, 0x0, 0x7f, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0xb, [{@broadcast, 0x5}, {@empty, 0x5}]}, @noop, @ssrr={0x89, 0x1b, 0x4d, [@rand_addr=0x64010102, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}]}}}}})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000000c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x42c, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x54}}, 0x0)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x129103, 0x0)
write$P9_RRENAMEAT(r6, &(0x7f0000000340)={0x7, 0x4b, 0x1}, 0x7)
r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r7)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x600200, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x80, 0x80, 0x1, 0x3, {{0x11, 0x4, 0x1, 0x3f, 0x44, 0x67, 0x0, 0x7f, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0xb, [{@broadcast, 0x5}, {@empty, 0x5}]}, @noop, @ssrr={0x89, 0x1b, 0x4d, [@rand_addr=0x64010102, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}]}}}}}) (async)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000000c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x42c, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x54}}, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x129103, 0x0) (async)
write$P9_RRENAMEAT(r6, &(0x7f0000000340)={0x7, 0x4b, 0x1}, 0x7) (async)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r7) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:12 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
connect$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x1, 0x3, 0x2}}, 0x14)

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', <r2=>0x0, 0x7800, 0x7800, 0x7, 0x7f, {{0x32, 0x4, 0x2, 0x24, 0xc8, 0x65, 0x0, 0xe8, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x3e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @broadcast]}, @timestamp={0x44, 0x20, 0x39, 0x0, 0x6, [0x2, 0x7, 0x5, 0x1000, 0x8, 0x5, 0xfffff801]}, @noop, @timestamp_prespec={0x44, 0x44, 0x4a, 0x3, 0x3, [{@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x514a}, {@broadcast, 0x3}, {@remote, 0x4}, {@loopback, 0x5}, {@rand_addr=0x64010101, 0x2}]}, @end, @ssrr={0x89, 0x7, 0x6a, [@local]}, @cipso={0x86, 0x27, 0x3, [{0x0, 0x4, "caa5"}, {0x1, 0x7, "b777dbd30d"}, {0x5, 0x10, "bff1d23b638f8a31261d68b48090"}, {0x7, 0x6, "2c4b9d87"}]}, @timestamp={0x44, 0xc, 0x66, 0x0, 0x7, [0x0, 0x7]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', r2, 0x29, 0x7f, 0x1, 0x401, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x4, 0xffffffff}}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:12 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x5, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:12 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
connect$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) (async, rerun: 64)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 64)
write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x1, 0x3, 0x2}}, 0x14)

05:30:12 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x9, 0x401)
socket$inet_udplite(0x2, 0x2, 0x88)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
socket$inet(0x2, 0x4, 0x5)
syz_open_dev$vcsn(&(0x7f0000000140), 0x9, 0x401) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
socket$inet(0x2, 0x4, 0x5) (async)

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', <r2=>0x0, 0x7800, 0x7800, 0x7, 0x7f, {{0x32, 0x4, 0x2, 0x24, 0xc8, 0x65, 0x0, 0xe8, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x3e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @broadcast]}, @timestamp={0x44, 0x20, 0x39, 0x0, 0x6, [0x2, 0x7, 0x5, 0x1000, 0x8, 0x5, 0xfffff801]}, @noop, @timestamp_prespec={0x44, 0x44, 0x4a, 0x3, 0x3, [{@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x514a}, {@broadcast, 0x3}, {@remote, 0x4}, {@loopback, 0x5}, {@rand_addr=0x64010101, 0x2}]}, @end, @ssrr={0x89, 0x7, 0x6a, [@local]}, @cipso={0x86, 0x27, 0x3, [{0x0, 0x4, "caa5"}, {0x1, 0x7, "b777dbd30d"}, {0x5, 0x10, "bff1d23b638f8a31261d68b48090"}, {0x7, 0x6, "2c4b9d87"}]}, @timestamp={0x44, 0xc, 0x66, 0x0, 0x7, [0x0, 0x7]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', r2, 0x29, 0x7f, 0x1, 0x401, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x4, 0xffffffff}})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0x7, 0x7f, {{0x32, 0x4, 0x2, 0x24, 0xc8, 0x65, 0x0, 0xe8, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x3e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @broadcast]}, @timestamp={0x44, 0x20, 0x39, 0x0, 0x6, [0x2, 0x7, 0x5, 0x1000, 0x8, 0x5, 0xfffff801]}, @noop, @timestamp_prespec={0x44, 0x44, 0x4a, 0x3, 0x3, [{@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x514a}, {@broadcast, 0x3}, {@remote, 0x4}, {@loopback, 0x5}, {@rand_addr=0x64010101, 0x2}]}, @end, @ssrr={0x89, 0x7, 0x6a, [@local]}, @cipso={0x86, 0x27, 0x3, [{0x0, 0x4, "caa5"}, {0x1, 0x7, "b777dbd30d"}, {0x5, 0x10, "bff1d23b638f8a31261d68b48090"}, {0x7, 0x6, "2c4b9d87"}]}, @timestamp={0x44, 0xc, 0x66, 0x0, 0x7, [0x0, 0x7]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', r2, 0x29, 0x7f, 0x1, 0x401, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x4, 0xffffffff}}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:12 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r7, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000125bd7000fcdbdf250d000000080039008100000008003b492e6f2cbdf494c53400000005002a0000000000050029000100000005006f0000440000080031000200000008003c00090000000500300000f0ff000500290000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x440) (async)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) (async)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:12 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:12 executing program 0:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x600200, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', <r5=>0x0, 0x80, 0x80, 0x1, 0x3, {{0x11, 0x4, 0x1, 0x3f, 0x44, 0x67, 0x0, 0x7f, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0xb, [{@broadcast, 0x5}, {@empty, 0x5}]}, @noop, @ssrr={0x89, 0x1b, 0x4d, [@rand_addr=0x64010102, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}]}}}}})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000000c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x42c, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x54}}, 0x0) (async)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x129103, 0x0)
write$P9_RRENAMEAT(r6, &(0x7f0000000340)={0x7, 0x4b, 0x1}, 0x7)
r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r7)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x14)
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x210400)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x565}, 0xb)
write$P9_RSYMLINK(r1, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x8, 0x0, 0x6}}, 0x14)

05:30:12 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r7, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000125bd7000fcdbdf250d000000080039008100000008003b492e6f2cbdf494c53400000005002a0000000000050029000100000005006f0000440000080031000200000008003c00090000000500300000f0ff000500290000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x440)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:12 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xff, 0xb1, 0x81, 0xe5, 0x0, 0x80000001, 0x48088, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x44a2, 0x254c, 0x6, 0x2, 0x3, 0x169, 0xa8e, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xe, r0, 0x7521bc76f80cef8e)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:12 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x9, 0x401)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
socket$inet(0x2, 0x4, 0x5)

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x14)
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x210400)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x565}, 0xb)
write$P9_RSYMLINK(r1, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x8, 0x0, 0x6}}, 0x14)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x14) (async)
syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x210400) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x565}, 0xb) (async)
write$P9_RSYMLINK(r1, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x8, 0x0, 0x6}}, 0x14) (async)

05:30:12 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xff, 0xb1, 0x81, 0xe5, 0x0, 0x80000001, 0x48088, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x44a2, 0x254c, 0x6, 0x2, 0x3, 0x169, 0xa8e, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xe, r0, 0x7521bc76f80cef8e) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:12 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xfffffffffffffde2, 0x77, 0x21}, 0x1f)

05:30:12 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x14) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x210400)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x565}, 0xb) (async)
write$P9_RSYMLINK(r1, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x8, 0x0, 0x6}}, 0x14)

05:30:13 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xfffffffffffffde2, 0x77, 0x21}, 0x1f)

05:30:13 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xff, 0xb1, 0x81, 0xe5, 0x0, 0x80000001, 0x48088, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x44a2, 0x254c, 0x6, 0x2, 0x3, 0x169, 0xa8e, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xe, r0, 0x7521bc76f80cef8e) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:13 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x109240, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
write$P9_ROPEN(r1, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:13 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xfffffffffffffde2, 0x77, 0x21}, 0x1f)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xfffffffffffffde2, 0x77, 0x21}, 0x1f) (async)

05:30:13 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000ff1000/0xf000)=nil, 0xf000})
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1})
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x5, 0x400)
r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000200)={r4, 0x6})
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="051728bd740058dbdf210b00000008000300", @ANYRES32=0x0, @ANYBLOB="050030000000000008000300", @ANYRES32=0x0, @ANYBLOB="080034002000000008003b00030000000a000900bbbbbbbbbbbb0000"], 0x48}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)

05:30:13 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r7, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000125bd7000fcdbdf250d000000080039008100000008003b492e6f2cbdf494c53400000005002a0000000000050029000100000005006f0000440000080031000200000008003c00090000000500300000f0ff000500290000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x440)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:13 executing program 3:
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}}, 0x40)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0xfffe}, 0x15)

05:30:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x84a03, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x110500, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x20240)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000100)={0x0, 0x2})
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={0xffffffffffffffff, 0x11, 0x1, 0x801, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20)
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000340)=[0x800, 0x9, 0x8000, 0x1f], &(0x7f0000000380)=[0x3], 0x1, 0x9, 0xfffffff8, &(0x7f00000003c0)=[0x4, 0x80000000, 0x40, 0x5284, 0x2, 0x1ff, 0xff, 0x1c000000, 0x400], &(0x7f0000000400)=[0x1, 0x9, 0x80, 0x7, 0x1]})
r6 = socket(0x18, 0x0, 0x0)
getpeername$llc(r6, 0x0, &(0x7f0000000040)=0xfffffffffffffd83)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

05:30:13 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000ff1000/0xf000)=nil, 0xf000})
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1})
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x5, 0x400)
r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000200)={r4, 0x6})
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="051728bd740058dbdf210b00000008000300", @ANYRES32=0x0, @ANYBLOB="050030000000000008000300", @ANYRES32=0x0, @ANYBLOB="080034002000000008003b00030000000a000900bbbbbbbbbbbb0000"], 0x48}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000ff1000/0xf000)=nil, 0xf000}) (async)
pipe(&(0x7f0000000240)) (async)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1}) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f00000002c0), 0x5, 0x400) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) (async)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000200)={r4, 0x6}) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="051728bd740058dbdf210b00000008000300", @ANYRES32=0x0, @ANYBLOB="050030000000000008000300", @ANYRES32=0x0, @ANYBLOB="080034002000000008003b00030000000a000900bbbbbbbbbbbb0000"], 0x48}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) (async)

05:30:13 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
bind$vsock_dgram(r0, &(0x7f0000000000), 0x10)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x11}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004894}, 0x20040041)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'\x00', 0x188})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000240)={0x14, 0x69, 0x1, {0x10, 0x1, 0x7}}, 0x14)

05:30:13 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x109240, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
write$P9_ROPEN(r1, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x109240, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:13 executing program 3:
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}}, 0x40)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0xfffe}, 0x15)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}}, 0x40) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0xfffe}, 0x15) (async)

05:30:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x84a03, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x110500, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x20240)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000100)={0x0, 0x2})
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={0xffffffffffffffff, 0x11, 0x1, 0x801, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20)
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000340)=[0x800, 0x9, 0x8000, 0x1f], &(0x7f0000000380)=[0x3], 0x1, 0x9, 0xfffffff8, &(0x7f00000003c0)=[0x4, 0x80000000, 0x40, 0x5284, 0x2, 0x1ff, 0xff, 0x1c000000, 0x400], &(0x7f0000000400)=[0x1, 0x9, 0x80, 0x7, 0x1]})
r6 = socket(0x18, 0x0, 0x0)
getpeername$llc(r6, 0x0, &(0x7f0000000040)=0xfffffffffffffd83)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x84a03, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x110500, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x20240) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000100)={0x0, 0x2}) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={0xffffffffffffffff, 0x11, 0x1, 0x801, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) (async)
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000340)=[0x800, 0x9, 0x8000, 0x1f], &(0x7f0000000380)=[0x3], 0x1, 0x9, 0xfffffff8, &(0x7f00000003c0)=[0x4, 0x80000000, 0x40, 0x5284, 0x2, 0x1ff, 0xff, 0x1c000000, 0x400], &(0x7f0000000400)=[0x1, 0x9, 0x80, 0x7, 0x1]}) (async)
socket(0x18, 0x0, 0x0) (async)
getpeername$llc(r6, 0x0, &(0x7f0000000040)=0xfffffffffffffd83) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)

05:30:13 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (rerun: 32)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 64)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async, rerun: 64)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000ff1000/0xf000)=nil, 0xf000})
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x1}) (async, rerun: 32)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 32)
write$P9_ROPEN(r4, 0x0, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x5, 0x400)
r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000200)={r4, 0x6}) (async, rerun: 32)
write$P9_ROPEN(r1, 0x0, 0x0) (async, rerun: 32)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="051728bd740058dbdf210b00000008000300", @ANYRES32=0x0, @ANYBLOB="050030000000000008000300", @ANYRES32=0x0, @ANYBLOB="080034002000000008003b00030000000a000900bbbbbbbbbbbb0000"], 0x48}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)

05:30:13 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
bind$vsock_dgram(r0, &(0x7f0000000000), 0x10)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x11}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004894}, 0x20040041)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'\x00', 0x188})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000240)={0x14, 0x69, 0x1, {0x10, 0x1, 0x7}}, 0x14)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
bind$vsock_dgram(r0, &(0x7f0000000000), 0x10) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x11}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004894}, 0x20040041) (async)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'\x00', 0x188}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RATTACH(r2, &(0x7f0000000240)={0x14, 0x69, 0x1, {0x10, 0x1, 0x7}}, 0x14) (async)

05:30:13 executing program 3:
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}}, 0x40) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0xfffe}, 0x15)

05:30:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x84a03, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x110500, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x20240)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000100)={0x0, 0x2})
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={0xffffffffffffffff, 0x11, 0x1, 0x801, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20)
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000340)=[0x800, 0x9, 0x8000, 0x1f], &(0x7f0000000380)=[0x3], 0x1, 0x9, 0xfffffff8, &(0x7f00000003c0)=[0x4, 0x80000000, 0x40, 0x5284, 0x2, 0x1ff, 0xff, 0x1c000000, 0x400], &(0x7f0000000400)=[0x1, 0x9, 0x80, 0x7, 0x1]})
r6 = socket(0x18, 0x0, 0x0)
getpeername$llc(r6, 0x0, &(0x7f0000000040)=0xfffffffffffffd83)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x84a03, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x110500, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x20240) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000100)={0x0, 0x2}) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={0xffffffffffffffff, 0x11, 0x1, 0x801, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) (async)
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000340)=[0x800, 0x9, 0x8000, 0x1f], &(0x7f0000000380)=[0x3], 0x1, 0x9, 0xfffffff8, &(0x7f00000003c0)=[0x4, 0x80000000, 0x40, 0x5284, 0x2, 0x1ff, 0xff, 0x1c000000, 0x400], &(0x7f0000000400)=[0x1, 0x9, 0x80, 0x7, 0x1]}) (async)
socket(0x18, 0x0, 0x0) (async)
getpeername$llc(r6, 0x0, &(0x7f0000000040)=0xfffffffffffffd83) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)

05:30:13 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r7, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000125bd7000fcdbdf250d000000080039008100000008003b492e6f2cbdf494c53400000005002a0000000000050029000100000005006f0000440000080031000200000008003c00090000000500300000f0ff000500290000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x440)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:13 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
bind$vsock_dgram(r0, &(0x7f0000000000), 0x10) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x11}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004894}, 0x20040041) (async)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'\x00', 0x188}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RATTACH(r2, &(0x7f0000000240)={0x14, 0x69, 0x1, {0x10, 0x1, 0x7}}, 0x14)

05:30:13 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x109240, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff}) (async)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
write$P9_ROPEN(r1, 0x0, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:13 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x200080)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x4c000)

05:30:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x115841, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0xc002)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

05:30:13 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:13 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1f)

05:30:13 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 64)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) (async)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1f)

05:30:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x115841, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0xc002)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

05:30:13 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:13 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x200080)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x4c000)

05:30:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x115841, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0xc002)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x115841, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0xc002) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)

05:30:13 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x200080)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x4c000)

05:30:13 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:13 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1f)

05:30:13 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:13 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x200080)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x4c000)

05:30:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000040)={0x0, 0x19})
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x4c0, 0x0)

05:30:13 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000040)={0x0, 0x19}) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x4c0, 0x0)

05:30:13 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x2, 0x2, 0x1}}, 0x14)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1})
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="71000000750200660000003ed221e704bbc4b0d481a2d32ed142767511855845553a5fc4824a899c615532dac791314228ef7176eb35de759a9f8ebc35f3089ac242b05f9655ef2425201b73aa132be64e283e7d43c61e88f4f80000000000000000"], 0x71)

05:30:13 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r7, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000125bd7000fcdbdf250d000000080039008100000008003b492e6f2cbdf494c53400000005002a0000000000050029000100000005006f0000440000080031000200000008003c00090000000500300000f0ff000500290000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x440)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:13 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

05:30:13 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x2f27106e2b82b988, 0x1, 0x5}}, 0x14)
openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_spread_page\x00', 0x2, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, 0x2000, 0x1})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7, 0x33, 0xfffd}, 0x7)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
openat$cgroup_type(r4, &(0x7f0000000280), 0x2, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7)

05:30:13 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x2, 0x2, 0x1}}, 0x14)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1})
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="71000000750200660000003ed221e704bbc4b0d481a2d32ed142767511855845553a5fc4824a899c615532dac791314228ef7176eb35de759a9f8ebc35f3089ac242b05f9655ef2425201b73aa132be64e283e7d43c61e88f4f80000000000000000"], 0x71)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x2, 0x2, 0x1}}, 0x14) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1}) (async)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="71000000750200660000003ed221e704bbc4b0d481a2d32ed142767511855845553a5fc4824a899c615532dac791314228ef7176eb35de759a9f8ebc35f3089ac242b05f9655ef2425201b73aa132be64e283e7d43c61e88f4f80000000000000000"], 0x71) (async)

05:30:13 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000040)={0x0, 0x19}) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x4c0, 0x0)

05:30:13 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:13 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async)

05:30:13 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x2f27106e2b82b988, 0x1, 0x5}}, 0x14) (async)
openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, 0x2000, 0x1})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb) (async)
write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7, 0x33, 0xfffd}, 0x7) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) (async)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
openat$cgroup_type(r4, &(0x7f0000000280), 0x2, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7)

05:30:13 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x2, 0x2, 0x1}}, 0x14)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1}) (async)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="71000000750200660000003ed221e704bbc4b0d481a2d32ed142767511855845553a5fc4824a899c615532dac791314228ef7176eb35de759a9f8ebc35f3089ac242b05f9655ef2425201b73aa132be64e283e7d43c61e88f4f80000000000000000"], 0x71)

05:30:13 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

05:30:13 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x2f27106e2b82b988, 0x1, 0x5}}, 0x14)
openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_spread_page\x00', 0x2, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, 0x2000, 0x1}) (async, rerun: 32)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) (rerun: 32)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 32)
write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7, 0x33, 0xfffd}, 0x7) (rerun: 32)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) (async, rerun: 32)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) (async, rerun: 32)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0) (async, rerun: 32)
openat$cgroup_type(r4, &(0x7f0000000280), 0x2, 0x0) (async, rerun: 32)
write$P9_RUNLINKAT(r0, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7)

05:30:13 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:13 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x0, {0x0, [{{0x40, 0x3, 0x1}, 0x5, 0x0, 0x7, './file0'}]}}, 0x2a)

05:30:13 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:13 executing program 2:
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/61})
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x5)

05:30:14 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x12)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_RREADDIR(r3, &(0x7f00000000c0)={0x49, 0x29, 0x1, {0x10000, [{{0x4, 0x3, 0x8}, 0x8, 0x7f, 0x7, './file0'}, {{0x10, 0x1, 0x8}, 0x5, 0x0, 0x7, './file0'}]}}, 0x49)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
write$P9_RFLUSH(r4, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7)
write$P9_ROPEN(r2, 0x0, 0x0)
socket$vsock_dgram(0x28, 0x2, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
write$P9_RWRITE(r5, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x40}, 0xb)

05:30:14 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:14 executing program 2:
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/61})
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x5)
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/61}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x5) (async)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r2=>0x0, 0x29, 0x2c, 0x5, 0x8, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7800, 0x8, 0x3f, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'ip6gre0\x00', r2, 0x2f, 0x1, 0x37, 0xfffffffb, 0x40, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x8, 0x897, 0x4}})
write$P9_RREAD(r1, &(0x7f0000000040)={0xf5, 0x75, 0x2, {0xea, "a4195006c74b7642b698b2f6aeeb0cd6609ecf25279bb8b8c47707252ebfb5be6b98bda6491594522f98765e7798824dc4d95bc8671252229e63a446f70bed0b5d2574d66c886b484875260e7412d4e31de7a3d6f75f641c78cab740fbda895891e8153ad8b3a6d8bb99cb4995a89ed6d45f2f93a75b9ce9f0ae65ce23fb51bfb11450c1c120ad6aad323fe26c5bef94769ed2e6ee2fb6054ef38c634efe7a4515477a2d39809d31fdaf5bf0dbdcbd9363d4d073a04808b10999e3e610f5d3eda000a9f4a369e81065fcbfb99358a14f9fa2b0a71b47002d623a6d71b9afb3b1af4bab10c9f16bb965a4"}}, 0xf5)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r1}, 0x10)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0)
r5 = openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.time\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0], <r7=>0x0, 0x8, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
r8 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'ip6gre0\x00', <r10=>0x0, 0x2f, 0x7f, 0xfe, 0x6fb, 0x40, @remote, @mcast1, 0x7, 0x20, 0x0, 0x80}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'syztnl2\x00', r10, 0x4, 0x80, 0x6e, 0x10001, 0x4, @remote, @loopback, 0x80, 0x10, 0x6, 0xffffffc0}})
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
write$P9_ROPEN(r8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000001000080ccb006000800000018190000", @ANYRES32=r4, @ANYBLOB="00000000000000008510000003000000850000001100000018270000", @ANYRES32=r5, @ANYBLOB="00000000e1ffffff180000000000000000000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x16, &(0x7f0000000540)=""/22, 0x41100, 0x5, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0xb6e, 0x20}, 0x10, r7, r8}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', <r11=>r6, 0x8000, 0x40, 0x29, 0x9, {{0x6, 0x4, 0x2, 0x1b, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @remote, {[@noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'syztnl1\x00', r11, 0x4, 0x1, 0x2, 0x0, 0xc, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0x80, 0x8, 0x3, 0x1}})

05:30:14 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) (async)
write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:14 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x12) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
write$P9_RREADDIR(r3, &(0x7f00000000c0)={0x49, 0x29, 0x1, {0x10000, [{{0x4, 0x3, 0x8}, 0x8, 0x7f, 0x7, './file0'}, {{0x10, 0x1, 0x8}, 0x5, 0x0, 0x7, './file0'}]}}, 0x49) (async)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
write$P9_RFLUSH(r4, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
socket$vsock_dgram(0x28, 0x2, 0x0) (async, rerun: 64)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 64)
write$P9_ROPEN(r5, 0x0, 0x0) (async, rerun: 32)
write$P9_RWRITE(r5, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x40}, 0xb) (rerun: 32)

05:30:14 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb, 0x77, 0x3}, 0xb)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x9}, 0xb)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x24500)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_RFLUSH(r3, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x2, 0x2, 0x3}}, 0x14)

05:30:14 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x43, 0x4800)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 2:
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/61})
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x5)
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/61}) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x5) (async)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r2=>0x0, 0x29, 0x2c, 0x5, 0x8, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7800, 0x8, 0x3f, 0x8}}) (rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'ip6gre0\x00', r2, 0x2f, 0x1, 0x37, 0xfffffffb, 0x40, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x8, 0x897, 0x4}}) (async, rerun: 64)
write$P9_RREAD(r1, &(0x7f0000000040)={0xf5, 0x75, 0x2, {0xea, "a4195006c74b7642b698b2f6aeeb0cd6609ecf25279bb8b8c47707252ebfb5be6b98bda6491594522f98765e7798824dc4d95bc8671252229e63a446f70bed0b5d2574d66c886b484875260e7412d4e31de7a3d6f75f641c78cab740fbda895891e8153ad8b3a6d8bb99cb4995a89ed6d45f2f93a75b9ce9f0ae65ce23fb51bfb11450c1c120ad6aad323fe26c5bef94769ed2e6ee2fb6054ef38c634efe7a4515477a2d39809d31fdaf5bf0dbdcbd9363d4d073a04808b10999e3e610f5d3eda000a9f4a369e81065fcbfb99358a14f9fa2b0a71b47002d623a6d71b9afb3b1af4bab10c9f16bb965a4"}}, 0xf5) (rerun: 64)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r1}, 0x10) (async, rerun: 64)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) (async, rerun: 64)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0)
r5 = openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.time\x00', 0x0, 0x0) (async, rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0], <r7=>0x0, 0x8, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async, rerun: 64)
r8 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'ip6gre0\x00', <r10=>0x0, 0x2f, 0x7f, 0xfe, 0x6fb, 0x40, @remote, @mcast1, 0x7, 0x20, 0x0, 0x80}}) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'syztnl2\x00', r10, 0x4, 0x80, 0x6e, 0x10001, 0x4, @remote, @loopback, 0x80, 0x10, 0x6, 0xffffffc0}}) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
write$P9_ROPEN(r8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000001000080ccb006000800000018190000", @ANYRES32=r4, @ANYBLOB="00000000000000008510000003000000850000001100000018270000", @ANYRES32=r5, @ANYBLOB="00000000e1ffffff180000000000000000000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x16, &(0x7f0000000540)=""/22, 0x41100, 0x5, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0xb6e, 0x20}, 0x10, r7, r8}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', <r11=>r6, 0x8000, 0x40, 0x29, 0x9, {{0x6, 0x4, 0x2, 0x1b, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @remote, {[@noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'syztnl1\x00', r11, 0x4, 0x1, 0x2, 0x0, 0xc, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0x80, 0x8, 0x3, 0x1}})

05:30:14 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x43, 0x4800)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x43, 0x4800) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2c100, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x2})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz1\x00')

05:30:14 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)

05:30:14 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) (async, rerun: 32)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (rerun: 32)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x12) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async, rerun: 64)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 64)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
write$P9_RREADDIR(r3, &(0x7f00000000c0)={0x49, 0x29, 0x1, {0x10000, [{{0x4, 0x3, 0x8}, 0x8, 0x7f, 0x7, './file0'}, {{0x10, 0x1, 0x8}, 0x5, 0x0, 0x7, './file0'}]}}, 0x49) (async)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
write$P9_RFLUSH(r4, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) (async)
write$P9_ROPEN(r2, 0x0, 0x0)
socket$vsock_dgram(0x28, 0x2, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0) (async, rerun: 64)
write$P9_RWRITE(r5, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x40}, 0xb) (rerun: 64)

05:30:14 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$bt_cmtp(0x1f, 0x3, 0x5)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:14 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x43, 0x4800)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2c100, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x2}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) (async)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz1\x00')

05:30:14 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r2=>0x0, 0x29, 0x2c, 0x5, 0x8, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7800, 0x8, 0x3f, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'ip6gre0\x00', r2, 0x2f, 0x1, 0x37, 0xfffffffb, 0x40, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x8, 0x897, 0x4}})
write$P9_RREAD(r1, &(0x7f0000000040)={0xf5, 0x75, 0x2, {0xea, "a4195006c74b7642b698b2f6aeeb0cd6609ecf25279bb8b8c47707252ebfb5be6b98bda6491594522f98765e7798824dc4d95bc8671252229e63a446f70bed0b5d2574d66c886b484875260e7412d4e31de7a3d6f75f641c78cab740fbda895891e8153ad8b3a6d8bb99cb4995a89ed6d45f2f93a75b9ce9f0ae65ce23fb51bfb11450c1c120ad6aad323fe26c5bef94769ed2e6ee2fb6054ef38c634efe7a4515477a2d39809d31fdaf5bf0dbdcbd9363d4d073a04808b10999e3e610f5d3eda000a9f4a369e81065fcbfb99358a14f9fa2b0a71b47002d623a6d71b9afb3b1af4bab10c9f16bb965a4"}}, 0xf5) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r1}, 0x10) (async)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) (async)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) (async)
r5 = openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.time\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0], <r7=>0x0, 0x8, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
r8 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'ip6gre0\x00', <r10=>0x0, 0x2f, 0x7f, 0xfe, 0x6fb, 0x40, @remote, @mcast1, 0x7, 0x20, 0x0, 0x80}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'syztnl2\x00', r10, 0x4, 0x80, 0x6e, 0x10001, 0x4, @remote, @loopback, 0x80, 0x10, 0x6, 0xffffffc0}})
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
write$P9_ROPEN(r8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000001000080ccb006000800000018190000", @ANYRES32=r4, @ANYBLOB="00000000000000008510000003000000850000001100000018270000", @ANYRES32=r5, @ANYBLOB="00000000e1ffffff180000000000000000000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x16, &(0x7f0000000540)=""/22, 0x41100, 0x5, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0xb6e, 0x20}, 0x10, r7, r8}, 0x80) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', <r11=>r6, 0x8000, 0x40, 0x29, 0x9, {{0x6, 0x4, 0x2, 0x1b, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @remote, {[@noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'syztnl1\x00', r11, 0x4, 0x1, 0x2, 0x0, 0xc, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0x80, 0x8, 0x3, 0x1}})

05:30:14 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x8501)
openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2c100, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x2}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) (async)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz1\x00')

05:30:14 executing program 1:
pipe(&(0x7f0000000000))
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
socket$pppl2tp(0x18, 0x1, 0x1)

05:30:14 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$bt_cmtp(0x1f, 0x3, 0x5)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:14 executing program 1:
pipe(&(0x7f0000000000))
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (rerun: 32)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) (async)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
socket$pppl2tp(0x18, 0x1, 0x1)

05:30:14 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x8501)
openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x8501) (async)
openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:14 executing program 1:
pipe(&(0x7f0000000000)) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (rerun: 32)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
socket$pppl2tp(0x18, 0x1, 0x1)

05:30:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000000c0)={0x5, 0x2, {0x53, 0xfffb, 0x1ff, {0xffc0, 0x6}, {0x6, 0x4}, @ramp={0x6060, 0x40, {0x4, 0x1000, 0x5, 0x3}}}, {0x54, 0x17, 0x7, {0xde1, 0x8001}, {0x0, 0x40}, @period={0x59, 0x0, 0x8, 0x1, 0x8, {0x3, 0x4, 0x3, 0xfffa}, 0x1, &(0x7f0000000000)=[0xfffa]}}})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0xc1dcf8f491a29b7, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

05:30:14 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x8501)
openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x50000, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x1c8, 0x24, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xf, 0x2}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x5, 0x65}}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x0, 0x8000, 0x7fffffff, 0x0, 0x7fff, 0x1, 0x3}}, {0xa, 0x2, [0x1f, 0x4800, 0xfffa]}}, {{0x1c, 0x1, {0x0, 0x8, 0xfff, 0x1, 0x0, 0x5, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0xfffb]}}, {{0x1c, 0x1, {0xfb, 0x2, 0x7, 0x4d8, 0x0, 0x2, 0x8, 0x4}}, {0xc, 0x2, [0x200, 0x4, 0xd1, 0xfff9]}}, {{0xfffffffffffffdf8, 0x1, {0x5, 0x3, 0x2714, 0x8, 0x20f56467e4a1915f, 0x8, 0x1, 0x6}}, {0x10, 0x2, [0x0, 0x2d, 0x7, 0x20, 0x0, 0xfff7]}}, {{0x1c, 0x1, {0xc0, 0x6, 0x2e, 0x80000001, 0x1, 0x47e, 0x8, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x2d, 0x1, 0x401, 0x4, 0x2, 0x1, 0x1f, 0x7}}, {0x12, 0x2, [0x1, 0x40, 0x8, 0x4, 0x9, 0xc3, 0x4]}}, {{0x1c, 0x1, {0x7, 0x40, 0x2, 0x9, 0x1, 0x8, 0x2d, 0x3}}, {0xa, 0x2, [0x9, 0x671c, 0x8001]}}, {{0x1c, 0x1, {0x8, 0x7, 0x128f, 0x3ff, 0x1, 0x0, 0x1ff}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0xe040)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x35, 0x0, 0x7, 0x14, @remote, @private2={0xfc, 0x2, '\x00', 0x2}, 0x80, 0x7, 0x8000000, 0x1}})
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
socket$bt_cmtp(0x1f, 0x3, 0x5)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x14)

05:30:14 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x21)
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x84981)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x1)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffeec, 0x77, 0x402, 0x1}, 0x8)

05:30:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000000c0)={0x5, 0x2, {0x53, 0xfffb, 0x1ff, {0xffc0, 0x6}, {0x6, 0x4}, @ramp={0x6060, 0x40, {0x4, 0x1000, 0x5, 0x3}}}, {0x54, 0x17, 0x7, {0xde1, 0x8001}, {0x0, 0x40}, @period={0x59, 0x0, 0x8, 0x1, 0x8, {0x3, 0x4, 0x3, 0xfffa}, 0x1, &(0x7f0000000000)=[0xfffa]}}})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0xc1dcf8f491a29b7, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

05:30:14 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x50000, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0x50000, 0x0) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:14 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x35, 0x0, 0x7, 0x14, @remote, @private2={0xfc, 0x2, '\x00', 0x2}, 0x80, 0x7, 0x8000000, 0x1}}) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) (async)
socket$bt_cmtp(0x1f, 0x3, 0x5) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x14)

05:30:14 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RSTATFS(r2, &(0x7f0000000000)={0x43, 0x9, 0x2, {0xffbffff9, 0x5abc, 0xffffffffffffff01, 0x80000001, 0x20, 0xa0, 0x800, 0xffffffffffffffff, 0x2}}, 0x43)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
write$P9_RLCREATE(r4, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x4, 0x4, 0x6}, 0x3}}, 0x18)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x1c8, 0x24, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xf, 0x2}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x5, 0x65}}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x0, 0x8000, 0x7fffffff, 0x0, 0x7fff, 0x1, 0x3}}, {0xa, 0x2, [0x1f, 0x4800, 0xfffa]}}, {{0x1c, 0x1, {0x0, 0x8, 0xfff, 0x1, 0x0, 0x5, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0xfffb]}}, {{0x1c, 0x1, {0xfb, 0x2, 0x7, 0x4d8, 0x0, 0x2, 0x8, 0x4}}, {0xc, 0x2, [0x200, 0x4, 0xd1, 0xfff9]}}, {{0xfffffffffffffdf8, 0x1, {0x5, 0x3, 0x2714, 0x8, 0x20f56467e4a1915f, 0x8, 0x1, 0x6}}, {0x10, 0x2, [0x0, 0x2d, 0x7, 0x20, 0x0, 0xfff7]}}, {{0x1c, 0x1, {0xc0, 0x6, 0x2e, 0x80000001, 0x1, 0x47e, 0x8, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x2d, 0x1, 0x401, 0x4, 0x2, 0x1, 0x1f, 0x7}}, {0x12, 0x2, [0x1, 0x40, 0x8, 0x4, 0x9, 0xc3, 0x4]}}, {{0x1c, 0x1, {0x7, 0x40, 0x2, 0x9, 0x1, 0x8, 0x2d, 0x3}}, {0xa, 0x2, [0x9, 0x671c, 0x8001]}}, {{0x1c, 0x1, {0x8, 0x7, 0x128f, 0x3ff, 0x1, 0x0, 0x1ff}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0xe040) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4040008)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
openat$cgroup_type(r2, &(0x7f00000005c0), 0x2, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r3, 0xf}, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x24008001)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4004)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000540)={{0x4fc7, 0x5b, 0x9, 0x40}, 'syz0\x00', 0x4a})

05:30:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000000c0)={0x5, 0x2, {0x53, 0xfffb, 0x1ff, {0xffc0, 0x6}, {0x6, 0x4}, @ramp={0x6060, 0x40, {0x4, 0x1000, 0x5, 0x3}}}, {0x54, 0x17, 0x7, {0xde1, 0x8001}, {0x0, 0x40}, @period={0x59, 0x0, 0x8, 0x1, 0x8, {0x3, 0x4, 0x3, 0xfffa}, 0x1, &(0x7f0000000000)=[0xfffa]}}}) (async, rerun: 64)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (rerun: 64)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0xc1dcf8f491a29b7, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

05:30:14 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RSTATFS(r2, &(0x7f0000000000)={0x43, 0x9, 0x2, {0xffbffff9, 0x5abc, 0xffffffffffffff01, 0x80000001, 0x20, 0xa0, 0x800, 0xffffffffffffffff, 0x2}}, 0x43)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
write$P9_RLCREATE(r4, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x4, 0x4, 0x6}, 0x3}}, 0x18)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RSTATFS(r2, &(0x7f0000000000)={0x43, 0x9, 0x2, {0xffbffff9, 0x5abc, 0xffffffffffffff01, 0x80000001, 0x20, 0xa0, 0x800, 0xffffffffffffffff, 0x2}}, 0x43) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
pipe2$9p(&(0x7f00000000c0), 0x4000) (async)
write$P9_RLCREATE(r4, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x4, 0x4, 0x6}, 0x3}}, 0x18) (async)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x1c8, 0x24, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xf, 0x2}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x5, 0x65}}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x0, 0x8000, 0x7fffffff, 0x0, 0x7fff, 0x1, 0x3}}, {0xa, 0x2, [0x1f, 0x4800, 0xfffa]}}, {{0x1c, 0x1, {0x0, 0x8, 0xfff, 0x1, 0x0, 0x5, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0xfffb]}}, {{0x1c, 0x1, {0xfb, 0x2, 0x7, 0x4d8, 0x0, 0x2, 0x8, 0x4}}, {0xc, 0x2, [0x200, 0x4, 0xd1, 0xfff9]}}, {{0xfffffffffffffdf8, 0x1, {0x5, 0x3, 0x2714, 0x8, 0x20f56467e4a1915f, 0x8, 0x1, 0x6}}, {0x10, 0x2, [0x0, 0x2d, 0x7, 0x20, 0x0, 0xfff7]}}, {{0x1c, 0x1, {0xc0, 0x6, 0x2e, 0x80000001, 0x1, 0x47e, 0x8, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x2d, 0x1, 0x401, 0x4, 0x2, 0x1, 0x1f, 0x7}}, {0x12, 0x2, [0x1, 0x40, 0x8, 0x4, 0x9, 0xc3, 0x4]}}, {{0x1c, 0x1, {0x7, 0x40, 0x2, 0x9, 0x1, 0x8, 0x2d, 0x3}}, {0xa, 0x2, [0x9, 0x671c, 0x8001]}}, {{0x1c, 0x1, {0x8, 0x7, 0x128f, 0x3ff, 0x1, 0x0, 0x1ff}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0xe040)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x1c8, 0x24, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xf, 0x2}, {0x0, 0xe}}, [@TCA_RATE={0x0, 0x5, {0x5, 0x65}}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x0, 0x8000, 0x7fffffff, 0x0, 0x7fff, 0x1, 0x3}}, {0xa, 0x2, [0x1f, 0x4800, 0xfffa]}}, {{0x1c, 0x1, {0x0, 0x8, 0xfff, 0x1, 0x0, 0x5, 0x2, 0x2}}, {0x8, 0x2, [0x1, 0xfffb]}}, {{0x1c, 0x1, {0xfb, 0x2, 0x7, 0x4d8, 0x0, 0x2, 0x8, 0x4}}, {0xc, 0x2, [0x200, 0x4, 0xd1, 0xfff9]}}, {{0xfffffffffffffdf8, 0x1, {0x5, 0x3, 0x2714, 0x8, 0x20f56467e4a1915f, 0x8, 0x1, 0x6}}, {0x10, 0x2, [0x0, 0x2d, 0x7, 0x20, 0x0, 0xfff7]}}, {{0x1c, 0x1, {0xc0, 0x6, 0x2e, 0x80000001, 0x1, 0x47e, 0x8, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x2d, 0x1, 0x401, 0x4, 0x2, 0x1, 0x1f, 0x7}}, {0x12, 0x2, [0x1, 0x40, 0x8, 0x4, 0x9, 0xc3, 0x4]}}, {{0x1c, 0x1, {0x7, 0x40, 0x2, 0x9, 0x1, 0x8, 0x2d, 0x3}}, {0xa, 0x2, [0x9, 0x671c, 0x8001]}}, {{0x1c, 0x1, {0x8, 0x7, 0x128f, 0x3ff, 0x1, 0x0, 0x1ff}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0xe040) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:14 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x77, 0x2, 0x2}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x2, {0x7fff, [{{0x40, 0x3, 0x1}, 0x5, 0x0, 0x7, './file0'}, {{0x0, 0x2}, 0x0, 0x3, 0x7, './file0'}]}}, 0x49)

05:30:14 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x35, 0x0, 0x7, 0x14, @remote, @private2={0xfc, 0x2, '\x00', 0x2}, 0x80, 0x7, 0x8000000, 0x1}})
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
socket$bt_cmtp(0x1f, 0x3, 0x5) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x14)

05:30:14 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x50000, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:14 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3c98}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5a9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0xc0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
sendto$llc(r2, &(0x7f00000001c0)="7759a702f8e1016691e96a150b272e7a47986636b53fd649cbc4186fa29df44eb69166aca9f29a8e7b8b13a715a27e2370f3af7218b98f7a53ab14950961b0d3a0d4090b3629a53b1f47191331bbeb792b740267aec32da528ba12664cbbaba3263a00d9a42e859884b3b257bc5813e5e17182999baa93c1d52818f61d34bd28df7c53a347b0667e6d6e2e0a6a99359069eb04e0014f3db8d1fbcef5f9f7d2f0a5b68dd9887af86c1ef347d8c415a8850a1c59467bb9", 0xb6, 0x10000, &(0x7f0000000280)={0x1a, 0x304, 0x0, 0x3f, 0x5, 0x8, @remote}, 0x10)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x10, 0x4, 0x7}}, 0x14)

05:30:14 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RSTATFS(r2, &(0x7f0000000000)={0x43, 0x9, 0x2, {0xffbffff9, 0x5abc, 0xffffffffffffff01, 0x80000001, 0x20, 0xa0, 0x800, 0xffffffffffffffff, 0x2}}, 0x43) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
write$P9_RLCREATE(r4, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x4, 0x4, 0x6}, 0x3}}, 0x18)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101200, 0x0)
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x10, 0x4, 0x7}}, 0x14)

05:30:14 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x0, 0x1}, 0xb)
write$P9_ROPEN(r0, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x20, 0x0, 0x2}, 0x1}}, 0x18)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x10, 0x4, 0x7}}, 0x14)

05:30:14 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3c98}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5a9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0xc0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
sendto$llc(r2, &(0x7f00000001c0)="7759a702f8e1016691e96a150b272e7a47986636b53fd649cbc4186fa29df44eb69166aca9f29a8e7b8b13a715a27e2370f3af7218b98f7a53ab14950961b0d3a0d4090b3629a53b1f47191331bbeb792b740267aec32da528ba12664cbbaba3263a00d9a42e859884b3b257bc5813e5e17182999baa93c1d52818f61d34bd28df7c53a347b0667e6d6e2e0a6a99359069eb04e0014f3db8d1fbcef5f9f7d2f0a5b68dd9887af86c1ef347d8c415a8850a1c59467bb9", 0xb6, 0x10000, &(0x7f0000000280)={0x1a, 0x304, 0x0, 0x3f, 0x5, 0x8, @remote}, 0x10) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)

05:30:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:14 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101200, 0x0) (async)
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:14 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async, rerun: 32)
write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x0, 0x1}, 0xb) (async, rerun: 32)
write$P9_ROPEN(r0, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x20, 0x0, 0x2}, 0x1}}, 0x18)

05:30:14 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101200, 0x0) (async)
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:14 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0xc080)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=@newtaction={0x7c84, 0x30, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{0x218, 0x1, [@m_mpls={0x40, 0x3, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x1d4, 0x1b, 0x0, 0x0, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x53, 0x6, {0x80, 'nat\x00', 0x2, 0x9, "d5638b7e5957a01d86a76fadffec68fcca16ba992d156e0b64c9402b03a66a2d2ebd49c6e107f38e50"}}, @TCA_IPT_TARG={0xb1, 0x6, {0x4, 'nat\x00', 0x8, 0x5, "0de2458e36032361e0b3ebe407f56060d3276401a4adfb61e0d29f0c6a68271d87569a0f38996093d3b96f954598e37f56dd5f82032e410785564b08a3adb611b3637d8ad00521d7ba89330440e4cff1efdd662bd31a96683ff268e6b105c4363b206d4d68c2663dcdf6bed2315297cfaaa3a577d5faa28a0c406f2c74ca484866ffd5a6ed933a"}}]}, {0xa4, 0x6, "4af5a6a397d1a13f119d69bd8f59f540e91a4a8d51c90f8b77f9c2364abfb57cffbffb7d40c13ab3971dc222beddbe011e4e41ccdd4495d6d52cbe28f7b2d57b44d3dc333b06a9230a5ae454648f34ddf3e28d0e121481c41c2b2fddcf6b77bf9993472e029b2b2c90c344eb5cf525ddd91eb8d140d5bfa5418487ecc09e3bf583c0e3a861027eeee8e530cc3cbe95d2a5781eed1bbc8deb34ab3d258d591791"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x74, 0x1, [@m_bpf={0x70, 0xb, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xe7d, 0xfffffff8, 0x8, 0x3, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x19, 0x6, "18a96d19e2ce2060a17fa75d775b8e1125d32e60bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x181c, 0x1, [@m_ct={0x160, 0x18, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_MARK={0x8}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_PARMS={0x18, 0x1, {0x8000, 0x5, 0x8, 0x6, 0xfffffff9}}, @TCA_CT_PARMS={0x18, 0x1, {0x1, 0x4, 0x1, 0x3, 0xde}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0xcf, 0x6, "1024d8562cacaf1929cd337b87252c55b6a16276f0fe2edc66011d2d1e729ff4546133edade66f579435e543eab9b026182f9aa5f177e64958781bd094a239d96e21f7a3f0101c44cc6a2a72f82d7a8609ac42a3a824fb936907099e4badaefdb2bf103d07aa7a780ec3ce038eb9df6680923361671b167ffb09a7ff5926ca1fda771f0236e19e51a5ec1dcdca75bafe36828bed2b32ac3123fcc2134582496ddd7075df606820c8de1a7f8d91a69769cfca59aa7e15f3ea693f70f10314bf52bf1b0c3b9d46e45d201e8c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x124, 0x1e, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x9, 0x4, 0x3d, 0x92d}, @private=0xa010102, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x2, 0x5, 0x1000}, @private=0xa010102, @private=0xa010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0xf43f, 0x6, 0x4, 0x6}, @empty, @remote, 0xff, 0x1}}]}, {0x84, 0x6, "39146c815e64188d3e11f486bddf7c57f04052bbf262f46110c327583babbfc471d9c48ad05767c71eab7604f449456ead78d5fb2c771890393ab35ab34142b4137f1c1e845d9763adc9dd44def71c080c6c6d6b087abec62112e9897cd0f7b026611d49c32cd14d5654dc0003e6ffe21e1e60b1733dfda10332bd9951c9bb11"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_simple={0xa0, 0x1f, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0x7, 0x8, 0x2, 0x8cd}}]}, {0x5c, 0x6, "09d73ef5119066b6dc7708d88563c2f834fb72c3211275db13f5606d73e2e2c2572c731f8db743f8be3790386c2033916f202ad102cf185749124de4e489d860192f5c16d89d7c199f0135ee3f26f3ce0c9a58e28695712b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x6c, 0x14, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="362018653108"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x1a, 0x6, "ea8fdf89e1c89f4715e611fbcae0f2f89beb5ab797ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x98, 0x11, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x0, 0x401}, 0x1}}]}, {0x46, 0x6, "d7033b7ee0f1f5273d80c719b5056f5a82b3d8b0ad1dc81e200faabadfba8fe19384cbe350b36d4da13e1ab78cd0b270318042576983b8f72063cc9bc0afd1e6953b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x74, 0x7, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x4, 0x3, 0x9, 0x20000}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb91}]}, {0x24, 0x6, "928883a87f927e181195effd10f2403b35c02abb129d5c7d04b9a340e1462b26"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x138, 0x4, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x20, 0x9, 0x6, 0x7}, 0x100}}]}, {0xea, 0x6, "e9b0f14bf5976ffcd4bbd5162f45d5398c7aaee3274b4476a2c4dc659bb9778f40ba4d6615df5373befc105ce35d3f4110e40e873ca08b526d45c7ef76b2fdd87f1a581df4336d151d132025ba45e7ef48597d69cb778a92885104971b42cef625bb4fc32a7a28392c5b5c5c2fd98e846c10428deb816101e1bc663d360e9b776f328a97f28ace00fca5b954a49081ae9e1dbeb8eb2487000fb9c89e3177c6f813fcdf9acd27e30e1c19bbcb501aa432206b28f4c68d973a3c14d4d107eaddb47384292c8fccef3a91ae661d7ccf4c4e27f01a2499a755eaa46e4a114eee45130f25d5b3a178"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x54, 0x19, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0xf, 0x6, "3e5c5a3e5dd75e6b179f2a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x11f0, 0xc, 0x0, 0x0, {{0x8}, {0x1c8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x108, 0x6, {0x2, 'filter\x00', 0x1, 0x3, "319ff7eeaba4660772f3e0fb6b3030f981f8a572770aff0ff1323c3b64d882d3ad4f68f006786a630e5039ebce510e1f5d06da902f4470c089ee6302241ece1767d53731e98ab52a21bebb5cbaf98a28fc1f85c010adac1c50d47c22875ba63eec560550610b73cc334fbd131f83bd0baec6527c33f050002f8cfa41c9ae609ee8c0175a61699d9984eb25109a46c21d371c00788f1a837c0e948a0ac8119d8e77f511cd2f231bc0989dd6094efeacda66147f22f760b4e18ab339aa3520a1195e77d1e457d70b3c6caeba4a96e55d3a6c4669a9849fd12175d20c3ce7b0"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0xceedf5d98448ec93}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x4b, 0x6, {0x7, 'mangle\x00', 0xb0, 0x9, "257618e9c95223db428289a1798340d3801b50c9d30ab7b430f2939c3bab9547fd"}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x1b24, 0x1, [@m_vlan={0x1038, 0xa, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_xt={0x128, 0x18, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffff7}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x79, 0x6, "07d99a01c121b39f82b42efcd90c5258dc6e6d34904f19da19e42074682078e15f771a1f6a5466f5d430f2f3656ddbe14e636dbb099733a161b1635e25449e6f2bb5af02f0f86dd397697c9464fa60cfbd1a01306f6c72e5e1072cfd0bccfa60022a63f918ec57de4463e1e52092b949680699e749"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x134, 0x1a, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x4830c009, 0x5, 0x80, 0x3ff}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x0, 0x1, 0xe3e, 0x8000}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xf800, 0x8, 0x2a, 0x9}, {0x3, 0x8, 0xa, 0xffffffbd}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x101, 0x5, 0x45, 0x401}, {0x0, 0x4, 0x1f, 0xff}, {0x8dd2, 0x4f, 0x1, 0xfff}, {0x4, 0x3, 0x3}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0x75, 0x6, "392571d11d3f042fe540506d7716d53c370958947ee291f5a3f5d5037ca1ae5a5dee6d664b8a1fa0f625fb706babfc3fcb559e779da2b102db08db96aa6bf9906f51656b52f2a6c4f1131e557efcdb431480f2c2550f58ef6855b4d2e88cff58b2c7d6ae376b801c2da54ae5158ebc20be"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x88c, 0x5, 0x0, 0x0, {{0xb}, {0x814, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0x3, 0x3, 0x9, 0x1f, 0x4, 0x70, 0xc3c, 0x5, 0x7fffffff, 0x8, 0x1, 0x8000, 0x5, 0xffff, 0xffff8000, 0x40, 0x401, 0xff, 0x1, 0xffff, 0x4, 0x1, 0x3, 0x1, 0x4, 0x9, 0x2, 0x844b, 0x9, 0x4, 0xc767, 0x6, 0x3, 0x1, 0x1, 0x8, 0x117, 0xffff, 0x2, 0x1, 0x7, 0x20d2, 0x7, 0x97, 0x2, 0x4, 0xdf09, 0xfff, 0x9, 0xb8f2, 0x9d, 0x9, 0xffff18ba, 0x3, 0x0, 0x7, 0x4, 0x4, 0x4, 0x7, 0x101, 0x0, 0x4, 0x0, 0x9, 0x3, 0x9, 0x1, 0x28b, 0x5, 0x16f3, 0xa7, 0x7, 0x9, 0x7, 0x3, 0x2, 0x200, 0x20, 0x800, 0xf344, 0x6d8, 0x40, 0x5, 0x5, 0x101, 0x2, 0x3ff, 0x101, 0x6, 0x8, 0x5, 0x1, 0x8, 0xfffffff8, 0x4, 0x1, 0x1, 0x1000, 0x3ff, 0xffffffff, 0xffff8001, 0x0, 0x962c, 0x2, 0x10000, 0x1d7c, 0xe9e, 0x5, 0x80000000, 0x40, 0x0, 0x6, 0x9, 0xffff8e4c, 0x0, 0x9, 0x7, 0xfffffffa, 0x0, 0x0, 0x7, 0x10000, 0xffffff7f, 0x4, 0x6, 0x1, 0x2, 0x6, 0x8, 0x0, 0x465e, 0xe28, 0x88a4, 0x1, 0x3, 0x2, 0x8, 0x0, 0x2, 0x0, 0xf98, 0x0, 0x8, 0xfc32, 0x6, 0x5, 0x80000001, 0xcdf4, 0x5, 0xf85, 0x60000000, 0x1, 0xdda, 0x7, 0x2, 0x8, 0x0, 0x9, 0x0, 0x7d, 0x3d, 0x5, 0x7, 0xea7, 0x0, 0x1, 0x6, 0x0, 0x1, 0x6c, 0x4, 0xd6, 0x46e90, 0x6, 0x2, 0x0, 0x1f, 0x1, 0x7fff, 0xffffffff, 0x10000, 0x9a8, 0x9dbe, 0x101, 0x7, 0x9ab, 0x80, 0x4, 0x3f, 0x6, 0x2, 0x20, 0x1, 0x0, 0x7f, 0xaa5a, 0x4, 0x7fff, 0x3, 0x8, 0x9, 0xff, 0x3, 0x1000, 0x401, 0x0, 0x0, 0x1000, 0x97, 0x2, 0x8, 0x2, 0x4396479d, 0x1, 0x0, 0x4b5, 0x0, 0x9257, 0x0, 0x3, 0x7, 0x4f, 0x1, 0x80000000, 0x7f, 0x5, 0x81, 0x3ff, 0x6cad, 0x0, 0x8d, 0x1, 0x800, 0x2, 0x7, 0x800, 0x8001, 0x8000, 0xfff, 0xfffff800, 0x8, 0x0, 0x7fff, 0x1, 0x7, 0x400, 0x9b9, 0x79, 0x9, 0x9, 0x4, 0x4, 0x10000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0xff, 0x0, 0x5, 0x0, 0x7, 0x5, 0x5, 0xc2, 0x5, 0x7fffffff, 0x20, 0x828a, 0x1, 0x80000000, 0x3, 0x6, 0xfffffff9, 0x1, 0x1f, 0x5, 0x1000000, 0x68a, 0x3, 0x4, 0x20, 0x5a05, 0x3, 0x8, 0x6b72, 0x3, 0xfffffffc, 0x0, 0xa300000, 0x100, 0x7, 0xf2df, 0x7f, 0x8, 0x0, 0x50, 0x4, 0x3, 0x6, 0xc3, 0x6, 0x7, 0x3, 0x1, 0x950, 0x0, 0x5, 0x3ff, 0x7, 0x0, 0x4398, 0xffff7fff, 0x35f, 0xffffffe0, 0x0, 0x2, 0x7fff, 0x3ff, 0x401, 0x4dc, 0x8, 0x5, 0x2, 0x2ac0000, 0x400, 0xffffffff, 0x7f, 0x0, 0x1f, 0x1, 0x0, 0x7, 0x0, 0x101, 0xffffffff, 0x5369, 0x0, 0x2, 0x0, 0xeb4, 0x1000, 0x6, 0x10001, 0x7, 0x5, 0x400, 0x34, 0x51, 0x100, 0x7, 0x40, 0x7, 0x7fffffff, 0x98, 0x7, 0x8, 0x1, 0x7fffffff, 0x100, 0x234d7fc9, 0x0, 0x7ff, 0x1000, 0xa440, 0x81, 0x2, 0x8, 0x2f2c, 0xfffff801, 0x5, 0x562aff2e, 0x4, 0x1f, 0x7, 0x5d, 0x0, 0xffff, 0x9, 0xffffffc1, 0x5, 0x7f, 0x7fff, 0xfff, 0x8, 0x8, 0x7ff, 0xb4a5, 0x3, 0x0, 0x6, 0x80000000, 0x3, 0x3, 0x5, 0x80000000, 0x0, 0x81, 0xd6f3, 0x100, 0x80000001, 0x7c, 0x81, 0x9, 0x1000, 0x81, 0x80, 0x80000000, 0x1, 0x5, 0x0, 0x80000001, 0x0, 0x1, 0x1, 0x100, 0xff, 0x1, 0x400, 0xea7c, 0x5, 0x1d73, 0x2, 0x1, 0x3, 0x50c, 0x7, 0x7fffffff, 0x0, 0xb783, 0x4f2, 0x3f, 0x4, 0x2, 0x100, 0x0, 0xfffffffc, 0x2, 0xcba6, 0x7f, 0x5b05745e, 0xff, 0x3, 0x81, 0x5, 0x7, 0xfe, 0x14000, 0x81, 0x8, 0x8000, 0x5, 0x2, 0x1, 0xa18, 0x1ff, 0xff, 0x6, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, 0x8, 0x9, 0x42, 0x80, 0x2, 0x35, 0x0, 0x0, 0x1, 0x451, 0x101, 0x0, 0x10000, 0x7, 0xfff, 0x0, 0x101, 0x1ff, 0x9, 0x7f, 0x7f, 0x1000, 0x409, 0x2, 0x7f, 0x4, 0x80000001, 0x2, 0x5451, 0x800, 0x7, 0x0, 0x88, 0x4, 0xffffffe8, 0x8, 0x5, 0x0, 0x10000, 0x4, 0x8, 0x5, 0x401, 0x40, 0x1, 0x80000000, 0xffffff70]}]]}, {0x4d, 0x6, "40b279fd995082125254b8ff23993de619763ad9437a903ff2f2817065ad079449927d24ee7e97155ae3646b925544599427205f924bf3a338b210e2e312f1cc6b4bd7845e69c34dd6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x260, 0x1, [@m_ct={0x74, 0x5, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0xf, 0xffffffffffffffff, 0x8, 0x88d}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7}]}, {0x2b, 0x6, "780a8e26ce1ca17c1470444cdbd90d11601ec4af2727a6816a63ff94ea41dd1a117f5f0d1092b5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x114, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffe}]}, {0xdc, 0x6, "671ab7606b0d606da04975f460a1fb60ea131362cc55d840bb36742111b3e8fb10e171e6b954e9b9332ed1db4f076b122bbbaebb159864032cd17c402cd99ae987abebbcddad0a9e5faee5ef1082340379acde337dd6ced7f46e7b5c33c04494b2f65836f197ae4a797eefe186a0d8aaa637ae853fda8954d8bb9d2adafaefa45280e2586aa0d5ea465e184a3ba9ba5c8a48ab85846f757438455cbd33867ae1bd0a4fa74edc4181384a6bd4047193ed2598b7140d80dc9be95e918401bf8725b953776615fb4cebe6b8aa7d3854a68f0ac16be2668bd1b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x80, 0x1a, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x94e}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x1, 0x7, 0x3f}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0xe, 0x6, "c1f8ebcc0987bc0d46f3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x54, 0xb, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x401}]}, {0x22, 0x6, "86a0a079c2c67edc74ecd1ba7aa3afe227b0d93a89b6a662e4bcc43c04b3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}]}, {0x213c, 0x1, [@m_mpls={0x12c, 0xe, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x50f60}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x101, 0x5, 0x8001, 0x9}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7fa3f}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xc1, 0x6, "22afdb91edbe7a804418b576d13184ebb6bab33a39990b6f9f065437ed4b6d04e7a7205a550873fdb11376b1c387c38ec24e4af51847c27a8e2f48aeaa1250e1bfedf3eaad40ea23f5173cb32ad943300f591fee7821dd39c1fa2cd98984ecbbbd015e3d42281f997090de6b9b5edeca3552701bfd707322364b3869853583005a8072383ce63c6d119cf7a2dd9c1dfa555611519710ac30e39d258630c8a863db89c936cc5cb7763ed223b62e596a21f488f8b57189168957b14242dc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x90, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x17}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x4b, 0x6, "75553c5faf748189b35e0ba744a4c1350a98f0ab03e9dfc9b672ebb4fb4a5cb91c801bb4eea7fc80bfbe83a310fa079b192c7b1916d6a14fcf6f9ee399217c6142c55baae527c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x118, 0x14, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1, 0x6, 0x6, 0xf9d}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2419}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x0, 0x20000000, 0x1, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x8d6, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x10a2, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x9, 0x3000000d, 0x7, 0x252b78b8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1db2, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xfffffffe, 0x6, 0x5302, 0x3f}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13e2, 0x10000000}}]}, {0x4e, 0x6, "a4ce644a8b4f5ff6db3fcfe86b7dae9c464b09d39e84c2c40e01dba3332c8220de731ece3e15fcb17d50a4d2498d468a765e00f442dab0c11edc7340317478da9da03166e4c49aaeacb3"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xa0, 0x8, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3ff, 0x7fff, 0x20000000, 0x90, 0x20}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xec68, 0x23, 0x8, 0x7, 0x4}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xdc43}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x24, 0x6, "e14153ac6618d59551ba937310a7e2edb4c96ce5a47cda0ff21671373bec4c80"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x1dc4, 0x1b, 0x0, 0x0, {{0xa}, {0x1d04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x7, 0x4, 0x20000000, 0x1, 0x20}, 0x4, 0xff, [{0x5, 0x10001, 0x64e, 0x7, 0x5, 0x8}, {0xe, 0x17, 0x9, 0x29, 0x8, 0x2}, {0x5, 0x40, 0x8, 0x3, 0x1000, 0x10000}, {0x90f6, 0x100, 0x1, 0x2f16b597, 0x3, 0x3}, {0x1f, 0x30cd, 0x1d9934db, 0x8, 0x9, 0x3}, {0x9, 0x101, 0xffffdbd1, 0x10001, 0x1000, 0xffffff81}, {0x6, 0xc1, 0x7, 0x9, 0x1000, 0x6}]}, [{0xa9, 0x3f, 0x0, 0x4, 0x400, 0x4}, {0x8000, 0x8e6, 0x3, 0x9, 0x5, 0x800}, {0x3f, 0x7f, 0x5, 0x8e, 0x401, 0x5}, {0x3, 0x40, 0x2f94, 0x5, 0x800, 0x3}, {0x7, 0x8, 0xff, 0xfa, 0x3, 0x9}, {0x5d4, 0x1, 0x5, 0x8, 0x5fe6, 0x3ff}, {0xff, 0x7, 0x2, 0x5, 0x8000, 0x3c}, {0x4, 0x4, 0x800, 0x8, 0x401, 0x401}, {0x1, 0x4e06, 0x216, 0x2, 0x84, 0x8}, {0x1, 0x6, 0x2, 0xfd1d, 0x8, 0x20}, {0x8c37, 0x3ff, 0x8, 0x7f, 0x3ff, 0x2}, {0xffff, 0x2, 0xa778, 0x1, 0x8, 0x8}, {0xfffffffa, 0x8, 0x101, 0xffffffff, 0x4, 0x7fff}, {0x2, 0x20, 0x3ff, 0x7f, 0xe26f, 0x5}, {0x8, 0x657a, 0x6, 0xfffffff9, 0x4, 0xff}, {0xb51, 0x1, 0x7, 0xfffff000, 0x9, 0x7f}, {0x9, 0x401, 0x3000000, 0x97e2c8e, 0xb87, 0x5}, {0x8, 0x5, 0x80000000, 0x1, 0x5, 0xc11}, {0xffffffff, 0xe37a, 0x3, 0x1, 0x2, 0x3}, {0x1, 0x2, 0x20, 0x200, 0xff, 0x7}, {0x84fe, 0x81, 0x2, 0x8f, 0x1000, 0x3}, {0x6, 0xb7d2, 0x1f, 0x0, 0x7ff, 0x3}, {0x40, 0x9cd2, 0x1, 0x28, 0x7fffffff, 0x672}, {0x8000, 0x8, 0x101, 0x0, 0x8001, 0x6}, {0x7f, 0x4, 0xa9f, 0x9, 0xb79, 0x800}, {0x8, 0x300, 0x1, 0x1f, 0x5, 0x100}, {0x4, 0xc271, 0x6, 0x3, 0xffff, 0x64}, {0x4, 0xae60, 0x7, 0x9, 0x7e, 0x8}, {0xffff0000, 0x100, 0xfffffff8, 0x6, 0x1, 0x8}, {0x9c, 0x2, 0x4, 0x1ff, 0x1, 0xff}, {0x2, 0x181, 0x1, 0x8, 0x3, 0x3ff}, {0xfffeffff, 0x6, 0x1, 0x4, 0x2, 0x2}, {0x3, 0x8, 0x0, 0xc37, 0x200, 0xff}, {0x200, 0x5, 0x0, 0xffffff1d, 0x7, 0xfffffff9}, {0x8, 0x4, 0xcf01, 0xffffffff, 0x6, 0x9}, {0x8, 0x5, 0x2, 0x33368403, 0x1, 0x80}, {0x5, 0x9, 0x6, 0x5, 0x7, 0xfff}, {0x1, 0x200, 0x2, 0xfffff550, 0xff, 0x9}, {0xffff0000, 0x6458, 0x7fffffff, 0x1, 0x7, 0x702731e5}, {0x4c3, 0x5, 0x2, 0xc7c9, 0x80000001, 0x200}, {0x4, 0xfffff8ad, 0x9, 0x7, 0xffffffff, 0x5}, {0x6, 0xfffffffb, 0x4, 0xe8, 0x9, 0x6}, {0x0, 0x9, 0x9, 0xe07, 0x7fffffff}, {0xfff, 0x33, 0x7ff, 0x3, 0x6, 0x7fff}, {0x6, 0x7, 0xfffffffe, 0x8, 0x79, 0x59}, {0x1829, 0x101, 0x4, 0x8000, 0x0, 0x480}, {0x200, 0xaf53, 0x7, 0x0, 0x1f, 0x7f}, {0x7f, 0x6, 0xfff, 0x7, 0x4, 0x5}, {0x3, 0x3, 0x3, 0x5, 0x9, 0xfff}, {0x80000001, 0x93c, 0x6, 0x7, 0x29}, {0xa, 0xd3, 0x45, 0x8, 0x8, 0x1000}, {0x1, 0xfffffffe, 0x7f, 0x80000000, 0x3ff, 0x3ab1}, {0x1, 0x7, 0x3, 0xfffffff8, 0x80, 0x52a}, {0x1, 0x0, 0x8, 0x1, 0x1000, 0x6}, {0x4, 0x8, 0xffffff6e, 0x9, 0x4, 0x2}, {0x1ff, 0x4, 0x3, 0x6, 0x20, 0x2}, {0xfffffffe, 0x0, 0x2, 0x9, 0x7fffffff, 0x20}, {0x6, 0x3, 0x5, 0x7b2, 0x1, 0x8}, {0x1, 0xcf4c, 0x2, 0x1, 0x1000, 0x6}, {0x0, 0xd8, 0x8, 0x3, 0x0, 0x4}, {0x3, 0x80000000, 0xfffffffb, 0x0, 0xffffffe0, 0x7fffffff}, {0x349, 0x0, 0x5, 0x3, 0x81, 0x80000001}, {0x8, 0x388, 0x5, 0x1, 0x9, 0x2}, {0x40, 0x3, 0x5, 0x94, 0x7, 0x3}, {0xffffffc0, 0xa9a, 0x6, 0x0, 0x7fff, 0x8}, {0xddcf, 0x0, 0x56f, 0x0, 0x7fff, 0x5533}, {0x843, 0xffff, 0x20, 0xffffffff, 0x4, 0x8001}, {0x3ff, 0x20, 0x0, 0x1, 0x95f, 0x81}, {0x9, 0x1ff, 0x1, 0x0, 0xffffffff, 0x20}, {0x100, 0x8001, 0xff, 0x1, 0xfffffd4f, 0x3}, {0x8, 0x40, 0x8, 0x0, 0xffff28e9, 0xfffff823}, {0x4, 0x0, 0x2, 0x101, 0x589c, 0x9}, {0x54c7, 0x1665, 0x0, 0xfffff000, 0x3, 0x1000}, {0x0, 0x5, 0xca6, 0x8001, 0x80000001, 0xaef}, {0x9, 0x1, 0x421, 0x9, 0x1e87, 0xf33}, {0x1, 0x4, 0x8, 0x76, 0x6840, 0xff}, {0x1, 0x4, 0x1000, 0x40, 0x4, 0x3}, {0x7, 0x7, 0x7fff, 0x4, 0x9, 0x3}, {0x1f, 0x7fff, 0x4, 0x80000000, 0x9, 0x7f}, {0x9, 0x5, 0x18000000, 0x7, 0x8df1, 0xfffffff9}, {0x3, 0x4f, 0xfffffffc, 0x8e0, 0x8, 0x5}, {0x0, 0x17ea, 0x3ff, 0xfffffff9, 0x8, 0x6}, {0x6, 0x3, 0x6, 0x8000, 0x3, 0x4}, {0x3, 0x3, 0x4, 0xc01, 0x101, 0xb82b}, {0x101, 0xfffffffc, 0x6, 0x3ff, 0x9, 0x2}, {0x1, 0x9, 0x100, 0xa60, 0x1, 0xf3}, {0x1ff, 0x73fe44b1, 0x1, 0x5, 0xd58, 0x80000001}, {0x3f, 0x9, 0x80000000, 0xfffff001, 0x5, 0x7}, {0x5, 0x80, 0x4, 0x6, 0x80, 0xbe}, {0x6, 0x6, 0x2, 0xe46, 0x401, 0x276a}, {0x140, 0x68, 0x0, 0xf8, 0x5, 0x3}, {0x1, 0xe0000000, 0x8, 0x81, 0x7ff, 0xfff}, {0x8c, 0xb50a, 0x1, 0x96b, 0x80000000, 0x80000000}, {0x80000001, 0x4bf, 0x9, 0x6, 0x2, 0x7fffffff}, {0x7155, 0x40, 0x0, 0x1ff, 0x2, 0x7fff}, {0x8, 0xcf, 0x7, 0x4, 0xf5f9, 0x7fff}, {0xffffff81, 0x92b0, 0x6636c14f, 0x0, 0x9, 0x5}, {0x1200000, 0x101, 0x5, 0x3, 0x1, 0x101}, {0x9, 0x6, 0x3, 0x1, 0x8}, {0x7, 0x812f, 0x40, 0x40, 0x768113de, 0x4}, {0x7, 0x8, 0x7, 0xcebf, 0xffff, 0x5}, {0x6, 0x655cf653, 0x2bd8, 0x3, 0xc5, 0x10000}, {0x4, 0x7, 0x3800000, 0xfff, 0x6, 0x225}, {0x5, 0x4, 0x4, 0x9f, 0x0, 0xd82}, {0x2, 0x3, 0x3f, 0x4, 0x9, 0x80000000}, {0x8, 0x47e, 0xfff, 0x401, 0x8, 0x8000}, {0x2f8, 0x7, 0x101, 0xf2, 0x5, 0x8}, {0x100, 0x1a1, 0x5d, 0x1c3f, 0x8, 0x2}, {0x7ff, 0x6, 0x1, 0x7, 0x4, 0x7fffffff}, {0x3, 0x7, 0x81, 0x4, 0x101, 0x2}, {0x6c, 0xa6f, 0x812f, 0x7fff, 0x83, 0x4}, {0x5, 0x401, 0x3, 0x6, 0x7b8a}, {0x6, 0x5, 0xab5, 0x86, 0x5, 0x7ead}, {0x9742341, 0x3, 0x8, 0x3, 0x800, 0x8}, {0x0, 0x8000, 0x4, 0x8, 0x8001, 0x62}, {0x10000, 0x1, 0x10000, 0x4c1, 0x100, 0x100}, {0x3, 0x0, 0x4a8f, 0x81, 0xffffffff, 0x2}, {0x4, 0x1, 0x9, 0xfffffffd, 0x8, 0x7fff}, {0x80000001, 0x5, 0xffff, 0x7f3, 0x1, 0x81}, {0x9, 0x1, 0xff, 0x1000, 0x1f, 0x6}, {0x200, 0xffffffff, 0x3, 0x7, 0xe3aa, 0x6}, {0x800, 0x10001, 0x6, 0x0, 0x6}, {0x2, 0x5, 0x4, 0xa0, 0x81, 0x1}, {0x5, 0x800, 0x81, 0xc8, 0x8000, 0x1}, {0x76, 0x1, 0x5, 0x0, 0x0, 0x2}, {0x1, 0x2d8, 0x10001, 0x6, 0x6, 0x6}, {0x101, 0x3, 0x10000, 0x0, 0x618, 0x7fffffff}, {0x1, 0x7, 0x9, 0x7, 0x1, 0xcc}], [{0x3}, {0x4, 0x1}, {0x5, 0x79b66569f68d74fd}, {}, {0x3}, {}, {0x5}, {0x3}, {0x1}, {}, {0x2}, {0x1}, {0x2}, {0x5}, {}, {}, {0x3}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x6, 0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3df9163152f98a03}, {0x5}, {0x2, 0x1}, {0x5}, {0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {}, {0x2, 0x1}, {0x5}, {}, {0x5}, {}, {0x2}, {0x1, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x2, 0x4, 0x1, 0xbde, 0x2c}, 0x0, 0xfd, [{0x7, 0x2, 0x6, 0x0, 0x0, 0x4}]}, [{0xfffffffa, 0x7, 0x8, 0x80000, 0x8, 0x400}, {0x5, 0xffff, 0x6, 0xffffffff, 0x1d, 0x100}, {0x7, 0x88cb, 0x0, 0x2, 0x2, 0x200}, {0xfafa, 0x5, 0x3f, 0x4, 0x1}, {0xfffffff7, 0x202, 0x8, 0x3, 0x4, 0x1}, {0x3, 0xa72, 0x3, 0x101, 0x3, 0x9}, {0x7, 0xafa30, 0x1, 0xf968, 0x10b5, 0x6}, {0x9b, 0x0, 0x4, 0x10000, 0x101, 0x5}, {0x1, 0xd2, 0x3653, 0x0, 0x5, 0xffffffff}, {0x0, 0x200, 0x6, 0x333, 0x8000, 0x7fff}, {0xffffff91, 0x7, 0x3f, 0x1, 0x5c, 0x54b32a49}, {0x800, 0x4, 0x7, 0x6, 0x4abe, 0x8}, {0x7, 0x1, 0x5cf8, 0x4, 0x7fff, 0x8}, {0x0, 0x8, 0x6, 0x8, 0x1, 0x7}, {0x40, 0x0, 0x3, 0x3, 0x369, 0x10000}, {0x9cf, 0x6, 0x1f, 0x80000000, 0x400, 0x1ff}, {0x6, 0x9d, 0x3, 0x200, 0xff, 0x4}, {0x200, 0x4, 0x11d8cc47, 0xf5, 0x9, 0x3f}, {0x4d71, 0x9, 0xffffffff, 0x8, 0xffff, 0x1}, {0x3, 0x5, 0x83, 0x7f, 0x5, 0x2}, {0x80000000, 0x3f, 0x800, 0x2, 0x10000, 0x7}, {0x52, 0x800, 0x3f, 0x1, 0x3, 0x5}, {0x8001, 0x5, 0x0, 0x3, 0x3f, 0x4}, {0x1, 0x6b, 0xf, 0x9, 0x8, 0x4}, {0x5, 0x1, 0x0, 0x462, 0x6, 0x6}, {0x0, 0x2, 0x7923ba08, 0x1, 0x3962, 0x4}, {0x81, 0xfc, 0x6, 0x5, 0xffffffff, 0xfffffffe}, {0x10000, 0x8b0e, 0x63c, 0x0, 0x7, 0x4}, {0x0, 0x9c53, 0x9, 0x4, 0x5}, {0x8, 0x1, 0x5, 0x3f, 0x100, 0x20}, {0x80000000, 0x1000, 0xf4, 0x4, 0x5, 0x10000}, {0x3ff, 0x4, 0x8, 0xc5, 0x7a1a, 0x4}, {0x6, 0x1, 0x8001, 0x0, 0x6, 0x9}, {0x7, 0x2, 0x4, 0x1, 0x6, 0x5}, {0x8, 0xd253, 0x7, 0x7, 0x7fffffff, 0x4}, {0x80000000, 0x81a, 0x8, 0x1, 0x10000, 0x6}, {0x5, 0xffffffff, 0xfffffffe, 0x80, 0x0, 0x1ff}, {0x0, 0xe062, 0x1b, 0x4, 0x4, 0x1ff}, {0x2, 0x0, 0x9, 0x7, 0x0, 0xee}, {0xe1fc, 0x0, 0x89, 0xfffffffc, 0x10001, 0x9}, {0x5, 0x3, 0x0, 0x200, 0x80000001, 0x5fb5ba5f}, {0x6, 0x401, 0x3ff, 0x0, 0x400, 0x3}, {0x3, 0x0, 0x7ff, 0x5}, {0x400, 0xff, 0xffffffff, 0x7fff, 0x302e45fe, 0x3}, {0x5, 0x0, 0x7fffffff, 0xffffffff, 0x4, 0x5}, {0x50, 0x2, 0x1c000000, 0x10000, 0xfffffe01, 0x593c}, {0x80000001, 0x2, 0xfffffffe, 0x25b, 0x80, 0xd2cf}, {0x5, 0x9, 0x0, 0x35c7, 0x0, 0x1f}, {0x6, 0x3d3b8df2, 0x4, 0x8, 0x1, 0x6}, {0x1, 0x401, 0x0, 0xfffffffa, 0x8001, 0x400}, {0x4, 0xffffffe1, 0x0, 0x0, 0x3, 0x5}, {0xffffffff, 0x4, 0xdcb7b0d, 0x7, 0x1, 0x80000000}, {0x80000001, 0xfe1b, 0x9, 0x7, 0x5, 0x10000}, {0xa9f, 0x8, 0xe3d, 0x7b7fc0ee, 0x2, 0x81}, {0x2e7, 0x1000, 0x3a84, 0x651, 0x1000, 0x3d7977d9}, {0x9, 0x7ff, 0x7, 0xed, 0x10001, 0x7fffffff}, {0x6, 0x7, 0x3, 0x92, 0x8, 0xc0000000}, {0x7ff, 0x32c, 0x200, 0x7, 0x1ff, 0x5}, {0x6, 0xb407, 0x68e06ce4, 0x5, 0x2, 0xfffffd36}, {0x1, 0x1e1, 0x401, 0x81, 0x7, 0x9b1}, {0x1, 0x20, 0x2, 0x1f, 0x7a7, 0x3}, {0x9, 0xf63, 0x6, 0x6, 0x1, 0x7}, {0x8, 0x2000000, 0x7, 0x9, 0x550, 0xfffffffd}, {0x7d1, 0x8, 0x9, 0x6, 0x4b3e, 0x63}, {0xffffffc2, 0x80, 0xaee, 0x9, 0x76, 0x3f}, {0x6, 0xfffffffe, 0xffffff81, 0x5, 0x3, 0x2}, {0x8, 0x9, 0x7fff, 0x3, 0x4}, {0x4, 0x3, 0x7, 0x8, 0xff, 0x6}, {0x0, 0xffff0000, 0x81, 0x800, 0x9, 0x8000}, {0x7, 0x5, 0xe63b, 0x4, 0x8, 0x6}, {0x3, 0x80000000, 0x80, 0xde9a, 0x7bc, 0x80000000}, {0x7, 0x7fff, 0x80, 0x1000, 0xeb2e, 0x8}, {0x80000000, 0x3, 0x0, 0x4, 0x3d08}, {0x80000001, 0x400, 0x9, 0x0, 0x3}, {0x3, 0xffffffff, 0x9, 0x5, 0x100, 0xfffff5f4}, {0x1, 0x6, 0x9, 0x0, 0x5, 0x9}, {0x2, 0x4, 0x3, 0x81, 0x395, 0xffffffff}, {0x1ff, 0x696e25a7, 0x7fffffff, 0x3ff, 0x401}, {0xfffff001, 0xf239, 0xffff, 0x400, 0x6, 0xdc}, {0x95, 0x5, 0x2, 0x7, 0x5, 0x7fff}, {0xfffffffd, 0x4, 0x2, 0x1, 0x8}, {0x4, 0x40, 0x1ff, 0x7, 0x6, 0x7f}, {0x10000, 0x8001, 0x3, 0x7, 0xba7, 0x8}, {0xffffff7f, 0x92, 0x8001, 0xfffffff8, 0x800, 0x97}, {0x28, 0xffffffff, 0xfff, 0xa12, 0x7fffffff, 0xffffffff}, {0x5, 0x1, 0x9, 0x8, 0x8001, 0x80000001}, {0x4, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x4, 0x4, 0xc96, 0x0, 0x7fff, 0x7}, {0x4, 0x41b19f33, 0x1b, 0x4, 0x5, 0x633}, {0x86, 0xfffffffd, 0x0, 0x2, 0x8, 0x80000000}, {0xffffffe0, 0x20, 0x10000, 0xb9, 0x8f, 0x8}, {0x1, 0xa731, 0x5, 0x1, 0x4, 0x3ff}, {0x6, 0x80000000, 0x4, 0x3, 0x1, 0x4}, {0x19, 0x3, 0x6, 0x5, 0x4, 0x9}, {0x7f, 0x790599c5, 0x77, 0x1, 0x800, 0xff}, {0xc2, 0xffa, 0xcb, 0x46ea, 0xae, 0x2}, {0x5, 0x9, 0x5b, 0x7ff, 0x2, 0x2}, {0x2, 0x67, 0x2d, 0x6, 0x7, 0x40}, {0x3ff, 0x1, 0x0, 0x8, 0x3590a4fd, 0x4}, {0x7, 0x6, 0x3, 0x4, 0x3, 0x7}, {0x6, 0xfa7b, 0x9, 0x9, 0x9, 0x9}, {0x415f, 0x8, 0xa6, 0x9, 0x3059, 0x7}, {0x228, 0x5, 0x3ff, 0x6, 0x2, 0xffff0000}, {0x7f, 0xd4, 0x1000, 0x7, 0x671, 0x5}, {0x8000, 0x1f, 0x889, 0x55ef, 0x0, 0xf530}, {0x3f, 0x5, 0x1000, 0x9, 0x0, 0x59d}, {0x80, 0x7f, 0x80, 0x9, 0xfffffffd, 0x7}, {0x7, 0x9, 0x8, 0x3f, 0xfffffffe, 0x1000}, {0x6, 0x1, 0x200, 0x217, 0xa7, 0x4}, {0x2, 0x0, 0x1, 0x8001, 0x0, 0x2}, {0x1ff, 0x5, 0x4, 0x20, 0x80, 0x1}, {0x8001, 0x3, 0x0, 0x1, 0xff, 0x3}, {0x7406, 0x9, 0xa16, 0x7, 0x7fffffff, 0x3}, {0x6, 0x4, 0x7, 0x81, 0x7, 0x6}, {0xfffffffd, 0x0, 0x7f, 0xffffffff, 0x8, 0x6}, {0x3f, 0x4, 0x6, 0x4, 0xfb7, 0x400}, {0x7, 0x821, 0x6, 0x80000001, 0x1, 0x7}, {0x7, 0x8, 0x432b, 0x7ff, 0x1, 0x21}, {0x1, 0x3, 0x0, 0xffff, 0x5, 0x2}, {0x0, 0x43, 0x0, 0x6, 0x80000001, 0x4}, {0x7, 0x0, 0x8001, 0x7, 0x0, 0x3}, {0x80, 0x20, 0x419, 0x200000, 0xffffffff, 0x9}, {0x3, 0x2, 0x4, 0x400, 0x8, 0x7cf}, {0x8, 0x400, 0x7, 0x7, 0x9, 0x8}, {0xced, 0x1, 0x5674, 0x10001, 0x401, 0xb6}, {0x80000000, 0x0, 0x7f, 0x10001, 0x0, 0x7fffffff}, {0x80, 0x1, 0x9, 0x3, 0x2, 0x200}, {0x0, 0x9, 0x101, 0x0, 0x5, 0x6}], [{0x4, 0x3}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {}, {0x3, 0x41aae1f810840194}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x5}, {0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0xf3fd60ca80fbf981, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {}, {0x5}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xb5a3b2ce569bbfd6, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x6}, {0x4}, {0x2}, {0x2}, {0x2, 0x1}, {0x2}, {}, {0x2}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1}], 0x1}}]}, {0x95, 0x6, "d1e9ec5ee3aac3f3ef269d7380c592aa9e65f528557402940e09b9a9dcfca3bd4d4355d30a2c1e2a25cf1c72d63e1c9bfa00c337cffc7b92b8732f18dedf19bb333c0354fe893564ed1ee534980fb4315d2432bb91a514ff5eaccd1fcc795a3460a60fd8c6da6d74e75e618e9d832777d8cd7f33b51b0033c07be7960a8353b0b3cd8455fb7df17665d98605ffa763ebd9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x2308, 0x1, [@m_pedit={0x20f4, 0x19, 0x0, 0x0, {{0xa}, {0x20ac, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x3, 0x101, 0x0, 0x786, 0x80000001}, 0x81, 0x19, [{0x5, 0x4, 0x9, 0x6, 0x4460, 0x3}, {0x8e, 0x7, 0xd, 0x2, 0x1000, 0x9}, {0x6, 0x9, 0x4, 0x1f, 0x8, 0xe20}]}, [{0x5, 0x52834d1e, 0x5, 0x8, 0x5, 0x11}, {0x101, 0x6, 0x8381, 0x4, 0x1, 0x4}, {0x7fffffff, 0x40000000, 0xd4, 0x8, 0x32, 0x3}, {0x6, 0x1000, 0x7ff, 0xffff, 0x3f, 0x3}, {0x21c0000, 0x81, 0x0, 0x9, 0x9, 0x5}, {0x7, 0x1ff, 0xab5, 0x8001, 0x80, 0xe6d}, {0x87, 0x0, 0x56821391, 0xdd5, 0x9, 0x2}, {0x20, 0x0, 0x2, 0x0, 0x1, 0x8}, {0x100, 0x8, 0x1, 0x8, 0x101, 0x7}, {0x2, 0xf7, 0x0, 0xfffff800, 0x8, 0x5}, {0x3, 0x0, 0xff, 0x0, 0xffffff7f, 0x1}, {0x7, 0x12, 0x6, 0x4, 0x0, 0x4}, {0x80000000, 0xffffffff, 0x1, 0xffffffc1, 0x8, 0x400}, {0x8001, 0x4801, 0x8, 0x2, 0x7, 0x7}, {0xfffffff7, 0x401, 0x7ff, 0x7, 0x3c5e, 0x1f}, {0x0, 0x10001, 0x54000000, 0x0, 0xeb}, {0x10001, 0x800, 0x15e, 0x10, 0x4, 0xffffff9e}, {0x8d15, 0x41c, 0xcec96af, 0x9}, {0x3ff, 0x0, 0x13, 0xfff, 0x1, 0x7504}, {0x6, 0x5, 0x7, 0x8, 0x1, 0x6}, {0x82c, 0x4, 0x8, 0x3ff, 0xfffffff8, 0x3}, {0xffff, 0x4, 0x2, 0x8000, 0x7ff, 0x10001}, {0x8001, 0x9f65, 0x5, 0xd748, 0x8, 0x7fff}, {0x3f, 0x97, 0x4, 0x10000, 0x2, 0x7760}, {0x1, 0x5, 0x6, 0x5, 0x8, 0x40}, {0x0, 0x8, 0x3, 0x1, 0x1, 0x2}, {0x4, 0x101, 0x9, 0x7fff, 0x9569, 0x80000000}, {0x8d8, 0x9, 0x7, 0x6000, 0x3, 0x6}, {0x400, 0x0, 0x18000, 0x3, 0x1, 0xfffffff8}, {0x3ff, 0x80, 0x0, 0x6c1f, 0x4, 0x3}, {0x20, 0x2, 0x4, 0x36d, 0x3f, 0x7}, {0x50a7264b, 0x2, 0x7, 0x2, 0xec6c, 0x400}, {0x1, 0x1, 0x9, 0x1f, 0x400, 0x7ec}, {0x4, 0x3f, 0x0, 0x800, 0x9, 0x8001}, {0x401, 0x2, 0x2, 0x7fffffff, 0xff, 0x8c9}, {0xfffffffb, 0x3, 0x3, 0x3f, 0x2, 0x20}, {0xffffbe0b, 0x9, 0xfffff001, 0xa132, 0xfffffffd, 0x5c9}, {0x101, 0x8, 0x401, 0x2, 0x7, 0x4fe}, {0x3, 0x3, 0x80, 0x1000000, 0x87fd, 0x4}, {0x0, 0x7fffffff, 0x0, 0x0, 0x5a}, {0xc52, 0x7fff, 0x7fffffff, 0x4, 0x3, 0x7}, {0x1, 0x3, 0xe89, 0x1f, 0x6, 0xff}, {0x4, 0x3, 0x5, 0x3f, 0x8, 0x3ff}, {0x6, 0xfffffc01, 0x4, 0xe1f, 0x2, 0x2}, {0x9, 0x400000, 0x84a, 0x7, 0x1, 0x5}, {0x2, 0x4, 0x2, 0x4447, 0x0, 0x10000}, {0x7, 0x80000000, 0xd1a, 0x7, 0xbd1e, 0x401}, {0xf, 0x10001, 0x40, 0xe32, 0x2, 0x3f}, {0x40, 0x9, 0x8, 0x25f, 0x200, 0x7}, {0x7fff, 0x1, 0x2, 0x8, 0xa07, 0x10000}, {0x1, 0x3, 0x63, 0x6, 0xe74f, 0x9}, {0x200, 0x3ff, 0x7, 0x7, 0x800, 0x4}, {0xde, 0x9, 0xf93b, 0x9, 0x65, 0x3}, {0x7, 0xfffffffe, 0x1f, 0x0, 0x1, 0x1}, {0x4, 0x400, 0xfffffffb, 0xfffffeff, 0x1f, 0xd801}, {0x9, 0x101, 0xd834, 0x8, 0x0, 0x20}, {0x9, 0xa3fb, 0x80000001, 0x7fff, 0x4, 0x200}, {0xa0, 0x3f52, 0x40, 0x1, 0x6, 0x10001}, {0x0, 0x101, 0x6, 0x8, 0x8, 0x8}, {0x5, 0x7, 0x7, 0x5, 0x0, 0x170}, {0x2, 0x20, 0x6, 0x5, 0x5, 0x5}, {0x8000, 0x10000, 0x3d1b, 0x8, 0x8, 0x8}, {0x800, 0x3f, 0x7f, 0x20, 0x5, 0x2}, {0x2, 0x9, 0x4, 0x46, 0x3, 0x8}, {0xfff, 0x0, 0x4, 0x8000, 0x80000001, 0x5}, {0x10000, 0xf64, 0x2, 0x7, 0xca57, 0x2}, {0x0, 0x72, 0x9, 0x8000, 0x20, 0x2}, {0x12, 0x800, 0x0, 0xcfb7, 0x1, 0xcc}, {0x3f, 0x7fffffff, 0x7c0d, 0x4, 0xb8, 0x1}, {0x9, 0x7fffffff, 0x101, 0x1f6, 0x400, 0x7}, {0xf773, 0x4c, 0x1, 0x200, 0xfffffffa, 0x7ff}, {0x9, 0x1, 0x3, 0xb9, 0x2, 0x4}, {0x83, 0x0, 0x8, 0xfffffffb, 0x7fffffff, 0x80000001}, {0xe0, 0x7, 0xb1, 0x3, 0x7, 0x800}, {0xfffffff7, 0x3, 0x1, 0x0, 0x1, 0x8}, {0x9, 0x0, 0x5, 0xd2, 0x8, 0x2}, {0x3, 0xffff0000, 0x1, 0x0, 0x9, 0x1000}, {0x2, 0x4af6, 0x8, 0x1, 0x81, 0x80000000}, {0x9, 0x2, 0x3, 0xe9, 0x7, 0x6}, {0x3, 0xffffffff, 0xff, 0x6, 0xff, 0xfffffff7}, {0x7, 0xb648, 0x8, 0x3, 0x6d920269, 0x5}, {0x3f, 0x9, 0xfffffaa9, 0x1f, 0x3, 0x2}, {0x1f, 0xa6a, 0x1, 0x5700, 0x0, 0x2}, {0xf1d, 0x992, 0xa9c3, 0x4, 0x9f9c0000, 0x2f}, {0x0, 0x1e34, 0xc5, 0x3b403839, 0x3f}, {0x5, 0x2, 0x0, 0x9a1, 0x7, 0x92}, {0x5, 0x0, 0x2, 0xe2}, {0x4, 0x6, 0x10001, 0x1, 0x0, 0x3}, {0x8001, 0x9, 0x3ff, 0x2de9, 0x10000, 0x7}, {0x80, 0x1, 0xffffffff, 0xcc4, 0x1, 0x80000001}, {0x9a, 0x95d0, 0x4, 0xf5, 0x1bfe, 0x40}, {0x1f, 0xff, 0xffff8001, 0x1f, 0x409, 0x7}, {0x101, 0x0, 0x4, 0x2, 0x40, 0xfff}, {0xffffffff, 0xffff, 0x101, 0x8, 0x3, 0x800}, {0x6, 0x1b, 0x7, 0x1, 0x2, 0x5}, {0x60, 0x5, 0xfffffffa, 0x1, 0x5b45, 0x3f}, {0x0, 0x0, 0x81, 0x1000, 0x5, 0xfffffffd}, {0x2, 0x97, 0x1, 0x7, 0x20, 0x4}, {0x3abe, 0x3, 0xfffff000, 0x10000, 0x6, 0x7ff}, {0x3, 0x6, 0x3, 0x8000, 0x200}, {0x3, 0x10000, 0x63, 0x3, 0x7261, 0x101}, {0x4, 0x7, 0x3e, 0x5, 0x4a6, 0x105}, {0x1f, 0x4, 0x1, 0x4, 0x9, 0x67d}, {0x4, 0x200, 0xffffa1a6, 0x10000, 0x3}, {0x3, 0x3, 0xfffffe00, 0x0, 0xcfd, 0x40}, {0x5, 0x7fff, 0x7, 0x2, 0x97}, {0x7fffffff, 0x1, 0x8, 0x5, 0x0, 0x81}, {0x9, 0x6, 0x3, 0x9, 0x8, 0x5}, {0x7, 0x7, 0x4, 0x4, 0x81, 0x9}, {0x4, 0x0, 0x0, 0x1f, 0x6, 0x3f}, {0x847, 0xab4, 0x20, 0x2, 0x3, 0x5}, {0x9, 0x0, 0xa41a, 0xfffff000, 0x1, 0x5}, {0x0, 0x20, 0x1f, 0x10001, 0x200, 0x2}, {0xffff, 0x7fffffff, 0x80000001, 0x40, 0xfff, 0x9}, {0x80, 0x0, 0x30ce7246, 0x9, 0x3f, 0x6}, {0x20, 0x8, 0x5, 0x5, 0x8, 0x4}, {0x2, 0x1, 0x3, 0x754, 0x7eed, 0x9}, {0x7f, 0x9, 0x80, 0x8000, 0x25b, 0x8000}, {0x7, 0x1000, 0x6, 0x902, 0x2, 0x7}, {0xe00000, 0x81, 0x5, 0x254e, 0x1, 0x800}, {0x8000, 0x7, 0x4, 0x2, 0x3, 0x9}, {0x8, 0x2, 0x2, 0x2, 0x81, 0x2}, {0x8, 0x9, 0xfffffe00, 0x6, 0x2, 0x8}, {0x2, 0x8, 0x400, 0xfff, 0x583d4e9f, 0xe}, {0x29, 0x3, 0x800, 0x974a, 0x9, 0x3}, {0xffffffff, 0x40, 0x8, 0x7, 0x6, 0xfffffffc}, {0x80, 0x9, 0x1ff, 0x9, 0x3, 0x5}, {0xe9, 0x1, 0x5, 0xff, 0x1, 0x3a36}], [{0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x2}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {}, {0x5}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x7}, {0x1}, {0x5, 0x89a80a42aa823b1b}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x214, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xeedd2743ca681e66}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x64, 0x5, 0x0, 0x1, [{0x4}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4}]}, @TCA_PEDIT_KEYS_EX={0x130, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x3, 0x1f, 0x10000000, 0x22, 0x8}, 0x9, 0x55, [{0x2, 0x3, 0x4, 0x2, 0x9, 0x6}, {0x6, 0x2, 0x76, 0x3, 0x9de, 0x2}, {0x4, 0x6, 0x7, 0x7, 0x1, 0x4}, {0x4, 0xa39, 0xa2, 0x7, 0xb2c7, 0x9}, {0x1, 0x1ff, 0xc7, 0x3f, 0x1, 0xfffffff7}]}, [{0x80000001, 0x3, 0x2, 0x20, 0x7, 0x9a90}, {0x0, 0x2, 0x200, 0x81, 0xdc5, 0x4}, {0x8, 0x3357, 0x7, 0x558, 0x0, 0x401}, {0xfffffffd, 0x2, 0x1ff, 0x1, 0x81, 0x4}, {0xffff, 0x1f, 0x5, 0x6, 0x2, 0x80000000}, {0xda8, 0x0, 0x8, 0x3, 0x4, 0x2}, {0x7ff, 0x8, 0x53b, 0x7, 0x2, 0x8}, {0x8, 0x2, 0x0, 0x3f, 0xee0, 0x8}, {0x3e7, 0x401, 0x4, 0x5, 0x6a2f6e1d, 0x800}, {0x6, 0x673, 0x1, 0x81, 0x89d, 0xff}, {0x2, 0x7, 0x9, 0x1b, 0xffff, 0x1}, {0x5, 0x0, 0x0, 0x3f, 0xb8, 0x7fff}, {0x7, 0x0, 0x6, 0x3f, 0x12d, 0x8}, {0x6, 0x4, 0x83, 0x7, 0x3, 0x5d4}, {0x80000001, 0x81, 0x3, 0xfffffff7, 0x3, 0x40}, {0x100, 0x2, 0x0, 0x7, 0x22, 0x10001}, {0x5, 0x40, 0x0, 0x8, 0x101, 0x100}, {0x0, 0xff, 0x2, 0x2, 0x800, 0x46b}, {0x1f, 0x0, 0x83bd, 0x5, 0x9beb, 0x80000000}, {0x40, 0x2b, 0x6, 0x4, 0x3, 0x2}, {0x8, 0x4, 0x1000, 0x800, 0x1ff, 0x10000}, {0xfffffbff, 0x75, 0x1ff, 0x9, 0x800, 0x10001}, {0x0, 0x77f, 0x400000, 0x4, 0x9c, 0x637}, {0x7, 0x2, 0x8001, 0x8, 0x8}, {0x7f, 0x20, 0x101, 0x8, 0x101, 0x3}, {0x7f, 0xfffffffb, 0x4, 0x40, 0x10000, 0x9}, {0x10000, 0x400, 0x3, 0x401, 0x1, 0x2}, {0x7, 0x0, 0x3, 0x200, 0x4, 0x4}, {0x8000, 0x4, 0x1ff, 0x3, 0x8, 0x400}, {0x4, 0x8, 0x4, 0x6, 0x4}, {0x2, 0x81, 0x400, 0x7fff, 0x2, 0x10000}, {0x8, 0x5, 0x1, 0x9, 0x7fffffff, 0x5}, {0x7fff, 0x2, 0x80000000, 0xfffffff8, 0x3ff, 0x1}, {0x0, 0x4, 0x6, 0x101, 0x2, 0x1f}, {0x80000001, 0x0, 0x10000, 0x2, 0x80000001, 0x9}, {0x7, 0x7, 0x3, 0x3, 0x10001, 0x3f}, {0xfff, 0x200, 0x6, 0x0, 0xce0, 0x2a2b}, {0x1ff, 0x7, 0x5, 0x80000000, 0x4, 0x6}, {0x3, 0x2, 0x8, 0x1, 0xfff, 0x3}, {0x6, 0xfffffff8, 0x4539, 0x1, 0x0, 0x2}, {0x80, 0x100, 0xffffffff, 0x4, 0x8, 0xed7b}, {0x6, 0x2, 0x3b2, 0x7, 0x4}, {0x8, 0x8001, 0x5, 0x9, 0x3, 0x20}, {0x7ff, 0x6, 0x4, 0xffffffff, 0x8, 0x7}, {0xff, 0x2, 0x401, 0x1, 0x7fff, 0x200}, {0x9, 0x7fffffff, 0x100, 0xffffffff, 0x2, 0x400}, {0x7fffffff, 0x100, 0x5, 0x7f, 0xffffffff}, {0x3, 0x3, 0x463b2a9a, 0x7, 0x2}, {0x7, 0x3ff, 0x3, 0x1f, 0x7fff, 0x2}, {0x7, 0x4, 0x1, 0x0, 0x1f, 0xfff}, {0xdeb, 0xfffff805, 0x7, 0x0, 0xfff, 0x1}, {0x5, 0x3f, 0x5, 0x0, 0x4, 0x9}, {0x6aefdc7c, 0x400, 0x6fc0, 0x3, 0x85b, 0xfffffffc}, {0x707, 0x1, 0x9, 0x6482, 0x400, 0x401}, {0x1f, 0xdba, 0x40, 0x5, 0x7fffffff, 0x8}, {0x1, 0x80, 0x901, 0x204, 0x0, 0x80}, {0x7, 0xe0c0, 0x401, 0x6, 0x2, 0x8}, {0x671fa19, 0xb3, 0x6, 0x1f, 0x40000000, 0x200}, {0x1f, 0xfffffff9, 0x5dda, 0x4, 0xaaf3, 0xcb7f}, {0x20, 0x6, 0x80000001, 0x10000, 0x6, 0x7}, {0x8001, 0xffffffff, 0x5, 0x812, 0x2e, 0x1}, {0x9, 0x2, 0x3fbbde99, 0x7, 0xfffff1aa, 0xfffff000}, {0x6, 0x6, 0x8, 0x853, 0x3, 0x401}, {0xa841, 0x1, 0x10000, 0x8, 0x4de, 0x6}, {0x48a8c88a, 0x7, 0x40, 0x7, 0x0, 0x6}, {0x400, 0x1a47, 0x9513, 0x5, 0x6}, {0x1, 0x7, 0x80000000, 0x6, 0x800, 0x6}, {0x0, 0x3, 0x3, 0x4, 0x3, 0x7fffffff}, {0x5, 0x8, 0x7fffffff, 0x7fffffff, 0x1, 0x1000}, {0x5, 0x9b, 0xfffffff8, 0x9, 0x9be, 0xff}, {0x2, 0x40, 0xfffffffe, 0x0, 0x3ff, 0x9}, {0x2, 0x9000, 0x4, 0xd6, 0x9, 0x4}, {0xffffffff, 0xc41, 0x1, 0x4, 0x9, 0xffffffff}, {0x6, 0x24cd, 0x400, 0x50c, 0xfffffffc, 0xd36}, {0x9, 0x777, 0x4a05d6ef, 0x3, 0x64, 0x7}, {0x100, 0x81, 0x6, 0xfffffe01, 0x6, 0x7}, {0x10000, 0x0, 0x101, 0xfffffffc, 0x5, 0x7}, {0x0, 0x2, 0x401, 0x8, 0xfff, 0xffff4b6f}, {0x4, 0x8000, 0x8, 0x800, 0x8001, 0x7}, {0x7, 0xabd555d4, 0x6, 0x2, 0xbb, 0x9}, {0x80, 0xff, 0x40, 0xffff, 0x40}, {0x8000000, 0x10001, 0xc20a, 0x0, 0x1, 0x6}, {0x9, 0x80000000, 0x8, 0x7c0, 0x1000, 0x7ff}, {0x5, 0xfffffffe, 0x400, 0x8001, 0xa8f}, {0x10001, 0x20, 0x2, 0x3, 0xe85, 0xcb9c}, {0x10000, 0x214, 0x2, 0x200, 0x4, 0x4}, {0xff, 0xff, 0x1, 0x6, 0xef44, 0x4}, {0x8, 0x9, 0x2, 0x1, 0x1, 0x40}, {0x0, 0x6f, 0x3, 0x5, 0x4, 0xfffffc00}, {0x8, 0x1f, 0x8, 0xce9f, 0x2, 0x4}, {0x40, 0x6, 0x6, 0x1f, 0x6, 0x1}, {0xfffffe00, 0xffffffff, 0x7, 0x7c81a6a1, 0xb0d, 0x20}, {0x5, 0xfff, 0x4, 0x7, 0x1000, 0x1}, {0x401, 0x950, 0x2, 0x4, 0x9, 0xfe1}, {0x6, 0x0, 0x2, 0x9, 0x4, 0x1}, {0x1, 0xe2, 0x1ff, 0x800, 0x1, 0x7f}, {0x7ff, 0x1, 0x1, 0x95a8, 0x8, 0x2}, {0x8, 0xff, 0x1, 0x1f, 0x8, 0xf0}, {0x7ff, 0x36, 0x5fcfad8b, 0x4, 0x1, 0x1}, {0xf0, 0x20, 0x401, 0x5, 0xfff6, 0x7}, {0x9, 0x200, 0x0, 0x2, 0x1, 0x5}, {0x7, 0x401, 0x3f, 0x249a, 0xd32, 0x40}, {0x6, 0x8, 0xffff, 0x2, 0x6, 0x9}, {0x4, 0x4, 0x8, 0xdf0, 0x1, 0x5}, {0x0, 0x80, 0x5c, 0xef, 0x6, 0x7}, {0x80000001, 0x81, 0xfffffff8, 0x3ff, 0x2, 0x7}, {0x0, 0x1, 0x8001, 0x49d5, 0x200, 0x3}, {0xb490, 0xc0, 0x8, 0xb006, 0x6, 0x1f}, {0x9c, 0x66, 0x4, 0x20, 0x5}, {0xc21455d, 0x9, 0x5da, 0x5250, 0x6, 0x1}, {0x4, 0xfffffc00, 0x4, 0x200, 0x6e7e, 0xd007}, {0x6, 0x1ff, 0xffff8000, 0x418, 0x80, 0x2}, {0x40, 0x100, 0x7f, 0x2ff, 0x4, 0x3f}, {0x8, 0x7ff, 0xd1, 0x2, 0x1}, {0x74b, 0x5, 0x100, 0xe9, 0x7, 0x7c4fbafa}, {0x3204a7d7, 0x5, 0x5, 0x7f, 0x1, 0x3}, {0x2, 0x7, 0x8, 0x8000, 0x7, 0x1d98}, {0x3, 0xff, 0x3, 0x3, 0xffff, 0x9}, {0xff1, 0xffffffff, 0x10001, 0xffffffc1, 0x49, 0x7}, {0x910, 0x9, 0x100, 0xfb9a, 0x5, 0x3}, {0x6, 0x2, 0x8, 0x1, 0x1f, 0x7fffffff}, {0x1f, 0x9, 0xfd0, 0xfffffff7, 0x0, 0x7fff}, {0x0, 0xffffb7bb, 0x6, 0x80000000, 0x0, 0x9}, {0xfffffffd, 0x3, 0x43, 0x5, 0x6, 0x65}, {0x8001, 0x1, 0x1, 0x2, 0x2, 0x8}, {0x7fffffff, 0x928, 0x14fef471, 0x8, 0x8}, {0x8e7, 0x8, 0x39b7, 0x94, 0x1f, 0xc744}, {0x4, 0x9, 0x2, 0x3, 0x0, 0x5}], [{0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x5}, {}, {0x2}, {0x3}, {0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1}, {0x3, 0x5320d77b5d3882d2}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x1}, {0x5}, {0x5, 0x1}, {0x1}, {}, {0x5}, {0x4}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x4}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x6829a2384e2b922e}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x2}, {0xb, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x1}, {0x1}, {0x4}, {0x5}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x4}, {0x3}, {0x1}, {0x1}, {0x3, 0x1}]}}]}, {0x1d, 0x6, "571bb9f4c39c0e7584e01bac1ef53ab5bbbb2a63f8537d9466"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x98, 0x2, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x600}, @TCA_MPLS_TTL={0x5, 0x7, 0x3f}]}, {0x4c, 0x6, "e0ab7b5b6a1544b1b0cd5fb1cc1860f04430a8cb568ec66448bdb96a97255a4c8249663d50cd5fc5f53c730f6f1fbd88e25478df1ac913a1e3c7982834f11c9a91ff5a753b8c9326"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x178, 0x18, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x10001}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000000, 0x7, 0x5, 0x1, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x20}]}, {0xf9, 0x6, "8bb09c4b55b9757a8135bdbed676f8896078f72b0616ff1c692a2545a8f1f11056fc9bf32ad973e7f7089c9da4a49d8362f5ebbfdfe40b2b962d9fcea8e5570bc3350d260ae2e8083596d6ea83a833ffcf36032c87d5d8d7170cb3060ee7fdcb42255168d612df6718f5765a10efd1d99d25a656fb9ea8af9e6b0df46bf30742dddb16f8fa45f2732d13c110df02dba4db7467e5dd06442e61d9af404bfe13d40ee3285a8080de5d64213ad9a45df27054515fbdbfab5cb6a9a9910247ffa83920f3f0a3f1012c74cc469c83cd4318d94f10bb423cf8d0b694bdee5128baa1b855434a653f571653fed2002bab6aa5cf5faaf65efd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x7c84}, 0x1, 0x0, 0x0, 0x2400c011}, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

05:30:14 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3c98}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5a9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0xc0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
sendto$llc(r2, &(0x7f00000001c0)="7759a702f8e1016691e96a150b272e7a47986636b53fd649cbc4186fa29df44eb69166aca9f29a8e7b8b13a715a27e2370f3af7218b98f7a53ab14950961b0d3a0d4090b3629a53b1f47191331bbeb792b740267aec32da528ba12664cbbaba3263a00d9a42e859884b3b257bc5813e5e17182999baa93c1d52818f61d34bd28df7c53a347b0667e6d6e2e0a6a99359069eb04e0014f3db8d1fbcef5f9f7d2f0a5b68dd9887af86c1ef347d8c415a8850a1c59467bb9", 0xb6, 0x10000, &(0x7f0000000280)={0x1a, 0x304, 0x0, 0x3f, 0x5, 0x8, @remote}, 0x10)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3c98}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5a9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0xc0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
sendto$llc(r2, &(0x7f00000001c0)="7759a702f8e1016691e96a150b272e7a47986636b53fd649cbc4186fa29df44eb69166aca9f29a8e7b8b13a715a27e2370f3af7218b98f7a53ab14950961b0d3a0d4090b3629a53b1f47191331bbeb792b740267aec32da528ba12664cbbaba3263a00d9a42e859884b3b257bc5813e5e17182999baa93c1d52818f61d34bd28df7c53a347b0667e6d6e2e0a6a99359069eb04e0014f3db8d1fbcef5f9f7d2f0a5b68dd9887af86c1ef347d8c415a8850a1c59467bb9", 0xb6, 0x10000, &(0x7f0000000280)={0x1a, 0x304, 0x0, 0x3f, 0x5, 0x8, @remote}, 0x10) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) (async)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:15 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$9p(r0, &(0x7f0000000000)="6ed01f45411efc6458066838f857ce", 0xf)

05:30:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1b)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz0\x00')

05:30:15 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x0, 0x1}, 0xb)
write$P9_ROPEN(r0, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x20, 0x0, 0x2}, 0x1}}, 0x18)

05:30:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:15 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb, 0x77, 0x2, 0x2}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x2, {0x7fff, [{{0x40, 0x3, 0x1}, 0x5, 0x0, 0x7, './file0'}, {{0x0, 0x2}, 0x0, 0x3, 0x7, './file0'}]}}, 0x49)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$9p(r0, &(0x7f0000000000)="6ed01f45411efc6458066838f857ce", 0xf)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$9p(r0, &(0x7f0000000000)="6ed01f45411efc6458066838f857ce", 0xf) (async)

05:30:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1b) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz0\x00')

05:30:15 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (fail_nth: 1)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RRENAME(r2, &(0x7f00000001c0)={0x7, 0x15, 0x2}, 0x7)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', <r3=>0x0, 0x29, 0x20, 0x4, 0x3, 0x8, @empty, @loopback, 0x8, 0x7, 0xfffffffe}})
write$9p(r0, &(0x7f0000000440)="54cc0e6b27d2b8f40bfee0c50cdc36ab21804586dbf957c3fa873f5381b09992be56236400bfdfdd3ad4905a26520e8b96a1ced64932126a393e78cdbda0f6574900ce568cee250efa183cd261f35048bfde9e28b637f8c50b1c103d8629c0a43758e343fd0df3a63589023e8d145da8cefacc3905744bc0a6d11f677a3c582004ee638ec251252d2d5a42b3bd397960bb6a41363596e7b71403", 0x9a)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01006d28bd7000fddbdf250000000006001f004e210000080001", @ANYRES32=r3, @ANYBLOB="24000300a0cb874a1553b6e901b9ff2f518c78242fb50000000000000000004000000000b4f80950d7581b01d7b34263ecf22dc93bbe7fc1d4b1271bf9f8509619fc32322ec8d943f701d2dadcf1f6db09453a884bd00eb6ace77a1b56192e8171b32840098c62583f81823ac7d38f5dd8ab20520a3b3a543da3ad1ba8166e92bf489116424eeb37e531f4da2ac9f0c0376f7d4f4d01e77f68a7e1745fea576b2d783db4a4372140f6e42e7813b8d1f69031000023fad8656dd6ef3e44cdbdb21c8295de"], 0x48}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'gre0\x00', r4, 0x7, 0x7, 0x1, 0x0, {{0x1b, 0x4, 0x3, 0x7, 0x6c, 0x64, 0x0, 0xff, 0x4, 0x0, @local, @broadcast, {[@ssrr={0x89, 0xb, 0xd1, [@empty, @rand_addr=0x64010101]}, @lsrr={0x83, 0x13, 0x57, [@local, @multicast2, @multicast1, @loopback]}, @noop, @lsrr={0x83, 0xf, 0x99, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x27, 0xa4, [@remote, @remote, @private=0xa010102, @empty, @multicast2, @remote, @multicast2, @multicast1, @remote]}]}}}}})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$9p(r0, &(0x7f0000000000)="6ed01f45411efc6458066838f857ce", 0xf)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$9p(r0, &(0x7f0000000000)="6ed01f45411efc6458066838f857ce", 0xf) (async)

05:30:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:15 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x4a)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RRENAME(r2, &(0x7f00000001c0)={0x7, 0x15, 0x2}, 0x7)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', <r3=>0x0, 0x29, 0x20, 0x4, 0x3, 0x8, @empty, @loopback, 0x8, 0x7, 0xfffffffe}}) (async)
write$9p(r0, &(0x7f0000000440)="54cc0e6b27d2b8f40bfee0c50cdc36ab21804586dbf957c3fa873f5381b09992be56236400bfdfdd3ad4905a26520e8b96a1ced64932126a393e78cdbda0f6574900ce568cee250efa183cd261f35048bfde9e28b637f8c50b1c103d8629c0a43758e343fd0df3a63589023e8d145da8cefacc3905744bc0a6d11f677a3c582004ee638ec251252d2d5a42b3bd397960bb6a41363596e7b71403", 0x9a)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01006d28bd7000fddbdf250000000006001f004e210000080001", @ANYRES32=r3, @ANYBLOB="24000300a0cb874a1553b6e901b9ff2f518c78242fb50000000000000000004000000000b4f80950d7581b01d7b34263ecf22dc93bbe7fc1d4b1271bf9f8509619fc32322ec8d943f701d2dadcf1f6db09453a884bd00eb6ace77a1b56192e8171b32840098c62583f81823ac7d38f5dd8ab20520a3b3a543da3ad1ba8166e92bf489116424eeb37e531f4da2ac9f0c0376f7d4f4d01e77f68a7e1745fea576b2d783db4a4372140f6e42e7813b8d1f69031000023fad8656dd6ef3e44cdbdb21c8295de"], 0x48}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'gre0\x00', r4, 0x7, 0x7, 0x1, 0x0, {{0x1b, 0x4, 0x3, 0x7, 0x6c, 0x64, 0x0, 0xff, 0x4, 0x0, @local, @broadcast, {[@ssrr={0x89, 0xb, 0xd1, [@empty, @rand_addr=0x64010101]}, @lsrr={0x83, 0x13, 0x57, [@local, @multicast2, @multicast1, @loopback]}, @noop, @lsrr={0x83, 0xf, 0x99, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x27, 0xa4, [@remote, @remote, @private=0xa010102, @empty, @multicast2, @remote, @multicast2, @multicast1, @remote]}]}}}}}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

[ 2344.180018] FAULT_INJECTION: forcing a failure.
[ 2344.180018] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2344.198847] CPU: 0 PID: 14226 Comm: syz-executor.5 Not tainted 4.14.264-syzkaller #0
[ 2344.206741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2344.216096] Call Trace:
[ 2344.218692]  dump_stack+0x1b2/0x281
[ 2344.218708]  should_fail.cold+0x10a/0x149
05:30:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
write$P9_ROPEN(r2, 0x0, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0)
write$P9_RSYMLINK(r3, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x80, 0x0, 0x5}}, 0x14)
r4 = socket(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)

[ 2344.218723]  __alloc_pages_nodemask+0x22c/0x2720
[ 2344.218735]  ? ima_rdwr_violation_check+0x3a0/0x3a0
[ 2344.218750]  ? __lock_acquire+0x5fc/0x3f20
[ 2344.218763]  ? __lock_acquire+0x5fc/0x3f20
[ 2344.218773]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2344.218791]  ? trace_hardirqs_on+0x10/0x10
[ 2344.218799]  ? lock_downgrade+0x740/0x740
[ 2344.218816]  alloc_pages_current+0x155/0x260
[ 2344.218827]  __get_free_pages+0xb/0x40
[ 2344.266197]  vcs_write+0xe4/0xb40
[ 2344.266213]  ? aa_file_perm+0x304/0xab0
[ 2344.273620]  ? vcs_read+0x9b0/0x9b0
[ 2344.273631]  ? aa_path_link+0x3a0/0x3a0
[ 2344.281206]  ? proc_fail_nth_write+0x7b/0x180
[ 2344.281219]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 2344.290620]  __vfs_write+0xe4/0x630
[ 2344.290629]  ? vcs_read+0x9b0/0x9b0
[ 2344.290640]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 2344.302845]  ? kernel_read+0x110/0x110
[ 2344.302856]  ? common_file_perm+0x3ee/0x580
[ 2344.302868]  ? lock_acquire+0x170/0x3f0
[ 2344.315262]  ? security_file_permission+0x82/0x1e0
[ 2344.315274]  ? rw_verify_area+0xe1/0x2a0
[ 2344.324240]  vfs_write+0x17f/0x4d0
05:30:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1b)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async, rerun: 32)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 32)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz0\x00')

05:30:15 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (fail_nth: 2)

[ 2344.324250]  SyS_write+0xf2/0x210
[ 2344.324258]  ? SyS_read+0x210/0x210
[ 2344.324268]  ? __do_page_fault+0x159/0xad0
[ 2344.324277]  ? do_syscall_64+0x4c/0x640
[ 2344.324285]  ? SyS_read+0x210/0x210
[ 2344.324294]  do_syscall_64+0x1d5/0x640
[ 2344.324309]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2344.324317] RIP: 0033:0x7f760da2a059
05:30:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
write$P9_ROPEN(r2, 0x0, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0)
write$P9_RSYMLINK(r3, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x80, 0x0, 0x5}}, 0x14)
r4 = socket(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) (async)
write$P9_RSYMLINK(r3, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x80, 0x0, 0x5}}, 0x14) (async)
socket(0x2, 0x1, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) (async)

05:30:15 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c653000000040000000000000000000000000003381ebf593cfd5bd2f66696c6530"], 0x49)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RRENAME(r2, &(0x7f00000001c0)={0x7, 0x15, 0x2}, 0x7)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', <r3=>0x0, 0x29, 0x20, 0x4, 0x3, 0x8, @empty, @loopback, 0x8, 0x7, 0xfffffffe}})
write$9p(r0, &(0x7f0000000440)="54cc0e6b27d2b8f40bfee0c50cdc36ab21804586dbf957c3fa873f5381b09992be56236400bfdfdd3ad4905a26520e8b96a1ced64932126a393e78cdbda0f6574900ce568cee250efa183cd261f35048bfde9e28b637f8c50b1c103d8629c0a43758e343fd0df3a63589023e8d145da8cefacc3905744bc0a6d11f677a3c582004ee638ec251252d2d5a42b3bd397960bb6a41363596e7b71403", 0x9a)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01006d28bd7000fddbdf250000000006001f004e210000080001", @ANYRES32=r3, @ANYBLOB="24000300a0cb874a1553b6e901b9ff2f518c78242fb50000000000000000004000000000b4f80950d7581b01d7b34263ecf22dc93bbe7fc1d4b1271bf9f8509619fc32322ec8d943f701d2dadcf1f6db09453a884bd00eb6ace77a1b56192e8171b32840098c62583f81823ac7d38f5dd8ab20520a3b3a543da3ad1ba8166e92bf489116424eeb37e531f4da2ac9f0c0376f7d4f4d01e77f68a7e1745fea576b2d783db4a4372140f6e42e7813b8d1f69031000023fad8656dd6ef3e44cdbdb21c8295de"], 0x48}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'gre0\x00', r4, 0x7, 0x7, 0x1, 0x0, {{0x1b, 0x4, 0x3, 0x7, 0x6c, 0x64, 0x0, 0xff, 0x4, 0x0, @local, @broadcast, {[@ssrr={0x89, 0xb, 0xd1, [@empty, @rand_addr=0x64010101]}, @lsrr={0x83, 0x13, 0x57, [@local, @multicast2, @multicast1, @loopback]}, @noop, @lsrr={0x83, 0xf, 0x99, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x27, 0xa4, [@remote, @remote, @private=0xa010102, @empty, @multicast2, @remote, @multicast2, @multicast1, @remote]}]}}}}})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RRENAME(r2, &(0x7f00000001c0)={0x7, 0x15, 0x2}, 0x7) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x20, 0x4, 0x3, 0x8, @empty, @loopback, 0x8, 0x7, 0xfffffffe}}) (async)
write$9p(r0, &(0x7f0000000440)="54cc0e6b27d2b8f40bfee0c50cdc36ab21804586dbf957c3fa873f5381b09992be56236400bfdfdd3ad4905a26520e8b96a1ced64932126a393e78cdbda0f6574900ce568cee250efa183cd261f35048bfde9e28b637f8c50b1c103d8629c0a43758e343fd0df3a63589023e8d145da8cefacc3905744bc0a6d11f677a3c582004ee638ec251252d2d5a42b3bd397960bb6a41363596e7b71403", 0x9a) (async)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01006d28bd7000fddbdf250000000006001f004e210000080001", @ANYRES32=r3, @ANYBLOB="24000300a0cb874a1553b6e901b9ff2f518c78242fb50000000000000000004000000000b4f80950d7581b01d7b34263ecf22dc93bbe7fc1d4b1271bf9f8509619fc32322ec8d943f701d2dadcf1f6db09453a884bd00eb6ace77a1b56192e8171b32840098c62583f81823ac7d38f5dd8ab20520a3b3a543da3ad1ba8166e92bf489116424eeb37e531f4da2ac9f0c0376f7d4f4d01e77f68a7e1745fea576b2d783db4a4372140f6e42e7813b8d1f69031000023fad8656dd6ef3e44cdbdb21c8295de"], 0x48}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'gre0\x00', r4, 0x7, 0x7, 0x1, 0x0, {{0x1b, 0x4, 0x3, 0x7, 0x6c, 0x64, 0x0, 0xff, 0x4, 0x0, @local, @broadcast, {[@ssrr={0x89, 0xb, 0xd1, [@empty, @rand_addr=0x64010101]}, @lsrr={0x83, 0x13, 0x57, [@local, @multicast2, @multicast1, @loopback]}, @noop, @lsrr={0x83, 0xf, 0x99, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x27, 0xa4, [@remote, @remote, @private=0xa010102, @empty, @multicast2, @remote, @multicast2, @multicast1, @remote]}]}}}}}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:15 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x4a)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

[ 2344.324322] RSP: 002b:00007f760c39f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2344.324332] RAX: ffffffffffffffda RBX: 00007f760db3cf60 RCX: 00007f760da2a059
[ 2344.324337] RDX: 0000000000000049 RSI: 00000000200001c0 RDI: 0000000000000003
[ 2344.324342] RBP: 00007f760c39f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2344.324347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2344.324351] R13: 00007ffe3e51adaf R14: 00007f760c39f300 R15: 0000000000022000
05:30:15 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c653000000040000000000000000000000000003381ebf593cfd5bd2f66696c6530"], 0x49)

05:30:15 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async, rerun: 64)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 64)
write$P9_ROPEN(r3, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

05:30:15 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c653000000040000000000000000000000000003381ebf593cfd5bd2f66696c6530"], 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c653000000040000000000000000000000000003381ebf593cfd5bd2f66696c6530"], 0x49) (async)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x4a) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x0, 0x2000}, 0xb)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000080), 0x3ff, 0x200000)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r6, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=0x1, r6, 0x3a, 0x1, r3}, 0x14)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0xb}, 0xb)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
write$P9_ROPEN(r2, 0x0, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0)
write$P9_RSYMLINK(r3, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x80, 0x0, 0x5}}, 0x14) (async)
r4 = socket(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)

05:30:15 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000014c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000001500)=[0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0, 0x8, &(0x7f0000001580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001640)}}, 0x10)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x14, 0xb, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x2, 0x2, 0x5, 0x6, 0x9}, @alu={0x1c0b9448c8522c51, 0x0, 0x0, 0xa, 0x4, 0xffffffffffffffff, 0x9}, @generic={0x5, 0x4, 0x8, 0x3, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7b89}], &(0x7f0000000080)='GPL\x00', 0x8, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0x10, 0x29, 0x1000}, 0x10, r2, r3, 0x0, &(0x7f00000017c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r4, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

05:30:15 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x0, 0x2000}, 0xb)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async, rerun: 32)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 32)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000080), 0x3ff, 0x200000) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r6, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=0x1, r6, 0x3a, 0x1, r3}, 0x14)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0xb}, 0xb)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:15 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000014c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000001500)=[0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0, 0x8, &(0x7f0000001580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001640)}}, 0x10) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x14, 0xb, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x2, 0x2, 0x5, 0x6, 0x9}, @alu={0x1c0b9448c8522c51, 0x0, 0x0, 0xa, 0x4, 0xffffffffffffffff, 0x9}, @generic={0x5, 0x4, 0x8, 0x3, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7b89}], &(0x7f0000000080)='GPL\x00', 0x8, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0x10, 0x29, 0x1000}, 0x10, r2, r3, 0x0, &(0x7f00000017c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r4, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400001, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:15 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x0, 0x2000}, 0xb) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000080), 0x3ff, 0x200000) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r6, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=0x1, r6, 0x3a, 0x1, r3}, 0x14) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0xb}, 0xb)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000000), 0x2f, 0x0)

05:30:15 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000014c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000001500)=[0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0, 0x8, &(0x7f0000001580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001640)}}, 0x10) (async, rerun: 32)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 32)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x14, 0xb, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x2, 0x2, 0x5, 0x6, 0x9}, @alu={0x1c0b9448c8522c51, 0x0, 0x0, 0xa, 0x4, 0xffffffffffffffff, 0x9}, @generic={0x5, 0x4, 0x8, 0x3, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7b89}], &(0x7f0000000080)='GPL\x00', 0x8, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0x10, 0x29, 0x1000}, 0x10, r2, r3, 0x0, &(0x7f00000017c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r4, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x4, 0x0, 0x2}, 0x400}}, 0x18)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400001, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:15 executing program 5:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0x2f, 0x0)

05:30:15 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
syz_open_dev$media(&(0x7f0000000000), 0x4, 0x4000)
syz_open_dev$media(&(0x7f0000000040), 0x200000000a, 0x101000)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x4, {0x8, 0x100, 0x6, 0x8, 0x1ff, 0x9}})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400001, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:15 executing program 5:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000000), 0x2f, 0x0)

05:30:15 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x9, 0x1, 0x3}}, 0x14)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x4, 0x0, 0x2}, 0x400}}, 0x18)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xe4, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
syz_open_dev$media(&(0x7f0000000000), 0x4, 0x4000)
syz_open_dev$media(&(0x7f0000000040), 0x200000000a, 0x101000)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x4, {0x8, 0x100, 0x6, 0x8, 0x1ff, 0x9}})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$media(&(0x7f0000000000), 0x4, 0x4000) (async)
syz_open_dev$media(&(0x7f0000000040), 0x200000000a, 0x101000) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x4, {0x8, 0x100, 0x6, 0x8, 0x1ff, 0x9}}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:15 executing program 5:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:15 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x9, 0x1, 0x3}}, 0x14) (async)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x4, 0x0, 0x2}, 0x400}}, 0x18)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x4, 0x0, 0x2}, 0x400}}, 0x18) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20142, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x3, 0x0, &(0x7f0000000340)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000240)=[{}, {}], 0x2, 0x0, &(0x7f0000000280)=[{}, {}]})
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000051}, 0xe44252bdd6e49681)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'macsec0\x00'})

05:30:15 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x40000000001, 0x80601)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='2\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00\a\x00./file0'], 0x49)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffff9, 0xe1001)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x71, 0x1, {{0x1, 0x1, 0x1}, 0x1000}}, 0x18)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0x9, 0x29, 0x1, {0x8000}}, 0xb)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
write$P9_ROPEN(r1, 0x0, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
write$P9_RCLUNK(r3, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7)
write$9p(r3, &(0x7f0000000240)="c240ab7cc2e9495c3875f0d0491366d290cf8de4548a0fba5f75bfdfb50dfd2a448b4d8964789c2489003ffc5ac147730682802337cfe5c236c9931fe015161723da15bfaafbf203365b7b877055160b980ce19f01059d769f0ae01d5c9f0e1c0317ac3c83920f0e7763b8b7c23283a53f11811ba21f881427d7cb31765f3de3708eeabca235d187548549219f9ad791fd8aaaa60e642de98d01dee26f0a1594363ac7d9261c6271da12998554c8dea1417b1dc439147f54918482ba9a", 0xbd)
write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0)
getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4)

05:30:15 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20142, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x3, 0x0, &(0x7f0000000340)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000240)=[{}, {}], 0x2, 0x0, &(0x7f0000000280)=[{}, {}]})
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000051}, 0xe44252bdd6e49681)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'macsec0\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20142, 0x0) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x3, 0x0, &(0x7f0000000340)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000240)=[{}, {}], 0x2, 0x0, &(0x7f0000000280)=[{}, {}]}) (async)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000051}, 0xe44252bdd6e49681) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'macsec0\x00'}) (async)

05:30:15 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$media(&(0x7f0000000000), 0x4, 0x4000) (async)
syz_open_dev$media(&(0x7f0000000040), 0x200000000a, 0x101000) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x4, {0x8, 0x100, 0x6, 0x8, 0x1ff, 0x9}})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xe4, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:15 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x40000000001, 0x80601)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='2\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00\a\x00./file0'], 0x49)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffff9, 0xe1001) (async)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x71, 0x1, {{0x1, 0x1, 0x1}, 0x1000}}, 0x18) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0x9, 0x29, 0x1, {0x8000}}, 0xb) (async)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
write$P9_RCLUNK(r3, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) (async)
write$9p(r3, &(0x7f0000000240)="c240ab7cc2e9495c3875f0d0491366d290cf8de4548a0fba5f75bfdfb50dfd2a448b4d8964789c2489003ffc5ac147730682802337cfe5c236c9931fe015161723da15bfaafbf203365b7b877055160b980ce19f01059d769f0ae01d5c9f0e1c0317ac3c83920f0e7763b8b7c23283a53f11811ba21f881427d7cb31765f3de3708eeabca235d187548549219f9ad791fd8aaaa60e642de98d01dee26f0a1594363ac7d9261c6271da12998554c8dea1417b1dc439147f54918482ba9a", 0xbd) (async)
write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8) (async)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0)
getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4)

05:30:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xe4, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0xe4, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:16 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x9, 0x1, 0x3}}, 0x14)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x40000000001, 0x80601)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='2\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00\a\x00./file0'], 0x49)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffff9, 0xe1001)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x71, 0x1, {{0x1, 0x1, 0x1}, 0x1000}}, 0x18)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0x9, 0x29, 0x1, {0x8000}}, 0xb)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
write$P9_ROPEN(r1, 0x0, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
write$P9_RCLUNK(r3, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7)
write$9p(r3, &(0x7f0000000240)="c240ab7cc2e9495c3875f0d0491366d290cf8de4548a0fba5f75bfdfb50dfd2a448b4d8964789c2489003ffc5ac147730682802337cfe5c236c9931fe015161723da15bfaafbf203365b7b877055160b980ce19f01059d769f0ae01d5c9f0e1c0317ac3c83920f0e7763b8b7c23283a53f11811ba21f881427d7cb31765f3de3708eeabca235d187548549219f9ad791fd8aaaa60e642de98d01dee26f0a1594363ac7d9261c6271da12998554c8dea1417b1dc439147f54918482ba9a", 0xbd)
write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0)
getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
syz_open_dev$vcsn(&(0x7f0000000140), 0x40000000001, 0x80601) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='2\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00\a\x00./file0'], 0x49) (async)
syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffff9, 0xe1001) (async)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x71, 0x1, {{0x1, 0x1, 0x1}, 0x1000}}, 0x18) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0x9, 0x29, 0x1, {0x8000}}, 0xb) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$UI_DEV_DESTROY(r2, 0x5502) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async)
write$P9_RCLUNK(r3, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) (async)
write$9p(r3, &(0x7f0000000240)="c240ab7cc2e9495c3875f0d0491366d290cf8de4548a0fba5f75bfdfb50dfd2a448b4d8964789c2489003ffc5ac147730682802337cfe5c236c9931fe015161723da15bfaafbf203365b7b877055160b980ce19f01059d769f0ae01d5c9f0e1c0317ac3c83920f0e7763b8b7c23283a53f11811ba21f881427d7cb31765f3de3708eeabca235d187548549219f9ad791fd8aaaa60e642de98d01dee26f0a1594363ac7d9261c6271da12998554c8dea1417b1dc439147f54918482ba9a", 0xbd) (async)
write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0) (async)
getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async)

05:30:16 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100008, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xa341, 0x4)

05:30:16 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe2$9p(&(0x7f0000000000), 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 2:
clock_gettime(0x3, &(0x7f0000000000))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000340)={0x0, &(0x7f0000000040)})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={0x0, 0x6, &(0x7f0000000100)=[0x7, 0x6, 0x9, 0x8c, 0x9, 0x4], &(0x7f0000000140)=[0x81], 0x91e832c652cfc78a, 0x6, 0x40, &(0x7f0000000180)=[0x8, 0x0, 0x68, 0x1, 0x78, 0x62a], &(0x7f00000001c0)=[0x14, 0x2, 0xb981]})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
write$P9_RLINK(r0, &(0x7f0000000280)={0x7, 0x47, 0x1}, 0x7)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
write$P9_RLOCK(r4, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x1}, 0x8)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6})

05:30:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) (async)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x20142, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x3, 0x0, &(0x7f0000000340)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000240)=[{}, {}], 0x2, 0x0, &(0x7f0000000280)=[{}, {}]}) (async)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000051}, 0xe44252bdd6e49681)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'macsec0\x00'})

05:30:16 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe2$9p(&(0x7f0000000000), 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 2:
clock_gettime(0x3, &(0x7f0000000000)) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000340)={0x0, &(0x7f0000000040)})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) (async)
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={0x0, 0x6, &(0x7f0000000100)=[0x7, 0x6, 0x9, 0x8c, 0x9, 0x4], &(0x7f0000000140)=[0x81], 0x91e832c652cfc78a, 0x6, 0x40, &(0x7f0000000180)=[0x8, 0x0, 0x68, 0x1, 0x78, 0x62a], &(0x7f00000001c0)=[0x14, 0x2, 0xb981]}) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
write$P9_RLINK(r0, &(0x7f0000000280)={0x7, 0x47, 0x1}, 0x7)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
write$P9_RLOCK(r4, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x1}, 0x8) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6})

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0x5, 0x2, {0x55, 0x65e, 0xffff, {0x7, 0x5c}, {0x7b}, @const={0x9, {0x9, 0x2, 0x7746}}}, {0x56, 0x1f, 0x1, {0x5, 0x8}, {0x6, 0x8}, @rumble={0x6, 0x9}}})
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x301000)
write$P9_ROPEN(r2, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
write$P9_RREADDIR(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2dfdffff2900000000000000030000000000000000000000000000000000000007002e2f66696c653000000000000000000000000000fdffffffffffffff0062ff2e2f66696c6530"], 0x49)
write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x4, 0x0, 0x2}}, 0x14)

05:30:16 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100008, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xa341, 0x4)
syz_open_dev$vcsn(&(0x7f0000000000), 0x100008, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe(&(0x7f0000000040)) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xa341, 0x4) (async)

05:30:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x982}, 0xf)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0x5, 0x2, {0x55, 0x65e, 0xffff, {0x7, 0x5c}, {0x7b}, @const={0x9, {0x9, 0x2, 0x7746}}}, {0x56, 0x1f, 0x1, {0x5, 0x8}, {0x6, 0x8}, @rumble={0x6, 0x9}}}) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async, rerun: 64)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x301000) (rerun: 64)
write$P9_ROPEN(r2, 0x0, 0x0) (async, rerun: 32)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 32)
write$P9_ROPEN(r3, 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
write$P9_RREADDIR(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2dfdffff2900000000000000030000000000000000000000000000000000000007002e2f66696c653000000000000000000000000000fdffffffffffffff0062ff2e2f66696c6530"], 0x49) (async, rerun: 32)
write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x4, 0x0, 0x2}}, 0x14) (rerun: 32)

05:30:16 executing program 2:
clock_gettime(0x3, &(0x7f0000000000))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000340)={0x0, &(0x7f0000000040)}) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={0x0, 0x6, &(0x7f0000000100)=[0x7, 0x6, 0x9, 0x8c, 0x9, 0x4], &(0x7f0000000140)=[0x81], 0x91e832c652cfc78a, 0x6, 0x40, &(0x7f0000000180)=[0x8, 0x0, 0x68, 0x1, 0x78, 0x62a], &(0x7f00000001c0)=[0x14, 0x2, 0xb981]}) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) (async)
write$P9_RLINK(r0, &(0x7f0000000280)={0x7, 0x47, 0x1}, 0x7) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
write$P9_RLOCK(r4, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x1}, 0x8) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6})

05:30:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x982}, 0xf)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async)
write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x982}, 0xf) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:16 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe2$9p(&(0x7f0000000000), 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
pipe2$9p(&(0x7f0000000000), 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:16 executing program 1:
r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x100)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{{<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}], 0x2, 0x0, &(0x7f0000000700)=[{}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000800)={{0x80000000, 0x0, 0x6, [0x71, 0x3d]}, {r1, r2, 0x0, [0x7]}, 0x0, [0x1, 0x101]})
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100008, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xa341, 0x4)

05:30:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0)

05:30:16 executing program 1:
r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x100)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{{<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}], 0x2, 0x0, &(0x7f0000000700)=[{}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000800)={{0x80000000, 0x0, 0x6, [0x71, 0x3d]}, {r1, r2, 0x0, [0x7]}, 0x0, [0x1, 0x101]})
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$media(&(0x7f0000000000), 0x0, 0x100) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x2, 0x0, &(0x7f0000000700)=[{}, {}]}) (async)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000800)={{0x80000000, 0x0, 0x6, [0x71, 0x3d]}, {r1, r2, 0x0, [0x7]}, 0x0, [0x1, 0x101]}) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x982}, 0xf)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:16 executing program 4:
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7f, 0x2}, 0x7)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}})
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r2}, 0xc)
syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffff7, 0x14001)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x1, 0xfffffffa}, 0xb)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0x5, 0x2, {0x55, 0x65e, 0xffff, {0x7, 0x5c}, {0x7b}, @const={0x9, {0x9, 0x2, 0x7746}}}, {0x56, 0x1f, 0x1, {0x5, 0x8}, {0x6, 0x8}, @rumble={0x6, 0x9}}})
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x301000)
write$P9_ROPEN(r2, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
write$P9_RREADDIR(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2dfdffff2900000000000000030000000000000000000000000000000000000007002e2f66696c653000000000000000000000000000fdffffffffffffff0062ff2e2f66696c6530"], 0x49) (async)
write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x4, 0x0, 0x2}}, 0x14)

05:30:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0)

05:30:16 executing program 3:
syz_open_dev$vcsn(&(0x7f0000000140), 0x2, 0x401)

05:30:16 executing program 4:
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7f, 0x2}, 0x7)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async, rerun: 64)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) (async, rerun: 32)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (rerun: 32)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r2}, 0xc)
syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffff7, 0x14001) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x1, 0xfffffffa}, 0xb)

05:30:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400c0, 0x0)

05:30:16 executing program 1:
r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x100)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{{<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}], 0x2, 0x0, &(0x7f0000000700)=[{}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000800)={{0x80000000, 0x0, 0x6, [0x71, 0x3d]}, {r1, r2, 0x0, [0x7]}, 0x0, [0x1, 0x101]}) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 3:
syz_open_dev$vcsn(&(0x7f0000000140), 0x2, 0x401)
syz_open_dev$vcsn(&(0x7f0000000140), 0x2, 0x401) (async)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) (async)

05:30:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400c0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400c0, 0x0) (async)

05:30:16 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:16 executing program 3:
syz_open_dev$vcsn(&(0x7f0000000140), 0x2, 0x401)
syz_open_dev$vcsn(&(0x7f0000000140), 0x2, 0x401) (async)

05:30:16 executing program 4:
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7f, 0x2}, 0x7)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}})
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r2}, 0xc)
syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffff7, 0x14001)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x1, 0xfffffffa}, 0xb)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7f, 0x2}, 0x7) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000200)) (async)
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r2}, 0xc) (async)
syz_open_dev$vcsn(&(0x7f0000000080), 0xfffffffffffffff7, 0x14001) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x1, 0xfffffffa}, 0xb) (async)

05:30:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400c0, 0x0)

05:30:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200400, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r3 = socket(0x2, 0x80000, 0x1)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180))
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x7f, 0xff, 0x56, @local, @local, 0x8, 0x80, 0x3, 0x40}})
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) (async, rerun: 32)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async, rerun: 32)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:16 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101101, 0x0)

05:30:16 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) (async)

05:30:16 executing program 0:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x890400, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)

05:30:16 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101101, 0x0)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c65300076e89c8b69497be70000000000000000000000000007002e2f66696c6530"], 0x49)
syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x840)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = socket(0xb, 0xa, 0x7)
getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)

05:30:16 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)

05:30:16 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200400, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r3 = socket(0x2, 0x80000, 0x1)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180))
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x7f, 0xff, 0x56, @local, @local, 0x8, 0x80, 0x3, 0x40}})
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200400, 0x0) (async)
pipe(&(0x7f0000000140)) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async)
socket(0x2, 0x80000, 0x1) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x7f, 0xff, 0x56, @local, @local, 0x8, 0x80, 0x3, 0x40}}) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)

05:30:16 executing program 0:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x890400, 0x0) (rerun: 32)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)

05:30:16 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101101, 0x0)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c65300076e89c8b69497be70000000000000000000000000007002e2f66696c6530"], 0x49) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x840) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = socket(0xb, 0xa, 0x7)
getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)

05:30:16 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:16 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 3:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r0, 0x2, 0x0, 0x25dfdbfc}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20004000)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 0:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x890400, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c65300076e89c8b69497be70000000000000000000000000007002e2f66696c6530"], 0x49)
syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x840)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = socket(0xb, 0xa, 0x7)
getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c65300076e89c8b69497be70000000000000000000000000007002e2f66696c6530"], 0x49) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x840) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
socket(0xb, 0xa, 0x7) (async)
getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) (async)

05:30:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200400, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r3 = socket(0x2, 0x80000, 0x1) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x7f, 0xff, 0x56, @local, @local, 0x8, 0x80, 0x3, 0x40}}) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

05:30:16 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 3:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r0, 0x2, 0x0, 0x25dfdbfc}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20004000)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r0, 0x2, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20004000) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100000000, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000340)={0x1, 0x2, 0xfffffffe})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r3, 0x1}, 0x14}}, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', r4}, 0x10)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x404c000)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r7 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r7, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000001000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c6530"], 0x49)

05:30:16 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7)
r3 = syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x10a40)
r4 = openat$cgroup_ro(r2, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0)
write$P9_RRENAME(r4, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
write$P9_RLOCK(r5, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000080)={0x0, 0x1})
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r7, 0x0, 0x0)
ioctl$DRM_IOCTL_DMA(r7, 0xc0406429, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000280)=[0x7, 0x800, 0x7], &(0x7f00000002c0)=[0x1], 0x40, 0x5, 0x5, &(0x7f0000000340)=[0x6, 0xeb9, 0x800, 0x6, 0x6], &(0x7f0000000380)=[0x5, 0x6, 0x3, 0xb4, 0xff, 0x3, 0x1, 0x0, 0x6, 0x8]})
write$P9_ROPEN(r6, 0x0, 0x0)
ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000000)={0x0, 0x8})

05:30:16 executing program 3:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r0, 0x2, 0x0, 0x25dfdbfc}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20004000)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r0, 0x2, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20004000) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000000)={0xc, 0x5, 0x20})
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:16 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x4c000)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)

05:30:16 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7)
r3 = syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x10a40)
r4 = openat$cgroup_ro(r2, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0)
write$P9_RRENAME(r4, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
write$P9_RLOCK(r5, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000080)={0x0, 0x1})
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r7, 0x0, 0x0)
ioctl$DRM_IOCTL_DMA(r7, 0xc0406429, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000280)=[0x7, 0x800, 0x7], &(0x7f00000002c0)=[0x1], 0x40, 0x5, 0x5, &(0x7f0000000340)=[0x6, 0xeb9, 0x800, 0x6, 0x6], &(0x7f0000000380)=[0x5, 0x6, 0x3, 0xb4, 0xff, 0x3, 0x1, 0x0, 0x6, 0x8]})
write$P9_ROPEN(r6, 0x0, 0x0)
ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000000)={0x0, 0x8})
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe(&(0x7f00000000c0)) (async)
write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) (async)
syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x10a40) (async)
openat$cgroup_ro(r2, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) (async)
write$P9_RRENAME(r4, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
write$P9_RLOCK(r5, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8) (async)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000080)={0x0, 0x1}) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r7, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_DMA(r7, 0xc0406429, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000280)=[0x7, 0x800, 0x7], &(0x7f00000002c0)=[0x1], 0x40, 0x5, 0x5, &(0x7f0000000340)=[0x6, 0xeb9, 0x800, 0x6, 0x6], &(0x7f0000000380)=[0x5, 0x6, 0x3, 0xb4, 0xff, 0x3, 0x1, 0x0, 0x6, 0x8]}) (async)
write$P9_ROPEN(r6, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000000)={0x0, 0x8}) (async)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100000000, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000340)={0x1, 0x2, 0xfffffffe})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r3, 0x1}, 0x14}}, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', r4}, 0x10)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x404c000)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r7 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r7, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000001000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c6530"], 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x100000000, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async)
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000340)={0x1, 0x2, 0xfffffffe}) (async)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
pipe(&(0x7f0000000240)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r3, 0x1}, 0x14}}, 0x0) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', r4}, 0x10) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x404c000) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r7, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000001000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c6530"], 0x49) (async)

05:30:16 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x4c000)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) (async)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x4c000) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000000)={0xc, 0x5, 0x20}) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:16 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RSYMLINK(r1, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x2, 0x1, 0x8}}, 0x14)

05:30:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)

05:30:16 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x4c000) (async, rerun: 32)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (rerun: 32)

05:30:16 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100000000, 0x0) (async, rerun: 32)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 32)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000340)={0x1, 0x2, 0xfffffffe}) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r3, 0x1}, 0x14}}, 0x0) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', r4}, 0x10)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x404c000) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async, rerun: 64)
r7 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 64)
write$P9_ROPEN(r7, 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000001000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c6530"], 0x49)

05:30:16 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7)
r3 = syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x10a40)
r4 = openat$cgroup_ro(r2, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0)
write$P9_RRENAME(r4, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
write$P9_RLOCK(r5, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000080)={0x0, 0x1})
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r7, 0x0, 0x0)
ioctl$DRM_IOCTL_DMA(r7, 0xc0406429, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000280)=[0x7, 0x800, 0x7], &(0x7f00000002c0)=[0x1], 0x40, 0x5, 0x5, &(0x7f0000000340)=[0x6, 0xeb9, 0x800, 0x6, 0x6], &(0x7f0000000380)=[0x5, 0x6, 0x3, 0xb4, 0xff, 0x3, 0x1, 0x0, 0x6, 0x8]})
write$P9_ROPEN(r6, 0x0, 0x0)
ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000000)={0x0, 0x8})
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe(&(0x7f00000000c0)) (async)
write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) (async)
syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x10a40) (async)
openat$cgroup_ro(r2, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) (async)
write$P9_RRENAME(r4, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
write$P9_RLOCK(r5, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8) (async)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000080)={0x0, 0x1}) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r7, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_DMA(r7, 0xc0406429, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000280)=[0x7, 0x800, 0x7], &(0x7f00000002c0)=[0x1], 0x40, 0x5, 0x5, &(0x7f0000000340)=[0x6, 0xeb9, 0x800, 0x6, 0x6], &(0x7f0000000380)=[0x5, 0x6, 0x3, 0xb4, 0xff, 0x3, 0x1, 0x0, 0x6, 0x8]}) (async)
write$P9_ROPEN(r6, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000000)={0x0, 0x8}) (async)

05:30:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000000)={0xc, 0x5, 0x20}) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:17 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 64)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 64)
write$P9_ROPEN(r1, 0x0, 0x0) (async, rerun: 64)
write$P9_RSYMLINK(r1, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x2, 0x1, 0x8}}, 0x14) (rerun: 64)

05:30:17 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x38, 0x480000)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:30:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)

05:30:17 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd5800fddbdf250300000005001300f900"/42], 0x30}, 0x1, 0x0, 0x0, 0x48807}, 0x40044811)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x441)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x38, 0x480000)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async, rerun: 32)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (rerun: 32)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:30:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)

05:30:17 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd5800fddbdf250300000005001300f900"/42], 0x30}, 0x1, 0x0, 0x0, 0x48807}, 0x40044811) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RSYMLINK(r1, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x2, 0x1, 0x8}}, 0x14)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x441) (rerun: 64)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x38, 0x480000)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:30:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async, rerun: 64)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async, rerun: 64)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)

05:30:17 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd5800fddbdf250300000005001300f900"/42], 0x30}, 0x1, 0x0, 0x0, 0x48807}, 0x40044811)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd5800fddbdf250300000005001300f900"/42], 0x30}, 0x1, 0x0, 0x0, 0x48807}, 0x40044811) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:17 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7ff, 0xc0401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10)

05:30:17 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x494142, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x44, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async, rerun: 64)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x441)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x400001)
sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e00808146500000129bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x8e0}, 0x1, 0x0, 0x0, 0x44080}, 0x4000040)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:17 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7ff, 0xc0401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10)

05:30:17 executing program 2:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000})
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x20403)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)

05:30:17 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x494142, 0x0) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x44, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)

05:30:17 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd7, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x8, 0x0, 0x1}}, 0x14)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
getpeername$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10)

05:30:17 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x400001)
sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e00808146500000129bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x8e0}, 0x1, 0x0, 0x0, 0x44080}, 0x4000040) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0x204401)
openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 2:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) (async)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async, rerun: 64)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x20403) (rerun: 64)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)

05:30:17 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7ff, 0xc0401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10)
syz_open_dev$vcsn(&(0x7f0000000140), 0x7ff, 0xc0401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) (async)

05:30:17 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x494142, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x44, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x494142, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x44, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) (async)

05:30:17 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd7, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x8, 0x0, 0x1}}, 0x14)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
getpeername$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd7, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x8, 0x0, 0x1}}, 0x14) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
getpeername$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10) (async)

05:30:17 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x400001)
sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e00808146500000129bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0b00fcff06000600e0ff0d000a00010062617369630000001c0402000800010001000f00100404000404020001000000ffffff7f060000001800000006000000080000007f00000005000000fbffffff7f00000001000000000800002d00000000010000080000000000000000000080040000000800000000000080000000000400000001040000ffffffff08010000800000004000000000000000fffb0000fbffffffff03000008000000400000003f000000040000000900000004000000e90d00000500000000000000a6ea21457e0c00003f0000000000000001000000ffffffff03000000030000007409000070090000faffffff8000000004000000010001001f00000000000000ffffffff04000000faffffff040000004de0763c05000000270900000600000004000000030000008e00000001000000ffff0000020000000400000000000000070000000500000004000000ffffffff00000000020000000008000006000000000000800700000001000000000000803f00000000000000060000000300000064d4000003000000010000001f000000010000000000008000000000dfe9000008000000000001000400000008000000620700000500000000000000ffffff7fff7f0000f7ffffffff000000ff0f0000010100003f0000000000010000040000ffffff7fff0f0000000200000200000001000000090000000900000006000000ec0000000700000020000000090000000800000006000000c300000005000000040000000900000001000000ffffffff0008000000000000020000000700000006000000ff0f00000d000000200000000900000005000000090000007f00000003000000010000805d5d0768080000000104000000000000000001000500000003000000000000e00100000004000000c7c000001f000000e5300000fcffffffff0f0000810000000200000002000000050000000600000000000000030000003405000006000000030000000400000001000000010000000101000000100000fdffffff09000000642000000700000002000000ff8900000104000000000014060000000200000007000000080000000700000000000000200000000008000000010000092400000300000005000000d90000000180000006000000ffff00000700000005000000060000002866ffff40000000ecfe000000000000000001000600000008000000000000005e0000000101000000000000d700000001040000010000000400000003000000460300000900000000100000060000000800000009000000ff030000000000000000008008000000ffff000005000000cea90000010000800100008001000000050000001ae1000041a3486e02000000040000000000000004000000050000000900000006000000000800000800000003000000070000000100000005000000030000000400000003000000050000000400000008000400800000000900010072737670000000004404020008040500040402000800000008000000030000000300000000020000be000000060000000000000003000000560000000200000060fbffff01800000090000000001000000008c6e0200000008000000030000000101000009000000020000000000000001000000ff000000080000006c080000ffffff7f204800000200000001000000050000000900000000010000cd70000001040000ca0600000900000001000080070000000300000001000000810b0000ff0f00000800000000000000070000000300000008000000de000000080000000700000000020000fbffffff03000000000000c000000000000000000100010000000000070000000000000062000000c3000000000000005b080000001000000500000000010000ff010000000000000300000009000000090000000000000002000000090000000080000006000000060000002300000001010000070000001f0000000000008003000000001000008000000002000000ff0100000400000008000000000000000600000007030000ff03000005000000070000000600000001000000090000000900000001040000080000000180000007000000730f000008000000020000000500000009000000200000000002000059000000ffff00003600000005000000d7000000ffffffff20000000000000000000000002000000ff03000001000100ad0f00003f0000000800000001000000810000005400000001000000ff010000000010001806000006000000090000000200000001800000f4050000f7ffffff01000000ff7f0000050b000000000080c5000000040000000200000002000000483eaf1f07000000010000800300000002000000018000004f06000002000000ff0f000001010000080000000002000003000000030000000000008006000000010100000000000009000000ff7f000005000000030000000500000006000000030000000400000009000000030000000600000005000000739f000001000000080000000900000006000000050000009f58000045000000060000000400000008000000ff03000007000000000000000600000007000000e700000001000000030000007f000000070000000100000001040000050000000101000001000000010000000200000001000000000000002cdc000000100000ffffffff00000100010000002e030000060000000400000002000000010000000200000003000000c70000000400000030ffffffff03000000000000fefffffff8ffffff00000080970800000100000000000000000000008800000000040000060000000100000005000000010000000900000007000000000000000700000009000000ff7f0000bc0000000200000003000000000000000800000006000000ff0000000500000000f07f00420000000000000008000300ffffffff2000040006000000010000000180000008000000d7310000070000002920cf00080001000e00f1ff080002007f0000010c0001007463696e646578003800020008000500e0ff0e00080004000000000008000300800000000c00060008000400080000000800040001000000080005000b000e00"], 0x8e0}, 0x1, 0x0, 0x0, 0x44080}, 0x4000040) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0x204401) (rerun: 32)
openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 2:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000})
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x20403)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)

05:30:17 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd7, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x8, 0x0, 0x1}}, 0x14)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
getpeername$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd7, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x8, 0x0, 0x1}}, 0x14) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
getpeername$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10) (async)

05:30:17 executing program 5:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x8, 0x3, 0x6}}, 0x14)

05:30:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x8}, 0x3b}}, 0x18)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:17 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0x204401)
openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 5:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x8, 0x3, 0x6}}, 0x14)

05:30:17 executing program 2:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00012abd7000ffdbdf250a00000005002a000100000008003b0000000000060028000000000005002d000000000085bf29f3aa2ab98f8817bf0d3e10bf8ab93d8fd5be1247b94cc12be90522daa5c0c7aa68848e10a9395923c1b1f81040f659996f322e3d4e"], 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x48004)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400900, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r0, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:17 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x8}, 0x3b}}, 0x18)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:17 executing program 4:
setfsuid(0xee00)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = socket$vsock_dgram(0x28, 0x2, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x22e}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x4e100)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
write$P9_RFSYNC(r2, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x420101)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44841)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f00000001c0)=0x545, 0x4)

05:30:17 executing program 5:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x8, 0x3, 0x6}}, 0x14)

05:30:17 executing program 2:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00012abd7000ffdbdf250a00000005002a000100000008003b0000000000060028000000000005002d000000000085bf29f3aa2ab98f8817bf0d3e10bf8ab93d8fd5be1247b94cc12be90522daa5c0c7aa68848e10a9395923c1b1f81040f659996f322e3d4e"], 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x48004)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) (async)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8040) (async)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400900, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r0, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x8}, 0x3b}}, 0x18)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
pipe2$9p(&(0x7f0000000000), 0x80800) (async)
write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x8}, 0x3b}}, 0x18) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 4:
setfsuid(0xee00) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = socket$vsock_dgram(0x28, 0x2, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) (async, rerun: 32)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x22e}, 0xb) (async, rerun: 32)
syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x4e100) (async, rerun: 32)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff}) (rerun: 32)
write$P9_RFSYNC(r2, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa8282, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)

05:30:17 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x420101)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44841)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f00000001c0)=0x545, 0x4)
syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x420101) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44841) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f00000001c0)=0x545, 0x4) (async)

05:30:17 executing program 2:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00012abd7000ffdbdf250a00000005002a000100000008003b0000000000060028000000000005002d000000000085bf29f3aa2ab98f8817bf0d3e10bf8ab93d8fd5be1247b94cc12be90522daa5c0c7aa68848e10a9395923c1b1f81040f659996f322e3d4e"], 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x48004) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400900, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r0, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffdab, 0x77, 0x3, 0x8}, 0xb)

05:30:17 executing program 4:
setfsuid(0xee00) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = socket$vsock_dgram(0x28, 0x2, 0x0)
connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x22e}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x4e100) (async)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
write$P9_RFSYNC(r2, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7)

05:30:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa8282, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)

05:30:17 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00')
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x48, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x548}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="56c7e1eb26a3"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040890}, 0x8000)
ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0x9, 0x7, 0x7fffffff})
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:17 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x420101)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44841)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f00000001c0)=0x545, 0x4)
syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x420101) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x20}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44841) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f00000001c0)=0x545, 0x4) (async)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffdab, 0x77, 0x3, 0x8}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffdab, 0x77, 0x3, 0x8}, 0xb) (async)

05:30:17 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x80)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x500200, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x8000)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20060001)

05:30:17 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00')
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x48, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x548}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="56c7e1eb26a3"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040890}, 0x8000)
ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0x9, 0x7, 0x7fffffff})
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') (async)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x48, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x548}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="56c7e1eb26a3"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040890}, 0x8000) (async)
ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0x9, 0x7, 0x7fffffff}) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)

05:30:17 executing program 3:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000180)={0xb}, 0xb)

05:30:17 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x767, 0x800)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socket$inet_udp(0x2, 0x2, 0x0)

05:30:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa8282, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)

05:30:17 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x80)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x500200, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x8000)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20060001)
syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x80) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x500200, 0x0) (async)
sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x8000) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20060001) (async)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffdab, 0x77, 0x3, 0x8}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xfffffdab, 0x77, 0x3, 0x8}, 0xb) (async)

05:30:17 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x767, 0x800)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socket$inet_udp(0x2, 0x2, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0x767, 0x800) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) (async)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)

05:30:17 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)

05:30:17 executing program 3:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:17 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x80)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async, rerun: 64)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x500200, 0x0) (rerun: 64)
sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x8000)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20060001)

05:30:17 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x54200)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0x32)

05:30:17 executing program 3:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:17 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x48, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x548}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="56c7e1eb26a3"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040890}, 0x8000)
ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0x9, 0x7, 0x7fffffff}) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:18 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x767, 0x800)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socket$inet_udp(0x2, 0x2, 0x0)

05:30:18 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}})

05:30:18 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x54200)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0x32)

05:30:18 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)

05:30:18 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz0\x00')
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:18 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x80, 0x3, 0x5}, 0x100}}, 0x18)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:18 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)

05:30:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pipe(&(0x7f0000000000))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = socket(0x2a, 0xa, 0x1ff)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r2=>0x0, 0x2f, 0x9f, 0xff, 0x2, 0x36, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x10, 0x700}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r2, 0x2f, 0xff, 0x3f, 0x1, 0x5, @rand_addr=' \x01\x00', @mcast1, 0x1, 0x20, 0x6, 0x3}})
syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0xc6901)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)

05:30:18 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz0\x00') (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:18 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x80, 0x3, 0x5}, 0x100}}, 0x18) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:18 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 64)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) (rerun: 64)

05:30:18 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7)
r3 = syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x10a40)
r4 = openat$cgroup_ro(r2, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0)
write$P9_RRENAME(r4, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
write$P9_RLOCK(r5, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8)
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000080)={0x0, 0x1})
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r7, 0x0, 0x0)
ioctl$DRM_IOCTL_DMA(r7, 0xc0406429, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000280)=[0x7, 0x800, 0x7], &(0x7f00000002c0)=[0x1], 0x40, 0x5, 0x5, &(0x7f0000000340)=[0x6, 0xeb9, 0x800, 0x6, 0x6], &(0x7f0000000380)=[0x5, 0x6, 0x3, 0xb4, 0xff, 0x3, 0x1, 0x0, 0x6, 0x8]})
write$P9_ROPEN(r6, 0x0, 0x0)
ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000000)={0x0, 0x8})

05:30:18 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x54200)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0x32)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0x54200) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0x32) (async)

05:30:18 executing program 0:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:18 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz0\x00')
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:18 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x80, 0x3, 0x5}, 0x100}}, 0x18)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pipe(&(0x7f0000000000))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = socket(0x2a, 0xa, 0x1ff)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r2=>0x0, 0x2f, 0x9f, 0xff, 0x2, 0x36, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x10, 0x700}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r2, 0x2f, 0xff, 0x3f, 0x1, 0x5, @rand_addr=' \x01\x00', @mcast1, 0x1, 0x20, 0x6, 0x3}})
syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0xc6901)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
socket(0x2a, 0xa, 0x1ff) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x9f, 0xff, 0x2, 0x36, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x10, 0x700}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r2, 0x2f, 0xff, 0x3f, 0x1, 0x5, @rand_addr=' \x01\x00', @mcast1, 0x1, 0x20, 0x6, 0x3}}) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0xc6901) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) (async)

05:30:18 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x118, 0x0, 0x0, 0x8, 0x80, @remote}, 0x10)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:18 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}})
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) (async)

05:30:18 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)

05:30:18 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
socket$inet(0x2, 0x80000, 0x1)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:18 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x4a)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:18 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)

05:30:18 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0xffffffff}, 0xb)
socket$vsock_dgram(0x28, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

05:30:18 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 1)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:18 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x118, 0x0, 0x0, 0x8, 0x80, @remote}, 0x10) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pipe(&(0x7f0000000000))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
r1 = socket(0x2a, 0xa, 0x1ff)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r2=>0x0, 0x2f, 0x9f, 0xff, 0x2, 0x36, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x10, 0x700}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r2, 0x2f, 0xff, 0x3f, 0x1, 0x5, @rand_addr=' \x01\x00', @mcast1, 0x1, 0x20, 0x6, 0x3}})
syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0xc6901)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
socket(0x2a, 0xa, 0x1ff) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x9f, 0xff, 0x2, 0x36, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x10, 0x700}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r2, 0x2f, 0xff, 0x3f, 0x1, 0x5, @rand_addr=' \x01\x00', @mcast1, 0x1, 0x20, 0x6, 0x3}}) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0xc6901) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) (async)

05:30:18 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (rerun: 64)

05:30:18 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0xffffffff}, 0xb) (async)
socket$vsock_dgram(0x28, 0x2, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 2347.420626] FAULT_INJECTION: forcing a failure.
[ 2347.420626] name failslab, interval 1, probability 0, space 0, times 0
[ 2347.432860] CPU: 0 PID: 15211 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2347.432867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2347.432871] Call Trace:
[ 2347.432886]  dump_stack+0x1b2/0x281
[ 2347.432903]  should_fail.cold+0x10a/0x149
[ 2347.432918]  should_failslab+0xd6/0x130
[ 2347.432930]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 2347.432944]  loop_add+0x83/0x830
[ 2347.432955]  ? loop_queue_rq+0x280/0x280
[ 2347.432963]  ? loop_queue_work+0x21e0/0x21e0
[ 2347.432974]  ? trace_hardirqs_on+0x10/0x10
[ 2347.432987]  loop_control_ioctl+0x11a/0x3f0
[ 2347.432996]  ? loop_lookup+0x190/0x190
[ 2347.433005]  ? SyS_write+0x1b7/0x210
[ 2347.433017]  ? loop_lookup+0x190/0x190
[ 2347.433027]  do_vfs_ioctl+0x75a/0xff0
[ 2347.433038]  ? lock_acquire+0x170/0x3f0
[ 2347.433047]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2347.433060]  ? __fget+0x2df/0x460
[ 2347.433071]  ? do_vfs_ioctl+0xff0/0xff0
[ 2347.433081]  ? security_file_ioctl+0x83/0xb0
[ 2347.433099]  SyS_ioctl+0x7f/0xb0
[ 2347.433107]  ? do_vfs_ioctl+0xff0/0xff0
[ 2347.433120]  do_syscall_64+0x1d5/0x640
[ 2347.433136]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2347.433144] RIP: 0033:0x7f2c308a4059
[ 2347.433150] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
05:30:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000040)={0x80000000, &(0x7f0000000000), &(0x7f00000000c0)})

05:30:18 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 2)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:18 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
socket$inet(0x2, 0x80000, 0x1)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
socket$inet(0x2, 0x80000, 0x1) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:18 executing program 5:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {<r1=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r1, 0x13})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180))
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0xa, 0x50, r3, 0x0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:18 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x118, 0x0, 0x0, 0x8, 0x80, @remote}, 0x10)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

[ 2347.433161] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2347.433167] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2347.433172] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2347.433177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2347.433183] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:18 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0xffffffff}, 0xb) (async)
socket$vsock_dgram(0x28, 0x2, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)

05:30:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000040)={0x80000000, &(0x7f0000000000), &(0x7f00000000c0)})

05:30:18 executing program 5:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) (async)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {<r1=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r1, 0x13})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180))
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0xa, 0x50, r3, 0x0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

[ 2347.672107] FAULT_INJECTION: forcing a failure.
[ 2347.672107] name failslab, interval 1, probability 0, space 0, times 0
[ 2347.701218] CPU: 1 PID: 15250 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2347.709102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2347.718459] Call Trace:
05:30:18 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)

[ 2347.718475]  dump_stack+0x1b2/0x281
[ 2347.718488]  should_fail.cold+0x10a/0x149
[ 2347.728802]  should_failslab+0xd6/0x130
[ 2347.728813]  kmem_cache_alloc+0x28e/0x3c0
[ 2347.728827]  radix_tree_node_alloc.constprop.0+0x5a/0x2f0
[ 2347.728839]  idr_get_free_cmn+0x595/0x8d0
[ 2347.728857]  idr_alloc_cmn+0xe8/0x1e0
[ 2347.728867]  ? __fprop_inc_percpu_max+0x1d0/0x1d0
[ 2347.728878]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 2347.728889]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 2347.728899]  ? kmem_cache_alloc_trace+0x36c/0x3d0
[ 2347.728910]  loop_add+0xfb/0x830
[ 2347.728920]  ? loop_queue_rq+0x280/0x280
[ 2347.728927]  ? loop_queue_work+0x21e0/0x21e0
05:30:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000040)={0x80000000, &(0x7f0000000000), &(0x7f00000000c0)})

05:30:18 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x460})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

[ 2347.728936]  ? trace_hardirqs_on+0x10/0x10
[ 2347.728948]  loop_control_ioctl+0x11a/0x3f0
[ 2347.728957]  ? loop_lookup+0x190/0x190
[ 2347.728965]  ? SyS_write+0x1b7/0x210
[ 2347.728978]  ? loop_lookup+0x190/0x190
[ 2347.728988]  do_vfs_ioctl+0x75a/0xff0
[ 2347.728998]  ? lock_acquire+0x170/0x3f0
[ 2347.729007]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2347.729019]  ? __fget+0x2df/0x460
[ 2347.729028]  ? do_vfs_ioctl+0xff0/0xff0
[ 2347.729038]  ? security_file_ioctl+0x83/0xb0
[ 2347.729047]  SyS_ioctl+0x7f/0xb0
[ 2347.729054]  ? do_vfs_ioctl+0xff0/0xff0
[ 2347.729064]  do_syscall_64+0x1d5/0x640
[ 2347.729079]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2347.729087] RIP: 0033:0x7f2c308a4059
[ 2347.729091] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2347.729101] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2347.729107] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
05:30:18 executing program 5:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {<r1=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r1, 0x13})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180))
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0xa, 0x50, r3, 0x0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) (async)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) (async)
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r1, 0x13}) (async)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)) (async)
openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0xa, 0x50, r3, 0x0) (async)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)

05:30:18 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 3)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:18 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)

05:30:18 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
socket$inet(0x2, 0x80000, 0x1)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

[ 2347.729111] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2347.729116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2347.729122] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:18 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x460})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

[ 2347.964551] FAULT_INJECTION: forcing a failure.
[ 2347.964551] name failslab, interval 1, probability 0, space 0, times 0
[ 2347.994776] CPU: 0 PID: 15293 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2348.002693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2348.012056] Call Trace:
05:30:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

05:30:19 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

[ 2348.012074]  dump_stack+0x1b2/0x281
[ 2348.018271]  should_fail.cold+0x10a/0x149
[ 2348.018285]  should_failslab+0xd6/0x130
[ 2348.026404]  kmem_cache_alloc_node_trace+0x25a/0x400
05:30:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)

[ 2348.026415]  __kmalloc_node+0x38/0x70
[ 2348.026427]  blk_mq_alloc_tag_set+0x27c/0x910
[ 2348.026442]  loop_add+0x2a0/0x830
[ 2348.026452]  ? loop_queue_rq+0x280/0x280
[ 2348.026459]  ? loop_queue_work+0x21e0/0x21e0
[ 2348.026473]  loop_control_ioctl+0x11a/0x3f0
[ 2348.026481]  ? loop_lookup+0x190/0x190
[ 2348.026490]  ? SyS_write+0x1b7/0x210
[ 2348.026501]  ? loop_lookup+0x190/0x190
[ 2348.026511]  do_vfs_ioctl+0x75a/0xff0
05:30:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x5, 0xffffffc0, 0x591, 0x10000, 0xfffffffffffffbff, 0xed, 0x7ff, 0x1, 0x9}}, 0x43)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

[ 2348.026522]  ? lock_acquire+0x170/0x3f0
[ 2348.026531]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2348.026543]  ? __fget+0x2df/0x460
[ 2348.026552]  ? do_vfs_ioctl+0xff0/0xff0
[ 2348.026564]  ? security_file_ioctl+0x83/0xb0
[ 2348.026574]  SyS_ioctl+0x7f/0xb0
[ 2348.026581]  ? do_vfs_ioctl+0xff0/0xff0
[ 2348.026592]  do_syscall_64+0x1d5/0x640
[ 2348.026607]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2348.026616] RIP: 0033:0x7f2c308a4059
[ 2348.026621] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
05:30:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async, rerun: 32)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x5, 0xffffffc0, 0x591, 0x10000, 0xfffffffffffffbff, 0xed, 0x7ff, 0x1, 0x9}}, 0x43) (async, rerun: 32)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

05:30:19 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 32)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) (rerun: 32)

05:30:19 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)

05:30:19 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 4)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:19 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x460}) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:19 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7)

05:30:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) (async)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x5, 0xffffffc0, 0x591, 0x10000, 0xfffffffffffffbff, 0xed, 0x7ff, 0x1, 0x9}}, 0x43)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

[ 2348.026631] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2348.026636] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2348.026641] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2348.026646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2348.026651] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:19 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async, rerun: 64)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (rerun: 64)

05:30:19 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x202, 0x80)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x1}, 0xb)

05:30:19 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) (async, rerun: 32)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (rerun: 32)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7)

05:30:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (fail_nth: 1)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

05:30:19 executing program 3:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x600201, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x8b, 0x81, 0xfffffffa, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x8000, 0x80, 0x3}})
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x19f902, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {<r3=>0x0}]})
r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x90ec3)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f00000002c0)=[{}, {}]})
r6 = syz_open_dev$dri(&(0x7f0000000380), 0x470c, 0x20840)
ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000003c0)={r3, 0x3})
write$P9_RWRITE(r5, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x4a}, 0xb)

[ 2348.268109] FAULT_INJECTION: forcing a failure.
[ 2348.268109] name failslab, interval 1, probability 0, space 0, times 0
[ 2348.307106] CPU: 1 PID: 15353 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2348.315002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2348.324347] Call Trace:
[ 2348.326935]  dump_stack+0x1b2/0x281
[ 2348.330569]  should_fail.cold+0x10a/0x149
[ 2348.334735]  should_failslab+0xd6/0x130
[ 2348.334748]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2348.334760]  __kmalloc_node+0x38/0x70
05:30:19 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) (async)

[ 2348.334772]  blk_mq_alloc_tag_set+0x30f/0x910
[ 2348.334786]  loop_add+0x2a0/0x830
[ 2348.334796]  ? loop_queue_rq+0x280/0x280
[ 2348.334803]  ? loop_queue_work+0x21e0/0x21e0
[ 2348.334815]  loop_control_ioctl+0x11a/0x3f0
[ 2348.334823]  ? loop_lookup+0x190/0x190
[ 2348.334831]  ? SyS_write+0x1b7/0x210
[ 2348.334843]  ? loop_lookup+0x190/0x190
[ 2348.334852]  do_vfs_ioctl+0x75a/0xff0
[ 2348.334863]  ? lock_acquire+0x170/0x3f0
[ 2348.334873]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2348.334886]  ? __fget+0x2df/0x460
[ 2348.334897]  ? do_vfs_ioctl+0xff0/0xff0
[ 2348.334908]  ? security_file_ioctl+0x83/0xb0
[ 2348.334918]  SyS_ioctl+0x7f/0xb0
[ 2348.334925]  ? do_vfs_ioctl+0xff0/0xff0
[ 2348.334937]  do_syscall_64+0x1d5/0x640
[ 2348.334952]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2348.334959] RIP: 0033:0x7f2c308a4059
[ 2348.334964] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2348.334974] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2348.334979] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
05:30:19 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 5)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

[ 2348.334984] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2348.334988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2348.334993] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2348.389731] FAULT_INJECTION: forcing a failure.
[ 2348.389731] name failslab, interval 1, probability 0, space 0, times 0
[ 2348.501093] CPU: 0 PID: 15368 Comm: syz-executor.2 Not tainted 4.14.264-syzkaller #0
05:30:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (fail_nth: 2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2348.501099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2348.501102] Call Trace:
[ 2348.501117]  dump_stack+0x1b2/0x281
[ 2348.501130]  should_fail.cold+0x10a/0x149
[ 2348.501142]  should_failslab+0xd6/0x130
[ 2348.501153]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 2348.501164]  ? dev_uevent_filter+0xd0/0xd0
[ 2348.501174]  kobject_uevent_env+0x20c/0xf30
[ 2348.501186]  ? wait_for_completion_io+0x10/0x10
[ 2348.501195]  ? is_acpi_device_node+0x5b/0x70
[ 2348.501204]  device_del+0x642/0xa80
[ 2348.501216]  ? __device_links_no_driver+0x1b0/0x1b0
[ 2348.501228]  device_unregister+0x22/0xc0
[ 2348.501238]  bdi_unregister+0x42f/0x610
[ 2348.501249]  ? wb_blkcg_offline+0x180/0x180
[ 2348.501266]  del_gendisk+0x453/0x820
[ 2348.501277]  ? disk_events_poll_msecs_store+0x150/0x150
[ 2348.501287]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 2348.501294]  ? blk_cleanup_queue+0x43c/0x620
[ 2348.501305]  loop_control_ioctl+0x347/0x3f0
[ 2348.501314]  ? loop_lookup+0x190/0x190
[ 2348.501322]  ? SyS_write+0x1b7/0x210
[ 2348.501333]  ? loop_lookup+0x190/0x190
[ 2348.501342]  do_vfs_ioctl+0x75a/0xff0
[ 2348.501352]  ? lock_acquire+0x170/0x3f0
[ 2348.501361]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2348.501373]  ? __fget+0x2df/0x460
[ 2348.501382]  ? do_vfs_ioctl+0xff0/0xff0
[ 2348.501392]  ? security_file_ioctl+0x83/0xb0
[ 2348.501402]  SyS_ioctl+0x7f/0xb0
[ 2348.501409]  ? do_vfs_ioctl+0xff0/0xff0
[ 2348.501419]  do_syscall_64+0x1d5/0x640
[ 2348.501433]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2348.501440] RIP: 0033:0x7fe3332e3059
[ 2348.501445] RSP: 002b:00007fe331c58168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2348.501454] RAX: ffffffffffffffda RBX: 00007fe3333f5f60 RCX: 00007fe3332e3059
[ 2348.501459] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004
[ 2348.501463] RBP: 00007fe331c581d0 R08: 0000000000000000 R09: 0000000000000000
[ 2348.501468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
05:30:19 executing program 3:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x600201, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x8b, 0x81, 0xfffffffa, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x8000, 0x80, 0x3}})
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x19f902, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {<r3=>0x0}]})
r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x90ec3)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f00000002c0)=[{}, {}]})
r6 = syz_open_dev$dri(&(0x7f0000000380), 0x470c, 0x20840)
ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000003c0)={r3, 0x3})
write$P9_RWRITE(r5, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x4a}, 0xb)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x600201, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x8b, 0x81, 0xfffffffa, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x8000, 0x80, 0x3}}) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x19f902, 0x0) (async)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async)
pipe(&(0x7f0000000100)) (async)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}]}) (async)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x90ec3) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f00000002c0)=[{}, {}]}) (async)
syz_open_dev$dri(&(0x7f0000000380), 0x470c, 0x20840) (async)
ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000003c0)={r3, 0x3}) (async)
write$P9_RWRITE(r5, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x4a}, 0xb) (async)

05:30:19 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x202, 0x80)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x1}, 0xb)

05:30:19 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x503f80)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2348.501472] R13: 00007ffca3b0476f R14: 00007fe331c58300 R15: 0000000000022000
[ 2348.588466] FAULT_INJECTION: forcing a failure.
[ 2348.588466] name failslab, interval 1, probability 0, space 0, times 0
[ 2348.740964] CPU: 0 PID: 15392 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
05:30:19 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x503f80)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2348.740970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2348.740974] Call Trace:
[ 2348.740988]  dump_stack+0x1b2/0x281
[ 2348.741001]  should_fail.cold+0x10a/0x149
[ 2348.741014]  should_failslab+0xd6/0x130
[ 2348.741025]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2348.741039]  blk_mq_init_tags+0x5e/0x280
[ 2348.741051]  blk_mq_alloc_rq_map+0x90/0x220
[ 2348.741062]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[ 2348.741073]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 2348.741087]  loop_add+0x2a0/0x830
[ 2348.741096]  ? loop_queue_rq+0x280/0x280
[ 2348.741103]  ? loop_queue_work+0x21e0/0x21e0
[ 2348.741123]  loop_control_ioctl+0x11a/0x3f0
[ 2348.741131]  ? loop_lookup+0x190/0x190
[ 2348.741142]  ? lock_downgrade+0x740/0x740
[ 2348.741152]  ? _raw_spin_unlock_irq+0x24/0x80
[ 2348.741159]  ? loop_lookup+0x190/0x190
[ 2348.741168]  do_vfs_ioctl+0x75a/0xff0
[ 2348.741177]  ? lock_acquire+0x170/0x3f0
[ 2348.741185]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2348.741197]  ? __fget+0x2df/0x460
[ 2348.741207]  ? do_vfs_ioctl+0xff0/0xff0
[ 2348.741217]  ? security_file_ioctl+0x83/0xb0
[ 2348.741226]  SyS_ioctl+0x7f/0xb0
[ 2348.741233]  ? do_vfs_ioctl+0xff0/0xff0
[ 2348.741244]  do_syscall_64+0x1d5/0x640
[ 2348.741257]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2348.741265] RIP: 0033:0x7f2c308a4059
[ 2348.741269] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2348.741278] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2348.741282] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2348.741286] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2348.741291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2348.741295] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2348.741416] blk-mq: reduced tag depth (128 -> 64)
[ 2348.797909] FAULT_INJECTION: forcing a failure.
[ 2348.797909] name failslab, interval 1, probability 0, space 0, times 0
[ 2348.797923] CPU: 0 PID: 15397 Comm: syz-executor.2 Not tainted 4.14.264-syzkaller #0
[ 2348.797929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2348.797933] Call Trace:
[ 2348.797958]  dump_stack+0x1b2/0x281
[ 2348.797973]  should_fail.cold+0x10a/0x149
[ 2348.797988]  should_failslab+0xd6/0x130
[ 2348.797999]  __kmalloc+0x2c1/0x400
[ 2348.798011]  ? kobject_get_path+0xb5/0x230
[ 2348.798021]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 2348.798033]  kobject_get_path+0xb5/0x230
[ 2348.798048]  kobject_uevent_env+0x230/0xf30
[ 2348.798062]  ? wait_for_completion_io+0x10/0x10
[ 2348.798072]  ? is_acpi_device_node+0x5b/0x70
[ 2348.798084]  device_del+0x642/0xa80
[ 2348.798097]  ? __device_links_no_driver+0x1b0/0x1b0
[ 2348.798110]  device_unregister+0x22/0xc0
[ 2348.798121]  bdi_unregister+0x42f/0x610
[ 2348.798133]  ? wb_blkcg_offline+0x180/0x180
[ 2348.798152]  del_gendisk+0x453/0x820
[ 2348.798164]  ? disk_events_poll_msecs_store+0x150/0x150
[ 2348.798175]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 2348.798184]  ? blk_cleanup_queue+0x43c/0x620
[ 2348.798196]  loop_control_ioctl+0x347/0x3f0
[ 2348.798205]  ? loop_lookup+0x190/0x190
[ 2348.798214]  ? SyS_write+0x1b7/0x210
[ 2348.798226]  ? loop_lookup+0x190/0x190
[ 2348.798236]  do_vfs_ioctl+0x75a/0xff0
[ 2348.798247]  ? lock_acquire+0x170/0x3f0
[ 2348.798256]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2348.798269]  ? __fget+0x2df/0x460
[ 2348.798280]  ? do_vfs_ioctl+0xff0/0xff0
[ 2348.798294]  ? security_file_ioctl+0x83/0xb0
[ 2348.798304]  SyS_ioctl+0x7f/0xb0
[ 2348.798312]  ? do_vfs_ioctl+0xff0/0xff0
[ 2348.798324]  do_syscall_64+0x1d5/0x640
[ 2348.798339]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2348.798346] RIP: 0033:0x7fe3332e3059
[ 2348.798352] RSP: 002b:00007fe331c16168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2348.798362] RAX: ffffffffffffffda RBX: 00007fe3333f6100 RCX: 00007fe3332e3059
05:30:20 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66691353584a00000000000000000000000000000000000000000007002e2f66696c6530"], 0x49)

05:30:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (fail_nth: 3)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

05:30:20 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x503f80)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x503f80) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:20 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async, rerun: 64)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x202, 0x80)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x1}, 0xb)

05:30:20 executing program 3:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x600201, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x8b, 0x81, 0xfffffffa, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x8000, 0x80, 0x3}})
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x19f902, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {<r3=>0x0}]}) (async, rerun: 32)
r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x90ec3) (async, rerun: 32)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f00000002c0)=[{}, {}]}) (async)
r6 = syz_open_dev$dri(&(0x7f0000000380), 0x470c, 0x20840)
ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000003c0)={r3, 0x3}) (async)
write$P9_RWRITE(r5, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x4a}, 0xb)

05:30:20 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 6)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

[ 2348.798368] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004
[ 2348.798373] RBP: 00007fe331c161d0 R08: 0000000000000000 R09: 0000000000000000
[ 2348.798378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2348.798384] R13: 00007ffca3b0476f R14: 00007fe331c16300 R15: 0000000000022000
05:30:20 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66691353584a00000000000000000000000000000000000000000007002e2f66696c6530"], 0x49)

05:30:20 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x80000000, 0x40501)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:20 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0x4, 0x77, 0x0, 0x2}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0xc440)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4)
write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x10, 0x1, 0x6}}, 0x14)

05:30:20 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x80000000, 0x40501)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (fail_nth: 4)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2349.280557] FAULT_INJECTION: forcing a failure.
[ 2349.280557] name failslab, interval 1, probability 0, space 0, times 0
[ 2349.296796] CPU: 0 PID: 15435 Comm: syz-executor.2 Not tainted 4.14.264-syzkaller #0
05:30:20 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3})
write$P9_ROPEN(r1, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
write$uinput_user_dev(r1, &(0x7f0000000340)={'syz1\x00', {0xfff7, 0xffff, 0x8, 0x3}, 0x47, [0xc0000, 0x7, 0x7, 0x4, 0x1, 0x0, 0xd7d, 0x9, 0x200, 0x300432f1, 0x4, 0x200, 0x7, 0x80000000, 0x7ff, 0x8, 0x6ee, 0xffffffc1, 0x7ef8, 0x0, 0xffffffff, 0x8, 0x20, 0x9, 0x5, 0x4, 0x401, 0xffffffff, 0x8, 0x7, 0x8000, 0xd0e, 0x914, 0x9f, 0x40, 0x365, 0x3d47229b, 0x3, 0x5, 0xffffffff, 0x7fff, 0x6, 0x5, 0x3, 0x80000000, 0x5, 0xa000000, 0x7, 0x4, 0x3f, 0x3, 0x0, 0x5, 0x7, 0xffff, 0xfd, 0x9, 0xc000000, 0x9, 0x1f, 0x6, 0x1, 0x5b], [0x2, 0x6, 0x7, 0xb781, 0x3f, 0xffffff01, 0x101, 0x6, 0x4, 0x1, 0x812, 0x4f6, 0xad4, 0x5c1, 0x4, 0x1f, 0x9, 0x359c0, 0x3, 0xdd31, 0x0, 0x80000001, 0x6, 0x10001, 0xbdecca4, 0x9, 0x101, 0x1, 0x7fff, 0xfffffc00, 0x9, 0x0, 0x6, 0x401, 0x80, 0x5, 0x8, 0x5, 0x7, 0x5, 0x7, 0x1, 0x7, 0x8, 0x3, 0x101, 0x6, 0x6, 0x1, 0x4, 0x2, 0x8, 0x6, 0x8000, 0x200, 0x6, 0x0, 0x2, 0x8, 0x20, 0x9, 0xa00, 0x1000, 0x2], [0x800, 0x1, 0x9, 0x1, 0x2, 0x2, 0x5, 0x3, 0x1, 0x3, 0x8, 0xffff, 0x9, 0x2, 0x1, 0x5, 0x4, 0x9, 0x32, 0x935e, 0x4, 0x7, 0x3b, 0x81, 0x5, 0x80000000, 0x6ad7, 0x2, 0xcb, 0xfffff392, 0xffffffff, 0x64d3c960, 0x6, 0x7fffffff, 0x7, 0x8, 0xde8a, 0x4, 0x73b, 0x80000000, 0xfffffe00, 0xffff73cb, 0x2, 0x80000000, 0x923, 0x0, 0xf6, 0xffffffff, 0x4, 0x7f, 0x21ac3df5, 0x4, 0x7b91, 0x401, 0xffffffff, 0xffffffd1, 0x80000000, 0x101, 0x80000000, 0x1, 0x2a6f1416, 0x401, 0x7f, 0x401], [0xfffffffe, 0x0, 0x3f, 0x7ff, 0x6, 0x9, 0x32, 0x6, 0x8, 0xfffffffa, 0x7, 0x5, 0x10001, 0x1ce8, 0x400, 0x0, 0x4, 0x20, 0x1, 0x8, 0x3f000, 0x800, 0x7fff, 0x4, 0x6, 0x6, 0x9, 0xfff, 0x1000, 0x0, 0x9, 0x1, 0x5, 0x7, 0x80, 0x8000, 0x1, 0x4, 0x8, 0x4, 0xfffff4df, 0xc2, 0x5, 0x6, 0x1f, 0x8, 0x6, 0xfff, 0x5, 0x100, 0x5, 0x1, 0x7, 0x57d, 0x7, 0xeba, 0x40, 0x10000, 0x4, 0x2, 0x9, 0xf6, 0x6, 0xcd]}, 0x45c)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:20 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x80000000, 0x40501)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2349.296804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2349.296807] Call Trace:
[ 2349.296824]  dump_stack+0x1b2/0x281
[ 2349.296839]  should_fail.cold+0x10a/0x149
05:30:20 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x6, 0x4, 0x2, 0x8, 0x32, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x13}, 0x20, 0x700, 0x4, 0x1000}})

[ 2349.296852]  should_failslab+0xd6/0x130
[ 2349.296863]  kmem_cache_alloc_node+0x263/0x410
[ 2349.296877]  __alloc_skb+0x5c/0x510
[ 2349.296891]  kobject_uevent_env+0x882/0xf30
[ 2349.296906]  ? is_acpi_device_node+0x5b/0x70
[ 2349.296917]  device_del+0x642/0xa80
[ 2349.296930]  ? __device_links_no_driver+0x1b0/0x1b0
[ 2349.296944]  device_unregister+0x22/0xc0
[ 2349.296954]  bdi_unregister+0x42f/0x610
[ 2349.296965]  ? wb_blkcg_offline+0x180/0x180
05:30:20 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66691353584a00000000000000000000000000000000000000000007002e2f66696c6530"], 0x49)

[ 2349.296985]  del_gendisk+0x453/0x820
[ 2349.296997]  ? disk_events_poll_msecs_store+0x150/0x150
[ 2349.297009]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 2349.297029]  ? blk_cleanup_queue+0x43c/0x620
[ 2349.297043]  loop_control_ioctl+0x347/0x3f0
[ 2349.297052]  ? loop_lookup+0x190/0x190
[ 2349.297061]  ? SyS_write+0x1b7/0x210
[ 2349.297073]  ? loop_lookup+0x190/0x190
[ 2349.297083]  do_vfs_ioctl+0x75a/0xff0
[ 2349.297095]  ? lock_acquire+0x170/0x3f0
[ 2349.297104]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2349.297117]  ? __fget+0x2df/0x460
[ 2349.297128]  ? do_vfs_ioctl+0xff0/0xff0
[ 2349.297138]  ? security_file_ioctl+0x83/0xb0
[ 2349.297149]  SyS_ioctl+0x7f/0xb0
[ 2349.297157]  ? do_vfs_ioctl+0xff0/0xff0
[ 2349.297169]  do_syscall_64+0x1d5/0x640
[ 2349.297183]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2349.297191] RIP: 0033:0x7fe3332e3059
[ 2349.297196] RSP: 002b:00007fe331c58168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2349.297207] RAX: ffffffffffffffda RBX: 00007fe3333f5f60 RCX: 00007fe3332e3059
[ 2349.297213] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000004
[ 2349.297219] RBP: 00007fe331c581d0 R08: 0000000000000000 R09: 0000000000000000
[ 2349.297224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2349.297229] R13: 00007ffca3b0476f R14: 00007fe331c58300 R15: 0000000000022000
[ 2349.314675] FAULT_INJECTION: forcing a failure.
[ 2349.314675] name failslab, interval 1, probability 0, space 0, times 0
[ 2349.314687] CPU: 0 PID: 15437 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2349.314693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2349.314696] Call Trace:
[ 2349.314710]  dump_stack+0x1b2/0x281
[ 2349.314726]  should_fail.cold+0x10a/0x149
[ 2349.314740]  should_failslab+0xd6/0x130
[ 2349.314753]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2349.314771]  __kmalloc_node+0x38/0x70
[ 2349.314785]  sbitmap_init_node+0x10c/0x3d0
[ 2349.314799]  sbitmap_queue_init_node+0x37/0x5d0
[ 2349.314812]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 2349.314824]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 2349.314839]  blk_mq_init_tags+0xf4/0x280
[ 2349.314851]  blk_mq_alloc_rq_map+0x90/0x220
[ 2349.314863]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[ 2349.314877]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 2349.314893]  loop_add+0x2a0/0x830
[ 2349.314904]  ? loop_queue_rq+0x280/0x280
[ 2349.314912]  ? loop_queue_work+0x21e0/0x21e0
[ 2349.314926]  loop_control_ioctl+0x11a/0x3f0
[ 2349.314935]  ? loop_lookup+0x190/0x190
[ 2349.314944]  ? SyS_write+0x1b7/0x210
[ 2349.314956]  ? loop_lookup+0x190/0x190
[ 2349.314965]  do_vfs_ioctl+0x75a/0xff0
[ 2349.314976]  ? lock_acquire+0x170/0x3f0
[ 2349.314985]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2349.314998]  ? __fget+0x2df/0x460
[ 2349.315009]  ? do_vfs_ioctl+0xff0/0xff0
[ 2349.315028]  ? security_file_ioctl+0x83/0xb0
[ 2349.315039]  SyS_ioctl+0x7f/0xb0
[ 2349.315047]  ? do_vfs_ioctl+0xff0/0xff0
[ 2349.315059]  do_syscall_64+0x1d5/0x640
[ 2349.315076]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2349.315084] RIP: 0033:0x7f2c308a4059
[ 2349.315089] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2349.315100] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2349.315105] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2349.315111] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2349.315117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2349.315123] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2349.315281] blk-mq: reduced tag depth (128 -> 64)
[ 2349.460831] FAULT_INJECTION: forcing a failure.
[ 2349.460831] name failslab, interval 1, probability 0, space 0, times 0
[ 2349.802840] CPU: 1 PID: 15468 Comm: syz-executor.2 Not tainted 4.14.264-syzkaller #0
[ 2349.802845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2349.802848] Call Trace:
[ 2349.802863]  dump_stack+0x1b2/0x281
[ 2349.802877]  should_fail.cold+0x10a/0x149
[ 2349.802891]  should_failslab+0xd6/0x130
[ 2349.802903]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2349.802917]  __kmalloc_node_track_caller+0x38/0x70
[ 2349.802927]  __alloc_skb+0x96/0x510
[ 2349.802941]  kobject_uevent_env+0x882/0xf30
[ 2349.802955]  ? is_acpi_device_node+0x5b/0x70
[ 2349.802966]  device_del+0x642/0xa80
[ 2349.802979]  ? __device_links_no_driver+0x1b0/0x1b0
[ 2349.802992]  device_unregister+0x22/0xc0
[ 2349.803003]  bdi_unregister+0x42f/0x610
[ 2349.803020]  ? wb_blkcg_offline+0x180/0x180
[ 2349.803038]  del_gendisk+0x453/0x820
[ 2349.803049]  ? disk_events_poll_msecs_store+0x150/0x150
[ 2349.803061]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 2349.803070]  ? blk_cleanup_queue+0x43c/0x620
[ 2349.803080]  loop_control_ioctl+0x347/0x3f0
[ 2349.803090]  ? loop_lookup+0x190/0x190
[ 2349.903851]  ? SyS_write+0x1b7/0x210
[ 2349.903865]  ? loop_lookup+0x190/0x190
[ 2349.911457]  do_vfs_ioctl+0x75a/0xff0
05:30:20 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 7)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:20 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0x4, 0x77, 0x0, 0x2}, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0xc440)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) (async)
write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x10, 0x1, 0x6}}, 0x14)

[ 2349.911469]  ? lock_acquire+0x170/0x3f0
[ 2349.911477]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2349.911489]  ? __fget+0x2df/0x460
[ 2349.927163]  ? do_vfs_ioctl+0xff0/0xff0
[ 2349.927173]  ? security_file_ioctl+0x83/0xb0
[ 2349.927185]  SyS_ioctl+0x7f/0xb0
[ 2349.938894]  ? do_vfs_ioctl+0xff0/0xff0
[ 2349.938905]  do_syscall_64+0x1d5/0x640
[ 2349.938921]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
05:30:20 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (fail_nth: 5)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2349.938935] RIP: 0033:0x7fe3332e3059
[ 2349.938939] RSP: 002b:00007fe331c58168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2349.938949] RAX: ffffffffffffffda RBX: 00007fe3333f5f60 RCX: 00007fe3332e3059
[ 2349.938954] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000004
[ 2349.938959] RBP: 00007fe331c581d0 R08: 0000000000000000 R09: 0000000000000000
[ 2349.938964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2349.938970] R13: 00007ffca3b0476f R14: 00007fe331c58300 R15: 0000000000022000
[ 2349.993708] FAULT_INJECTION: forcing a failure.
[ 2349.993708] name failslab, interval 1, probability 0, space 0, times 0
[ 2349.993720] CPU: 0 PID: 15489 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2349.993726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2349.993730] Call Trace:
[ 2349.993744]  dump_stack+0x1b2/0x281
[ 2349.993759]  should_fail.cold+0x10a/0x149
[ 2349.993772]  should_failslab+0xd6/0x130
[ 2349.993795]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2349.993812]  sbitmap_queue_init_node+0x27f/0x5d0
[ 2349.993824]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 2349.993838]  blk_mq_init_tags+0xf4/0x280
[ 2349.993854]  blk_mq_alloc_rq_map+0x90/0x220
[ 2349.993867]  __blk_mq_alloc_rq_map+0xa3/0x3a0
05:30:21 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{<r2=>0x0}, {}]})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={r2, 0x2})
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
openat$cgroup_pressure(r3, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

[ 2349.993881]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 2349.993899]  loop_add+0x2a0/0x830
[ 2349.993909]  ? loop_queue_rq+0x280/0x280
[ 2349.993916]  ? loop_queue_work+0x21e0/0x21e0
[ 2349.993930]  loop_control_ioctl+0x11a/0x3f0
[ 2349.993957]  ? loop_lookup+0x190/0x190
[ 2349.993967]  ? SyS_write+0x1b7/0x210
[ 2349.993981]  ? loop_lookup+0x190/0x190
[ 2349.993991]  do_vfs_ioctl+0x75a/0xff0
[ 2349.994002]  ? lock_acquire+0x170/0x3f0
[ 2349.994011]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2349.994025]  ? __fget+0x2df/0x460
[ 2349.994036]  ? do_vfs_ioctl+0xff0/0xff0
[ 2349.994047]  ? security_file_ioctl+0x83/0xb0
[ 2349.994057]  SyS_ioctl+0x7f/0xb0
[ 2349.994065]  ? do_vfs_ioctl+0xff0/0xff0
[ 2349.994076]  do_syscall_64+0x1d5/0x640
[ 2349.994092]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2349.994099] RIP: 0033:0x7f2c308a4059
[ 2349.994105] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2349.994115] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2349.994121] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
05:30:21 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3})
write$P9_ROPEN(r1, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
write$uinput_user_dev(r1, &(0x7f0000000340)={'syz1\x00', {0xfff7, 0xffff, 0x8, 0x3}, 0x47, [0xc0000, 0x7, 0x7, 0x4, 0x1, 0x0, 0xd7d, 0x9, 0x200, 0x300432f1, 0x4, 0x200, 0x7, 0x80000000, 0x7ff, 0x8, 0x6ee, 0xffffffc1, 0x7ef8, 0x0, 0xffffffff, 0x8, 0x20, 0x9, 0x5, 0x4, 0x401, 0xffffffff, 0x8, 0x7, 0x8000, 0xd0e, 0x914, 0x9f, 0x40, 0x365, 0x3d47229b, 0x3, 0x5, 0xffffffff, 0x7fff, 0x6, 0x5, 0x3, 0x80000000, 0x5, 0xa000000, 0x7, 0x4, 0x3f, 0x3, 0x0, 0x5, 0x7, 0xffff, 0xfd, 0x9, 0xc000000, 0x9, 0x1f, 0x6, 0x1, 0x5b], [0x2, 0x6, 0x7, 0xb781, 0x3f, 0xffffff01, 0x101, 0x6, 0x4, 0x1, 0x812, 0x4f6, 0xad4, 0x5c1, 0x4, 0x1f, 0x9, 0x359c0, 0x3, 0xdd31, 0x0, 0x80000001, 0x6, 0x10001, 0xbdecca4, 0x9, 0x101, 0x1, 0x7fff, 0xfffffc00, 0x9, 0x0, 0x6, 0x401, 0x80, 0x5, 0x8, 0x5, 0x7, 0x5, 0x7, 0x1, 0x7, 0x8, 0x3, 0x101, 0x6, 0x6, 0x1, 0x4, 0x2, 0x8, 0x6, 0x8000, 0x200, 0x6, 0x0, 0x2, 0x8, 0x20, 0x9, 0xa00, 0x1000, 0x2], [0x800, 0x1, 0x9, 0x1, 0x2, 0x2, 0x5, 0x3, 0x1, 0x3, 0x8, 0xffff, 0x9, 0x2, 0x1, 0x5, 0x4, 0x9, 0x32, 0x935e, 0x4, 0x7, 0x3b, 0x81, 0x5, 0x80000000, 0x6ad7, 0x2, 0xcb, 0xfffff392, 0xffffffff, 0x64d3c960, 0x6, 0x7fffffff, 0x7, 0x8, 0xde8a, 0x4, 0x73b, 0x80000000, 0xfffffe00, 0xffff73cb, 0x2, 0x80000000, 0x923, 0x0, 0xf6, 0xffffffff, 0x4, 0x7f, 0x21ac3df5, 0x4, 0x7b91, 0x401, 0xffffffff, 0xffffffd1, 0x80000000, 0x101, 0x80000000, 0x1, 0x2a6f1416, 0x401, 0x7f, 0x401], [0xfffffffe, 0x0, 0x3f, 0x7ff, 0x6, 0x9, 0x32, 0x6, 0x8, 0xfffffffa, 0x7, 0x5, 0x10001, 0x1ce8, 0x400, 0x0, 0x4, 0x20, 0x1, 0x8, 0x3f000, 0x800, 0x7fff, 0x4, 0x6, 0x6, 0x9, 0xfff, 0x1000, 0x0, 0x9, 0x1, 0x5, 0x7, 0x80, 0x8000, 0x1, 0x4, 0x8, 0x4, 0xfffff4df, 0xc2, 0x5, 0x6, 0x1f, 0x8, 0x6, 0xfff, 0x5, 0x100, 0x5, 0x1, 0x7, 0x57d, 0x7, 0xeba, 0x40, 0x10000, 0x4, 0x2, 0x9, 0xf6, 0x6, 0xcd]}, 0x45c)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3}) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
write$uinput_user_dev(r1, &(0x7f0000000340)={'syz1\x00', {0xfff7, 0xffff, 0x8, 0x3}, 0x47, [0xc0000, 0x7, 0x7, 0x4, 0x1, 0x0, 0xd7d, 0x9, 0x200, 0x300432f1, 0x4, 0x200, 0x7, 0x80000000, 0x7ff, 0x8, 0x6ee, 0xffffffc1, 0x7ef8, 0x0, 0xffffffff, 0x8, 0x20, 0x9, 0x5, 0x4, 0x401, 0xffffffff, 0x8, 0x7, 0x8000, 0xd0e, 0x914, 0x9f, 0x40, 0x365, 0x3d47229b, 0x3, 0x5, 0xffffffff, 0x7fff, 0x6, 0x5, 0x3, 0x80000000, 0x5, 0xa000000, 0x7, 0x4, 0x3f, 0x3, 0x0, 0x5, 0x7, 0xffff, 0xfd, 0x9, 0xc000000, 0x9, 0x1f, 0x6, 0x1, 0x5b], [0x2, 0x6, 0x7, 0xb781, 0x3f, 0xffffff01, 0x101, 0x6, 0x4, 0x1, 0x812, 0x4f6, 0xad4, 0x5c1, 0x4, 0x1f, 0x9, 0x359c0, 0x3, 0xdd31, 0x0, 0x80000001, 0x6, 0x10001, 0xbdecca4, 0x9, 0x101, 0x1, 0x7fff, 0xfffffc00, 0x9, 0x0, 0x6, 0x401, 0x80, 0x5, 0x8, 0x5, 0x7, 0x5, 0x7, 0x1, 0x7, 0x8, 0x3, 0x101, 0x6, 0x6, 0x1, 0x4, 0x2, 0x8, 0x6, 0x8000, 0x200, 0x6, 0x0, 0x2, 0x8, 0x20, 0x9, 0xa00, 0x1000, 0x2], [0x800, 0x1, 0x9, 0x1, 0x2, 0x2, 0x5, 0x3, 0x1, 0x3, 0x8, 0xffff, 0x9, 0x2, 0x1, 0x5, 0x4, 0x9, 0x32, 0x935e, 0x4, 0x7, 0x3b, 0x81, 0x5, 0x80000000, 0x6ad7, 0x2, 0xcb, 0xfffff392, 0xffffffff, 0x64d3c960, 0x6, 0x7fffffff, 0x7, 0x8, 0xde8a, 0x4, 0x73b, 0x80000000, 0xfffffe00, 0xffff73cb, 0x2, 0x80000000, 0x923, 0x0, 0xf6, 0xffffffff, 0x4, 0x7f, 0x21ac3df5, 0x4, 0x7b91, 0x401, 0xffffffff, 0xffffffd1, 0x80000000, 0x101, 0x80000000, 0x1, 0x2a6f1416, 0x401, 0x7f, 0x401], [0xfffffffe, 0x0, 0x3f, 0x7ff, 0x6, 0x9, 0x32, 0x6, 0x8, 0xfffffffa, 0x7, 0x5, 0x10001, 0x1ce8, 0x400, 0x0, 0x4, 0x20, 0x1, 0x8, 0x3f000, 0x800, 0x7fff, 0x4, 0x6, 0x6, 0x9, 0xfff, 0x1000, 0x0, 0x9, 0x1, 0x5, 0x7, 0x80, 0x8000, 0x1, 0x4, 0x8, 0x4, 0xfffff4df, 0xc2, 0x5, 0x6, 0x1f, 0x8, 0x6, 0xfff, 0x5, 0x100, 0x5, 0x1, 0x7, 0x57d, 0x7, 0xeba, 0x40, 0x10000, 0x4, 0x2, 0x9, 0xf6, 0x6, 0xcd]}, 0x45c) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:21 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x6, 0x4, 0x2, 0x8, 0x32, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x13}, 0x20, 0x700, 0x4, 0x1000}})
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x6, 0x4, 0x2, 0x8, 0x32, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x13}, 0x20, 0x700, 0x4, 0x1000}}) (async)

05:30:21 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0x4, 0x77, 0x0, 0x2}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0xc440)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4)
write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x10, 0x1, 0x6}}, 0x14)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0x4, 0x77, 0x0, 0x2}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0xc440) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) (async)
write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x10, 0x1, 0x6}}, 0x14) (async)

05:30:21 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 8)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:21 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async, rerun: 64)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{<r2=>0x0}, {}]}) (rerun: 64)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={r2, 0x2}) (async, rerun: 64)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async, rerun: 64)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
openat$cgroup_pressure(r3, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

[ 2349.994126] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2349.994131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2349.994137] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2349.994358] blk-mq: reduced tag depth (128 -> 64)
[ 2350.094763] FAULT_INJECTION: forcing a failure.
[ 2350.094763] name failslab, interval 1, probability 0, space 0, times 0
05:30:21 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3}) (async)
write$P9_ROPEN(r1, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1) (async)
write$uinput_user_dev(r1, &(0x7f0000000340)={'syz1\x00', {0xfff7, 0xffff, 0x8, 0x3}, 0x47, [0xc0000, 0x7, 0x7, 0x4, 0x1, 0x0, 0xd7d, 0x9, 0x200, 0x300432f1, 0x4, 0x200, 0x7, 0x80000000, 0x7ff, 0x8, 0x6ee, 0xffffffc1, 0x7ef8, 0x0, 0xffffffff, 0x8, 0x20, 0x9, 0x5, 0x4, 0x401, 0xffffffff, 0x8, 0x7, 0x8000, 0xd0e, 0x914, 0x9f, 0x40, 0x365, 0x3d47229b, 0x3, 0x5, 0xffffffff, 0x7fff, 0x6, 0x5, 0x3, 0x80000000, 0x5, 0xa000000, 0x7, 0x4, 0x3f, 0x3, 0x0, 0x5, 0x7, 0xffff, 0xfd, 0x9, 0xc000000, 0x9, 0x1f, 0x6, 0x1, 0x5b], [0x2, 0x6, 0x7, 0xb781, 0x3f, 0xffffff01, 0x101, 0x6, 0x4, 0x1, 0x812, 0x4f6, 0xad4, 0x5c1, 0x4, 0x1f, 0x9, 0x359c0, 0x3, 0xdd31, 0x0, 0x80000001, 0x6, 0x10001, 0xbdecca4, 0x9, 0x101, 0x1, 0x7fff, 0xfffffc00, 0x9, 0x0, 0x6, 0x401, 0x80, 0x5, 0x8, 0x5, 0x7, 0x5, 0x7, 0x1, 0x7, 0x8, 0x3, 0x101, 0x6, 0x6, 0x1, 0x4, 0x2, 0x8, 0x6, 0x8000, 0x200, 0x6, 0x0, 0x2, 0x8, 0x20, 0x9, 0xa00, 0x1000, 0x2], [0x800, 0x1, 0x9, 0x1, 0x2, 0x2, 0x5, 0x3, 0x1, 0x3, 0x8, 0xffff, 0x9, 0x2, 0x1, 0x5, 0x4, 0x9, 0x32, 0x935e, 0x4, 0x7, 0x3b, 0x81, 0x5, 0x80000000, 0x6ad7, 0x2, 0xcb, 0xfffff392, 0xffffffff, 0x64d3c960, 0x6, 0x7fffffff, 0x7, 0x8, 0xde8a, 0x4, 0x73b, 0x80000000, 0xfffffe00, 0xffff73cb, 0x2, 0x80000000, 0x923, 0x0, 0xf6, 0xffffffff, 0x4, 0x7f, 0x21ac3df5, 0x4, 0x7b91, 0x401, 0xffffffff, 0xffffffd1, 0x80000000, 0x101, 0x80000000, 0x1, 0x2a6f1416, 0x401, 0x7f, 0x401], [0xfffffffe, 0x0, 0x3f, 0x7ff, 0x6, 0x9, 0x32, 0x6, 0x8, 0xfffffffa, 0x7, 0x5, 0x10001, 0x1ce8, 0x400, 0x0, 0x4, 0x20, 0x1, 0x8, 0x3f000, 0x800, 0x7fff, 0x4, 0x6, 0x6, 0x9, 0xfff, 0x1000, 0x0, 0x9, 0x1, 0x5, 0x7, 0x80, 0x8000, 0x1, 0x4, 0x8, 0x4, 0xfffff4df, 0xc2, 0x5, 0x6, 0x1f, 0x8, 0x6, 0xfff, 0x5, 0x100, 0x5, 0x1, 0x7, 0x57d, 0x7, 0xeba, 0x40, 0x10000, 0x4, 0x2, 0x9, 0xf6, 0x6, 0xcd]}, 0x45c) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:21 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x6, 0x4, 0x2, 0x8, 0x32, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x13}, 0x20, 0x700, 0x4, 0x1000}})
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x6, 0x4, 0x2, 0x8, 0x32, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x13}, 0x20, 0x700, 0x4, 0x1000}}) (async)

05:30:21 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840)

[ 2350.312116] CPU: 1 PID: 15493 Comm: syz-executor.2 Not tainted 4.14.264-syzkaller #0
[ 2350.320034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2350.320039] Call Trace:
[ 2350.320054]  dump_stack+0x1b2/0x281
05:30:21 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (fail_nth: 6)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2350.320069]  should_fail.cold+0x10a/0x149
[ 2350.320083]  should_failslab+0xd6/0x130
[ 2350.320096]  kmem_cache_alloc_node+0x263/0x410
[ 2350.320109]  __alloc_skb+0x5c/0x510
[ 2350.320124]  kobject_uevent_env+0x882/0xf30
[ 2350.320143]  device_del+0x642/0xa80
[ 2350.320156]  ? __device_links_no_driver+0x1b0/0x1b0
[ 2350.320169]  device_unregister+0x22/0xc0
[ 2350.320179]  bdi_unregister+0x42f/0x610
[ 2350.320191]  ? wb_blkcg_offline+0x180/0x180
[ 2350.320210]  del_gendisk+0x453/0x820
[ 2350.320222]  ? disk_events_poll_msecs_store+0x150/0x150
[ 2350.320234]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 2350.320242]  ? blk_cleanup_queue+0x43c/0x620
[ 2350.320254]  loop_control_ioctl+0x347/0x3f0
[ 2350.320263]  ? loop_lookup+0x190/0x190
[ 2350.320271]  ? SyS_write+0x1b7/0x210
[ 2350.320283]  ? loop_lookup+0x190/0x190
[ 2350.320293]  do_vfs_ioctl+0x75a/0xff0
[ 2350.320306]  ? lock_acquire+0x170/0x3f0
[ 2350.320315]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2350.320328]  ? __fget+0x2df/0x460
[ 2350.320339]  ? do_vfs_ioctl+0xff0/0xff0
[ 2350.320350]  ? security_file_ioctl+0x83/0xb0
[ 2350.320360]  SyS_ioctl+0x7f/0xb0
[ 2350.320367]  ? do_vfs_ioctl+0xff0/0xff0
[ 2350.320379]  do_syscall_64+0x1d5/0x640
[ 2350.320393]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2350.320402] RIP: 0033:0x7fe3332e3059
[ 2350.320407] RSP: 002b:00007fe331c58168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2350.320422] RAX: ffffffffffffffda RBX: 00007fe3333f5f60 RCX: 00007fe3332e3059
[ 2350.320428] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000004
[ 2350.320433] RBP: 00007fe331c581d0 R08: 0000000000000000 R09: 0000000000000000
[ 2350.320439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2350.320444] R13: 00007ffca3b0476f R14: 00007fe331c58300 R15: 0000000000022000
[ 2350.351182] FAULT_INJECTION: forcing a failure.
[ 2350.351182] name failslab, interval 1, probability 0, space 0, times 0
[ 2350.351194] CPU: 1 PID: 15522 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2350.351200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2350.351203] Call Trace:
[ 2350.351219]  dump_stack+0x1b2/0x281
[ 2350.351234]  should_fail.cold+0x10a/0x149
[ 2350.351249]  should_failslab+0xd6/0x130
[ 2350.351263]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2350.351277]  sbitmap_queue_init_node+0x27f/0x5d0
[ 2350.351290]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 2350.351302]  blk_mq_init_tags+0x14b/0x280
[ 2350.351314]  blk_mq_alloc_rq_map+0x90/0x220
[ 2350.351326]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[ 2350.351338]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 2350.351353]  loop_add+0x2a0/0x830
[ 2350.351362]  ? loop_queue_rq+0x280/0x280
[ 2350.351370]  ? loop_queue_work+0x21e0/0x21e0
[ 2350.351384]  loop_control_ioctl+0x11a/0x3f0
[ 2350.351392]  ? loop_lookup+0x190/0x190
[ 2350.351399]  ? SyS_write+0x1b7/0x210
[ 2350.351411]  ? loop_lookup+0x190/0x190
[ 2350.351429]  do_vfs_ioctl+0x75a/0xff0
[ 2350.351441]  ? lock_acquire+0x170/0x3f0
[ 2350.351451]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2350.351464]  ? __fget+0x2df/0x460
[ 2350.351476]  ? do_vfs_ioctl+0xff0/0xff0
[ 2350.351486]  ? security_file_ioctl+0x83/0xb0
[ 2350.351496]  SyS_ioctl+0x7f/0xb0
[ 2350.351503]  ? do_vfs_ioctl+0xff0/0xff0
[ 2350.351515]  do_syscall_64+0x1d5/0x640
[ 2350.351529]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2350.351536] RIP: 0033:0x7f2c308a4059
[ 2350.351541] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
05:30:21 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RLERROR(r0, &(0x7f0000000040)={0xd, 0x7, 0x2, {0x4, '!\'$:'}}, 0xd)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7)

05:30:21 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{<r2=>0x0}, {}]})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={r2, 0x2})
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
openat$cgroup_pressure(r3, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {}]}) (async)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={r2, 0x2}) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
openat$cgroup_pressure(r3, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)

05:30:21 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 9)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:21 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840)

[ 2350.351551] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2350.351556] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2350.351562] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2350.351567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2350.351573] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2350.351714] blk-mq: reduced tag depth (128 -> 64)
[ 2350.481688] FAULT_INJECTION: forcing a failure.
[ 2350.481688] name failslab, interval 1, probability 0, space 0, times 0
05:30:21 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$P9_RLERROR(r0, &(0x7f0000000040)={0xd, 0x7, 0x2, {0x4, '!\'$:'}}, 0xd)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7)

05:30:21 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$P9_RLERROR(r0, &(0x7f0000000040)={0xd, 0x7, 0x2, {0x4, '!\'$:'}}, 0xd) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7)

05:30:21 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840)

05:30:21 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1000, 0x80080)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x2)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:21 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1000, 0x80080)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x2) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

[ 2350.886490] CPU: 0 PID: 15558 Comm: syz-executor.2 Not tainted 4.14.264-syzkaller #0
[ 2350.894412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2350.894419] Call Trace:
[ 2350.906447]  dump_stack+0x1b2/0x281
[ 2350.906462]  should_fail.cold+0x10a/0x149
[ 2350.906475]  should_failslab+0xd6/0x130
[ 2350.906487]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2350.923540]  __kmalloc_node_track_caller+0x38/0x70
[ 2350.923551]  __alloc_skb+0x96/0x510
[ 2350.932100]  kobject_uevent_env+0x882/0xf30
05:30:21 executing program 3:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x107201, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7fff, 0x9ccc2)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x5})
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
write$P9_RFSYNC(r2, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7)

05:30:21 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400000000009, 0x208180)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000240))
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000200)={r1, 0x1, &(0x7f0000000080)=[0xfffffff8], &(0x7f00000000c0)=[0x5], 0x30, 0x4, 0xff, &(0x7f0000000100)=[0x0, 0x6, 0x20, 0x7ff], &(0x7f00000001c0)=[0x8, 0x0, 0x1, 0x21e9]})
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

[ 2350.932116]  device_del+0x642/0xa80
[ 2350.932129]  ? __device_links_no_driver+0x1b0/0x1b0
[ 2350.932142]  device_unregister+0x22/0xc0
[ 2350.932153]  bdi_unregister+0x42f/0x610
[ 2350.932165]  ? wb_blkcg_offline+0x180/0x180
[ 2350.932182]  del_gendisk+0x453/0x820
[ 2350.932193]  ? disk_events_poll_msecs_store+0x150/0x150
[ 2350.932205]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 2350.932214]  ? blk_cleanup_queue+0x43c/0x620
[ 2350.932225]  loop_control_ioctl+0x347/0x3f0
[ 2350.932234]  ? loop_lookup+0x190/0x190
05:30:22 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (fail_nth: 7)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

05:30:22 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000003280)=ANY=[@ANYBLOB="14080000", @ANYRES16=r2, @ANYBLOB="0100000000001d8000003ede0000d2af28401e14819c3966b994803630e24468e0c8cefada428a9da9b3b842173c0700add503e4bfb279c28033"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x24000100)
write$9p(r1, &(0x7f00000001c0)="f515f184cd2662b0e9a2a311c61a41e6afb643baf1d487a039edf0c007d73894f26f8672777bb4df01724abe64084bd6e4210856fe86c432ca1c6d9279033ebe86227f68eb1bf53447aa65b143614ed1a94b50670f1c7d54dde30ebcad7dab5ec8", 0x61)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r5, 0x701, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0xe06a93d02c934d1e)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe(&(0x7f0000000500)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r3)
openat$cgroup_subtree(r0, &(0x7f0000003240), 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000003200)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000031c0)={&(0x7f00000005c0)={0x2bc8, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x170c, 0x8, 0x0, 0x1, [{0x49c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_ALLOWEDIPS={0x3b0, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "54d1b01ff13129bd1bbb0e9c46ec757508f54ee4866963bb169731815773be7d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @loopback, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1f}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b0ecfa625ec9b509efcc2c00835451509829ba700aaeda4ed4261d3e521cde9a"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1f, @mcast2, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}]}, {0x66c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "904e3e44748c0f0a30183cf902f01809d5d6579fcd8bccd266d3efbc6f61d5b9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @local, 0xffff44cc}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9ece1866ef41a84562b72a07854d49926b691197d3b7afb2fee199f3e1cb01a4"}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}, {0x6a8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1b0, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4d8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x40}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x1464, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b4feeb2ce9eec8bc75479bc62d2c25173a9b47a01d87c10843b68cc34ec4508b"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xa}]}, {0x6d4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x6, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d3346468f152e4486d78a728bf2a13623834d19a1be39d7d0ef97d27398301a9"}, @WGPEER_A_ALLOWEDIPS={0x26c, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "92e707af7ebdde18a8ab3b4f66b20a3657ee716f5158ced702c395efed0b7e61"}, @WGPEER_A_ALLOWEDIPS={0x1a8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xad}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7c2034b0f8ab815ae15cb3d64868d8058d1acffa5685da8726860a9573cade8e"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}]}, {0xc54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x334, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9190}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x610, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffd}}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x2bc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)

05:30:22 executing program 3:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x107201, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7fff, 0x9ccc2)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x5}) (async)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 32)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (rerun: 32)
write$P9_RFSYNC(r2, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7)

[ 2350.932243]  ? SyS_write+0x1b7/0x210
[ 2350.932254]  ? loop_lookup+0x190/0x190
[ 2350.932264]  do_vfs_ioctl+0x75a/0xff0
[ 2350.932276]  ? lock_acquire+0x170/0x3f0
[ 2350.932285]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2350.932297]  ? __fget+0x2df/0x460
[ 2350.932307]  ? do_vfs_ioctl+0xff0/0xff0
[ 2350.932317]  ? security_file_ioctl+0x83/0xb0
[ 2350.932327]  SyS_ioctl+0x7f/0xb0
[ 2350.932334]  ? do_vfs_ioctl+0xff0/0xff0
[ 2350.932344]  do_syscall_64+0x1d5/0x640
[ 2350.932358]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2350.932371] RIP: 0033:0x7fe3332e3059
[ 2350.932376] RSP: 002b:00007fe331c58168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2350.932386] RAX: ffffffffffffffda RBX: 00007fe3333f5f60 RCX: 00007fe3332e3059
[ 2350.932391] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000004
[ 2350.932396] RBP: 00007fe331c581d0 R08: 0000000000000000 R09: 0000000000000000
[ 2350.932401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2350.932406] R13: 00007ffca3b0476f R14: 00007fe331c58300 R15: 0000000000022000
[ 2350.956304] FAULT_INJECTION: forcing a failure.
[ 2350.956304] name failslab, interval 1, probability 0, space 0, times 0
05:30:22 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 10)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:22 executing program 3:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x107201, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7fff, 0x9ccc2)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x5})
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
write$P9_RFSYNC(r2, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x107201, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x7fff, 0x9ccc2) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x5}) (async)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async)
write$P9_RFSYNC(r2, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) (async)

05:30:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400000000009, 0x208180)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000240))
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000200)={r1, 0x1, &(0x7f0000000080)=[0xfffffff8], &(0x7f00000000c0)=[0x5], 0x30, 0x4, 0xff, &(0x7f0000000100)=[0x0, 0x6, 0x20, 0x7ff], &(0x7f00000001c0)=[0x8, 0x0, 0x1, 0x21e9]}) (async, rerun: 64)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (rerun: 64)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

05:30:22 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (fail_nth: 8)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2351.110896] CPU: 0 PID: 15577 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2351.110903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
05:30:22 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

05:30:22 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x4}, 0xb)

[ 2351.110906] Call Trace:
[ 2351.110921]  dump_stack+0x1b2/0x281
[ 2351.110936]  should_fail.cold+0x10a/0x149
[ 2351.110950]  should_failslab+0xd6/0x130
[ 2351.110961]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2351.110974]  __kmalloc_node+0x38/0x70
[ 2351.110987]  blk_mq_alloc_rq_map+0xd2/0x220
[ 2351.110999]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[ 2351.111012]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 2351.111028]  loop_add+0x2a0/0x830
[ 2351.111038]  ? loop_queue_rq+0x280/0x280
[ 2351.111045]  ? loop_queue_work+0x21e0/0x21e0
[ 2351.111059]  loop_control_ioctl+0x11a/0x3f0
[ 2351.111068]  ? loop_lookup+0x190/0x190
[ 2351.111077]  ? SyS_write+0x1b7/0x210
[ 2351.111089]  ? loop_lookup+0x190/0x190
[ 2351.111099]  do_vfs_ioctl+0x75a/0xff0
[ 2351.111110]  ? lock_acquire+0x170/0x3f0
[ 2351.111119]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2351.111132]  ? __fget+0x2df/0x460
[ 2351.111142]  ? do_vfs_ioctl+0xff0/0xff0
[ 2351.111153]  ? security_file_ioctl+0x83/0xb0
[ 2351.111164]  SyS_ioctl+0x7f/0xb0
[ 2351.111171]  ? do_vfs_ioctl+0xff0/0xff0
[ 2351.111182]  do_syscall_64+0x1d5/0x640
[ 2351.111197]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2351.111205] RIP: 0033:0x7f2c308a4059
[ 2351.111210] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2351.111220] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2351.111226] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2351.111232] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2351.111237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2351.111242] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2351.111407] blk-mq: reduced tag depth (128 -> 64)
[ 2351.150561] FAULT_INJECTION: forcing a failure.
[ 2351.150561] name failslab, interval 1, probability 0, space 0, times 0
[ 2351.150573] CPU: 0 PID: 15609 Comm: syz-executor.2 Not tainted 4.14.264-syzkaller #0
[ 2351.150579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2351.150583] Call Trace:
[ 2351.150596]  dump_stack+0x1b2/0x281
[ 2351.150611]  should_fail.cold+0x10a/0x149
[ 2351.150625]  should_failslab+0xd6/0x130
[ 2351.150638]  kmem_cache_alloc_node+0x263/0x410
[ 2351.150650]  __alloc_skb+0x5c/0x510
[ 2351.150666]  kobject_uevent_env+0x882/0xf30
[ 2351.150684]  device_del+0x642/0xa80
[ 2351.150697]  ? __device_links_no_driver+0x1b0/0x1b0
[ 2351.150712]  device_unregister+0x22/0xc0
[ 2351.150724]  bdi_unregister+0x42f/0x610
[ 2351.150738]  ? wb_blkcg_offline+0x180/0x180
[ 2351.150765]  del_gendisk+0x453/0x820
[ 2351.150783]  ? disk_events_poll_msecs_store+0x150/0x150
[ 2351.150797]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 2351.150807]  ? blk_cleanup_queue+0x43c/0x620
[ 2351.150820]  loop_control_ioctl+0x347/0x3f0
[ 2351.150830]  ? loop_lookup+0x190/0x190
[ 2351.150840]  ? SyS_write+0x1b7/0x210
[ 2351.150853]  ? loop_lookup+0x190/0x190
[ 2351.150863]  do_vfs_ioctl+0x75a/0xff0
[ 2351.150876]  ? lock_acquire+0x170/0x3f0
[ 2351.150886]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2351.150899]  ? __fget+0x2df/0x460
[ 2351.150910]  ? do_vfs_ioctl+0xff0/0xff0
[ 2351.150920]  ? security_file_ioctl+0x83/0xb0
[ 2351.150931]  SyS_ioctl+0x7f/0xb0
[ 2351.150939]  ? do_vfs_ioctl+0xff0/0xff0
[ 2351.150950]  do_syscall_64+0x1d5/0x640
[ 2351.150964]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2351.150971] RIP: 0033:0x7fe3332e3059
[ 2351.150976] RSP: 002b:00007fe331c58168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2351.150987] RAX: ffffffffffffffda RBX: 00007fe3333f5f60 RCX: 00007fe3332e3059
[ 2351.150993] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000004
[ 2351.150998] RBP: 00007fe331c581d0 R08: 0000000000000000 R09: 0000000000000000
[ 2351.151003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2351.151010] R13: 00007ffca3b0476f R14: 00007fe331c58300 R15: 0000000000022000
[ 2351.176359] FAULT_INJECTION: forcing a failure.
[ 2351.176359] name failslab, interval 1, probability 0, space 0, times 0
[ 2351.176370] CPU: 0 PID: 15623 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2351.176376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2351.176380] Call Trace:
[ 2351.176394]  dump_stack+0x1b2/0x281
[ 2351.176408]  should_fail.cold+0x10a/0x149
[ 2351.176421]  should_failslab+0xd6/0x130
[ 2351.176435]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2351.176449]  __kmalloc_node+0x38/0x70
[ 2351.176462]  blk_mq_alloc_rq_map+0x113/0x220
[ 2351.176475]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[ 2351.176488]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 2351.176503]  loop_add+0x2a0/0x830
[ 2351.176514]  ? loop_queue_rq+0x280/0x280
[ 2351.176522]  ? loop_queue_work+0x21e0/0x21e0
[ 2351.176536]  loop_control_ioctl+0x11a/0x3f0
[ 2351.176545]  ? loop_lookup+0x190/0x190
[ 2351.176553]  ? SyS_write+0x1b7/0x210
[ 2351.176565]  ? loop_lookup+0x190/0x190
[ 2351.176575]  do_vfs_ioctl+0x75a/0xff0
[ 2351.176587]  ? lock_acquire+0x170/0x3f0
[ 2351.176596]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2351.176609]  ? __fget+0x2df/0x460
[ 2351.176618]  ? do_vfs_ioctl+0xff0/0xff0
[ 2351.176629]  ? security_file_ioctl+0x83/0xb0
[ 2351.176640]  SyS_ioctl+0x7f/0xb0
[ 2351.176647]  ? do_vfs_ioctl+0xff0/0xff0
[ 2351.176659]  do_syscall_64+0x1d5/0x640
[ 2351.176674]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2351.176682] RIP: 0033:0x7f2c308a4059
[ 2351.176687] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
05:30:22 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1000, 0x80080)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x2)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:22 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

05:30:22 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 11)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:22 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x4}, 0xb)

[ 2351.176697] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2351.176703] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2351.176708] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2351.176713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2351.176719] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2351.176882] blk-mq: reduced tag depth (128 -> 64)
05:30:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400000000009, 0x208180)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000240)) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000200)={r1, 0x1, &(0x7f0000000080)=[0xfffffff8], &(0x7f00000000c0)=[0x5], 0x30, 0x4, 0xff, &(0x7f0000000100)=[0x0, 0x6, 0x20, 0x7ff], &(0x7f00000001c0)=[0x8, 0x0, 0x1, 0x21e9]}) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

05:30:22 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
accept4$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x80800)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="e9fdffff29030000000000400000000001000000000000000100000000000010040700222f66696c6530000300000000000000000010000000000000000000fd07002e2f66696c6530"], 0x49)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x10, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_RWRITE(r3, &(0x7f0000000080)={0xb, 0x77, 0x1, 0xfffffff7}, 0xb)
write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7)
write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7)

05:30:22 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async, rerun: 32)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 32)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000003280)=ANY=[@ANYBLOB="14080000", @ANYRES16=r2, @ANYBLOB="0100000000001d8000003ede0000d2af28401e14819c3966b994803630e24468e0c8cefada428a9da9b3b842173c0700add503e4bfb279c28033"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x24000100)
write$9p(r1, &(0x7f00000001c0)="f515f184cd2662b0e9a2a311c61a41e6afb643baf1d487a039edf0c007d73894f26f8672777bb4df01724abe64084bd6e4210856fe86c432ca1c6d9279033ebe86227f68eb1bf53447aa65b143614ed1a94b50670f1c7d54dde30ebcad7dab5ec8", 0x61) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r5, 0x701, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0xe06a93d02c934d1e) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe(&(0x7f0000000500)={<r6=>0xffffffffffffffff}) (async)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r3)
openat$cgroup_subtree(r0, &(0x7f0000003240), 0x2, 0x0) (async)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000003200)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000031c0)={&(0x7f00000005c0)={0x2bc8, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x170c, 0x8, 0x0, 0x1, [{0x49c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_ALLOWEDIPS={0x3b0, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "54d1b01ff13129bd1bbb0e9c46ec757508f54ee4866963bb169731815773be7d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @loopback, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1f}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b0ecfa625ec9b509efcc2c00835451509829ba700aaeda4ed4261d3e521cde9a"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1f, @mcast2, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}]}, {0x66c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "904e3e44748c0f0a30183cf902f01809d5d6579fcd8bccd266d3efbc6f61d5b9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @local, 0xffff44cc}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9ece1866ef41a84562b72a07854d49926b691197d3b7afb2fee199f3e1cb01a4"}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}, {0x6a8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1b0, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4d8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x40}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x1464, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b4feeb2ce9eec8bc75479bc62d2c25173a9b47a01d87c10843b68cc34ec4508b"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xa}]}, {0x6d4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x6, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d3346468f152e4486d78a728bf2a13623834d19a1be39d7d0ef97d27398301a9"}, @WGPEER_A_ALLOWEDIPS={0x26c, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "92e707af7ebdde18a8ab3b4f66b20a3657ee716f5158ced702c395efed0b7e61"}, @WGPEER_A_ALLOWEDIPS={0x1a8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xad}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7c2034b0f8ab815ae15cb3d64868d8058d1acffa5685da8726860a9573cade8e"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}]}, {0xc54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x334, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9190}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x610, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffd}}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x2bc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)

05:30:22 executing program 4:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xade}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x800)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:22 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
accept4$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x80800) (async)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="e9fdffff29030000000000400000000001000000000000000100000000000010040700222f66696c6530000300000000000000000010000000000000000000fd07002e2f66696c6530"], 0x49)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x10, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_RWRITE(r3, &(0x7f0000000080)={0xb, 0x77, 0x1, 0xfffffff7}, 0xb) (async)
write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) (async, rerun: 32)
write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) (rerun: 32)

05:30:22 executing program 4:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) (async, rerun: 64)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xade}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x800) (async, rerun: 64)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:22 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x4}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x4}, 0xb) (async)

[ 2351.884547] FAULT_INJECTION: forcing a failure.
[ 2351.884547] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2351.923024] CPU: 1 PID: 15660 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
05:30:22 executing program 4:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xade}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x800) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:22 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async, rerun: 32)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async, rerun: 32)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async, rerun: 64)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (rerun: 64)

05:30:22 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async, rerun: 64)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000003280)=ANY=[@ANYBLOB="14080000", @ANYRES16=r2, @ANYBLOB="0100000000001d8000003ede0000d2af28401e14819c3966b994803630e24468e0c8cefada428a9da9b3b842173c0700add503e4bfb279c28033"], 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x24000100)
write$9p(r1, &(0x7f00000001c0)="f515f184cd2662b0e9a2a311c61a41e6afb643baf1d487a039edf0c007d73894f26f8672777bb4df01724abe64084bd6e4210856fe86c432ca1c6d9279033ebe86227f68eb1bf53447aa65b143614ed1a94b50670f1c7d54dde30ebcad7dab5ec8", 0x61)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r5, 0x701, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0xe06a93d02c934d1e)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 32)
pipe(&(0x7f0000000500)={<r6=>0xffffffffffffffff}) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r3)
openat$cgroup_subtree(r0, &(0x7f0000003240), 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000003200)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000031c0)={&(0x7f00000005c0)={0x2bc8, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x170c, 0x8, 0x0, 0x1, [{0x49c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_ALLOWEDIPS={0x3b0, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "54d1b01ff13129bd1bbb0e9c46ec757508f54ee4866963bb169731815773be7d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @loopback, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1f}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b0ecfa625ec9b509efcc2c00835451509829ba700aaeda4ed4261d3e521cde9a"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1f, @mcast2, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}]}, {0x66c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "904e3e44748c0f0a30183cf902f01809d5d6579fcd8bccd266d3efbc6f61d5b9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @local, 0xffff44cc}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9ece1866ef41a84562b72a07854d49926b691197d3b7afb2fee199f3e1cb01a4"}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}, {0x6a8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1b0, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4d8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x40}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x1464, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b4feeb2ce9eec8bc75479bc62d2c25173a9b47a01d87c10843b68cc34ec4508b"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xa}]}, {0x6d4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x6, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d3346468f152e4486d78a728bf2a13623834d19a1be39d7d0ef97d27398301a9"}, @WGPEER_A_ALLOWEDIPS={0x26c, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "92e707af7ebdde18a8ab3b4f66b20a3657ee716f5158ced702c395efed0b7e61"}, @WGPEER_A_ALLOWEDIPS={0x1a8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xad}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7c2034b0f8ab815ae15cb3d64868d8058d1acffa5685da8726860a9573cade8e"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}]}, {0xc54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x334, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9190}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x610, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffd}}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x2bc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)

05:30:22 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 12)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

[ 2351.930922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2351.940284] Call Trace:
[ 2351.940301]  dump_stack+0x1b2/0x281
[ 2351.940316]  should_fail.cold+0x10a/0x149
[ 2351.940330]  __alloc_pages_nodemask+0x22c/0x2720
[ 2351.940339]  ? kasan_kmalloc+0xeb/0x160
[ 2351.940350]  ? blk_mq_alloc_rq_map+0x113/0x220
[ 2351.940358]  ? __blk_mq_alloc_rq_map+0xa3/0x3a0
[ 2351.940366]  ? loop_add+0x2a0/0x830
[ 2351.940374]  ? loop_control_ioctl+0x11a/0x3f0
[ 2351.940382]  ? do_vfs_ioctl+0x75a/0xff0
[ 2351.940393]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2351.940405]  ? __mutex_unlock_slowpath+0x75/0x770
[ 2351.940415]  ? fs_reclaim_release+0xd0/0x110
[ 2351.940427]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2351.940444]  ? __lockdep_init_map+0x100/0x560
[ 2351.940454]  ? _find_next_bit+0xdb/0x100
[ 2351.940466]  ? __cpu_to_node+0x7b/0xa0
[ 2351.940477]  ? blk_mq_hw_queue_to_node+0x9f/0xf0
[ 2351.940489]  blk_mq_alloc_rqs+0x227/0x6d0
[ 2351.940503]  ? blk_mq_alloc_rq_map+0x9d/0x220
[ 2351.940515]  __blk_mq_alloc_rq_map+0x15b/0x3a0
[ 2351.940528]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 2351.940543]  loop_add+0x2a0/0x830
[ 2351.940554]  ? loop_queue_rq+0x280/0x280
[ 2351.940561]  ? loop_queue_work+0x21e0/0x21e0
[ 2351.940575]  loop_control_ioctl+0x11a/0x3f0
[ 2351.940584]  ? loop_lookup+0x190/0x190
[ 2351.940593]  ? SyS_write+0x1b7/0x210
[ 2351.940613]  ? loop_lookup+0x190/0x190
[ 2351.940622]  do_vfs_ioctl+0x75a/0xff0
[ 2351.940632]  ? lock_acquire+0x170/0x3f0
[ 2351.940641]  ? ioctl_preallocate+0x1a0/0x1a0
05:30:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000001c0)='syz0\x00')
write$P9_RMKNOD(r3, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x1, 0x4, 0x5}}, 0x14)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4)

[ 2351.940654]  ? __fget+0x2df/0x460
[ 2351.940665]  ? do_vfs_ioctl+0xff0/0xff0
[ 2351.940676]  ? security_file_ioctl+0x83/0xb0
[ 2351.940686]  SyS_ioctl+0x7f/0xb0
[ 2351.940693]  ? do_vfs_ioctl+0xff0/0xff0
[ 2351.940704]  do_syscall_64+0x1d5/0x640
[ 2351.940718]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2351.940726] RIP: 0033:0x7f2c308a4059
[ 2351.940731] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2351.940742] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2351.940747] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2351.940753] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2351.940758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2351.940764] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2352.084659] FAULT_INJECTION: forcing a failure.
[ 2352.084659] name failslab, interval 1, probability 0, space 0, times 0
[ 2352.084671] CPU: 0 PID: 15711 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2352.084678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2352.084682] Call Trace:
[ 2352.084696]  dump_stack+0x1b2/0x281
[ 2352.084710]  should_fail.cold+0x10a/0x149
[ 2352.084723]  should_failslab+0xd6/0x130
[ 2352.084736]  kmem_cache_alloc_node+0x263/0x410
[ 2352.084751]  blk_alloc_queue_node+0x2d/0xb40
[ 2352.084764]  blk_mq_init_queue+0x42/0x90
[ 2352.084773]  loop_add+0x303/0x830
[ 2352.084783]  ? loop_queue_rq+0x280/0x280
[ 2352.084791]  ? loop_queue_work+0x21e0/0x21e0
[ 2352.084803]  loop_control_ioctl+0x11a/0x3f0
[ 2352.084811]  ? loop_lookup+0x190/0x190
[ 2352.084819]  ? SyS_write+0x1b7/0x210
[ 2352.084830]  ? loop_lookup+0x190/0x190
[ 2352.084839]  do_vfs_ioctl+0x75a/0xff0
[ 2352.084849]  ? lock_acquire+0x170/0x3f0
[ 2352.084858]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2352.084871]  ? __fget+0x2df/0x460
[ 2352.084882]  ? do_vfs_ioctl+0xff0/0xff0
[ 2352.084894]  ? security_file_ioctl+0x83/0xb0
[ 2352.084905]  SyS_ioctl+0x7f/0xb0
[ 2352.084914]  ? do_vfs_ioctl+0xff0/0xff0
[ 2352.084925]  do_syscall_64+0x1d5/0x640
[ 2352.084940]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2352.084947] RIP: 0033:0x7f2c308a4059
[ 2352.084952] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2352.084962] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2352.084968] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2352.084973] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2352.084978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
05:30:23 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 13)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:23 executing program 3:
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x9}, 0xb)

05:30:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) (async, rerun: 32)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) (rerun: 32)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000001c0)='syz0\x00') (async)
write$P9_RMKNOD(r3, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x1, 0x4, 0x5}}, 0x14) (async, rerun: 64)
socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async, rerun: 64)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async, rerun: 64)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4)

05:30:23 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x19, 0x1, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x7, 0x200, 0x800}})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

[ 2352.084983] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:23 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
accept4$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x80800) (async)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="e9fdffff29030000000000400000000001000000000000000100000000000010040700222f66696c6530000300000000000000000010000000000000000000fd07002e2f66696c6530"], 0x49) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 64)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async, rerun: 64)
write$P9_RWRITE(r3, &(0x7f0000000080)={0xb, 0x77, 0x1, 0xfffffff7}, 0xb) (async, rerun: 64)
write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7)
write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7)

05:30:23 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000fec000/0x14000)=nil, 0x14000}, 0x2})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x100)
ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x8, 0x8, 0xc16})

05:30:23 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="c90000cec80000da818e9700000000000000001f5e16edaa0bae5183c92a9f199d5ba64baf9844914e28c400c58500000000000000000053e9c44239fe4718b9a0dfc0187400000000000000000007"], 0x49)

[ 2352.456452] FAULT_INJECTION: forcing a failure.
[ 2352.456452] name failslab, interval 1, probability 0, space 0, times 0
[ 2352.479551] CPU: 1 PID: 15741 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2352.487446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2352.496796] Call Trace:
[ 2352.499403]  dump_stack+0x1b2/0x281
05:30:23 executing program 3:
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x9}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x9}, 0xb) (async)

05:30:23 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x19, 0x1, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x7, 0x200, 0x800}}) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

[ 2352.503043]  should_fail.cold+0x10a/0x149
[ 2352.503058]  should_failslab+0xd6/0x130
[ 2352.503070]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 2352.503084]  bioset_create+0x53/0x750
[ 2352.503097]  ? kmem_cache_alloc_node+0x38b/0x410
[ 2352.524414]  blk_alloc_queue_node+0xa8/0xb40
[ 2352.524427]  blk_mq_init_queue+0x42/0x90
[ 2352.532879]  loop_add+0x303/0x830
[ 2352.532893]  ? loop_queue_rq+0x280/0x280
[ 2352.540392]  ? loop_queue_work+0x21e0/0x21e0
[ 2352.540407]  loop_control_ioctl+0x11a/0x3f0
[ 2352.540417]  ? loop_lookup+0x190/0x190
[ 2352.540426]  ? SyS_write+0x1b7/0x210
[ 2352.540438]  ? loop_lookup+0x190/0x190
[ 2352.540448]  do_vfs_ioctl+0x75a/0xff0
[ 2352.540459]  ? lock_acquire+0x170/0x3f0
[ 2352.540469]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2352.540482]  ? __fget+0x2df/0x460
[ 2352.540492]  ? do_vfs_ioctl+0xff0/0xff0
[ 2352.540503]  ? security_file_ioctl+0x83/0xb0
[ 2352.540514]  SyS_ioctl+0x7f/0xb0
[ 2352.540521]  ? do_vfs_ioctl+0xff0/0xff0
[ 2352.540533]  do_syscall_64+0x1d5/0x640
[ 2352.540549]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2352.540557] RIP: 0033:0x7f2c308a4059
[ 2352.540562] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2352.540572] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2352.540577] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2352.540583] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
05:30:23 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000fec000/0x14000)=nil, 0x14000}, 0x2})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x100)
ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x8, 0x8, 0xc16})
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000fec000/0x14000)=nil, 0x14000}, 0x2}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) (async)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x100) (async)
ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x8, 0x8, 0xc16}) (async)

05:30:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000001c0)='syz0\x00')
write$P9_RMKNOD(r3, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x1, 0x4, 0x5}}, 0x14)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000001c0)='syz0\x00') (async)
write$P9_RMKNOD(r3, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x1, 0x4, 0x5}}, 0x14) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) (async)

05:30:23 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 14)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:23 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x19, 0x1, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x7, 0x200, 0x800}})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x19, 0x1, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x7, 0x200, 0x800}}) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:23 executing program 3:
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x9}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x9}, 0xb) (async)

05:30:23 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="c90000cec80000da818e9700000000000000001f5e16edaa0bae5183c92a9f199d5ba64baf9844914e28c400c58500000000000000000053e9c44239fe4718b9a0dfc0187400000000000000000007"], 0x49)

[ 2352.540588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2352.540593] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:23 executing program 3:
write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0xac, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf250200000006000e000200000006001b004e21000008000b0001000000050006001d00000014001f00fc0200"/66], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x8010)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/65})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r3 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
write$P9_RWSTAT(r3, &(0x7f0000000380)={0x7, 0x7f, 0x1}, 0x7)

05:30:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040101}, 0x28000080)

[ 2352.733488] FAULT_INJECTION: forcing a failure.
[ 2352.733488] name failslab, interval 1, probability 0, space 0, times 0
[ 2352.733500] CPU: 0 PID: 15797 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2352.733507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2352.733511] Call Trace:
[ 2352.733525]  dump_stack+0x1b2/0x281
[ 2352.733540]  should_fail.cold+0x10a/0x149
[ 2352.733554]  should_failslab+0xd6/0x130
[ 2352.733567]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2352.733578]  ? mempool_free+0x1d0/0x1d0
[ 2352.733591]  mempool_create_node+0x76/0x3e0
[ 2352.733601]  ? mempool_kmalloc+0x20/0x20
[ 2352.733616]  bioset_create+0x31b/0x750
[ 2352.733626]  ? kmem_cache_alloc_node+0x38b/0x410
[ 2352.733639]  blk_alloc_queue_node+0xa8/0xb40
[ 2352.733653]  blk_mq_init_queue+0x42/0x90
[ 2352.733663]  loop_add+0x303/0x830
05:30:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040101}, 0x28000080)

[ 2352.733673]  ? loop_queue_rq+0x280/0x280
[ 2352.733681]  ? loop_queue_work+0x21e0/0x21e0
[ 2352.733695]  loop_control_ioctl+0x11a/0x3f0
[ 2352.733705]  ? loop_lookup+0x190/0x190
[ 2352.733713]  ? SyS_write+0x1b7/0x210
[ 2352.733726]  ? loop_lookup+0x190/0x190
[ 2352.733736]  do_vfs_ioctl+0x75a/0xff0
[ 2352.733747]  ? lock_acquire+0x170/0x3f0
[ 2352.733757]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2352.733770]  ? __fget+0x2df/0x460
05:30:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040101}, 0x28000080)

[ 2352.733781]  ? do_vfs_ioctl+0xff0/0xff0
[ 2352.733792]  ? security_file_ioctl+0x83/0xb0
[ 2352.733803]  SyS_ioctl+0x7f/0xb0
[ 2352.733811]  ? do_vfs_ioctl+0xff0/0xff0
[ 2352.733822]  do_syscall_64+0x1d5/0x640
[ 2352.733838]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2352.733846] RIP: 0033:0x7f2c308a4059
[ 2352.733851] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
05:30:23 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

05:30:23 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x1e)

05:30:24 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async, rerun: 32)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 32)
write$P9_ROPEN(r0, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000fec000/0x14000)=nil, 0x14000}, 0x2})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) (async, rerun: 64)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 64)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x100)
ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x8, 0x8, 0xc16})

05:30:24 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="c90000cec80000da818e9700000000000000001f5e16edaa0bae5183c92a9f199d5ba64baf9844914e28c400c58500000000000000000053e9c44239fe4718b9a0dfc0187400000000000000000007"], 0x49)

05:30:24 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 15)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:24 executing program 3:
write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0xac, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf250200000006000e000200000006001b004e21000008000b0001000000050006001d00000014001f00fc0200"/66], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x8010)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/65})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r3 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
write$P9_RWSTAT(r3, &(0x7f0000000380)={0x7, 0x7f, 0x1}, 0x7)
write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0xac, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf250200000006000e000200000006001b004e21000008000b0001000000050006001d00000014001f00fc0200"/66], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x8010) (async)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/65}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async)
write$P9_RWSTAT(r3, &(0x7f0000000380)={0x7, 0x7f, 0x1}, 0x7) (async)

[ 2352.733861] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2352.733867] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2352.733872] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2352.733878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2352.733883] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:24 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x80000}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:24 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x1e)

05:30:24 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:24 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x80000}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x80000}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)

05:30:24 executing program 3:
write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0xac, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf250200000006000e000200000006001b004e21000008000b0001000000050006001d00000014001f00fc0200"/66], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x8010)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/65})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r3 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
write$P9_RWSTAT(r3, &(0x7f0000000380)={0x7, 0x7f, 0x1}, 0x7)
write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0xac, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf250200000006000e000200000006001b004e21000008000b0001000000050006001d00000014001f00fc0200"/66], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x8010) (async)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/65}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async)
write$P9_RWSTAT(r3, &(0x7f0000000380)={0x7, 0x7f, 0x1}, 0x7) (async)

[ 2353.109975] FAULT_INJECTION: forcing a failure.
[ 2353.109975] name failslab, interval 1, probability 0, space 0, times 0
05:30:24 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

[ 2353.152396] CPU: 1 PID: 15867 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2353.160330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2353.169701] Call Trace:
[ 2353.169721]  dump_stack+0x1b2/0x281
[ 2353.176507]  should_fail.cold+0x10a/0x149
[ 2353.176530]  should_failslab+0xd6/0x130
[ 2353.184641]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2353.184653]  ? mempool_free+0x1d0/0x1d0
[ 2353.193720]  __kmalloc_node+0x38/0x70
05:30:24 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

05:30:24 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 16)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

[ 2353.193734]  mempool_create_node+0xb1/0x3e0
[ 2353.193744]  ? mempool_kmalloc+0x20/0x20
[ 2353.193758]  bioset_create+0x31b/0x750
[ 2353.193768]  ? kmem_cache_alloc_node+0x38b/0x410
[ 2353.193781]  blk_alloc_queue_node+0xa8/0xb40
[ 2353.193794]  blk_mq_init_queue+0x42/0x90
[ 2353.193805]  loop_add+0x303/0x830
[ 2353.193815]  ? loop_queue_rq+0x280/0x280
[ 2353.193822]  ? loop_queue_work+0x21e0/0x21e0
[ 2353.193836]  loop_control_ioctl+0x11a/0x3f0
[ 2353.193844]  ? loop_lookup+0x190/0x190
[ 2353.193854]  ? SyS_write+0x1b7/0x210
[ 2353.193866]  ? loop_lookup+0x190/0x190
[ 2353.193877]  do_vfs_ioctl+0x75a/0xff0
[ 2353.193887]  ? lock_acquire+0x170/0x3f0
[ 2353.193897]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2353.193910]  ? __fget+0x2df/0x460
[ 2353.193920]  ? do_vfs_ioctl+0xff0/0xff0
05:30:24 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async, rerun: 64)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async, rerun: 64)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async, rerun: 64)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async, rerun: 64)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2353.193931]  ? security_file_ioctl+0x83/0xb0
[ 2353.193942]  SyS_ioctl+0x7f/0xb0
[ 2353.193949]  ? do_vfs_ioctl+0xff0/0xff0
[ 2353.193960]  do_syscall_64+0x1d5/0x640
[ 2353.193976]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2353.193984] RIP: 0033:0x7f2c308a4059
[ 2353.193988] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2353.193999] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2353.194004] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2353.194009] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2353.194014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2353.194019] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2353.317604] FAULT_INJECTION: forcing a failure.
[ 2353.317604] name failslab, interval 1, probability 0, space 0, times 0
[ 2353.317615] CPU: 0 PID: 15907 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2353.317622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2353.317626] Call Trace:
[ 2353.317639]  dump_stack+0x1b2/0x281
[ 2353.317655]  should_fail.cold+0x10a/0x149
[ 2353.317669]  should_failslab+0xd6/0x130
[ 2353.317682]  kmem_cache_alloc+0x28e/0x3c0
[ 2353.317692]  ? mempool_free+0x1d0/0x1d0
[ 2353.317704]  mempool_create_node+0x2d2/0x3e0
[ 2353.317719]  bioset_create+0x31b/0x750
[ 2353.317729]  ? kmem_cache_alloc_node+0x38b/0x410
[ 2353.317741]  blk_alloc_queue_node+0xa8/0xb40
05:30:24 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0xc006}, 0x4000)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6)

[ 2353.317753]  blk_mq_init_queue+0x42/0x90
[ 2353.317762]  loop_add+0x303/0x830
[ 2353.317773]  ? loop_queue_rq+0x280/0x280
[ 2353.317781]  ? loop_queue_work+0x21e0/0x21e0
[ 2353.317794]  loop_control_ioctl+0x11a/0x3f0
[ 2353.317803]  ? loop_lookup+0x190/0x190
[ 2353.317812]  ? SyS_write+0x1b7/0x210
[ 2353.317825]  ? loop_lookup+0x190/0x190
[ 2353.317835]  do_vfs_ioctl+0x75a/0xff0
[ 2353.317846]  ? lock_acquire+0x170/0x3f0
[ 2353.317855]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2353.317868]  ? __fget+0x2df/0x460
[ 2353.317877]  ? do_vfs_ioctl+0xff0/0xff0
[ 2353.317887]  ? security_file_ioctl+0x83/0xb0
[ 2353.317897]  SyS_ioctl+0x7f/0xb0
[ 2353.317904]  ? do_vfs_ioctl+0xff0/0xff0
[ 2353.317915]  do_syscall_64+0x1d5/0x640
[ 2353.317931]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2353.317938] RIP: 0033:0x7f2c308a4059
[ 2353.317943] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2353.317954] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
05:30:24 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x600503, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x900}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004811}, 0x48004)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x54, 0x28, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff1}, {0x1, 0xffff}, {0xfff2, 0xfff1}}, [@tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x1f, 0x8}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x5d, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x8000)

05:30:24 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:24 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 17)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

[ 2353.317960] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2353.317966] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2353.317972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2353.317977] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:24 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x1e)

05:30:24 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x80000}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x80000}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)

05:30:24 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x600503, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x900}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004811}, 0x48004)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x54, 0x28, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff1}, {0x1, 0xffff}, {0xfff2, 0xfff1}}, [@tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x1f, 0x8}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x5d, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x8000)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x600503, 0x0) (async)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x900}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004811}, 0x48004) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x54, 0x28, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff1}, {0x1, 0xffff}, {0xfff2, 0xfff1}}, [@tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x1f, 0x8}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x5d, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) (async)

05:30:24 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x14d00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0x9, 0x9, 0x0, 0x6, 0x8}, @alu={0x4, 0x1, 0xa, 0x4, 0x8, 0x10}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x3ff, 0x26, &(0x7f00000001c0)=""/38, 0x41000, 0x2, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x8, 0x6}, 0x10, 0xffffffffffffffff, r2}, 0x80)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r3, 0x4, r0}, 0x35)

05:30:24 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x8c800)
write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7)

05:30:24 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', <r0=>0x0, 0x80, 0x20, 0x0, 0x7f, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x65, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, {[@noop]}}}}})
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x54, 0x0, 0x284, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000091)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:24 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x600503, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x900}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004811}, 0x48004) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x54, 0x28, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff1}, {0x1, 0xffff}, {0xfff2, 0xfff1}}, [@tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x1f, 0x8}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x5d, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x8000)

05:30:24 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x14d00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0x9, 0x9, 0x0, 0x6, 0x8}, @alu={0x4, 0x1, 0xa, 0x4, 0x8, 0x10}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x3ff, 0x26, &(0x7f00000001c0)=""/38, 0x41000, 0x2, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x8, 0x6}, 0x10, 0xffffffffffffffff, r2}, 0x80) (async)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r3, 0x4, r0}, 0x35)

05:30:24 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0xc006}, 0x4000)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0xc006}, 0x4000) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) (async)

[ 2353.710525] FAULT_INJECTION: forcing a failure.
[ 2353.710525] name failslab, interval 1, probability 0, space 0, times 0
[ 2353.746215] CPU: 0 PID: 15963 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
05:30:24 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x8c800)
write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7)

[ 2353.754238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2353.763592] Call Trace:
[ 2353.763607]  dump_stack+0x1b2/0x281
[ 2353.763620]  should_fail.cold+0x10a/0x149
[ 2353.773946]  should_failslab+0xd6/0x130
[ 2353.773959]  kmem_cache_alloc+0x28e/0x3c0
[ 2353.782079]  ? mempool_free+0x1d0/0x1d0
[ 2353.782092]  mempool_create_node+0x2d2/0x3e0
[ 2353.790460]  bioset_create+0x31b/0x750
[ 2353.790473]  ? kmem_cache_alloc_node+0x38b/0x410
[ 2353.799089]  blk_alloc_queue_node+0xa8/0xb40
05:30:24 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 18)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

[ 2353.799104]  blk_mq_init_queue+0x42/0x90
[ 2353.799113]  loop_add+0x303/0x830
[ 2353.799124]  ? loop_queue_rq+0x280/0x280
[ 2353.799132]  ? loop_queue_work+0x21e0/0x21e0
[ 2353.799145]  loop_control_ioctl+0x11a/0x3f0
[ 2353.799154]  ? loop_lookup+0x190/0x190
[ 2353.799164]  ? SyS_write+0x1b7/0x210
[ 2353.799176]  ? loop_lookup+0x190/0x190
[ 2353.799185]  do_vfs_ioctl+0x75a/0xff0
[ 2353.799197]  ? lock_acquire+0x170/0x3f0
[ 2353.799206]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2353.799218]  ? __fget+0x2df/0x460
[ 2353.799229]  ? do_vfs_ioctl+0xff0/0xff0
[ 2353.799240]  ? security_file_ioctl+0x83/0xb0
[ 2353.799250]  SyS_ioctl+0x7f/0xb0
[ 2353.799258]  ? do_vfs_ioctl+0xff0/0xff0
[ 2353.799269]  do_syscall_64+0x1d5/0x640
[ 2353.799285]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2353.799293] RIP: 0033:0x7f2c308a4059
[ 2353.799297] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2353.799307] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2353.799313] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2353.799318] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2353.799323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2353.799328] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2353.932369] FAULT_INJECTION: forcing a failure.
[ 2353.932369] name failslab, interval 1, probability 0, space 0, times 0
[ 2353.932381] CPU: 0 PID: 16006 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2353.932387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2353.932391] Call Trace:
[ 2353.932405]  dump_stack+0x1b2/0x281
[ 2353.932420]  should_fail.cold+0x10a/0x149
[ 2353.932435]  should_failslab+0xd6/0x130
[ 2353.932449]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2353.932459]  ? mempool_free+0x1d0/0x1d0
[ 2353.932471]  mempool_create_node+0x76/0x3e0
[ 2353.932480]  ? mempool_kmalloc+0x20/0x20
[ 2353.932493]  bioset_create+0x506/0x750
[ 2353.932503]  ? kmem_cache_alloc_node+0x38b/0x410
[ 2353.932516]  blk_alloc_queue_node+0xa8/0xb40
[ 2353.932530]  blk_mq_init_queue+0x42/0x90
[ 2353.932541]  loop_add+0x303/0x830
[ 2353.932551]  ? loop_queue_rq+0x280/0x280
[ 2353.932558]  ? loop_queue_work+0x21e0/0x21e0
[ 2353.932571]  loop_control_ioctl+0x11a/0x3f0
[ 2353.932581]  ? loop_lookup+0x190/0x190
[ 2353.932597]  ? SyS_write+0x1b7/0x210
[ 2353.932610]  ? loop_lookup+0x190/0x190
[ 2353.932621]  do_vfs_ioctl+0x75a/0xff0
[ 2353.932633]  ? lock_acquire+0x170/0x3f0
[ 2353.932643]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2353.932656]  ? __fget+0x2df/0x460
[ 2353.932667]  ? do_vfs_ioctl+0xff0/0xff0
[ 2353.932678]  ? security_file_ioctl+0x83/0xb0
[ 2353.932689]  SyS_ioctl+0x7f/0xb0
[ 2353.932696]  ? do_vfs_ioctl+0xff0/0xff0
[ 2353.932707]  do_syscall_64+0x1d5/0x640
[ 2353.932722]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2353.932730] RIP: 0033:0x7f2c308a4059
[ 2353.932735] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
05:30:25 executing program 3:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50100062", @ANYRES16=r1, @ANYBLOB="00042dbd7000fbdbdf250b00000005002a00000000000800310064000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000880}, 0x40000)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x102)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

05:30:25 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0xc006}, 0x4000) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0) (async, rerun: 32)
ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) (async, rerun: 32)
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6)

05:30:25 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', <r0=>0x0, 0x80, 0x20, 0x0, 0x7f, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x65, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, {[@noop]}}}}}) (async)
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x54, 0x0, 0x284, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000091)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:25 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 19)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:25 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x8c800)
write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe2$9p(&(0x7f0000000000), 0x8c800) (async)
write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) (async)

05:30:25 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x14d00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0x9, 0x9, 0x0, 0x6, 0x8}, @alu={0x4, 0x1, 0xa, 0x4, 0x8, 0x10}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x3ff, 0x26, &(0x7f00000001c0)=""/38, 0x41000, 0x2, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x8, 0x6}, 0x10, 0xffffffffffffffff, r2}, 0x80)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r3, 0x4, r0}, 0x35)

[ 2353.932748] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2353.932754] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2353.932760] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2353.932765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2353.932771] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:25 executing program 3:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50100062", @ANYRES16=r1, @ANYBLOB="00042dbd7000fbdbdf250b00000005002a00000000000800310064000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000880}, 0x40000)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x102)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50100062", @ANYRES16=r1, @ANYBLOB="00042dbd7000fbdbdf250b00000005002a00000000000800310064000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000880}, 0x40000) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x102) (async)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:25 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', <r0=>0x0, 0x80, 0x20, 0x0, 0x7f, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x65, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, {[@noop]}}}}})
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x54, 0x0, 0x284, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000091)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r2, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x80, 0x20, 0x0, 0x7f, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x65, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, {[@noop]}}}}}) (async)
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x54, 0x0, 0x284, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000091) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r2, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)

[ 2354.254893] FAULT_INJECTION: forcing a failure.
[ 2354.254893] name failslab, interval 1, probability 0, space 0, times 0
[ 2354.269425] CPU: 0 PID: 16051 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2354.269433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2354.269437] Call Trace:
[ 2354.269452]  dump_stack+0x1b2/0x281
[ 2354.269468]  should_fail.cold+0x10a/0x149
05:30:25 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2354.269483]  should_failslab+0xd6/0x130
[ 2354.269495]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2354.269507]  ? mempool_free+0x1d0/0x1d0
[ 2354.269519]  __kmalloc_node+0x38/0x70
[ 2354.269532]  mempool_create_node+0xb1/0x3e0
[ 2354.269542]  ? mempool_kmalloc+0x20/0x20
[ 2354.269555]  bioset_create+0x506/0x750
[ 2354.269566]  ? kmem_cache_alloc_node+0x38b/0x410
05:30:25 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)

[ 2354.269579]  blk_alloc_queue_node+0xa8/0xb40
[ 2354.269592]  blk_mq_init_queue+0x42/0x90
[ 2354.269602]  loop_add+0x303/0x830
[ 2354.269612]  ? loop_queue_rq+0x280/0x280
[ 2354.269620]  ? loop_queue_work+0x21e0/0x21e0
[ 2354.269634]  loop_control_ioctl+0x11a/0x3f0
[ 2354.269644]  ? loop_lookup+0x190/0x190
[ 2354.269652]  ? SyS_write+0x1b7/0x210
[ 2354.269665]  ? loop_lookup+0x190/0x190
[ 2354.269675]  do_vfs_ioctl+0x75a/0xff0
[ 2354.269686]  ? lock_acquire+0x170/0x3f0
[ 2354.269695]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2354.269708]  ? __fget+0x2df/0x460
[ 2354.269719]  ? do_vfs_ioctl+0xff0/0xff0
[ 2354.269730]  ? security_file_ioctl+0x83/0xb0
[ 2354.269741]  SyS_ioctl+0x7f/0xb0
[ 2354.269749]  ? do_vfs_ioctl+0xff0/0xff0
[ 2354.269760]  do_syscall_64+0x1d5/0x640
[ 2354.269775]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
05:30:25 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async, rerun: 32)
getresuid(&(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100)) (rerun: 32)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2354.269783] RIP: 0033:0x7f2c308a4059
[ 2354.269788] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2354.269799] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2354.269804] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2354.269810] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
05:30:25 executing program 3:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50100062", @ANYRES16=r1, @ANYBLOB="00042dbd7000fbdbdf250b00000005002a00000000000800310064000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000880}, 0x40000) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x102)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

[ 2354.269815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2354.269821] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:25 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 20)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:25 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb, 0x77, 0x2}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='I\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0'], 0x49)

05:30:25 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:25 executing program 1:
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x2})
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

05:30:25 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb, 0x77, 0x2}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='I\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0'], 0x49)

05:30:25 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc01)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7)

05:30:25 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2c900, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

05:30:25 executing program 1:
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x2})
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x2}) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)

05:30:25 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:25 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb, 0x77, 0x2}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='I\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0'], 0x49)

05:30:25 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc01)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7)

05:30:25 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

[ 2354.632618] FAULT_INJECTION: forcing a failure.
[ 2354.632618] name failslab, interval 1, probability 0, space 0, times 0
[ 2354.678600] CPU: 0 PID: 16126 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2354.678607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2354.678611] Call Trace:
[ 2354.678628]  dump_stack+0x1b2/0x281
[ 2354.678643]  should_fail.cold+0x10a/0x149
[ 2354.678657]  should_failslab+0xd6/0x130
[ 2354.678670]  kmem_cache_alloc+0x28e/0x3c0
[ 2354.678680]  ? mempool_free+0x1d0/0x1d0
[ 2354.678693]  mempool_create_node+0x2d2/0x3e0
[ 2354.678709]  bioset_create+0x506/0x750
05:30:25 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xffff, 0x4c0401)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYBLOB='\a']})
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{<r3=>0x0}, {}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000080)={r3, 0x9})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1}})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2354.678718]  ? kmem_cache_alloc_node+0x38b/0x410
[ 2354.678729]  blk_alloc_queue_node+0xa8/0xb40
[ 2354.735660]  blk_mq_init_queue+0x42/0x90
[ 2354.735672]  loop_add+0x303/0x830
[ 2354.743164]  ? loop_queue_rq+0x280/0x280
[ 2354.743174]  ? loop_queue_work+0x21e0/0x21e0
[ 2354.751628]  loop_control_ioctl+0x11a/0x3f0
[ 2354.751638]  ? loop_lookup+0x190/0x190
[ 2354.759823]  ? SyS_write+0x1b7/0x210
[ 2354.759836]  ? loop_lookup+0x190/0x190
[ 2354.759846]  do_vfs_ioctl+0x75a/0xff0
[ 2354.759856]  ? lock_acquire+0x170/0x3f0
[ 2354.759865]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2354.759877]  ? __fget+0x2df/0x460
[ 2354.759887]  ? do_vfs_ioctl+0xff0/0xff0
[ 2354.759897]  ? security_file_ioctl+0x83/0xb0
[ 2354.759906]  SyS_ioctl+0x7f/0xb0
[ 2354.759913]  ? do_vfs_ioctl+0xff0/0xff0
[ 2354.759924]  do_syscall_64+0x1d5/0x640
[ 2354.759939]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2354.759946] RIP: 0033:0x7f2c308a4059
05:30:25 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 21)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:25 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc01)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc01) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) (async)

05:30:25 executing program 1:
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x2})
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x2}) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)

05:30:25 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2c900, 0x0) (rerun: 32)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async, rerun: 32)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async, rerun: 32)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

05:30:25 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x10, 0x4, 0x4}}, 0x14)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x5}, 0xf)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3, 0x4)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
write$P9_ROPEN(r3, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x4}, 0x1efb0329}}, 0x18)

05:30:25 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xffff, 0x4c0401)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYBLOB='\a']}) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{<r3=>0x0}, {}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000080)={r3, 0x9}) (async, rerun: 32)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1}})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2354.759951] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2354.759961] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2354.759966] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2354.759971] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2354.759976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2354.759982] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:25 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x10, 0x4, 0x4}}, 0x14)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x5}, 0xf)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3, 0x4)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
write$P9_ROPEN(r3, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x4}, 0x1efb0329}}, 0x18)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x10, 0x4, 0x4}}, 0x14) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x5}, 0xf) (async)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3, 0x4) (async)
pipe(&(0x7f0000000080)) (async)
write$P9_ROPEN(r3, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x4}, 0x1efb0329}}, 0x18) (async)

05:30:25 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x80, 0x0, 0x30, 0x0, 0x80, 0x0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x8418, 0xffff, 0x10000, 0x6, 0x4, 0x3, 0x2, 0x0, 0xfffffff8, 0x0, 0x5}, r0, 0x6, r1, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

[ 2354.931262] FAULT_INJECTION: forcing a failure.
[ 2354.931262] name failslab, interval 1, probability 0, space 0, times 0
[ 2354.962434] CPU: 0 PID: 16171 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2354.970545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
05:30:25 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xffff, 0x4c0401) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYBLOB='\a']}) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{<r3=>0x0}, {}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000080)={r3, 0x9}) (async)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1}})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:26 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x10, 0x4, 0x4}}, 0x14)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x5}, 0xf)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3, 0x4)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
write$P9_ROPEN(r3, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x4}, 0x1efb0329}}, 0x18)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x10, 0x4, 0x4}}, 0x14) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x5}, 0xf) (async)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3, 0x4) (async)
pipe(&(0x7f0000000080)) (async)
write$P9_ROPEN(r3, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x4}, 0x1efb0329}}, 0x18) (async)

[ 2354.970552] Call Trace:
[ 2354.982570]  dump_stack+0x1b2/0x281
[ 2354.986238]  should_fail.cold+0x10a/0x149
[ 2354.990403]  should_failslab+0xd6/0x130
[ 2354.990416]  kmem_cache_alloc+0x28e/0x3c0
[ 2354.990426]  ? mempool_free+0x1d0/0x1d0
[ 2354.990438]  mempool_create_node+0x2d2/0x3e0
[ 2355.006984]  bioset_create+0x506/0x750
[ 2355.006996]  ? kmem_cache_alloc_node+0x38b/0x410
[ 2355.007009]  blk_alloc_queue_node+0xa8/0xb40
[ 2355.007023]  blk_mq_init_queue+0x42/0x90
05:30:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2c900, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2c900, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)

05:30:26 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2355.007033]  loop_add+0x303/0x830
[ 2355.007043]  ? loop_queue_rq+0x280/0x280
[ 2355.007051]  ? loop_queue_work+0x21e0/0x21e0
[ 2355.007065]  loop_control_ioctl+0x11a/0x3f0
[ 2355.007074]  ? loop_lookup+0x190/0x190
[ 2355.007083]  ? SyS_write+0x1b7/0x210
[ 2355.007095]  ? loop_lookup+0x190/0x190
[ 2355.007105]  do_vfs_ioctl+0x75a/0xff0
[ 2355.007116]  ? lock_acquire+0x170/0x3f0
[ 2355.007126]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2355.007139]  ? __fget+0x2df/0x460
[ 2355.007149]  ? do_vfs_ioctl+0xff0/0xff0
[ 2355.007160]  ? security_file_ioctl+0x83/0xb0
[ 2355.007170]  SyS_ioctl+0x7f/0xb0
[ 2355.007177]  ? do_vfs_ioctl+0xff0/0xff0
[ 2355.007189]  do_syscall_64+0x1d5/0x640
[ 2355.007204]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2355.007212] RIP: 0033:0x7f2c308a4059
[ 2355.007217] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2355.007227] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2355.007233] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
05:30:26 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 22)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:26 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'nr0\x00', 0x5})
socket(0xc, 0x973310f44a52e262, 0x1)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0x80000000, 0x4)

05:30:26 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x80, 0x0, 0x30, 0x0, 0x80, 0x0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x8418, 0xffff, 0x10000, 0x6, 0x4, 0x3, 0x2, 0x0, 0xfffffff8, 0x0, 0x5}, r0, 0x6, r1, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) (async)
perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x80, 0x0, 0x30, 0x0, 0x80, 0x0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x8418, 0xffff, 0x10000, 0x6, 0x4, 0x3, 0x2, 0x0, 0xfffffff8, 0x0, 0x5}, r0, 0x6, r1, 0x1) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:26 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:26 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x1}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x20, 0x0, 0x7, './file0'}]}}, 0x49)

[ 2355.007238] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2355.007244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2355.007249] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:26 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'nr0\x00', 0x5})
socket(0xc, 0x973310f44a52e262, 0x1)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0x80000000, 0x4)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'nr0\x00', 0x5}) (async)
socket(0xc, 0x973310f44a52e262, 0x1) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0x80000000, 0x4) (async)

05:30:26 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x80, 0x0, 0x30, 0x0, 0x80, 0x0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x8418, 0xffff, 0x10000, 0x6, 0x4, 0x3, 0x2, 0x0, 0xfffffff8, 0x0, 0x5}, r0, 0x6, r1, 0x1) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

05:30:26 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

05:30:26 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:26 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async, rerun: 64)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x1}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x20, 0x0, 0x7, './file0'}]}}, 0x49) (rerun: 64)

[ 2355.219407] FAULT_INJECTION: forcing a failure.
[ 2355.219407] name failslab, interval 1, probability 0, space 0, times 0
[ 2355.247164] CPU: 0 PID: 16250 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2355.255076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2355.255082] Call Trace:
05:30:26 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8844)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2355.267023]  dump_stack+0x1b2/0x281
[ 2355.267038]  should_fail.cold+0x10a/0x149
[ 2355.267051]  should_failslab+0xd6/0x130
[ 2355.267063]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2355.267079]  bdi_alloc_node+0x5d/0x2e0
[ 2355.267090]  blk_alloc_queue_node+0xe2/0xb40
[ 2355.267103]  blk_mq_init_queue+0x42/0x90
[ 2355.267114]  loop_add+0x303/0x830
[ 2355.267124]  ? loop_queue_rq+0x280/0x280
[ 2355.267132]  ? loop_queue_work+0x21e0/0x21e0
[ 2355.267145]  loop_control_ioctl+0x11a/0x3f0
[ 2355.267154]  ? loop_lookup+0x190/0x190
[ 2355.267162]  ? SyS_write+0x1b7/0x210
[ 2355.267174]  ? loop_lookup+0x190/0x190
[ 2355.267185]  do_vfs_ioctl+0x75a/0xff0
[ 2355.267196]  ? lock_acquire+0x170/0x3f0
[ 2355.267206]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2355.267219]  ? __fget+0x2df/0x460
[ 2355.267230]  ? do_vfs_ioctl+0xff0/0xff0
[ 2355.267240]  ? security_file_ioctl+0x83/0xb0
[ 2355.267250]  SyS_ioctl+0x7f/0xb0
[ 2355.267257]  ? do_vfs_ioctl+0xff0/0xff0
[ 2355.267269]  do_syscall_64+0x1d5/0x640
[ 2355.267285]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2355.267292] RIP: 0033:0x7f2c308a4059
05:30:26 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x1}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x20, 0x0, 0x7, './file0'}]}}, 0x49)

[ 2355.267297] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2355.267308] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2355.267314] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2355.267318] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2355.267322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2355.267329] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:26 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 23)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:26 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1}) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:26 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'nr0\x00', 0x5}) (async)
socket(0xc, 0x973310f44a52e262, 0x1) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0x80000000, 0x4)

05:30:26 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8844) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:26 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x49)

05:30:26 executing program 2:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)

05:30:26 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x49)

05:30:26 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xfffffd00}, 0xb)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x24044045)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RWRITE(r2, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x4}, 0xb)
write$P9_RLERROR(r0, &(0x7f0000000040)={0x17, 0x7, 0x1, {0xe, 'freezer.state\x00'}}, 0x17)
openat$cgroup_freezer_state(r2, &(0x7f0000000000), 0x2, 0x0)

[ 2355.497025] FAULT_INJECTION: forcing a failure.
[ 2355.497025] name failslab, interval 1, probability 0, space 0, times 0
[ 2355.512776] CPU: 1 PID: 16300 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2355.512783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2355.512787] Call Trace:
[ 2355.512802]  dump_stack+0x1b2/0x281
[ 2355.512819]  should_fail.cold+0x10a/0x149
[ 2355.512834]  should_failslab+0xd6/0x130
[ 2355.512847]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 2355.512863]  wb_congested_get_create+0x15b/0x360
[ 2355.512886]  wb_init+0x4f6/0x7c0
[ 2355.512902]  ? __raw_spin_lock_init+0x28/0x100
[ 2355.512915]  cgwb_bdi_init+0xe2/0x1e0
[ 2355.512926]  bdi_alloc_node+0x224/0x2e0
[ 2355.512937]  blk_alloc_queue_node+0xe2/0xb40
[ 2355.512951]  blk_mq_init_queue+0x42/0x90
[ 2355.512962]  loop_add+0x303/0x830
[ 2355.512973]  ? loop_queue_rq+0x280/0x280
[ 2355.512981]  ? loop_queue_work+0x21e0/0x21e0
[ 2355.512996]  loop_control_ioctl+0x11a/0x3f0
[ 2355.513005]  ? loop_lookup+0x190/0x190
[ 2355.513014]  ? SyS_write+0x1b7/0x210
[ 2355.513026]  ? loop_lookup+0x190/0x190
[ 2355.513036]  do_vfs_ioctl+0x75a/0xff0
[ 2355.513047]  ? lock_acquire+0x170/0x3f0
[ 2355.513055]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2355.513069]  ? __fget+0x2df/0x460
[ 2355.513079]  ? do_vfs_ioctl+0xff0/0xff0
[ 2355.513089]  ? security_file_ioctl+0x83/0xb0
[ 2355.513099]  SyS_ioctl+0x7f/0xb0
[ 2355.513107]  ? do_vfs_ioctl+0xff0/0xff0
[ 2355.513118]  do_syscall_64+0x1d5/0x640
[ 2355.513132]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2355.513140] RIP: 0033:0x7f2c308a4059
[ 2355.513145] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
05:30:26 executing program 4:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7fb, 0x30401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:26 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8844)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8844) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:26 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 24)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x705000, 0x0)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
getresuid(&(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4)

05:30:26 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="4900000031000000000000009d7bd8bcfb000400000000000000000000000014b8000000000000000000000000000000000000000000000000000000d169a320d511d43000070000d5090000000000ffb1abe2e469ce57844c7372845023ee4d01a3917a3efe01bc7fedc0f024874e5c27dc2a73293ea3e50a6ff0cd7e4c9d8dfead2ca46cdb2fdf5d37e305065e6e294be279e229f465f3e964634f963f4d5ed64aa34c8f9d65cf28139464fe103b3cc52ac922f3cbd3e1c305e5d6d63f5e00cbb5f2551957ce86f51d4c776097c774b52097c868d8990e7284d3d726f731ad7413fb4e1b3544bdf0614c81bca61e53cd648fc0f10868a828835724c44ae7e1fd449dfd0f37bf041ff771dda2797a4ef1a3a58361b45439c6a1e29a7db23891087e9716e12d1a0e063f90e3b07448c422368bc8779b18f4ab871739264283c5efa03b9986f62c4a4cac021612ab817c9c69beca833929cfadd148da094a3795710ff8b3a973030021d63687f49a4815afcd3a00000000000000000000000000004b9270873fec1b3b2b34c36959e41cb1e0d65b1de2c61a8d72317449b7d1047f081e409eb7b4e4beb852a205ad9773bc1b0adf179b778c59eefc9f8da8f528b7a05169bb6db1aef26cb66d8f3181501796a8722b8ced73fc998812b6a099c1115ab446c6306b92da14d4912e55dbc485d5a7646c370bff44549d"], 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x49) (async)

05:30:26 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xfffffd00}, 0xb) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x24044045) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RWRITE(r2, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x4}, 0xb) (async)
write$P9_RLERROR(r0, &(0x7f0000000040)={0x17, 0x7, 0x1, {0xe, 'freezer.state\x00'}}, 0x17) (async)
openat$cgroup_freezer_state(r2, &(0x7f0000000000), 0x2, 0x0)

[ 2355.513155] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2355.513160] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2355.513166] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2355.513171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2355.513177] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:26 executing program 4:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7fb, 0x30401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x7fb, 0x30401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:26 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xfffffd00}, 0xb) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x24044045)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RWRITE(r2, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x4}, 0xb) (async)
write$P9_RLERROR(r0, &(0x7f0000000040)={0x17, 0x7, 0x1, {0xe, 'freezer.state\x00'}}, 0x17)
openat$cgroup_freezer_state(r2, &(0x7f0000000000), 0x2, 0x0)

05:30:26 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x18)

05:30:26 executing program 4:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7fb, 0x30401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:26 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0)
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x705000, 0x0)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async)
getresuid(&(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4)

[ 2355.827162] FAULT_INJECTION: forcing a failure.
[ 2355.827162] name failslab, interval 1, probability 0, space 0, times 0
[ 2355.846585] CPU: 0 PID: 16355 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2355.854590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2355.854594] Call Trace:
[ 2355.854611]  dump_stack+0x1b2/0x281
[ 2355.854626]  should_fail.cold+0x10a/0x149
05:30:26 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)

[ 2355.854641]  should_failslab+0xd6/0x130
[ 2355.854654]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 2355.854670]  blk_alloc_queue_stats+0x3c/0x100
[ 2355.854680]  blk_alloc_queue_node+0x125/0xb40
[ 2355.854693]  blk_mq_init_queue+0x42/0x90
[ 2355.854703]  loop_add+0x303/0x830
[ 2355.854720]  ? loop_queue_rq+0x280/0x280
[ 2355.903599]  ? loop_queue_work+0x21e0/0x21e0
[ 2355.903616]  loop_control_ioctl+0x11a/0x3f0
[ 2355.912567]  ? loop_lookup+0x190/0x190
[ 2355.912575]  ? SyS_write+0x1b7/0x210
[ 2355.912587]  ? loop_lookup+0x190/0x190
[ 2355.912596]  do_vfs_ioctl+0x75a/0xff0
[ 2355.912608]  ? lock_acquire+0x170/0x3f0
[ 2355.912616]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2355.912628]  ? __fget+0x2df/0x460
[ 2355.912638]  ? do_vfs_ioctl+0xff0/0xff0
[ 2355.912648]  ? security_file_ioctl+0x83/0xb0
[ 2355.912658]  SyS_ioctl+0x7f/0xb0
[ 2355.912665]  ? do_vfs_ioctl+0xff0/0xff0
[ 2355.912675]  do_syscall_64+0x1d5/0x640
[ 2355.912689]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
05:30:26 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x705000, 0x0)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async)
getresuid(&(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) (async)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4)

[ 2355.912698] RIP: 0033:0x7f2c308a4059
[ 2355.912702] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2355.912712] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2355.912717] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2355.912722] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2355.912727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
05:30:27 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 25)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:27 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) (async)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0)
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (rerun: 32)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:27 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) (async)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x18)

05:30:27 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x202000)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x8, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:27 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)

05:30:27 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$apparmor_current(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="63686186a5bcdd1c76b5b0709e64f761218fc56e6765686174203078303030303030303030303030303030345e2f6465762f6c6f6f702d636f6e74726f6c002f6465762f6c6f6f702d636f6e74726f6c002f6465762f6c6f6f702d636f6e74726f6c0000"], 0x54)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2355.912732] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:27 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x202000)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x8, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$media(&(0x7f0000000000), 0x4, 0x202000) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x8, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:27 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) (async)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async, rerun: 64)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) (rerun: 64)
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async, rerun: 64)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:27 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) (async)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x18)

05:30:27 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) (async)

[ 2356.116420] FAULT_INJECTION: forcing a failure.
[ 2356.116420] name failslab, interval 1, probability 0, space 0, times 0
[ 2356.146702] CPU: 0 PID: 16427 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2356.146709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2356.146713] Call Trace:
05:30:27 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2356.146729]  dump_stack+0x1b2/0x281
[ 2356.146744]  should_fail.cold+0x10a/0x149
[ 2356.146759]  should_failslab+0xd6/0x130
[ 2356.146778]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2356.146793]  blkg_alloc+0x92/0x5c0
[ 2356.146808]  blkcg_init_queue+0x23/0x410
[ 2356.146820]  blk_alloc_queue_node+0x826/0xb40
[ 2356.146833]  blk_mq_init_queue+0x42/0x90
[ 2356.199576]  loop_add+0x303/0x830
[ 2356.199586]  ? loop_queue_rq+0x280/0x280
[ 2356.199593]  ? loop_queue_work+0x21e0/0x21e0
[ 2356.199605]  loop_control_ioctl+0x11a/0x3f0
[ 2356.199614]  ? loop_lookup+0x190/0x190
[ 2356.199623]  ? SyS_write+0x1b7/0x210
[ 2356.199635]  ? loop_lookup+0x190/0x190
[ 2356.199646]  do_vfs_ioctl+0x75a/0xff0
[ 2356.199658]  ? lock_acquire+0x170/0x3f0
[ 2356.199665]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2356.199676]  ? __fget+0x2df/0x460
[ 2356.242870]  ? do_vfs_ioctl+0xff0/0xff0
[ 2356.242883]  ? security_file_ioctl+0x83/0xb0
[ 2356.251246]  SyS_ioctl+0x7f/0xb0
[ 2356.251253]  ? do_vfs_ioctl+0xff0/0xff0
[ 2356.251265]  do_syscall_64+0x1d5/0x640
05:30:27 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

[ 2356.262456]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2356.262464] RIP: 0033:0x7f2c308a4059
[ 2356.262469] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2356.262479] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2356.262484] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2356.262490] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
05:30:27 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c65315b86aae3e849b870be5ef984a22f298444eeffeb29619984f38a08d87bf700e988dd67f4f7270571a2cc33"], 0x49)

05:30:27 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 26)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:27 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$apparmor_current(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="63686186a5bcdd1c76b5b0709e64f761218fc56e6765686174203078303030303030303030303030303030345e2f6465762f6c6f6f702d636f6e74726f6c002f6465762f6c6f6f702d636f6e74726f6c002f6465762f6c6f6f702d636f6e74726f6c0000"], 0x54)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
pipe(&(0x7f0000000040)) (async)
write$apparmor_current(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="63686186a5bcdd1c76b5b0709e64f761218fc56e6765686174203078303030303030303030303030303030345e2f6465762f6c6f6f702d636f6e74726f6c002f6465762f6c6f6f702d636f6e74726f6c002f6465762f6c6f6f702d636f6e74726f6c0000"], 0x54) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)

05:30:27 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x202000)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x8, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$media(&(0x7f0000000000), 0x4, 0x202000) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x8, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

[ 2356.262495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2356.262500] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2356.365729] FAULT_INJECTION: forcing a failure.
[ 2356.365729] name failslab, interval 1, probability 0, space 0, times 0
[ 2356.365741] CPU: 1 PID: 16470 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2356.365747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2356.365750] Call Trace:
[ 2356.365765]  dump_stack+0x1b2/0x281
[ 2356.365781]  should_fail.cold+0x10a/0x149
[ 2356.365795]  should_failslab+0xd6/0x130
[ 2356.365808]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2356.365823]  blk_throtl_init+0x7a/0x590
[ 2356.365836]  blkcg_init_queue+0x18f/0x410
[ 2356.365847]  blk_alloc_queue_node+0x826/0xb40
[ 2356.365859]  blk_mq_init_queue+0x42/0x90
[ 2356.365877]  loop_add+0x303/0x830
[ 2356.365888]  ? loop_queue_rq+0x280/0x280
[ 2356.365897]  ? loop_queue_work+0x21e0/0x21e0
[ 2356.365914]  loop_control_ioctl+0x11a/0x3f0
[ 2356.365924]  ? loop_lookup+0x190/0x190
[ 2356.365933]  ? SyS_write+0x1b7/0x210
05:30:27 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$apparmor_current(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="63686186a5bcdd1c76b5b0709e64f761218fc56e6765686174203078303030303030303030303030303030345e2f6465762f6c6f6f702d636f6e74726f6c002f6465762f6c6f6f702d636f6e74726f6c002f6465762f6c6f6f702d636f6e74726f6c0000"], 0x54)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
pipe(&(0x7f0000000040)) (async)
write$apparmor_current(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="63686186a5bcdd1c76b5b0709e64f761218fc56e6765686174203078303030303030303030303030303030345e2f6465762f6c6f6f702d636f6e74726f6c002f6465762f6c6f6f702d636f6e74726f6c002f6465762f6c6f6f702d636f6e74726f6c0000"], 0x54) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)

[ 2356.365946]  ? loop_lookup+0x190/0x190
[ 2356.365956]  do_vfs_ioctl+0x75a/0xff0
[ 2356.365968]  ? lock_acquire+0x170/0x3f0
[ 2356.365977]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2356.365990]  ? __fget+0x2df/0x460
[ 2356.366001]  ? do_vfs_ioctl+0xff0/0xff0
[ 2356.366011]  ? security_file_ioctl+0x83/0xb0
[ 2356.366022]  SyS_ioctl+0x7f/0xb0
[ 2356.366030]  ? do_vfs_ioctl+0xff0/0xff0
[ 2356.366041]  do_syscall_64+0x1d5/0x640
[ 2356.366056]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2356.366064] RIP: 0033:0x7f2c308a4059
[ 2356.366069] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2356.366079] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2356.366085] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2356.366090] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
05:30:27 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000040))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x7f, 0x7f, 0x6, 0x4c, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0x6, 0x7}})

05:30:27 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 27)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:27 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0x5, 0x5, 0x9})
write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x500000000000}, 0xf)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

05:30:27 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:27 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x410401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x80)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x5)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffa0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4884}, 0x8000)

05:30:27 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c65315b86aae3e849b870be5ef984a22f298444eeffeb29619984f38a08d87bf700e988dd67f4f7270571a2cc33"], 0x49)

[ 2356.366096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2356.366101] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:27 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0x5, 0x5, 0x9}) (async)
write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x500000000000}, 0xf) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

05:30:27 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x410401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x80)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x5)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r4, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffa0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4884}, 0x8000)

[ 2356.642611] FAULT_INJECTION: forcing a failure.
[ 2356.642611] name failslab, interval 1, probability 0, space 0, times 0
[ 2356.654771] CPU: 1 PID: 16526 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2356.662672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2356.662676] Call Trace:
05:30:27 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000040))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x7f, 0x7f, 0x6, 0x4c, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0x6, 0x7}})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000040)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x7f, 0x7f, 0x6, 0x4c, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0x6, 0x7}}) (async)

05:30:27 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x410401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x80)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x5) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffa0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4884}, 0x8000)

[ 2356.662691]  dump_stack+0x1b2/0x281
[ 2356.662706]  should_fail.cold+0x10a/0x149
[ 2356.662720]  should_failslab+0xd6/0x130
[ 2356.662733]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2356.662749]  throtl_pd_alloc+0x59/0x990
[ 2356.662758]  ? throtl_add_bio_tg+0x1e0/0x1e0
05:30:27 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000040))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x7f, 0x7f, 0x6, 0x4c, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0x6, 0x7}})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000040)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x7f, 0x7f, 0x6, 0x4c, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0x6, 0x7}}) (async)

[ 2356.662768]  blkcg_activate_policy+0x115/0x5c0
[ 2356.662780]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 2356.662794]  blk_throtl_init+0x408/0x590
[ 2356.662805]  blkcg_init_queue+0x18f/0x410
[ 2356.662816]  blk_alloc_queue_node+0x826/0xb40
[ 2356.662830]  blk_mq_init_queue+0x42/0x90
[ 2356.662848]  loop_add+0x303/0x830
[ 2356.662858]  ? loop_queue_rq+0x280/0x280
[ 2356.662865]  ? loop_queue_work+0x21e0/0x21e0
[ 2356.662879]  loop_control_ioctl+0x11a/0x3f0
05:30:27 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8)

[ 2356.662888]  ? loop_lookup+0x190/0x190
[ 2356.662897]  ? SyS_write+0x1b7/0x210
[ 2356.662908]  ? loop_lookup+0x190/0x190
[ 2356.662918]  do_vfs_ioctl+0x75a/0xff0
[ 2356.662928]  ? lock_acquire+0x170/0x3f0
[ 2356.662938]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2356.662952]  ? __fget+0x2df/0x460
[ 2356.662962]  ? do_vfs_ioctl+0xff0/0xff0
[ 2356.662972]  ? security_file_ioctl+0x83/0xb0
[ 2356.662982]  SyS_ioctl+0x7f/0xb0
[ 2356.662988]  ? do_vfs_ioctl+0xff0/0xff0
[ 2356.662998]  do_syscall_64+0x1d5/0x640
[ 2356.663013]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2356.663021] RIP: 0033:0x7f2c308a4059
[ 2356.663026] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2356.663037] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2356.663042] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2356.663048] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2356.663054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
05:30:27 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 28)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:27 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c65315b86aae3e849b870be5ef984a22f298444eeffeb29619984f38a08d87bf700e988dd67f4f7270571a2cc33"], 0x49)

05:30:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', <r1=>0x0, 0x7800, 0x10, 0x3, 0x7, {{0x39, 0x4, 0x2, 0x9, 0xe4, 0x65, 0x0, 0x7f, 0x29, 0x0, @private=0x2, @remote, {[@ssrr={0x89, 0x17, 0xfa, [@multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @broadcast, @loopback]}, @cipso={0x86, 0x25, 0x3, [{0x5, 0xe, "b7eee83abdc2ec8dfd571500"}, {0x5, 0xc, "b5054c0e2e6d72c833a2"}, {0x1, 0x5, "b18180"}]}, @timestamp={0x44, 0x18, 0xa8, 0x0, 0xf, [0x5, 0xaa, 0x100, 0xdc20, 0xffffffff]}, @lsrr={0x83, 0x23, 0xef, [@empty, @rand_addr=0x64010100, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x5, 0x6, "3674c889"}]}, @end, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x2, 0x4, "9302"}, {0x1, 0xe, "5dabe93c20e4beb31aefa703"}, {0x6, 0xc, "9876eeb68c97e15335f0"}]}, @ssrr={0x89, 0x27, 0x7b, [@multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x31}, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010101, @broadcast, @private=0xa010102]}]}}}}})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x32385b5935e8236}, 0x1)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000040)={0xfffffffffffffe7c}, 0xb)
write$P9_ROPEN(r3, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x0, 0x3, 0x5}, 0xfc}}, 0x18)

05:30:27 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8)

05:30:27 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0x5, 0x5, 0x9})
write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x500000000000}, 0xf)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0x5, 0x5, 0x9}) (async)
write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x500000000000}, 0xf) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)

[ 2356.663059] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:27 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

05:30:27 executing program 5:
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c65000000000000000007002e2f66696c6534000000000000000000000000000000b4e80fd66b548021f0b5eddab5ba25a3bedea593f7a5aca12685f15d55fe7a44f5bb5382fe72c21a132585cd7b513d243f063eb4935cf59f25914b1a188ca5232905b5436c44478f2812592381fe01e0377aeb251a9b351ab60db1a071d19ff16c9d89"], 0x49)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x40, 0x1, 0x6}}}, 0x18)

05:30:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', <r1=>0x0, 0x7800, 0x10, 0x3, 0x7, {{0x39, 0x4, 0x2, 0x9, 0xe4, 0x65, 0x0, 0x7f, 0x29, 0x0, @private=0x2, @remote, {[@ssrr={0x89, 0x17, 0xfa, [@multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @broadcast, @loopback]}, @cipso={0x86, 0x25, 0x3, [{0x5, 0xe, "b7eee83abdc2ec8dfd571500"}, {0x5, 0xc, "b5054c0e2e6d72c833a2"}, {0x1, 0x5, "b18180"}]}, @timestamp={0x44, 0x18, 0xa8, 0x0, 0xf, [0x5, 0xaa, 0x100, 0xdc20, 0xffffffff]}, @lsrr={0x83, 0x23, 0xef, [@empty, @rand_addr=0x64010100, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x5, 0x6, "3674c889"}]}, @end, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x2, 0x4, "9302"}, {0x1, 0xe, "5dabe93c20e4beb31aefa703"}, {0x6, 0xc, "9876eeb68c97e15335f0"}]}, @ssrr={0x89, 0x27, 0x7b, [@multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x31}, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010101, @broadcast, @private=0xa010102]}]}}}}})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x32385b5935e8236}, 0x1)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000040)={0xfffffffffffffe7c}, 0xb)
write$P9_ROPEN(r3, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x0, 0x3, 0x5}, 0xfc}}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x3, 0x7, {{0x39, 0x4, 0x2, 0x9, 0xe4, 0x65, 0x0, 0x7f, 0x29, 0x0, @private=0x2, @remote, {[@ssrr={0x89, 0x17, 0xfa, [@multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @broadcast, @loopback]}, @cipso={0x86, 0x25, 0x3, [{0x5, 0xe, "b7eee83abdc2ec8dfd571500"}, {0x5, 0xc, "b5054c0e2e6d72c833a2"}, {0x1, 0x5, "b18180"}]}, @timestamp={0x44, 0x18, 0xa8, 0x0, 0xf, [0x5, 0xaa, 0x100, 0xdc20, 0xffffffff]}, @lsrr={0x83, 0x23, 0xef, [@empty, @rand_addr=0x64010100, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x5, 0x6, "3674c889"}]}, @end, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x2, 0x4, "9302"}, {0x1, 0xe, "5dabe93c20e4beb31aefa703"}, {0x6, 0xc, "9876eeb68c97e15335f0"}]}, @ssrr={0x89, 0x27, 0x7b, [@multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x31}, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010101, @broadcast, @private=0xa010102]}]}}}}}) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}}, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x32385b5935e8236}, 0x1) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r3, &(0x7f0000000040)={0xfffffffffffffe7c}, 0xb) (async)
write$P9_ROPEN(r3, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x0, 0x3, 0x5}, 0xfc}}, 0x18) (async)

05:30:27 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8) (async)

05:30:28 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x2}, 0xb)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20, 0x0)
write$P9_RSYMLINK(r1, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x8, 0x2, 0x7}}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x9, 0x1, 0x6c, @mcast1, @mcast2, 0x1, 0x1, 0x1, 0x5}})
write$9p(0xffffffffffffffff, &(0x7f0000000000)="8abf29a3329eb40f708fac2b3bf7ce0f065656084aaacf26cbb443404f8079a58acc247ce0e0cd58e51b0b0111b8f490faa6e678fa3691768c57ae46addff9990daef9f1b29cf58c68636cd459e01527bf5308bc230b71a7049805aebafb12a9f38f58746273e3def55c8937e96b33312020aabfb9e47e7afde06556c5e421cc3069a749a920fc91d15731c776c75140c6ec827ef14265ff254147bb733151ccafa7b88afd0c60bb167c78e63a26e38f9a8b9187905f9988fcaff5eecdc2b88cfbcd9a2ca33208e5da8dcefbdcda3f043ab7ba6b3f71aac796af71b7", 0xdc)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
write$P9_RCLUNK(r2, &(0x7f0000000300)={0x7, 0x79, 0x1}, 0x7)

05:30:28 executing program 5:
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c65000000000000000007002e2f66696c6534000000000000000000000000000000b4e80fd66b548021f0b5eddab5ba25a3bedea593f7a5aca12685f15d55fe7a44f5bb5382fe72c21a132585cd7b513d243f063eb4935cf59f25914b1a188ca5232905b5436c44478f2812592381fe01e0377aeb251a9b351ab60db1a071d19ff16c9d89"], 0x49) (async, rerun: 32)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x40, 0x1, 0x6}}}, 0x18) (rerun: 32)

[ 2356.997541] FAULT_INJECTION: forcing a failure.
[ 2356.997541] name failslab, interval 1, probability 0, space 0, times 0
[ 2357.016073] CPU: 1 PID: 16588 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2357.016080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2357.016084] Call Trace:
[ 2357.016100]  dump_stack+0x1b2/0x281
[ 2357.016114]  should_fail.cold+0x10a/0x149
[ 2357.016129]  should_failslab+0xd6/0x130
05:30:28 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x2}, 0xb)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20, 0x0)
write$P9_RSYMLINK(r1, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x8, 0x2, 0x7}}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x9, 0x1, 0x6c, @mcast1, @mcast2, 0x1, 0x1, 0x1, 0x5}})
write$9p(0xffffffffffffffff, &(0x7f0000000000)="8abf29a3329eb40f708fac2b3bf7ce0f065656084aaacf26cbb443404f8079a58acc247ce0e0cd58e51b0b0111b8f490faa6e678fa3691768c57ae46addff9990daef9f1b29cf58c68636cd459e01527bf5308bc230b71a7049805aebafb12a9f38f58746273e3def55c8937e96b33312020aabfb9e47e7afde06556c5e421cc3069a749a920fc91d15731c776c75140c6ec827ef14265ff254147bb733151ccafa7b88afd0c60bb167c78e63a26e38f9a8b9187905f9988fcaff5eecdc2b88cfbcd9a2ca33208e5da8dcefbdcda3f043ab7ba6b3f71aac796af71b7", 0xdc)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
write$P9_RCLUNK(r2, &(0x7f0000000300)={0x7, 0x79, 0x1}, 0x7)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x2}, 0xb) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20, 0x0) (async)
write$P9_RSYMLINK(r1, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x8, 0x2, 0x7}}, 0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x9, 0x1, 0x6c, @mcast1, @mcast2, 0x1, 0x1, 0x1, 0x5}}) (async)
write$9p(0xffffffffffffffff, &(0x7f0000000000)="8abf29a3329eb40f708fac2b3bf7ce0f065656084aaacf26cbb443404f8079a58acc247ce0e0cd58e51b0b0111b8f490faa6e678fa3691768c57ae46addff9990daef9f1b29cf58c68636cd459e01527bf5308bc230b71a7049805aebafb12a9f38f58746273e3def55c8937e96b33312020aabfb9e47e7afde06556c5e421cc3069a749a920fc91d15731c776c75140c6ec827ef14265ff254147bb733151ccafa7b88afd0c60bb167c78e63a26e38f9a8b9187905f9988fcaff5eecdc2b88cfbcd9a2ca33208e5da8dcefbdcda3f043ab7ba6b3f71aac796af71b7", 0xdc) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) (async)
write$P9_RCLUNK(r2, &(0x7f0000000300)={0x7, 0x79, 0x1}, 0x7) (async)

[ 2357.016142]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2357.016166]  blk_throtl_init+0x7a/0x590
[ 2357.016180]  blkcg_init_queue+0x18f/0x410
[ 2357.016191]  blk_alloc_queue_node+0x826/0xb40
[ 2357.016205]  blk_mq_init_queue+0x42/0x90
[ 2357.016215]  loop_add+0x303/0x830
[ 2357.016226]  ? loop_queue_rq+0x280/0x280
[ 2357.016233]  ? loop_queue_work+0x21e0/0x21e0
[ 2357.016249]  loop_control_ioctl+0x11a/0x3f0
[ 2357.016258]  ? loop_lookup+0x190/0x190
[ 2357.016269]  ? SyS_write+0x1b7/0x210
[ 2357.016280]  ? loop_lookup+0x190/0x190
[ 2357.016290]  do_vfs_ioctl+0x75a/0xff0
[ 2357.016301]  ? lock_acquire+0x170/0x3f0
[ 2357.016310]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2357.016322]  ? __fget+0x2df/0x460
[ 2357.016332]  ? do_vfs_ioctl+0xff0/0xff0
[ 2357.016342]  ? security_file_ioctl+0x83/0xb0
[ 2357.016352]  SyS_ioctl+0x7f/0xb0
[ 2357.016360]  ? do_vfs_ioctl+0xff0/0xff0
[ 2357.016372]  do_syscall_64+0x1d5/0x640
[ 2357.132298]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2357.132308] RIP: 0033:0x7f2c308a4059
05:30:28 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 29)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

[ 2357.141283] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2357.141295] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2357.141305] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2357.141310] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2357.141316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2357.141322] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', <r1=>0x0, 0x7800, 0x10, 0x3, 0x7, {{0x39, 0x4, 0x2, 0x9, 0xe4, 0x65, 0x0, 0x7f, 0x29, 0x0, @private=0x2, @remote, {[@ssrr={0x89, 0x17, 0xfa, [@multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @broadcast, @loopback]}, @cipso={0x86, 0x25, 0x3, [{0x5, 0xe, "b7eee83abdc2ec8dfd571500"}, {0x5, 0xc, "b5054c0e2e6d72c833a2"}, {0x1, 0x5, "b18180"}]}, @timestamp={0x44, 0x18, 0xa8, 0x0, 0xf, [0x5, 0xaa, 0x100, 0xdc20, 0xffffffff]}, @lsrr={0x83, 0x23, 0xef, [@empty, @rand_addr=0x64010100, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x5, 0x6, "3674c889"}]}, @end, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x2, 0x4, "9302"}, {0x1, 0xe, "5dabe93c20e4beb31aefa703"}, {0x6, 0xc, "9876eeb68c97e15335f0"}]}, @ssrr={0x89, 0x27, 0x7b, [@multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x31}, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010101, @broadcast, @private=0xa010102]}]}}}}})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x32385b5935e8236}, 0x1) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000040)={0xfffffffffffffe7c}, 0xb)
write$P9_ROPEN(r3, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x0, 0x3, 0x5}, 0xfc}}, 0x18)

05:30:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)

05:30:28 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x2}, 0xb) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20, 0x0)
write$P9_RSYMLINK(r1, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x8, 0x2, 0x7}}, 0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x9, 0x1, 0x6c, @mcast1, @mcast2, 0x1, 0x1, 0x1, 0x5}}) (async)
write$9p(0xffffffffffffffff, &(0x7f0000000000)="8abf29a3329eb40f708fac2b3bf7ce0f065656084aaacf26cbb443404f8079a58acc247ce0e0cd58e51b0b0111b8f490faa6e678fa3691768c57ae46addff9990daef9f1b29cf58c68636cd459e01527bf5308bc230b71a7049805aebafb12a9f38f58746273e3def55c8937e96b33312020aabfb9e47e7afde06556c5e421cc3069a749a920fc91d15731c776c75140c6ec827ef14265ff254147bb733151ccafa7b88afd0c60bb167c78e63a26e38f9a8b9187905f9988fcaff5eecdc2b88cfbcd9a2ca33208e5da8dcefbdcda3f043ab7ba6b3f71aac796af71b7", 0xdc) (async)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
write$P9_RCLUNK(r2, &(0x7f0000000300)={0x7, 0x79, 0x1}, 0x7)

05:30:28 executing program 5:
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x69) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000000000000000000000007002e2f66696c65000000000000000007002e2f66696c6534000000000000000000000000000000b4e80fd66b548021f0b5eddab5ba25a3bedea593f7a5aca12685f15d55fe7a44f5bb5382fe72c21a132585cd7b513d243f063eb4935cf59f25914b1a188ca5232905b5436c44478f2812592381fe01e0377aeb251a9b351ab60db1a071d19ff16c9d89"], 0x49) (async)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x40, 0x1, 0x6}}}, 0x18)

05:30:28 executing program 4:
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc4480)

05:30:28 executing program 4:
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc4480)

05:30:28 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012bbd7000fddbdf25080000000600020001000000060001000500000008000c000100000005000d0101000000050004000900000006001b004e22000006001d0007000000060001000500000014000800736974300000000000000000000000000500060004000000"], 0x70}}, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_RSYMLINK(r3, &(0x7f00000002c0)={0x14, 0x11, 0x2, {0x2, 0x2, 0x2}}, 0x14)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:28 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x0, 0x200000}, 0xb)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0)

05:30:28 executing program 4:
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc4480)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0xc4480) (async)

05:30:28 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012bbd7000fddbdf25080000000600020001000000060001000500000008000c000100000005000d0101000000050004000900000006001b004e22000006001d0007000000060001000500000014000800736974300000000000000000000000000500060004000000"], 0x70}}, 0x4) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async, rerun: 32)
write$P9_RSYMLINK(r3, &(0x7f00000002c0)={0x14, 0x11, 0x2, {0x2, 0x2, 0x2}}, 0x14) (async, rerun: 32)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

[ 2357.290733] FAULT_INJECTION: forcing a failure.
[ 2357.290733] name failslab, interval 1, probability 0, space 0, times 0
[ 2357.312604] CPU: 1 PID: 16662 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2357.320497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2357.329862] Call Trace:
[ 2357.329894]  dump_stack+0x1b2/0x281
[ 2357.336096]  should_fail.cold+0x10a/0x149
05:30:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000094}, 0x20000000)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x4a88c1)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

[ 2357.336109]  should_failslab+0xd6/0x130
[ 2357.336122]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2357.336135]  throtl_pd_alloc+0x59/0x990
[ 2357.336144]  ? throtl_add_bio_tg+0x1e0/0x1e0
[ 2357.336155]  blkcg_activate_policy+0x115/0x5c0
[ 2357.362261]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 2357.362276]  blk_throtl_init+0x408/0x590
[ 2357.371338]  blkcg_init_queue+0x18f/0x410
[ 2357.371350]  blk_alloc_queue_node+0x826/0xb40
[ 2357.371364]  blk_mq_init_queue+0x42/0x90
[ 2357.371374]  loop_add+0x303/0x830
[ 2357.371385]  ? loop_queue_rq+0x280/0x280
[ 2357.371393]  ? loop_queue_work+0x21e0/0x21e0
[ 2357.371407]  loop_control_ioctl+0x11a/0x3f0
[ 2357.371417]  ? loop_lookup+0x190/0x190
[ 2357.371426]  ? SyS_write+0x1b7/0x210
[ 2357.371438]  ? loop_lookup+0x190/0x190
[ 2357.371448]  do_vfs_ioctl+0x75a/0xff0
[ 2357.371458]  ? lock_acquire+0x170/0x3f0
[ 2357.371468]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2357.371480]  ? __fget+0x2df/0x460
[ 2357.371491]  ? do_vfs_ioctl+0xff0/0xff0
[ 2357.371502]  ? security_file_ioctl+0x83/0xb0
[ 2357.371513]  SyS_ioctl+0x7f/0xb0
[ 2357.371519]  ? do_vfs_ioctl+0xff0/0xff0
[ 2357.371529]  do_syscall_64+0x1d5/0x640
[ 2357.371543]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2357.371550] RIP: 0033:0x7f2c308a4059
[ 2357.371555] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
05:30:28 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 30)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:28 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x260, 0x24, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x6, 0x1}, {0x2, 0xd}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x16d1, 0x2, 0x1, 0x2, 0x0, 0x1}}, {0x6, 0x2, [0x401]}}, {{0x1c, 0x1, {0x2, 0x0, 0xffbb, 0x80000000, 0x2, 0xb04, 0x5, 0x2}}, {0x8, 0x2, [0x9, 0x6]}}, {{0x1c, 0x1, {0x4, 0x93, 0x7f, 0x8, 0x1, 0x0, 0x6, 0x3}}, {0xa, 0x2, [0x9, 0x8001, 0x8cc0]}}, {{0x1c, 0x1, {0x0, 0x9, 0x4, 0x8, 0x0, 0x60000, 0x1f, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x5, 0x9, 0xe197, 0x0, 0x2, 0x3f, 0x8001, 0xa}}, {0x18, 0x2, [0x200, 0x20, 0x9, 0xa92, 0x6, 0x80, 0x4d, 0x0, 0x7fff, 0x80]}}, {{0x1c, 0x1, {0x40, 0x8, 0x5, 0x8, 0x0, 0x0, 0x3c, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x0, 0xfe, 0x2, 0x10000, 0x2, 0x200, 0xff, 0x6}}, {0x10, 0x2, [0x40, 0x5, 0x8, 0x5, 0x4bf3, 0x400]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x823}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xfffff1b8}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x80000000}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfffffff8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x80, 0x101, 0x0, 0x1, 0x2c2, 0x9, 0x8}}, {0x14, 0x2, [0x75, 0x8, 0x1, 0x655, 0x101, 0x8, 0x3, 0x2]}}, {{0x1c, 0x1, {0x1, 0x7, 0x401, 0x7, 0x2, 0x6, 0x1, 0x7}}, {0x12, 0x2, [0x81, 0xde63, 0x1, 0x8, 0x2, 0x5, 0x5]}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x7, 0x4, 0xfffffffd, 0xffff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0xad, 0xff, 0x92, 0xaf12}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xffff7fff, 0x80, 0x4, 0x7}}]}}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x24}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000094}, 0x20000000) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x4a88c1)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)

05:30:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) (async)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

05:30:28 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x24}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012bbd7000fddbdf25080000000600020001000000060001000500000008000c000100000005000d0101000000050004000900000006001b004e22000006001d0007000000060001000500000014000800736974300000000000000000000000000500060004000000"], 0x70}}, 0x4) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
write$P9_RSYMLINK(r3, &(0x7f00000002c0)={0x14, 0x11, 0x2, {0x2, 0x2, 0x2}}, 0x14) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:28 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x0, 0x200000}, 0xb)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x0, 0x200000}, 0xb) (async)
openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) (async)

[ 2357.371566] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2357.371571] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2357.371576] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2357.371581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2357.371586] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:28 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x260, 0x24, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x6, 0x1}, {0x2, 0xd}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x16d1, 0x2, 0x1, 0x2, 0x0, 0x1}}, {0x6, 0x2, [0x401]}}, {{0x1c, 0x1, {0x2, 0x0, 0xffbb, 0x80000000, 0x2, 0xb04, 0x5, 0x2}}, {0x8, 0x2, [0x9, 0x6]}}, {{0x1c, 0x1, {0x4, 0x93, 0x7f, 0x8, 0x1, 0x0, 0x6, 0x3}}, {0xa, 0x2, [0x9, 0x8001, 0x8cc0]}}, {{0x1c, 0x1, {0x0, 0x9, 0x4, 0x8, 0x0, 0x60000, 0x1f, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x5, 0x9, 0xe197, 0x0, 0x2, 0x3f, 0x8001, 0xa}}, {0x18, 0x2, [0x200, 0x20, 0x9, 0xa92, 0x6, 0x80, 0x4d, 0x0, 0x7fff, 0x80]}}, {{0x1c, 0x1, {0x40, 0x8, 0x5, 0x8, 0x0, 0x0, 0x3c, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x0, 0xfe, 0x2, 0x10000, 0x2, 0x200, 0xff, 0x6}}, {0x10, 0x2, [0x40, 0x5, 0x8, 0x5, 0x4bf3, 0x400]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x823}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xfffff1b8}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x80000000}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfffffff8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x80, 0x101, 0x0, 0x1, 0x2c2, 0x9, 0x8}}, {0x14, 0x2, [0x75, 0x8, 0x1, 0x655, 0x101, 0x8, 0x3, 0x2]}}, {{0x1c, 0x1, {0x1, 0x7, 0x401, 0x7, 0x2, 0x6, 0x1, 0x7}}, {0x12, 0x2, [0x81, 0xde63, 0x1, 0x8, 0x2, 0x5, 0x5]}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x7, 0x4, 0xfffffffd, 0xffff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0xad, 0xff, 0x92, 0xaf12}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xffff7fff, 0x80, 0x4, 0x7}}]}}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000094}, 0x20000000)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x4a88c1)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x24}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000094}, 0x20000000) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x4a88c1) (async)
write$P9_RWRITE(r2, &(0x7f0000000180)={0xb}, 0xb) (async)

[ 2357.582786] FAULT_INJECTION: forcing a failure.
[ 2357.582786] name failslab, interval 1, probability 0, space 0, times 0
[ 2357.594478] CPU: 1 PID: 16718 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2357.594490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2357.594494] Call Trace:
05:30:28 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2})
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3542}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000001)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x1000}, 0xb)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x81, 0x81)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {<r5=>0x0}, {}]})
ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f00000001c0)={r5, 0x3})

[ 2357.594509]  dump_stack+0x1b2/0x281
[ 2357.594525]  should_fail.cold+0x10a/0x149
[ 2357.594539]  should_failslab+0xd6/0x130
[ 2357.594552]  kmem_cache_alloc_node_trace+0x58/0x400
[ 2357.594566]  throtl_pd_alloc+0x59/0x990
[ 2357.594576]  ? throtl_add_bio_tg+0x1e0/0x1e0
[ 2357.594585]  blkcg_activate_policy+0x23e/0x5c0
[ 2357.594601]  blk_throtl_init+0x408/0x590
05:30:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
socket$inet_udp(0x2, 0x2, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2357.594613]  blkcg_init_queue+0x18f/0x410
[ 2357.594634]  blk_alloc_queue_node+0x826/0xb40
[ 2357.594647]  blk_mq_init_queue+0x42/0x90
[ 2357.594658]  loop_add+0x303/0x830
[ 2357.594669]  ? loop_queue_rq+0x280/0x280
[ 2357.594677]  ? loop_queue_work+0x21e0/0x21e0
[ 2357.594690]  loop_control_ioctl+0x11a/0x3f0
05:30:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2357.594699]  ? loop_lookup+0x190/0x190
[ 2357.594708]  ? SyS_write+0x1b7/0x210
[ 2357.594719]  ? loop_lookup+0x190/0x190
[ 2357.594728]  do_vfs_ioctl+0x75a/0xff0
[ 2357.594739]  ? lock_acquire+0x170/0x3f0
[ 2357.594749]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2357.594762]  ? __fget+0x2df/0x460
[ 2357.594772]  ? do_vfs_ioctl+0xff0/0xff0
[ 2357.594782]  ? security_file_ioctl+0x83/0xb0
[ 2357.594791]  SyS_ioctl+0x7f/0xb0
[ 2357.594798]  ? do_vfs_ioctl+0xff0/0xff0
[ 2357.594808]  do_syscall_64+0x1d5/0x640
[ 2357.594823]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2357.594830] RIP: 0033:0x7f2c308a4059
[ 2357.594835] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2357.594844] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2357.594850] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2357.594855] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
05:30:28 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 31)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:28 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x44, 0x66, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {0xf, 0x8}, {0xfff2, 0xf}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9327}]}, 0x44}}, 0x1)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb}, 0xb)
pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
write$P9_RXATTRWALK(r2, &(0x7f0000000340)={0xf, 0x1f, 0x1, 0x100000000}, 0xf)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0xc, 0xa7, {0x52, 0x81, 0x20, {0x1, 0xffff}, {0x6, 0x8}, @ramp={0x7, 0x2, {0x1, 0x9, 0x6, 0x800}}}, {0x55, 0x4, 0x4, {0x3f, 0x7}, {0x1, 0x7f}, @const={0x4, {0x1ff, 0x0, 0x99, 0x100}}}})
write$P9_RREADDIR(r1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x49)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_ROPEN(r3, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x20, 0x2, 0x8}, 0xffff0001}}, 0x18)

05:30:28 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x260, 0x24, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x6, 0x1}, {0x2, 0xd}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x16d1, 0x2, 0x1, 0x2, 0x0, 0x1}}, {0x6, 0x2, [0x401]}}, {{0x1c, 0x1, {0x2, 0x0, 0xffbb, 0x80000000, 0x2, 0xb04, 0x5, 0x2}}, {0x8, 0x2, [0x9, 0x6]}}, {{0x1c, 0x1, {0x4, 0x93, 0x7f, 0x8, 0x1, 0x0, 0x6, 0x3}}, {0xa, 0x2, [0x9, 0x8001, 0x8cc0]}}, {{0x1c, 0x1, {0x0, 0x9, 0x4, 0x8, 0x0, 0x60000, 0x1f, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x5, 0x9, 0xe197, 0x0, 0x2, 0x3f, 0x8001, 0xa}}, {0x18, 0x2, [0x200, 0x20, 0x9, 0xa92, 0x6, 0x80, 0x4d, 0x0, 0x7fff, 0x80]}}, {{0x1c, 0x1, {0x40, 0x8, 0x5, 0x8, 0x0, 0x0, 0x3c, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x0, 0xfe, 0x2, 0x10000, 0x2, 0x200, 0xff, 0x6}}, {0x10, 0x2, [0x40, 0x5, 0x8, 0x5, 0x4bf3, 0x400]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x823}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xfffff1b8}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x80000000}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfffffff8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x80, 0x101, 0x0, 0x1, 0x2c2, 0x9, 0x8}}, {0x14, 0x2, [0x75, 0x8, 0x1, 0x655, 0x101, 0x8, 0x3, 0x2]}}, {{0x1c, 0x1, {0x1, 0x7, 0x401, 0x7, 0x2, 0x6, 0x1, 0x7}}, {0x12, 0x2, [0x81, 0xde63, 0x1, 0x8, 0x2, 0x5, 0x5]}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x7, 0x4, 0xfffffffd, 0xffff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0xad, 0xff, 0x92, 0xaf12}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xffff7fff, 0x80, 0x4, 0x7}}]}}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:28 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3542}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) (async)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x1000}, 0xb) (async, rerun: 64)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x81, 0x81) (rerun: 64)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {<r5=>0x0}, {}]})
ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f00000001c0)={r5, 0x3})

05:30:28 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x0, 0x200000}, 0xb)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0)

05:30:28 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2357.594861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2357.594866] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:28 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'sit0\x00'})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2357.906529] FAULT_INJECTION: forcing a failure.
[ 2357.906529] name failslab, interval 1, probability 0, space 0, times 0
[ 2357.918699] CPU: 1 PID: 16785 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2357.918706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2357.918709] Call Trace:
[ 2357.918724]  dump_stack+0x1b2/0x281
[ 2357.918739]  should_fail.cold+0x10a/0x149
[ 2357.918753]  should_failslab+0xd6/0x130
[ 2357.918764]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 2357.918776]  ? blk_mq_can_queue+0x40/0x40
[ 2357.918785]  ? queue_set_hctx_shared+0x210/0x210
[ 2357.918795]  blk_stat_alloc_callback+0x54/0x2f0
[ 2357.918809]  blk_mq_init_allocated_queue+0x80/0xfd0
[ 2357.918820]  ? blkcg_init_queue+0x19f/0x410
05:30:29 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x121080)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r3, r4, 0x4}, 0x10)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5)

[ 2357.918831]  ? blk_alloc_queue_node+0x82f/0xb40
[ 2357.918844]  blk_mq_init_queue+0x5a/0x90
[ 2357.918854]  loop_add+0x303/0x830
[ 2357.918864]  ? loop_queue_rq+0x280/0x280
[ 2357.918871]  ? loop_queue_work+0x21e0/0x21e0
[ 2357.918883]  loop_control_ioctl+0x11a/0x3f0
[ 2357.918892]  ? loop_lookup+0x190/0x190
[ 2357.918901]  ? SyS_write+0x1b7/0x210
[ 2357.918913]  ? loop_lookup+0x190/0x190
[ 2357.918923]  do_vfs_ioctl+0x75a/0xff0
[ 2357.918933]  ? lock_acquire+0x170/0x3f0
[ 2357.918942]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2357.918953]  ? __fget+0x2df/0x460
[ 2357.918963]  ? do_vfs_ioctl+0xff0/0xff0
[ 2357.918974]  ? security_file_ioctl+0x83/0xb0
[ 2357.918984]  SyS_ioctl+0x7f/0xb0
05:30:29 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x121080)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r3, r4, 0x4}, 0x10)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x121080) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r3, r4, 0x4}, 0x10) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) (async)

[ 2357.918991]  ? do_vfs_ioctl+0xff0/0xff0
[ 2357.919001]  do_syscall_64+0x1d5/0x640
[ 2357.919016]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2357.919023] RIP: 0033:0x7f2c308a4059
[ 2357.919028] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2357.919038] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
05:30:29 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x108, 0x1, 0x9, 0x2, 0x8, @remote}, 0x10)

05:30:29 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'sit0\x00'}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2357.919043] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2357.919048] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2357.919053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2357.919058] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:29 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 32)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:29 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x44, 0x66, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {0xf, 0x8}, {0xfff2, 0xf}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9327}]}, 0x44}}, 0x1) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb}, 0xb) (async)
pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
write$P9_RXATTRWALK(r2, &(0x7f0000000340)={0xf, 0x1f, 0x1, 0x100000000}, 0xf)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0xc, 0xa7, {0x52, 0x81, 0x20, {0x1, 0xffff}, {0x6, 0x8}, @ramp={0x7, 0x2, {0x1, 0x9, 0x6, 0x800}}}, {0x55, 0x4, 0x4, {0x3f, 0x7}, {0x1, 0x7f}, @const={0x4, {0x1ff, 0x0, 0x99, 0x100}}}}) (async)
write$P9_RREADDIR(r1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x49) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_ROPEN(r3, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x20, 0x2, 0x8}, 0xffff0001}}, 0x18)

05:30:29 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x121080)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r3, r4, 0x4}, 0x10)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x121080) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r3, r4, 0x4}, 0x10) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) (async)

[ 2358.256412] FAULT_INJECTION: forcing a failure.
[ 2358.256412] name failslab, interval 1, probability 0, space 0, times 0
[ 2358.274727] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2358.282642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2358.291982] Call Trace:
[ 2358.294559]  dump_stack+0x1b2/0x281
[ 2358.298192]  should_fail.cold+0x10a/0x149
[ 2358.302339]  should_failslab+0xd6/0x130
05:30:29 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x44, 0x66, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {0xf, 0x8}, {0xfff2, 0xf}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9327}]}, 0x44}}, 0x1)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb}, 0xb)
pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
write$P9_RXATTRWALK(r2, &(0x7f0000000340)={0xf, 0x1f, 0x1, 0x100000000}, 0xf)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0xc, 0xa7, {0x52, 0x81, 0x20, {0x1, 0xffff}, {0x6, 0x8}, @ramp={0x7, 0x2, {0x1, 0x9, 0x6, 0x800}}}, {0x55, 0x4, 0x4, {0x3f, 0x7}, {0x1, 0x7f}, @const={0x4, {0x1ff, 0x0, 0x99, 0x100}}}})
write$P9_RREADDIR(r1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x49)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_ROPEN(r3, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x20, 0x2, 0x8}, 0xffff0001}}, 0x18)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x44, 0x66, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {0xf, 0x8}, {0xfff2, 0xf}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9327}]}, 0x44}}, 0x1) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb}, 0xb) (async)
pipe2$9p(&(0x7f00000002c0), 0x84000) (async)
write$P9_RXATTRWALK(r2, &(0x7f0000000340)={0xf, 0x1f, 0x1, 0x100000000}, 0xf) (async)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0xc, 0xa7, {0x52, 0x81, 0x20, {0x1, 0xffff}, {0x6, 0x8}, @ramp={0x7, 0x2, {0x1, 0x9, 0x6, 0x800}}}, {0x55, 0x4, 0x4, {0x3f, 0x7}, {0x1, 0x7f}, @const={0x4, {0x1ff, 0x0, 0x99, 0x100}}}}) (async)
write$P9_RREADDIR(r1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x49) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
write$P9_ROPEN(r3, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x20, 0x2, 0x8}, 0xffff0001}}, 0x18) (async)

05:30:29 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3542}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) (async)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x1000}, 0xb)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x81, 0x81)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {<r5=>0x0}, {}]})
ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f00000001c0)={r5, 0x3})

05:30:29 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x108, 0x1, 0x9, 0x2, 0x8, @remote}, 0x10)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x108, 0x1, 0x9, 0x2, 0x8, @remote}, 0x10) (async)

05:30:29 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'sit0\x00'})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'sit0\x00'}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

[ 2358.306310]  __kmalloc+0x2c1/0x400
[ 2358.309848]  ? blk_stat_alloc_callback+0x81/0x2f0
[ 2358.314685]  ? blk_mq_can_queue+0x40/0x40
[ 2358.318830]  ? queue_set_hctx_shared+0x210/0x210
[ 2358.323609]  blk_stat_alloc_callback+0x81/0x2f0
[ 2358.328279]  blk_mq_init_allocated_queue+0x80/0xfd0
[ 2358.333292]  ? blkcg_init_queue+0x19f/0x410
[ 2358.337619]  ? blk_alloc_queue_node+0x82f/0xb40
[ 2358.342305]  blk_mq_init_queue+0x5a/0x90
[ 2358.342317]  loop_add+0x303/0x830
[ 2358.342327]  ? loop_queue_rq+0x280/0x280
[ 2358.342335]  ? loop_queue_work+0x21e0/0x21e0
[ 2358.342349]  loop_control_ioctl+0x11a/0x3f0
[ 2358.342358]  ? loop_lookup+0x190/0x190
[ 2358.342368]  ? SyS_write+0x1b7/0x210
[ 2358.342389]  ? loop_lookup+0x190/0x190
[ 2358.342399]  do_vfs_ioctl+0x75a/0xff0
[ 2358.342411]  ? lock_acquire+0x170/0x3f0
[ 2358.342420]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2358.342432]  ? __fget+0x2df/0x460
[ 2358.342442]  ? do_vfs_ioctl+0xff0/0xff0
[ 2358.342452]  ? security_file_ioctl+0x83/0xb0
[ 2358.342462]  SyS_ioctl+0x7f/0xb0
[ 2358.342469]  ? do_vfs_ioctl+0xff0/0xff0
[ 2358.342481]  do_syscall_64+0x1d5/0x640
[ 2358.342495]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2358.342504] RIP: 0033:0x7f2c308a4059
[ 2358.418091] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2358.418103] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2358.418109] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
05:30:29 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x108, 0x1, 0x9, 0x2, 0x8, @remote}, 0x10)

05:30:29 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:29 executing program 5:
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:29 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 33)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

[ 2358.418114] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2358.418119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2358.418125] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:29 executing program 5:
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (rerun: 64)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:29 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x1, 0x40)
write$P9_ROPEN(r2, 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0x402600)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000100))
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x408202, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r6, 0x0, 0x0)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8)

05:30:29 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:29 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x20, 0x0, 0x13, &(0x7f0000000040)=[0x0, 0x0], 0x2}, 0x20)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x2}, 0xb)

05:30:29 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:29 executing program 5:
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

[ 2358.571892] FAULT_INJECTION: forcing a failure.
[ 2358.571892] name failslab, interval 1, probability 0, space 0, times 0
05:30:29 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x20, 0x0, 0x13, &(0x7f0000000040)=[0x0, 0x0], 0x2}, 0x20) (async)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x2}, 0xb)

05:30:29 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x10)

05:30:29 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
userfaultfd(0x80001)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40440d0}, 0x8044)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x7})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80340, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0x7, 0x400202)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004080)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:29 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4900000029000000000000000000000000000000000000000000000000000000a3df002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c6530"], 0x49)

05:30:29 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 34)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

[ 2358.650242] CPU: 1 PID: 16945 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2358.658146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2358.658150] Call Trace:
[ 2358.658165]  dump_stack+0x1b2/0x281
[ 2358.658181]  should_fail.cold+0x10a/0x149
[ 2358.658195]  should_failslab+0xd6/0x130
[ 2358.658209]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2358.658222]  __kmalloc_node+0x38/0x70
[ 2358.658235]  blk_mq_init_allocated_queue+0x17b/0xfd0
[ 2358.658245]  ? blkcg_init_queue+0x19f/0x410
[ 2358.658257]  ? blk_alloc_queue_node+0x82f/0xb40
[ 2358.658270]  blk_mq_init_queue+0x5a/0x90
[ 2358.658281]  loop_add+0x303/0x830
[ 2358.658291]  ? loop_queue_rq+0x280/0x280
[ 2358.658300]  ? loop_queue_work+0x21e0/0x21e0
[ 2358.658314]  loop_control_ioctl+0x11a/0x3f0
[ 2358.658323]  ? loop_lookup+0x190/0x190
[ 2358.658331]  ? SyS_write+0x1b7/0x210
[ 2358.658343]  ? loop_lookup+0x190/0x190
[ 2358.658353]  do_vfs_ioctl+0x75a/0xff0
[ 2358.658364]  ? lock_acquire+0x170/0x3f0
[ 2358.658374]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2358.658387]  ? __fget+0x2df/0x460
[ 2358.658398]  ? do_vfs_ioctl+0xff0/0xff0
[ 2358.658408]  ? security_file_ioctl+0x83/0xb0
[ 2358.658419]  SyS_ioctl+0x7f/0xb0
[ 2358.658427]  ? do_vfs_ioctl+0xff0/0xff0
[ 2358.658438]  do_syscall_64+0x1d5/0x640
[ 2358.658453]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2358.658461] RIP: 0033:0x7f2c308a4059
[ 2358.658466] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2358.658476] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2358.658482] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2358.658487] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2358.658493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2358.658499] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2358.737702] FAULT_INJECTION: forcing a failure.
[ 2358.737702] name failslab, interval 1, probability 0, space 0, times 0
[ 2358.869538] CPU: 1 PID: 16981 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2358.869544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2358.869548] Call Trace:
[ 2358.869564]  dump_stack+0x1b2/0x281
[ 2358.869578]  should_fail.cold+0x10a/0x149
[ 2358.869592]  should_failslab+0xd6/0x130
[ 2358.869603]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2358.869616]  __kmalloc_node+0x38/0x70
[ 2358.869629]  blk_mq_realloc_hw_ctxs+0x1a5/0xe00
[ 2358.869642]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 2358.869652]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 2358.869668]  blk_mq_init_allocated_queue+0x20c/0xfd0
[ 2358.869679]  ? blkcg_init_queue+0x19f/0x410
[ 2358.869689]  ? blk_alloc_queue_node+0x82f/0xb40
[ 2358.869701]  blk_mq_init_queue+0x5a/0x90
[ 2358.869712]  loop_add+0x303/0x830
[ 2358.869721]  ? loop_queue_rq+0x280/0x280
[ 2358.869770]  ? loop_queue_work+0x21e0/0x21e0
[ 2358.869790]  loop_control_ioctl+0x11a/0x3f0
[ 2358.869797]  ? loop_lookup+0x190/0x190
[ 2358.869806]  ? SyS_write+0x1b7/0x210
[ 2358.869815]  ? loop_lookup+0x190/0x190
[ 2358.869831]  do_vfs_ioctl+0x75a/0xff0
[ 2358.869842]  ? lock_acquire+0x170/0x3f0
[ 2358.869851]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2358.869865]  ? __fget+0x2df/0x460
[ 2358.869875]  ? do_vfs_ioctl+0xff0/0xff0
[ 2358.869886]  ? security_file_ioctl+0x83/0xb0
[ 2358.869902]  SyS_ioctl+0x7f/0xb0
[ 2358.869913]  ? do_vfs_ioctl+0xff0/0xff0
[ 2358.869924]  do_syscall_64+0x1d5/0x640
[ 2358.869939]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2358.869948] RIP: 0033:0x7f2c308a4059
[ 2358.869953] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2358.869963] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2358.869968] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
05:30:30 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 35)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:30 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x20, 0x0, 0x13, &(0x7f0000000040)=[0x0, 0x0], 0x2}, 0x20)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x2}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x20, 0x0, 0x13, &(0x7f0000000040)=[0x0, 0x0], 0x2}, 0x20) (async)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x2}, 0xb) (async)

05:30:30 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x1, 0x40)
write$P9_ROPEN(r2, 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0x402600)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000100))
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x408202, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r6, 0x0, 0x0)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x1, 0x40) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0x402600) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x408202, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r6, 0x0, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8) (async)

05:30:30 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x10)

05:30:30 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4900000029000000000000000000000000000000000000000000000000000000a3df002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c6530"], 0x49)

05:30:30 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
userfaultfd(0x80001)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40440d0}, 0x8044) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async, rerun: 64)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x7}) (async, rerun: 64)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80340, 0x0) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0x7, 0x400202)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004080)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

[ 2358.869974] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2358.869979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2358.869985] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:30 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async, rerun: 32)
userfaultfd(0x80001) (rerun: 32)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40440d0}, 0x8044) (async, rerun: 32)
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (rerun: 32)
write$P9_ROPEN(r0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x7})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80340, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0x7, 0x400202)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004080)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

[ 2359.099952] FAULT_INJECTION: forcing a failure.
[ 2359.099952] name failslab, interval 1, probability 0, space 0, times 0
05:30:30 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x10)

05:30:30 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xfffffffffffffffd, 0x733163d2d4ff22d7)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x2, 0x4df, 0x1, 0x7}, 'syz1\x00', 0x14})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}}, 0x20044800)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb6}]}, 0x34}}, 0x1)

[ 2359.143559] CPU: 0 PID: 16990 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2359.151452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2359.160821] Call Trace:
[ 2359.160838]  dump_stack+0x1b2/0x281
[ 2359.167042]  should_fail.cold+0x10a/0x149
[ 2359.167056]  should_failslab+0xd6/0x130
[ 2359.175159]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2359.175173]  blk_alloc_flush_queue+0x4f/0x2b0
[ 2359.184754]  blk_mq_realloc_hw_ctxs+0x6ab/0xe00
05:30:30 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xfffffffffffffffd, 0x733163d2d4ff22d7)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x2, 0x4df, 0x1, 0x7}, 'syz1\x00', 0x14})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}}, 0x20044800) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb6}]}, 0x34}}, 0x1)

[ 2359.184773]  blk_mq_init_allocated_queue+0x20c/0xfd0
[ 2359.194521]  ? blkcg_init_queue+0x19f/0x410
[ 2359.194538]  ? blk_alloc_queue_node+0x82f/0xb40
[ 2359.203507]  blk_mq_init_queue+0x5a/0x90
[ 2359.203518]  loop_add+0x303/0x830
[ 2359.203534]  ? loop_queue_rq+0x280/0x280
[ 2359.203541]  ? loop_queue_work+0x21e0/0x21e0
[ 2359.203555]  loop_control_ioctl+0x11a/0x3f0
[ 2359.203563]  ? loop_lookup+0x190/0x190
05:30:30 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xfffffffffffffffd, 0x733163d2d4ff22d7)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x2, 0x4df, 0x1, 0x7}, 'syz1\x00', 0x14})
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}}, 0x20044800)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb6}]}, 0x34}}, 0x1)
syz_open_dev$vcsn(&(0x7f0000000140), 0xfffffffffffffffd, 0x733163d2d4ff22d7) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x2, 0x4df, 0x1, 0x7}, 'syz1\x00', 0x14}) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}}, 0x20044800) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb6}]}, 0x34}}, 0x1) (async)

[ 2359.203572]  ? SyS_write+0x1b7/0x210
[ 2359.203584]  ? loop_lookup+0x190/0x190
[ 2359.203593]  do_vfs_ioctl+0x75a/0xff0
[ 2359.203605]  ? lock_acquire+0x170/0x3f0
[ 2359.203614]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2359.203626]  ? __fget+0x2df/0x460
[ 2359.203636]  ? do_vfs_ioctl+0xff0/0xff0
[ 2359.203646]  ? security_file_ioctl+0x83/0xb0
[ 2359.203657]  SyS_ioctl+0x7f/0xb0
[ 2359.203664]  ? do_vfs_ioctl+0xff0/0xff0
[ 2359.203676]  do_syscall_64+0x1d5/0x640
[ 2359.203691]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
05:30:30 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x440701)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:30 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 36)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:30 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x440701)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x440701) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

[ 2359.203698] RIP: 0033:0x7f2c308a4059
[ 2359.203703] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2359.203713] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2359.203718] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2359.203723] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2359.203728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2359.203733] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:30 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x1, 0x40)
write$P9_ROPEN(r2, 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0x402600)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000100))
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x408202, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r6, 0x0, 0x0)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x1, 0x40) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0x402600) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x408202, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r6, 0x0, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8) (async)

05:30:30 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4900000029000000000000000000000000000000000000000000000000000000a3df002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c6530"], 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4900000029000000000000000000000000000000000000000000000000000000a3df002e2f66696c65300000000000000000000000000000000000000000000007002e2f66696c6530"], 0x49) (async)

05:30:30 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x8, 0x608081)
write$P9_RWRITE(r1, &(0x7f0000000200)={0xb, 0x77, 0x1}, 0xb)
r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newtclass={0x40, 0x28, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xa, 0xc}, {0xc, 0xd}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40001)

05:30:30 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80800)
connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x325, 0xae, 0x4, 0x4, 0x6, @broadcast}, 0x10)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x2, 0x4, 0x2}}, 0x14)

05:30:30 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x440701)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2359.373616] FAULT_INJECTION: forcing a failure.
[ 2359.373616] name failslab, interval 1, probability 0, space 0, times 0
[ 2359.400247] CPU: 1 PID: 17063 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2359.408152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2359.408157] Call Trace:
[ 2359.408173]  dump_stack+0x1b2/0x281
05:30:30 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0x100}, 0xf)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
write$P9_RLERROR(r3, &(0x7f0000000100)={0x18, 0x7, 0x1, {0xf, '/dev/dlm_plock\x00'}}, 0x18)
getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)

[ 2359.408189]  should_fail.cold+0x10a/0x149
[ 2359.408203]  should_failslab+0xd6/0x130
[ 2359.408216]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2359.408230]  __kmalloc_node+0x38/0x70
[ 2359.408243]  sbitmap_init_node+0x10c/0x3d0
[ 2359.408257]  blk_mq_realloc_hw_ctxs+0x59b/0xe00
[ 2359.408277]  blk_mq_init_allocated_queue+0x20c/0xfd0
[ 2359.454675]  ? blkcg_init_queue+0x19f/0x410
[ 2359.454685]  ? blk_alloc_queue_node+0x82f/0xb40
[ 2359.463666]  blk_mq_init_queue+0x5a/0x90
[ 2359.463677]  loop_add+0x303/0x830
05:30:30 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async, rerun: 32)
r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x8, 0x608081) (rerun: 32)
write$P9_RWRITE(r1, &(0x7f0000000200)={0xb, 0x77, 0x1}, 0xb) (async)
r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newtclass={0x40, 0x28, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xa, 0xc}, {0xc, 0xd}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40001)

[ 2359.471171]  ? loop_queue_rq+0x280/0x280
[ 2359.471179]  ? loop_queue_work+0x21e0/0x21e0
[ 2359.471191]  loop_control_ioctl+0x11a/0x3f0
[ 2359.471199]  ? loop_lookup+0x190/0x190
[ 2359.471207]  ? SyS_write+0x1b7/0x210
[ 2359.471219]  ? loop_lookup+0x190/0x190
[ 2359.471228]  do_vfs_ioctl+0x75a/0xff0
[ 2359.471239]  ? lock_acquire+0x170/0x3f0
[ 2359.471247]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2359.471257]  ? __fget+0x2df/0x460
[ 2359.471267]  ? do_vfs_ioctl+0xff0/0xff0
[ 2359.471276]  ? security_file_ioctl+0x83/0xb0
[ 2359.471286]  SyS_ioctl+0x7f/0xb0
[ 2359.471293]  ? do_vfs_ioctl+0xff0/0xff0
[ 2359.471304]  do_syscall_64+0x1d5/0x640
[ 2359.471318]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2359.471325] RIP: 0033:0x7f2c308a4059
[ 2359.471332] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2359.539334] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2359.539339] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2359.539345] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
05:30:30 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80800)
connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x325, 0xae, 0x4, 0x4, 0x6, @broadcast}, 0x10) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x2, 0x4, 0x2}}, 0x14)

05:30:30 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 37)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:30 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0x100}, 0xf) (async, rerun: 32)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async, rerun: 32)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async, rerun: 64)
write$P9_RLERROR(r3, &(0x7f0000000100)={0x18, 0x7, 0x1, {0xf, '/dev/dlm_plock\x00'}}, 0x18) (async, rerun: 64)
getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)

05:30:30 executing program 5:
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f00000000c0)=0x4, 0x4)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = accept4$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x0)
connect$vsock_dgram(r0, &(0x7f0000000380)={0x28, 0x0, 0x2711}, 0x10)
accept4$llc(r1, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x10, 0x180000)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8c}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008891}, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000006000000000000000007002e2f66696c65300900000000000000000000000000000000000000000007002e2f66696c6530e48aaa491a158fbce2f24da54c7e95b710981819e9155dc172f9d470e68c907bcd05f7085d7e6b4e5295d4cf2a9dc3e79a0ee09b4d7556783e2e86a89cef569de459178bb08e5ffa61b2e27a81f56ed8bd86848315efd028202d07c3b5"], 0x49)

05:30:30 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x8, 0x608081)
write$P9_RWRITE(r1, &(0x7f0000000200)={0xb, 0x77, 0x1}, 0xb)
r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newtclass={0x40, 0x28, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xa, 0xc}, {0xc, 0xd}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40001)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
syz_open_dev$vcsn(&(0x7f00000001c0), 0x8, 0x608081) (async)
write$P9_RWRITE(r1, &(0x7f0000000200)={0xb, 0x77, 0x1}, 0xb) (async)
openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newtclass={0x40, 0x28, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xa, 0xc}, {0xc, 0xd}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) (async)

[ 2359.539350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2359.539356] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:30 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
socket(0x25, 0x2, 0x10001)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2359.635130] FAULT_INJECTION: forcing a failure.
[ 2359.635130] name failslab, interval 1, probability 0, space 0, times 0
[ 2359.652635] CPU: 1 PID: 17118 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2359.660529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2359.669877] Call Trace:
[ 2359.672462]  dump_stack+0x1b2/0x281
[ 2359.676109]  should_fail.cold+0x10a/0x149
05:30:30 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
getsockname$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r0, 0x26, 0x2, r0}, 0x14)

[ 2359.676123]  should_failslab+0xd6/0x130
[ 2359.676135]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2359.676150]  blk_alloc_flush_queue+0x4f/0x2b0
[ 2359.676162]  blk_mq_realloc_hw_ctxs+0x6ab/0xe00
[ 2359.676183]  blk_mq_init_allocated_queue+0x20c/0xfd0
[ 2359.676193]  ? blkcg_init_queue+0x19f/0x410
[ 2359.676201]  ? blk_alloc_queue_node+0x82f/0xb40
[ 2359.676212]  blk_mq_init_queue+0x5a/0x90
[ 2359.676222]  loop_add+0x303/0x830
[ 2359.676231]  ? loop_queue_rq+0x280/0x280
[ 2359.676239]  ? loop_queue_work+0x21e0/0x21e0
[ 2359.676252]  loop_control_ioctl+0x11a/0x3f0
[ 2359.676261]  ? loop_lookup+0x190/0x190
[ 2359.676270]  ? SyS_write+0x1b7/0x210
[ 2359.676281]  ? loop_lookup+0x190/0x190
[ 2359.676291]  do_vfs_ioctl+0x75a/0xff0
[ 2359.676303]  ? lock_acquire+0x170/0x3f0
[ 2359.676312]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2359.676324]  ? __fget+0x2df/0x460
[ 2359.676334]  ? do_vfs_ioctl+0xff0/0xff0
[ 2359.676344]  ? security_file_ioctl+0x83/0xb0
05:30:30 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
socket(0x25, 0x2, 0x10001) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2359.676353]  SyS_ioctl+0x7f/0xb0
[ 2359.676360]  ? do_vfs_ioctl+0xff0/0xff0
[ 2359.676371]  do_syscall_64+0x1d5/0x640
[ 2359.676385]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2359.676393] RIP: 0033:0x7f2c308a4059
[ 2359.676397] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2359.676407] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
05:30:30 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 38)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:30 executing program 5:
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f00000000c0)=0x4, 0x4) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = accept4$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x0)
connect$vsock_dgram(r0, &(0x7f0000000380)={0x28, 0x0, 0x2711}, 0x10) (async)
accept4$llc(r1, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x10, 0x180000) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8c}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008891}, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000006000000000000000007002e2f66696c65300900000000000000000000000000000000000000000007002e2f66696c6530e48aaa491a158fbce2f24da54c7e95b710981819e9155dc172f9d470e68c907bcd05f7085d7e6b4e5295d4cf2a9dc3e79a0ee09b4d7556783e2e86a89cef569de459178bb08e5ffa61b2e27a81f56ed8bd86848315efd028202d07c3b5"], 0x49)

05:30:30 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80800)
connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x325, 0xae, 0x4, 0x4, 0x6, @broadcast}, 0x10) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x2, 0x4, 0x2}}, 0x14)

05:30:30 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
getsockname$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r0, 0x26, 0x2, r0}, 0x14)

[ 2359.676413] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2359.676418] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2359.676423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2359.676428] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:30 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async, rerun: 64)
write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0x100}, 0xf) (async, rerun: 64)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async, rerun: 32)
write$P9_RLERROR(r3, &(0x7f0000000100)={0x18, 0x7, 0x1, {0xf, '/dev/dlm_plock\x00'}}, 0x18) (async, rerun: 32)
getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)

05:30:30 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7)

05:30:30 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
socket(0x25, 0x2, 0x10001) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async, rerun: 64)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async, rerun: 64)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

05:30:30 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
getsockname$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r0, 0x26, 0x2, r0}, 0x14)

[ 2359.919052] FAULT_INJECTION: forcing a failure.
[ 2359.919052] name failslab, interval 1, probability 0, space 0, times 0
[ 2359.953987] CPU: 1 PID: 17165 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2359.953994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2359.953998] Call Trace:
[ 2359.954013]  dump_stack+0x1b2/0x281
[ 2359.954029]  should_fail.cold+0x10a/0x149
[ 2359.954044]  should_failslab+0xd6/0x130
[ 2359.954057]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2359.954070]  __kmalloc_node+0x38/0x70
[ 2359.954083]  blk_alloc_flush_queue+0xf7/0x2b0
[ 2359.954095]  blk_mq_realloc_hw_ctxs+0x6ab/0xe00
[ 2359.954114]  blk_mq_init_allocated_queue+0x20c/0xfd0
05:30:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2359.954124]  ? blkcg_init_queue+0x19f/0x410
[ 2359.954134]  ? blk_alloc_queue_node+0x82f/0xb40
[ 2359.954145]  blk_mq_init_queue+0x5a/0x90
[ 2359.954156]  loop_add+0x303/0x830
[ 2359.954166]  ? loop_queue_rq+0x280/0x280
05:30:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) (async, rerun: 64)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async, rerun: 64)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2359.954178]  ? loop_queue_work+0x21e0/0x21e0
[ 2359.954190]  loop_control_ioctl+0x11a/0x3f0
[ 2359.954199]  ? loop_lookup+0x190/0x190
[ 2359.954208]  ? SyS_write+0x1b7/0x210
[ 2359.954220]  ? loop_lookup+0x190/0x190
[ 2359.954230]  do_vfs_ioctl+0x75a/0xff0
[ 2359.954242]  ? lock_acquire+0x170/0x3f0
[ 2359.954251]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2359.954265]  ? __fget+0x2df/0x460
[ 2359.954278]  ? do_vfs_ioctl+0xff0/0xff0
[ 2359.954291]  ? security_file_ioctl+0x83/0xb0
[ 2359.954301]  SyS_ioctl+0x7f/0xb0
[ 2359.954310]  ? do_vfs_ioctl+0xff0/0xff0
[ 2359.954321]  do_syscall_64+0x1d5/0x640
[ 2359.954337]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2359.954345] RIP: 0033:0x7f2c308a4059
05:30:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2359.954350] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2359.954361] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2359.954366] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2359.954371] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2359.954377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
05:30:31 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7)

05:30:31 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 39)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

[ 2359.954382] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:31 executing program 5:
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f00000000c0)=0x4, 0x4) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = accept4$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x0)
connect$vsock_dgram(r0, &(0x7f0000000380)={0x28, 0x0, 0x2711}, 0x10) (async)
accept4$llc(r1, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x10, 0x180000)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8c}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008891}, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="49000000290000000000000000000000000000000000000006000000000000000007002e2f66696c65300900000000000000000000000000000000000000000007002e2f66696c6530e48aaa491a158fbce2f24da54c7e95b710981819e9155dc172f9d470e68c907bcd05f7085d7e6b4e5295d4cf2a9dc3e79a0ee09b4d7556783e2e86a89cef569de459178bb08e5ffa61b2e27a81f56ed8bd86848315efd028202d07c3b5"], 0x49)

05:30:31 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3f, 0x8a000)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0xd, 0x80, 0x4})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESOCT=r5, @ANYRESHEX=r0]})
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000000c0)={0x0, 0x2c})
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r6, 0x0, 0x0)
openat$cgroup_pressure(r6, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0xfffc, 0xfffffffd}, 0xb)

05:30:31 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)

05:30:31 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7)

05:30:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x7)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2360.321305] FAULT_INJECTION: forcing a failure.
[ 2360.321305] name failslab, interval 1, probability 0, space 0, times 0
[ 2360.336906] CPU: 1 PID: 17254 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2360.344814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2360.354172] Call Trace:
[ 2360.356755]  dump_stack+0x1b2/0x281
[ 2360.360385]  should_fail.cold+0x10a/0x149
[ 2360.364541]  should_failslab+0xd6/0x130
05:30:31 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 40)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

[ 2360.368519]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2360.373628]  blk_mq_init_tags+0x5e/0x280
[ 2360.377699]  blk_mq_alloc_rq_map+0x90/0x220
[ 2360.382038]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 2360.382050]  blk_mq_init_sched+0x18d/0x4a0
[ 2360.390935]  ? _raw_spin_unlock+0x29/0x40
[ 2360.390950]  elevator_init+0x2ee/0x410
[ 2360.398960]  blk_mq_sched_init+0x28/0x40
[ 2360.398972]  blk_mq_init_allocated_queue+0xca0/0xfd0
05:30:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x7) (async, rerun: 64)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (rerun: 64)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2360.398988]  blk_mq_init_queue+0x5a/0x90
[ 2360.398998]  loop_add+0x303/0x830
[ 2360.399009]  ? loop_queue_rq+0x280/0x280
[ 2360.399016]  ? loop_queue_work+0x21e0/0x21e0
[ 2360.399030]  loop_control_ioctl+0x11a/0x3f0
[ 2360.399039]  ? loop_lookup+0x190/0x190
[ 2360.399047]  ? SyS_write+0x1b7/0x210
[ 2360.399059]  ? loop_lookup+0x190/0x190
[ 2360.399069]  do_vfs_ioctl+0x75a/0xff0
[ 2360.399080]  ? lock_acquire+0x170/0x3f0
[ 2360.399089]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2360.399102]  ? __fget+0x2df/0x460
[ 2360.399113]  ? do_vfs_ioctl+0xff0/0xff0
[ 2360.399123]  ? security_file_ioctl+0x83/0xb0
[ 2360.399134]  SyS_ioctl+0x7f/0xb0
[ 2360.399141]  ? do_vfs_ioctl+0xff0/0xff0
[ 2360.399152]  do_syscall_64+0x1d5/0x640
[ 2360.399168]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2360.399176] RIP: 0033:0x7f2c308a4059
[ 2360.399181] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2360.399190] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2360.399196] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2360.399200] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2360.399206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2360.399212] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2360.490954] FAULT_INJECTION: forcing a failure.
[ 2360.490954] name failslab, interval 1, probability 0, space 0, times 0
05:30:31 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)

[ 2360.575465] CPU: 0 PID: 17295 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2360.575471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2360.575475] Call Trace:
[ 2360.575491]  dump_stack+0x1b2/0x281
[ 2360.575505]  should_fail.cold+0x10a/0x149
[ 2360.603045]  should_failslab+0xd6/0x130
[ 2360.603059]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2360.603072]  __kmalloc_node+0x38/0x70
[ 2360.603085]  sbitmap_init_node+0x10c/0x3d0
[ 2360.603098]  sbitmap_queue_init_node+0x37/0x5d0
[ 2360.603111]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 2360.603121]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 2360.603136]  blk_mq_init_tags+0xf4/0x280
[ 2360.603148]  blk_mq_alloc_rq_map+0x90/0x220
[ 2360.603161]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 2360.603174]  blk_mq_init_sched+0x18d/0x4a0
[ 2360.603184]  ? _raw_spin_unlock+0x29/0x40
[ 2360.603198]  elevator_init+0x2ee/0x410
05:30:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x7) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2360.603210]  blk_mq_sched_init+0x28/0x40
[ 2360.603220]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 2360.603237]  blk_mq_init_queue+0x5a/0x90
[ 2360.603247]  loop_add+0x303/0x830
[ 2360.603258]  ? loop_queue_rq+0x280/0x280
[ 2360.603265]  ? loop_queue_work+0x21e0/0x21e0
[ 2360.603279]  loop_control_ioctl+0x11a/0x3f0
[ 2360.603288]  ? loop_lookup+0x190/0x190
[ 2360.603297]  ? SyS_write+0x1b7/0x210
[ 2360.603309]  ? loop_lookup+0x190/0x190
[ 2360.603319]  do_vfs_ioctl+0x75a/0xff0
[ 2360.603330]  ? lock_acquire+0x170/0x3f0
[ 2360.603339]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2360.603352]  ? __fget+0x2df/0x460
[ 2360.603362]  ? do_vfs_ioctl+0xff0/0xff0
[ 2360.603373]  ? security_file_ioctl+0x83/0xb0
[ 2360.603384]  SyS_ioctl+0x7f/0xb0
[ 2360.603391]  ? do_vfs_ioctl+0xff0/0xff0
[ 2360.603407]  do_syscall_64+0x1d5/0x640
[ 2360.603422]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2360.603430] RIP: 0033:0x7f2c308a4059
05:30:31 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 41)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:31 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3f, 0x8a000)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0xd, 0x80, 0x4}) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESOCT=r5, @ANYRESHEX=r0]}) (async)
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000000c0)={0x0, 0x2c})
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r6, 0x0, 0x0) (async)
openat$cgroup_pressure(r6, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0xfffc, 0xfffffffd}, 0xb)

05:30:31 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) (async)

05:30:31 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x90001, 0x0)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000})
write$P9_RREADDIR(r1, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0x420b, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:31 executing program 1:
syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x80400)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

[ 2360.603435] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2360.603445] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2360.603451] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2360.603457] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2360.603463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2360.603468] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:31 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4)

05:30:31 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = socket(0x29, 0x2, 0x1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x82a}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40040)

05:30:31 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3f, 0x8a000)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0xd, 0x80, 0x4}) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESOCT=r5, @ANYRESHEX=r0]})
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000000c0)={0x0, 0x2c}) (async)
r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r6, 0x0, 0x0) (async)
openat$cgroup_pressure(r6, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0xfffc, 0xfffffffd}, 0xb)

[ 2360.899964] FAULT_INJECTION: forcing a failure.
[ 2360.899964] name failslab, interval 1, probability 0, space 0, times 0
[ 2360.911336] CPU: 0 PID: 17343 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2360.911343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2360.911347] Call Trace:
[ 2360.911362]  dump_stack+0x1b2/0x281
[ 2360.911383]  should_fail.cold+0x10a/0x149
[ 2360.911397]  should_failslab+0xd6/0x130
[ 2360.911410]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2360.911424]  sbitmap_queue_init_node+0x27f/0x5d0
[ 2360.911437]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 2360.911451]  blk_mq_init_tags+0xf4/0x280
[ 2360.911463]  blk_mq_alloc_rq_map+0x90/0x220
[ 2360.911476]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 2360.911490]  blk_mq_init_sched+0x18d/0x4a0
[ 2360.911499]  ? _raw_spin_unlock+0x29/0x40
[ 2360.911514]  elevator_init+0x2ee/0x410
[ 2360.911525]  blk_mq_sched_init+0x28/0x40
[ 2360.911536]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 2360.911553]  blk_mq_init_queue+0x5a/0x90
[ 2360.911563]  loop_add+0x303/0x830
[ 2360.911573]  ? loop_queue_rq+0x280/0x280
[ 2360.911581]  ? loop_queue_work+0x21e0/0x21e0
[ 2360.911595]  loop_control_ioctl+0x11a/0x3f0
[ 2360.911604]  ? loop_lookup+0x190/0x190
[ 2360.911613]  ? SyS_write+0x1b7/0x210
[ 2360.911626]  ? loop_lookup+0x190/0x190
[ 2360.911635]  do_vfs_ioctl+0x75a/0xff0
[ 2360.911647]  ? lock_acquire+0x170/0x3f0
[ 2360.911656]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2360.911669]  ? __fget+0x2df/0x460
[ 2360.911680]  ? do_vfs_ioctl+0xff0/0xff0
[ 2360.911691]  ? security_file_ioctl+0x83/0xb0
[ 2360.911702]  SyS_ioctl+0x7f/0xb0
[ 2360.911709]  ? do_vfs_ioctl+0xff0/0xff0
[ 2360.911721]  do_syscall_64+0x1d5/0x640
[ 2360.911736]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2360.911743] RIP: 0033:0x7f2c308a4059
05:30:32 executing program 3:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r0, 0x1}, 0x14}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', <r2=>0x0, 0x4, 0x20, 0x4, 0x3, 0x48, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x80, 0x10, 0x8, 0x2}})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44801}, 0x4000000)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x2000e8d0)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:32 executing program 1:
syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x80400) (async)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:32 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) (async)

05:30:32 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x90001, 0x0)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async)
write$P9_RREADDIR(r1, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0x420b, 0x0, 0x7, './file0'}]}}, 0x49)

[ 2360.911748] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2360.911759] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2360.911765] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2360.911770] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2360.911775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2360.911781] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:32 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = socket(0x29, 0x2, 0x1) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x82a}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40040)

05:30:32 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 42)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:32 executing program 3:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r0, 0x1}, 0x14}}, 0x0) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', <r2=>0x0, 0x4, 0x20, 0x4, 0x3, 0x48, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x80, 0x10, 0x8, 0x2}}) (rerun: 64)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44801}, 0x4000000) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x2000e8d0)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

05:30:32 executing program 1:
syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x80400)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:32 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x90001, 0x0)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000})
write$P9_RREADDIR(r1, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0x420b, 0x0, 0x7, './file0'}]}}, 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x90001, 0x0) (async)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async)
write$P9_RREADDIR(r1, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0x420b, 0x0, 0x7, './file0'}]}}, 0x49) (async)

[ 2361.223118] FAULT_INJECTION: forcing a failure.
[ 2361.223118] name failslab, interval 1, probability 0, space 0, times 0
[ 2361.238608] CPU: 1 PID: 17388 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2361.246504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2361.255855] Call Trace:
[ 2361.258455]  dump_stack+0x1b2/0x281
[ 2361.258469]  should_fail.cold+0x10a/0x149
[ 2361.258481]  should_failslab+0xd6/0x130
05:30:32 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
r1 = socket(0x29, 0x2, 0x1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x82a}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40040)

05:30:32 executing program 3:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r0, 0x1}, 0x14}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', <r2=>0x0, 0x4, 0x20, 0x4, 0x3, 0x48, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x80, 0x10, 0x8, 0x2}})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44801}, 0x4000000) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r4, 0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) (async)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x2000e8d0)
write$P9_RWRITE(r3, &(0x7f0000000180)={0xb}, 0xb)

[ 2361.270306]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2361.270326]  __kmalloc_node+0x38/0x70
[ 2361.270339]  blk_mq_alloc_rq_map+0x113/0x220
[ 2361.270352]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 2361.270365]  blk_mq_init_sched+0x18d/0x4a0
[ 2361.270375]  ? _raw_spin_unlock+0x29/0x40
05:30:32 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async, rerun: 64)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async, rerun: 64)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4)

[ 2361.270390]  elevator_init+0x2ee/0x410
[ 2361.270400]  blk_mq_sched_init+0x28/0x40
[ 2361.270411]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 2361.270428]  blk_mq_init_queue+0x5a/0x90
[ 2361.270438]  loop_add+0x303/0x830
[ 2361.270449]  ? loop_queue_rq+0x280/0x280
[ 2361.270457]  ? loop_queue_work+0x21e0/0x21e0
[ 2361.270470]  loop_control_ioctl+0x11a/0x3f0
[ 2361.270479]  ? loop_lookup+0x190/0x190
[ 2361.270488]  ? SyS_write+0x1b7/0x210
[ 2361.270500]  ? loop_lookup+0x190/0x190
[ 2361.270510]  do_vfs_ioctl+0x75a/0xff0
[ 2361.270522]  ? lock_acquire+0x170/0x3f0
[ 2361.270531]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2361.270544]  ? __fget+0x2df/0x460
[ 2361.270555]  ? do_vfs_ioctl+0xff0/0xff0
[ 2361.270566]  ? security_file_ioctl+0x83/0xb0
[ 2361.270576]  SyS_ioctl+0x7f/0xb0
[ 2361.270583]  ? do_vfs_ioctl+0xff0/0xff0
[ 2361.270595]  do_syscall_64+0x1d5/0x640
[ 2361.270609]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2361.270617] RIP: 0033:0x7f2c308a4059
[ 2361.270622] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2361.270633] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2361.270638] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2361.270643] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2361.270648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
05:30:32 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x2000)
write$P9_RWSTAT(r4, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7)

05:30:32 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x40c080)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$vsock_dgram(r1, &(0x7f00000000c0), 0x10)
write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0xfd3e)

05:30:32 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:32 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 43)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:32 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe(&(0x7f0000000000))

05:30:32 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x105000)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000fec000/0x12000)=nil, 0x12000})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000300)={0x101, {0x6, 0x7fffffff, 0x0, 0x2, 0xffffffff, 0x5}})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcb78}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4004800)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="490000008affffff0000000000000000000000000000000000000000000004aefee558f95ab1c55f95685100000007002e2f66696c65300000000000000000000000000000000000000000000007"], 0x49)

05:30:32 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0) (async, rerun: 32)
openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

[ 2361.270654] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:32 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe(&(0x7f0000000000))
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe(&(0x7f0000000000)) (async)

05:30:32 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x40c080)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$vsock_dgram(r1, &(0x7f00000000c0), 0x10) (async)
write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0xfd3e)

05:30:32 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x105000)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000fec000/0x12000)=nil, 0x12000}) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000300)={0x101, {0x6, 0x7fffffff, 0x0, 0x2, 0xffffffff, 0x5}})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcb78}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4004800)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="490000008affffff0000000000000000000000000000000000000000000004aefee558f95ab1c55f95685100000007002e2f66696c65300000000000000000000000000000000000000000000007"], 0x49)

05:30:32 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x105000)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000fec000/0x12000)=nil, 0x12000})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000300)={0x101, {0x6, 0x7fffffff, 0x0, 0x2, 0xffffffff, 0x5}})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcb78}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4004800)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="490000008affffff0000000000000000000000000000000000000000000004aefee558f95ab1c55f95685100000007002e2f66696c65300000000000000000000000000000000000000000000007"], 0x49)
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x105000) (async)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000fec000/0x12000)=nil, 0x12000}) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000300)={0x101, {0x6, 0x7fffffff, 0x0, 0x2, 0xffffffff, 0x5}}) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcb78}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4004800) (async)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="490000008affffff0000000000000000000000000000000000000000000004aefee558f95ab1c55f95685100000007002e2f66696c65300000000000000000000000000000000000000000000007"], 0x49) (async)

05:30:32 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x2000)
write$P9_RWSTAT(r4, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)
pipe2$9p(&(0x7f0000000000), 0x2000) (async)
write$P9_RWSTAT(r4, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7) (async)

05:30:32 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:32 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x40c080)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$vsock_dgram(r1, &(0x7f00000000c0), 0x10) (async)
write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0xfd3e)

[ 2361.574994] FAULT_INJECTION: forcing a failure.
[ 2361.574994] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2361.614850] CPU: 0 PID: 17461 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
05:30:32 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe(&(0x7f0000000000))
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe(&(0x7f0000000000)) (async)

05:30:32 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 44)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:32 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x6, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x409, {0x0, 0x305, 0x10000, 0x3584, 0xf9, 0x5}})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xd)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4)
write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7)

[ 2361.622750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2361.632125] Call Trace:
[ 2361.632144]  dump_stack+0x1b2/0x281
[ 2361.638333]  should_fail.cold+0x10a/0x149
[ 2361.638349]  __alloc_pages_nodemask+0x22c/0x2720
05:30:32 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x2000)
write$P9_RWSTAT(r4, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)
pipe2$9p(&(0x7f0000000000), 0x2000) (async)
write$P9_RWSTAT(r4, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7) (async)

[ 2361.638357]  ? kasan_kmalloc+0xeb/0x160
[ 2361.638368]  ? blk_mq_alloc_rq_map+0x113/0x220
[ 2361.638378]  ? blk_mq_sched_alloc_tags+0xaa/0x240
[ 2361.638388]  ? elevator_init+0x2ee/0x410
[ 2361.638397]  ? blk_mq_sched_init+0x28/0x40
[ 2361.638405]  ? blk_mq_init_allocated_queue+0xca0/0xfd0
[ 2361.638414]  ? loop_control_ioctl+0x11a/0x3f0
[ 2361.638422]  ? do_vfs_ioctl+0x75a/0xff0
[ 2361.638431]  ? do_syscall_64+0x1d5/0x640
[ 2361.638441]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2361.638451]  ? __mutex_unlock_slowpath+0x75/0x770
[ 2361.638461]  ? fs_reclaim_release+0xd0/0x110
[ 2361.638471]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 2361.638488]  ? __lockdep_init_map+0x100/0x560
[ 2361.638499]  ? _find_next_bit+0xdb/0x100
[ 2361.638511]  ? __cpu_to_node+0x7b/0xa0
[ 2361.638521]  ? blk_mq_hw_queue_to_node+0x9f/0xf0
[ 2361.638533]  blk_mq_alloc_rqs+0x227/0x6d0
[ 2361.638546]  ? blk_mq_alloc_rq_map+0x9d/0x220
[ 2361.638558]  blk_mq_sched_alloc_tags+0x112/0x240
[ 2361.638571]  blk_mq_init_sched+0x18d/0x4a0
[ 2361.638580]  ? _raw_spin_unlock+0x29/0x40
[ 2361.638593]  elevator_init+0x2ee/0x410
[ 2361.638604]  blk_mq_sched_init+0x28/0x40
[ 2361.638615]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 2361.638632]  blk_mq_init_queue+0x5a/0x90
05:30:32 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r4=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000140)={r4})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5)
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))

[ 2361.638641]  loop_add+0x303/0x830
[ 2361.638651]  ? loop_queue_rq+0x280/0x280
[ 2361.638658]  ? loop_queue_work+0x21e0/0x21e0
[ 2361.638671]  loop_control_ioctl+0x11a/0x3f0
[ 2361.638680]  ? loop_lookup+0x190/0x190
[ 2361.638689]  ? SyS_write+0x1b7/0x210
[ 2361.638701]  ? loop_lookup+0x190/0x190
[ 2361.638711]  do_vfs_ioctl+0x75a/0xff0
[ 2361.638721]  ? lock_acquire+0x170/0x3f0
[ 2361.638730]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2361.638743]  ? __fget+0x2df/0x460
[ 2361.638753]  ? do_vfs_ioctl+0xff0/0xff0
[ 2361.638765]  ? security_file_ioctl+0x83/0xb0
[ 2361.638775]  SyS_ioctl+0x7f/0xb0
[ 2361.638788]  ? do_vfs_ioctl+0xff0/0xff0
[ 2361.638799]  do_syscall_64+0x1d5/0x640
[ 2361.638813]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2361.638821] RIP: 0033:0x7f2c308a4059
[ 2361.638826] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2361.638837] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2361.638842] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2361.638847] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2361.638852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2361.638858] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2361.698769] FAULT_INJECTION: forcing a failure.
[ 2361.698769] name failslab, interval 1, probability 0, space 0, times 0
[ 2361.703945] CPU: 1 PID: 17498 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2361.703951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2361.703955] Call Trace:
[ 2361.703971]  dump_stack+0x1b2/0x281
[ 2361.703988]  should_fail.cold+0x10a/0x149
[ 2361.704003]  should_failslab+0xd6/0x130
[ 2361.704016]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2361.704028]  __kmalloc_node+0x38/0x70
[ 2361.704039]  blk_mq_alloc_rq_map+0x113/0x220
[ 2361.704051]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 2361.704064]  blk_mq_init_sched+0x18d/0x4a0
[ 2361.704073]  ? _raw_spin_unlock+0x29/0x40
[ 2361.704087]  elevator_init+0x2ee/0x410
[ 2361.704096]  blk_mq_sched_init+0x28/0x40
[ 2361.704107]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 2361.704122]  blk_mq_init_queue+0x5a/0x90
[ 2361.704133]  loop_add+0x303/0x830
[ 2361.704142]  ? loop_queue_rq+0x280/0x280
[ 2361.704151]  ? loop_queue_work+0x21e0/0x21e0
[ 2361.704164]  loop_control_ioctl+0x11a/0x3f0
[ 2361.704172]  ? loop_lookup+0x190/0x190
[ 2361.704180]  ? SyS_write+0x1b7/0x210
[ 2361.704192]  ? loop_lookup+0x190/0x190
[ 2361.704202]  do_vfs_ioctl+0x75a/0xff0
[ 2361.704213]  ? lock_acquire+0x170/0x3f0
[ 2361.704222]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2361.704236]  ? __fget+0x2df/0x460
[ 2361.704245]  ? do_vfs_ioctl+0xff0/0xff0
[ 2361.704256]  ? security_file_ioctl+0x83/0xb0
[ 2361.704266]  SyS_ioctl+0x7f/0xb0
[ 2361.704273]  ? do_vfs_ioctl+0xff0/0xff0
[ 2361.704292]  do_syscall_64+0x1d5/0x640
[ 2361.704307]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2361.704315] RIP: 0033:0x7f2c308a4059
05:30:33 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 45)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:33 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4900000029000000000000000000000000000000000000000000ebffffffffffff06002e2f66696c653000000000000000000000000000e3000000000000000007002e2f66696c6530"], 0x49)

[ 2361.704320] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2361.704329] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2361.704334] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2361.704339] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2361.704344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2361.704350] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:33 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x2})
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r2 = socket$vsock_dgram(0x28, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00'})
pipe2$9p(&(0x7f0000000000), 0x84000)
pipe(&(0x7f0000000040))
write$P9_ROPEN(r0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

05:30:33 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r4=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000140)={r4})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5)
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r3, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000140)={r4}) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) (async)
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) (async)

05:30:33 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:33 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x6, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x409, {0x0, 0x305, 0x10000, 0x3584, 0xf9, 0x5}})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xd)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4)
write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7)
syz_open_dev$vcsn(&(0x7f0000000140), 0x6, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
pipe(&(0x7f0000000040)) (async)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x409, {0x0, 0x305, 0x10000, 0x3584, 0xf9, 0x5}}) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xd) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) (async)
write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) (async)

[ 2362.190941] FAULT_INJECTION: forcing a failure.
[ 2362.190941] name failslab, interval 1, probability 0, space 0, times 0
[ 2362.217657] CPU: 0 PID: 17556 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2362.227743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2362.238578] Call Trace:
[ 2362.241168]  dump_stack+0x1b2/0x281
[ 2362.244793]  should_fail.cold+0x10a/0x149
[ 2362.248935]  should_failslab+0xd6/0x130
[ 2362.252910]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2362.258017]  elevator_alloc+0x7a/0x1f0
[ 2362.261913]  dd_init_queue+0x20/0x420
[ 2362.265711]  blk_mq_init_sched+0x214/0x4a0
[ 2362.269943]  ? _raw_spin_unlock+0x29/0x40
[ 2362.274091]  elevator_init+0x2ee/0x410
[ 2362.278001]  blk_mq_sched_init+0x28/0x40
[ 2362.282056]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 2362.287185]  blk_mq_init_queue+0x5a/0x90
[ 2362.291244]  loop_add+0x303/0x830
[ 2362.294788]  ? loop_queue_rq+0x280/0x280
[ 2362.298845]  ? loop_queue_work+0x21e0/0x21e0
[ 2362.303251]  loop_control_ioctl+0x11a/0x3f0
[ 2362.307565]  ? loop_lookup+0x190/0x190
[ 2362.311453]  ? SyS_write+0x1b7/0x210
[ 2362.315169]  ? loop_lookup+0x190/0x190
[ 2362.319067]  do_vfs_ioctl+0x75a/0xff0
[ 2362.322864]  ? lock_acquire+0x170/0x3f0
[ 2362.326837]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2362.331244]  ? __fget+0x2df/0x460
[ 2362.334695]  ? do_vfs_ioctl+0xff0/0xff0
[ 2362.338675]  ? security_file_ioctl+0x83/0xb0
[ 2362.343084]  SyS_ioctl+0x7f/0xb0
[ 2362.346490]  ? do_vfs_ioctl+0xff0/0xff0
[ 2362.346503]  do_syscall_64+0x1d5/0x640
[ 2362.354364]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2362.354373] RIP: 0033:0x7f2c308a4059
[ 2362.363278] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2362.363291] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2362.378247] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
05:30:33 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4900000029000000000000000000000000000000000000000000ebffffffffffff06002e2f66696c653000000000000000000000000000e3000000000000000007002e2f66696c6530"], 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4900000029000000000000000000000000000000000000000000ebffffffffffff06002e2f66696c653000000000000000000000000000e3000000000000000007002e2f66696c6530"], 0x49) (async)

[ 2362.378255] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2362.392794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2362.392799] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:33 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

05:30:33 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 46)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:33 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x6, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 64)
socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x409, {0x0, 0x305, 0x10000, 0x3584, 0xf9, 0x5}})
r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xd)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) (async)
write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7)

05:30:33 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x2})
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
r2 = socket$vsock_dgram(0x28, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00'})
pipe2$9p(&(0x7f0000000000), 0x84000)
pipe(&(0x7f0000000040))
write$P9_ROPEN(r0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) (async)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x2}) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
socket$vsock_dgram(0x28, 0x2, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async)
pipe2$9p(&(0x7f0000000000), 0x84000) (async)
pipe(&(0x7f0000000040)) (async)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)

05:30:33 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) (async)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x2}) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async, rerun: 64)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async, rerun: 64)
r2 = socket$vsock_dgram(0x28, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00'})
pipe2$9p(&(0x7f0000000000), 0x84000)
pipe(&(0x7f0000000040)) (async)
write$P9_ROPEN(r0, 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

05:30:33 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r4=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000140)={r4}) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5)
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))

05:30:33 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="4900000029000000000000000000000000000000000000000000ebffffffffffff06002e2f66696c653000000000000000000000000000e3000000000000000007002e2f66696c6530"], 0x49)

05:30:33 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)

[ 2362.541562] FAULT_INJECTION: forcing a failure.
[ 2362.541562] name failslab, interval 1, probability 0, space 0, times 0
[ 2362.569296] CPU: 0 PID: 17615 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2362.569303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2362.569310] Call Trace:
[ 2362.589105]  dump_stack+0x1b2/0x281
[ 2362.589119]  should_fail.cold+0x10a/0x149
[ 2362.596885]  should_failslab+0xd6/0x130
[ 2362.596896]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2362.596909]  dd_init_queue+0x94/0x420
[ 2362.609757]  blk_mq_init_sched+0x214/0x4a0
[ 2362.609768]  ? _raw_spin_unlock+0x29/0x40
[ 2362.618130]  elevator_init+0x2ee/0x410
[ 2362.618141]  blk_mq_sched_init+0x28/0x40
[ 2362.618152]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 2362.618167]  blk_mq_init_queue+0x5a/0x90
[ 2362.618176]  loop_add+0x303/0x830
[ 2362.618186]  ? loop_queue_rq+0x280/0x280
[ 2362.618200]  ? loop_queue_work+0x21e0/0x21e0
[ 2362.618212]  loop_control_ioctl+0x11a/0x3f0
[ 2362.618220]  ? loop_lookup+0x190/0x190
[ 2362.618230]  ? SyS_write+0x1b7/0x210
[ 2362.618240]  ? loop_lookup+0x190/0x190
[ 2362.618249]  do_vfs_ioctl+0x75a/0xff0
[ 2362.618260]  ? lock_acquire+0x170/0x3f0
[ 2362.618268]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2362.618280]  ? __fget+0x2df/0x460
[ 2362.618289]  ? do_vfs_ioctl+0xff0/0xff0
[ 2362.618299]  ? security_file_ioctl+0x83/0xb0
[ 2362.618308]  SyS_ioctl+0x7f/0xb0
[ 2362.618315]  ? do_vfs_ioctl+0xff0/0xff0
[ 2362.618326]  do_syscall_64+0x1d5/0x640
[ 2362.618339]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2362.618347] RIP: 0033:0x7f2c308a4059
[ 2362.618358] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2362.618368] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
05:30:33 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 47)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:33 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffc, 0x8400)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4354507}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)

05:30:33 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0xb, 0x29, 0x2}, 0xb)

05:30:33 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb)

05:30:33 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
pipe(&(0x7f0000000000))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2362.618373] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2362.618378] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2362.618383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2362.618388] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:33 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0xb, 0x29, 0x2}, 0xb)

05:30:33 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb)

05:30:33 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0xb, 0x29, 0x2}, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0xb, 0x29, 0x2}, 0xb) (async)

[ 2362.834259] FAULT_INJECTION: forcing a failure.
[ 2362.834259] name failslab, interval 1, probability 0, space 0, times 0
[ 2362.847145] CPU: 1 PID: 17654 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2362.847152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2362.847156] Call Trace:
[ 2362.847171]  dump_stack+0x1b2/0x281
[ 2362.847189]  should_fail.cold+0x10a/0x149
[ 2362.847203]  should_failslab+0xd6/0x130
[ 2362.847216]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2362.847230]  alloc_disk_node+0x5d/0x3d0
[ 2362.847242]  loop_add+0x3cb/0x830
[ 2362.847252]  ? loop_queue_rq+0x280/0x280
[ 2362.847261]  ? loop_queue_work+0x21e0/0x21e0
[ 2362.847275]  loop_control_ioctl+0x11a/0x3f0
[ 2362.847284]  ? loop_lookup+0x190/0x190
[ 2362.847294]  ? SyS_write+0x1b7/0x210
[ 2362.847306]  ? loop_lookup+0x190/0x190
[ 2362.847315]  do_vfs_ioctl+0x75a/0xff0
[ 2362.847326]  ? lock_acquire+0x170/0x3f0
[ 2362.847340]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2362.847353]  ? __fget+0x2df/0x460
[ 2362.847364]  ? do_vfs_ioctl+0xff0/0xff0
[ 2362.847374]  ? security_file_ioctl+0x83/0xb0
[ 2362.847385]  SyS_ioctl+0x7f/0xb0
[ 2362.847391]  ? do_vfs_ioctl+0xff0/0xff0
[ 2362.847401]  do_syscall_64+0x1d5/0x640
[ 2362.847416]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
05:30:34 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
pipe(&(0x7f0000000000))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
pipe(&(0x7f0000000000)) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) (async)

05:30:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="1401cc9b", @ANYRES16, @ANYBLOB="010000000000000000000c000000"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf250a000000080034000200000008003a008100000008000600", @ANYRES32=0x0, @ANYBLOB="7dde76463a38270d26c5a86d9ab244d9e5fad8c1557bc42fcf1b0928c9060832f1a110ba03e9d09222eef7440cb8a99b70d1e92fa2e7430be82866b58d74901fccf71bb6915fb91cbefe0b8123d974a4bfc36cfb50ed3e96f98b76676e17d442862cb1e6ec1bc19f297c60f1425c7a6b188d68134f0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x930ff9942e3c9293)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x4c880)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

05:30:34 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 48)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:34 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) (async)

05:30:34 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffc, 0x8400)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4354507}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)

05:30:34 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0xfffffffc}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x3}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

[ 2362.847424] RIP: 0033:0x7f2c308a4059
[ 2362.847429] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2362.847439] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2362.847445] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2362.847450] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2362.847455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2362.847460] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="1401cc9b", @ANYRES16, @ANYBLOB="010000000000000000000c000000"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf250a000000080034000200000008003a008100000008000600", @ANYRES32=0x0, @ANYBLOB="7dde76463a38270d26c5a86d9ab244d9e5fad8c1557bc42fcf1b0928c9060832f1a110ba03e9d09222eef7440cb8a99b70d1e92fa2e7430be82866b58d74901fccf71bb6915fb91cbefe0b8123d974a4bfc36cfb50ed3e96f98b76676e17d442862cb1e6ec1bc19f297c60f1425c7a6b188d68134f0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x930ff9942e3c9293)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x4c880)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="1401cc9b", @ANYRES16, @ANYBLOB="010000000000000000000c000000"], 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf250a000000080034000200000008003a008100000008000600", @ANYRES32=0x0, @ANYBLOB="7dde76463a38270d26c5a86d9ab244d9e5fad8c1557bc42fcf1b0928c9060832f1a110ba03e9d09222eef7440cb8a99b70d1e92fa2e7430be82866b58d74901fccf71bb6915fb91cbefe0b8123d974a4bfc36cfb50ed3e96f98b76676e17d442862cb1e6ec1bc19f297c60f1425c7a6b188d68134f0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x930ff9942e3c9293) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x4c880) (async)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)

[ 2363.084628] FAULT_INJECTION: forcing a failure.
[ 2363.084628] name failslab, interval 1, probability 0, space 0, times 0
[ 2363.104891] CPU: 0 PID: 17684 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2363.112785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2363.112790] Call Trace:
[ 2363.112804]  dump_stack+0x1b2/0x281
[ 2363.112819]  should_fail.cold+0x10a/0x149
05:30:34 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
socket$nl_route(0x10, 0x3, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2363.132484]  should_failslab+0xd6/0x130
[ 2363.132497]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2363.132511]  dd_init_queue+0x94/0x420
[ 2363.132523]  blk_mq_init_sched+0x214/0x4a0
[ 2363.132533]  ? _raw_spin_unlock+0x29/0x40
[ 2363.132547]  elevator_init+0x2ee/0x410
[ 2363.132556]  blk_mq_sched_init+0x28/0x40
05:30:34 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
pipe(&(0x7f0000000000)) (async)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3)

[ 2363.132567]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 2363.132582]  blk_mq_init_queue+0x5a/0x90
[ 2363.132590]  loop_add+0x303/0x830
[ 2363.132599]  ? loop_queue_rq+0x280/0x280
[ 2363.132607]  ? loop_queue_work+0x21e0/0x21e0
[ 2363.132619]  loop_control_ioctl+0x11a/0x3f0
[ 2363.132627]  ? loop_lookup+0x190/0x190
[ 2363.132636]  ? SyS_write+0x1b7/0x210
[ 2363.132659]  ? loop_lookup+0x190/0x190
[ 2363.132670]  do_vfs_ioctl+0x75a/0xff0
05:30:34 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)

[ 2363.132681]  ? lock_acquire+0x170/0x3f0
[ 2363.132689]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2363.132701]  ? __fget+0x2df/0x460
[ 2363.132711]  ? do_vfs_ioctl+0xff0/0xff0
[ 2363.132722]  ? security_file_ioctl+0x83/0xb0
[ 2363.132731]  SyS_ioctl+0x7f/0xb0
[ 2363.132738]  ? do_vfs_ioctl+0xff0/0xff0
[ 2363.132749]  do_syscall_64+0x1d5/0x640
[ 2363.132763]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2363.132771] RIP: 0033:0x7f2c308a4059
05:30:34 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 49)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:34 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0xfffffffc}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x3}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:34 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffc, 0x8400)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4354507}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffc, 0x8400) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4354507}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async)

05:30:34 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
socket$nl_route(0x10, 0x3, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="1401cc9b", @ANYRES16, @ANYBLOB="010000000000000000000c000000"], 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf250a000000080034000200000008003a008100000008000600", @ANYRES32=0x0, @ANYBLOB="7dde76463a38270d26c5a86d9ab244d9e5fad8c1557bc42fcf1b0928c9060832f1a110ba03e9d09222eef7440cb8a99b70d1e92fa2e7430be82866b58d74901fccf71bb6915fb91cbefe0b8123d974a4bfc36cfb50ed3e96f98b76676e17d442862cb1e6ec1bc19f297c60f1425c7a6b188d68134f0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x930ff9942e3c9293) (async)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x4c880)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[ 2363.132776] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2363.132787] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2363.132792] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2363.132798] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2363.132803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2363.132808] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:34 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)

05:30:34 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
socket$nl_route(0x10, 0x3, 0x0) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:34 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x200081)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x0, 0xfffffffc}, 0xb)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

05:30:34 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0xfffffffc}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x3}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0xfffffffc}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x0, 0x3}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)

05:30:34 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x2d83, 0x42501)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7)

05:30:34 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c20d008000374feaf56080266e52b0018bce68218575e3e349addc447b7b38086b5583899f1f38abb01fd435ae3fe874af9a0fde295fa692dd06da37d08d2402bc41c5f4bfb9f821517d9232726829a769ac4bd254ba1d2a93a2832a9494374bae86037c", @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250300000014002000fc000000000000000000000000000001050013000500000006000300912000000c000f00000000000000000005000d000000000006001d0007000000"], 0x54}, 0x1, 0x0, 0x0, 0x80080}, 0x20000080)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008800)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x16080, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2363.400130] FAULT_INJECTION: forcing a failure.
[ 2363.400130] name failslab, interval 1, probability 0, space 0, times 0
[ 2363.436944] CPU: 1 PID: 17751 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
05:30:34 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x200081)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x0, 0xfffffffc}, 0xb)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x200081) (async)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x0, 0xfffffffc}, 0xb) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)

[ 2363.444849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2363.454211] Call Trace:
[ 2363.454227]  dump_stack+0x1b2/0x281
[ 2363.454242]  should_fail.cold+0x10a/0x149
[ 2363.454256]  should_failslab+0xd6/0x130
[ 2363.454268]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2363.454281]  alloc_disk_node+0x5d/0x3d0
[ 2363.454293]  loop_add+0x3cb/0x830
[ 2363.454303]  ? loop_queue_rq+0x280/0x280
[ 2363.454311]  ? loop_queue_work+0x21e0/0x21e0
[ 2363.454324]  loop_control_ioctl+0x11a/0x3f0
[ 2363.454333]  ? loop_lookup+0x190/0x190
[ 2363.454343]  ? SyS_write+0x1b7/0x210
[ 2363.454355]  ? loop_lookup+0x190/0x190
[ 2363.454365]  do_vfs_ioctl+0x75a/0xff0
[ 2363.454376]  ? lock_acquire+0x170/0x3f0
[ 2363.454386]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2363.454399]  ? __fget+0x2df/0x460
[ 2363.454409]  ? do_vfs_ioctl+0xff0/0xff0
[ 2363.454420]  ? security_file_ioctl+0x83/0xb0
[ 2363.454431]  SyS_ioctl+0x7f/0xb0
[ 2363.454438]  ? do_vfs_ioctl+0xff0/0xff0
[ 2363.454450]  do_syscall_64+0x1d5/0x640
[ 2363.454465]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2363.454472] RIP: 0033:0x7f2c308a4059
05:30:34 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 50)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:34 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x4, 0x4, 0x1}}, 0x2e)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0x4}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)

05:30:34 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x200081)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x0, 0xfffffffc}, 0xb) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

05:30:34 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async, rerun: 32)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async, rerun: 32)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)

05:30:34 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c20d008000374feaf56080266e52b0018bce68218575e3e349addc447b7b38086b5583899f1f38abb01fd435ae3fe874af9a0fde295fa692dd06da37d08d2402bc41c5f4bfb9f821517d9232726829a769ac4bd254ba1d2a93a2832a9494374bae86037c", @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250300000014002000fc000000000000000000000000000001050013000500000006000300912000000c000f00000000000000000005000d000000000006001d0007000000"], 0x54}, 0x1, 0x0, 0x0, 0x80080}, 0x20000080) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008800)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x16080, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:34 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x2d83, 0x42501)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7)

[ 2363.454477] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2363.454488] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2363.454493] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2363.454499] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2363.454504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2363.454510] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:34 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x400400)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

[ 2363.670312] FAULT_INJECTION: forcing a failure.
[ 2363.670312] name failslab, interval 1, probability 0, space 0, times 0
[ 2363.681879] CPU: 1 PID: 17794 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2363.681886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2363.681889] Call Trace:
[ 2363.681905]  dump_stack+0x1b2/0x281
[ 2363.681920]  should_fail.cold+0x10a/0x149
[ 2363.681935]  should_failslab+0xd6/0x130
[ 2363.681948]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 2363.681962]  __kmalloc_node+0x38/0x70
[ 2363.681973]  disk_expand_part_tbl+0x17a/0x340
[ 2363.681985]  alloc_disk_node+0xf1/0x3d0
[ 2363.681997]  loop_add+0x3cb/0x830
[ 2363.682007]  ? loop_queue_rq+0x280/0x280
[ 2363.682016]  ? loop_queue_work+0x21e0/0x21e0
[ 2363.682030]  loop_control_ioctl+0x11a/0x3f0
[ 2363.682039]  ? loop_lookup+0x190/0x190
[ 2363.682047]  ? SyS_write+0x1b7/0x210
[ 2363.682057]  ? loop_lookup+0x190/0x190
[ 2363.682067]  do_vfs_ioctl+0x75a/0xff0
[ 2363.762613]  ? lock_acquire+0x170/0x3f0
[ 2363.762625]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2363.771003]  ? __fget+0x2df/0x460
[ 2363.771015]  ? do_vfs_ioctl+0xff0/0xff0
[ 2363.778418]  ? security_file_ioctl+0x83/0xb0
[ 2363.778429]  SyS_ioctl+0x7f/0xb0
[ 2363.778436]  ? do_vfs_ioctl+0xff0/0xff0
[ 2363.778448]  do_syscall_64+0x1d5/0x640
[ 2363.778462]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2363.778468] RIP: 0033:0x7f2c308a4059
[ 2363.778473] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
05:30:34 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 51)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:34 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c20d008000374feaf56080266e52b0018bce68218575e3e349addc447b7b38086b5583899f1f38abb01fd435ae3fe874af9a0fde295fa692dd06da37d08d2402bc41c5f4bfb9f821517d9232726829a769ac4bd254ba1d2a93a2832a9494374bae86037c", @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250300000014002000fc000000000000000000000000000001050013000500000006000300912000000c000f00000000000000000005000d000000000006001d0007000000"], 0x54}, 0x1, 0x0, 0x0, 0x80080}, 0x20000080) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008800) (async, rerun: 32)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x16080, 0x0) (rerun: 32)
openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 64)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (rerun: 64)

05:30:34 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x2d83, 0x42501)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7)

05:30:34 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x400400)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:34 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x4, 0x4, 0x1}}, 0x2e)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0x4}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x4, 0x4, 0x1}}, 0x2e) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0x4}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)

[ 2363.778482] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2363.778487] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2363.778492] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2363.778497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2363.778502] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:34 executing program 4:
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x40, 0x3, 0x8}}, 0x14)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff})
bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

[ 2363.916381] FAULT_INJECTION: forcing a failure.
[ 2363.916381] name failslab, interval 1, probability 0, space 0, times 0
[ 2363.936820] CPU: 0 PID: 17828 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2363.944710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2363.954071] Call Trace:
[ 2363.954086]  dump_stack+0x1b2/0x281
05:30:34 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x4, 0x4, 0x1}}, 0x2e)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0x4}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x4, 0x4, 0x1}}, 0x2e) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0x4}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)

05:30:35 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r3=>0x0, 0x29, 0x1, 0xa8, 0x1, 0x0, @mcast1, @local, 0x40, 0x0, 0x7ff, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x2f, 0x4, 0x1f, 0x5, 0x68, @private2, @mcast2, 0x7, 0x8000, 0x101, 0xffffff7f}})
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4)

[ 2363.954105]  should_fail.cold+0x10a/0x149
[ 2363.954119]  should_failslab+0xd6/0x130
[ 2363.954131]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 2363.954145]  rand_initialize_disk+0x3b/0xc0
[ 2363.954154]  alloc_disk_node+0x1f7/0x3d0
[ 2363.954166]  loop_add+0x3cb/0x830
[ 2363.954176]  ? loop_queue_rq+0x280/0x280
[ 2363.954183]  ? loop_queue_work+0x21e0/0x21e0
[ 2363.954195]  loop_control_ioctl+0x11a/0x3f0
[ 2363.954203]  ? loop_lookup+0x190/0x190
[ 2363.954210]  ? SyS_write+0x1b7/0x210
[ 2363.954222]  ? loop_lookup+0x190/0x190
[ 2363.954231]  do_vfs_ioctl+0x75a/0xff0
[ 2363.954243]  ? lock_acquire+0x170/0x3f0
[ 2363.954252]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2363.954264]  ? __fget+0x2df/0x460
[ 2363.954274]  ? do_vfs_ioctl+0xff0/0xff0
[ 2363.954283]  ? security_file_ioctl+0x83/0xb0
[ 2363.954292]  SyS_ioctl+0x7f/0xb0
[ 2363.954299]  ? do_vfs_ioctl+0xff0/0xff0
[ 2363.954310]  do_syscall_64+0x1d5/0x640
[ 2363.954324]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2363.954332] RIP: 0033:0x7f2c308a4059
[ 2363.954336] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2363.954345] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
05:30:35 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r3=>0x0, 0x29, 0x1, 0xa8, 0x1, 0x0, @mcast1, @local, 0x40, 0x0, 0x7ff, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x2f, 0x4, 0x1f, 0x5, 0x68, @private2, @mcast2, 0x7, 0x8000, 0x101, 0xffffff7f}})
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0xa8, 0x1, 0x0, @mcast1, @local, 0x40, 0x0, 0x7ff, 0x1}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x2f, 0x4, 0x1f, 0x5, 0x68, @private2, @mcast2, 0x7, 0x8000, 0x101, 0xffffff7f}}) (async)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) (async)

05:30:35 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x400400)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r1, &(0x7f0000000180)={0xb}, 0xb)

05:30:35 executing program 4:
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x40, 0x3, 0x8}}, 0x14) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff})
bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:35 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RREAD(r1, &(0x7f0000000340)={0xff, 0x75, 0x2, {0xf4, "427a743f8c033c14c7bbc6febb2f3703cb6c8f3d72a1d141c0976111cac1f2df967a7dcd0b472c07d0d3ee75e17ce5db4a22f7988ace155229c9a950d2b1b4944d8b54d87f896c60d4c0e1bc4df166253cf234eeb7cf00b4bb3724bb8e4e42a1434e977a0483d98729d298a88101b2ed1b5a6cb1d682be4f8abf86a6957e9f4520c8f6b7b36512aac19c7f1c8b354713dfe2ab3cab8856a7b5875b6f24d52b165d3fbc1e7dcd0444f618ed45ab6243f312affa0564c25c9d4a800f39e616ac705b82ba0b54439e1fd8a22ea9fa03f71ed28414e3d40cb874c3d6f1afe5d0802720439851c78e24a4e7df2ab35b8c63d9ef7c0775"}}, 0xff)
write$P9_RSTATFS(r1, &(0x7f0000000000)={0x43, 0x9, 0x1, {0xfffffffe, 0x706ba240, 0x4, 0x7, 0xffff, 0x0, 0x4, 0x0, 0x80000001}}, 0x43)
r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x400000)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x380})

05:30:35 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) (fail_nth: 52)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x3c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xfff1, 0x10}, {0x1, 0xc}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000014)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r3=>0x0, 0x8, 0x40, 0x5, 0x9, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x0, 0x0, 0x36, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x10, 0xac, 0x0, 0x5, [0x4, 0x1, 0x101]}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "2d18d07aa28905ff"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x9, [0x4, 0x82]}, @end]}}}}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800)

05:30:35 executing program 3:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x2}, 0xb)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x119002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7)
write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x100000001, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0)
write$P9_RXATTRCREATE(r2, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7)
r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000180)=[{{<r4=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000300)={r4, 0x0, 0x0})
r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000180)=[{{<r6=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000300)={r6, 0x0, 0x0})
ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000500)={0x0, 0x1, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0, &(0x7f00000003c0)=[{}], 0x6, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {0x0, <r7=>0x80000000}], 0x1, 0x0, &(0x7f0000000580)=[{}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f00000001c0)})

[ 2363.954350] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2363.954355] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2363.954360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2363.954365] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
05:30:35 executing program 4:
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x40, 0x3, 0x8}}, 0x14)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff})
bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)

05:30:35 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
write$P9_RREAD(r1, &(0x7f0000000340)={0xff, 0x75, 0x2, {0xf4, "427a743f8c033c14c7bbc6febb2f3703cb6c8f3d72a1d141c0976111cac1f2df967a7dcd0b472c07d0d3ee75e17ce5db4a22f7988ace155229c9a950d2b1b4944d8b54d87f896c60d4c0e1bc4df166253cf234eeb7cf00b4bb3724bb8e4e42a1434e977a0483d98729d298a88101b2ed1b5a6cb1d682be4f8abf86a6957e9f4520c8f6b7b36512aac19c7f1c8b354713dfe2ab3cab8856a7b5875b6f24d52b165d3fbc1e7dcd0444f618ed45ab6243f312affa0564c25c9d4a800f39e616ac705b82ba0b54439e1fd8a22ea9fa03f71ed28414e3d40cb874c3d6f1afe5d0802720439851c78e24a4e7df2ab35b8c63d9ef7c0775"}}, 0xff)
write$P9_RSTATFS(r1, &(0x7f0000000000)={0x43, 0x9, 0x1, {0xfffffffe, 0x706ba240, 0x4, 0x7, 0xffff, 0x0, 0x4, 0x0, 0x80000001}}, 0x43)
r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x400000)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x380})
syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401) (async)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) (async)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x49, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
write$P9_RREAD(r1, &(0x7f0000000340)={0xff, 0x75, 0x2, {0xf4, "427a743f8c033c14c7bbc6febb2f3703cb6c8f3d72a1d141c0976111cac1f2df967a7dcd0b472c07d0d3ee75e17ce5db4a22f7988ace155229c9a950d2b1b4944d8b54d87f896c60d4c0e1bc4df166253cf234eeb7cf00b4bb3724bb8e4e42a1434e977a0483d98729d298a88101b2ed1b5a6cb1d682be4f8abf86a6957e9f4520c8f6b7b36512aac19c7f1c8b354713dfe2ab3cab8856a7b5875b6f24d52b165d3fbc1e7dcd0444f618ed45ab6243f312affa0564c25c9d4a800f39e616ac705b82ba0b54439e1fd8a22ea9fa03f71ed28414e3d40cb874c3d6f1afe5d0802720439851c78e24a4e7df2ab35b8c63d9ef7c0775"}}, 0xff) (async)
write$P9_RSTATFS(r1, &(0x7f0000000000)={0x43, 0x9, 0x1, {0xfffffffe, 0x706ba240, 0x4, 0x7, 0xffff, 0x0, 0x4, 0x0, 0x80000001}}, 0x43) (async)
syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x400000) (async)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x380}) (async)

05:30:35 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
socket$bt_cmtp(0x1f, 0x3, 0x5)
write$P9_ROPEN(r1, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x8010, r1, 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x35, 0x1}, 0x8)

05:30:35 executing program 3:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000180)={0xb, 0x77, 0x0, 0x2}, 0xb)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x119002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) (async)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) (async)
write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x100000001, 0x0)
write$P9_ROPEN(r2, 0x0, 0x0) (async)
write$P9_RXATTRCREATE(r2, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7) (async)
r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000180)=[{{<r4=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000300)={r4, 0x0, 0x0})
r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000180)=[{{<r6=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000300)={r6, 0x0, 0x0}) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000500)={0x0, 0x1, 0x0, &(0x7f0000000340)=[{}], 0x1, 0x0, &(0x7f00000003c0)=[{}], 0x6, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {0x0, <r7=>0x80000000}], 0x1, 0x0, &(0x7f0000000580)=[{}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f00000001c0)})

05:30:35 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x401)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
write$P9_ROPEN(r1, 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x10, 0x3, 0x5}}}, 0x18)

05:30:35 executing program 1:
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0)
socket$bt_cmtp(0x1f, 0x3, 0x5)
write$P9_ROPEN(r1, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x8010, r1, 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x35, 0x1}, 0x8)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) (async)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x0) (async)
socket$bt_cmtp(0x1f, 0x3, 0x5) (async)
write$P9_ROPEN(r1, 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x8010, r1, 0x0) (async)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x35, 0x1}, 0x8) (async)

[ 2364.294931] FAULT_INJECTION: forcing a failure.
[ 2364.294931] name failslab, interval 1, probability 0, space 0, times 0
[ 2364.310191] CPU: 0 PID: 17899 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2364.310198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2364.310202] Call Trace:
[ 2364.310216]  dump_stack+0x1b2/0x281
[ 2364.310231]  should_fail.cold+0x10a/0x149
[ 2364.310246]  should_failslab+0xd6/0x130
[ 2364.310259]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 2364.310272]  device_add+0xd72/0x15c0
[ 2364.310284]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 2364.310294]  ? kfree_const+0x33/0x40
[ 2364.310303]  ? device_is_dependent+0x2a0/0x2a0
[ 2364.310311]  ? kfree+0x1f0/0x250
[ 2364.310326]  device_create_groups_vargs+0x1dc/0x250
[ 2364.310339]  device_create_vargs+0x3a/0x50
[ 2364.310354]  bdi_register_va.part.0+0x35/0x650
[ 2364.310367]  bdi_register+0x101/0x110
[ 2364.310378]  ? bdi_register_va+0x80/0x80
[ 2364.310392]  ? vsnprintf+0x260/0x1340
[ 2364.310407]  bdi_register_owner+0x59/0xf0
[ 2364.310417]  device_add_disk+0x5bb/0xdc0
[ 2364.310429]  ? sprintf+0xa7/0xd0
[ 2364.310437]  ? blk_alloc_devt+0x310/0x310
[ 2364.310449]  ? __lockdep_init_map+0x100/0x560
[ 2364.310460]  ? __lockdep_init_map+0x100/0x560
[ 2364.310473]  loop_add+0x615/0x830
[ 2364.310483]  ? loop_queue_rq+0x280/0x280
[ 2364.310492]  ? loop_queue_work+0x21e0/0x21e0
[ 2364.310505]  loop_control_ioctl+0x11a/0x3f0
[ 2364.310515]  ? loop_lookup+0x190/0x190
[ 2364.310523]  ? SyS_write+0x1b7/0x210
[ 2364.310535]  ? loop_lookup+0x190/0x190
[ 2364.310545]  do_vfs_ioctl+0x75a/0xff0
[ 2364.310556]  ? lock_acquire+0x170/0x3f0
[ 2364.310565]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2364.310577]  ? __fget+0x2df/0x460
[ 2364.310588]  ? do_vfs_ioctl+0xff0/0xff0
[ 2364.310599]  ? security_file_ioctl+0x83/0xb0
[ 2364.310610]  SyS_ioctl+0x7f/0xb0
[ 2364.310617]  ? do_vfs_ioctl+0xff0/0xff0
[ 2364.310628]  do_syscall_64+0x1d5/0x640
[ 2364.310644]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2364.310651] RIP: 0033:0x7f2c308a4059
[ 2364.310656] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2364.310667] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2364.310672] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2364.310678] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2364.310683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2364.310689] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2364.315108] kasan: CONFIG_KASAN_INLINE enabled
[ 2364.315155] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 2364.315165] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[ 2364.315168] Modules linked in:
[ 2364.315177] CPU: 0 PID: 17899 Comm: syz-executor.0 Not tainted 4.14.264-syzkaller #0
[ 2364.315181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2364.315185] task: ffff8880a50c0280 task.stack: ffff8880a0300000
[ 2364.315196] RIP: 0010:sysfs_do_create_link_sd+0x56/0x120
[ 2364.315200] RSP: 0018:ffff8880a0307b48 EFLAGS: 00010202
[ 2364.315206] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: 0000000000002fec
[ 2364.315210] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000040
[ 2364.315214] RBP: ffffffff87cbb6e0 R08: ffffffff8b9b9a20 R09: 00000000000400c7
[ 2364.315218] R10: ffff8880a50c0b30 R11: ffff8880a50c0280 R12: ffff8880aef43a80
[ 2364.315223] R13: ffffffff87cbb6e0 R14: 0000000000000001 R15: ffff8880aa39845c
[ 2364.315229] FS:  00007f2c2f219700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
[ 2364.315233] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2364.315238] CR2: 00007f7f40ad435c CR3: 00000000af7aa000 CR4: 00000000003406f0
[ 2364.315246] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2364.315250] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2364.315252] Call Trace:
[ 2364.315261]  sysfs_create_link+0x5f/0xc0
[ 2364.315269]  device_add_disk+0x9f8/0xdc0
[ 2364.315277]  ? sprintf+0xa7/0xd0
[ 2364.315284]  ? blk_alloc_devt+0x310/0x310
[ 2364.315293]  ? __lockdep_init_map+0x100/0x560
[ 2364.315300]  ? __lockdep_init_map+0x100/0x560
[ 2364.315309]  loop_add+0x615/0x830
[ 2364.315317]  ? loop_queue_rq+0x280/0x280
[ 2364.315323]  ? loop_queue_work+0x21e0/0x21e0
[ 2364.315332]  loop_control_ioctl+0x11a/0x3f0
[ 2364.315339]  ? loop_lookup+0x190/0x190
[ 2364.315345]  ? SyS_write+0x1b7/0x210
[ 2364.315353]  ? loop_lookup+0x190/0x190
[ 2364.315360]  do_vfs_ioctl+0x75a/0xff0
[ 2364.315367]  ? lock_acquire+0x170/0x3f0
[ 2364.315373]  ? ioctl_preallocate+0x1a0/0x1a0
[ 2364.315381]  ? __fget+0x2df/0x460
[ 2364.315388]  ? do_vfs_ioctl+0xff0/0xff0
[ 2364.315396]  ? security_file_ioctl+0x83/0xb0
[ 2364.315402]  SyS_ioctl+0x7f/0xb0
[ 2364.315408]  ? do_vfs_ioctl+0xff0/0xff0
[ 2364.315415]  do_syscall_64+0x1d5/0x640
[ 2364.315425]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 2364.315430] RIP: 0033:0x7f2c308a4059
[ 2364.315434] RSP: 002b:00007f2c2f219168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2364.315441] RAX: ffffffffffffffda RBX: 00007f2c309b6f60 RCX: 00007f2c308a4059
[ 2364.315444] RDX: 0000000000000002 RSI: 0000000000004c80 RDI: 0000000000000003
[ 2364.315448] RBP: 00007f2c2f2191d0 R08: 0000000000000000 R09: 0000000000000000
[ 2364.315452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2364.315456] R13: 00007fff67cc43ef R14: 00007f2c2f219300 R15: 0000000000022000
[ 2364.315462] Code: 84 a1 00 00 00 e8 cb 6b b1 ff 48 c7 c7 80 c8 04 89 e8 df 41 80 05 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a7 00 00 00 4c 8b 6b 30 4d 85 ed 74 4f e8 92 
[ 2364.315588] RIP: sysfs_do_create_link_sd+0x56/0x120 RSP: ffff8880a0307b48
[ 2364.315597] ---[ end trace cd018d774516fdc5 ]---
[ 2364.315601] Kernel panic - not syncing: Fatal exception
[ 2364.315769] Kernel Offset: disabled
[ 2364.846604] Rebooting in 86400 seconds..